Windows 7 Werbung bei Systemstart, Popups während Benutzung, Werbung im Internet

M-K-D-B · 24.05.2016, 20:44

Servus,

wir spüren noch evtl. vorhandene Reste auf.

Lade dir die passende Version von SystemLook vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop:
SystemLook (32 bit) | SystemLook (64 bit)

Doppelklicke auf die SystemLook.exe, um das Tool zu starten.

Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:

Code:

ATTFilter

:folderfind
*Tencent*
*QQPCMgr*
*QMDeskTopGCIcon*
*zdengine*
*Muftion*
*UCBrowser*
*ttwifi*
*Prompt Downloader*
*Smart Driver Updater*
*SearchesToYesbnd*
*safesoft*
*ilivid*
*SuperEasy Software*
*TXQMPC*
*QuickSearch*
*CleanBrowser*
*QMContext*
*WajIEnhance*

:regfind
Tencent
QQPCMgr
QMDeskTopGCIcon
zdengine
Muftion
UCBrowser
ttwifi
Prompt Downloader
Smart Driver Updater
SearchesToYesbnd
safesoft
ilivid
SuperEasy Software
TXQMPC
QuickSearch
CleanBrowser
QMContext
WajIEnhance

Klicke nun auf den Button Look, um den Scan zu starten.
Der Suchlauf kann einige Zeit dauern.
Wenn der Suchlauf beendet ist, wird sich dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
Die Ergebnisse werden auch auf dem Desktop als SystemLook.txt gespeichert.

Terrenay · 25.05.2016, 20:54

Werde das Programm jetzt ausführen, hoffe es geht nich allzu lange und ich kann die Ergebnisse noch heute Abend posten

Das ging ja gar nicht mal so lange

Code:

ATTFilter

SystemLook 30.07.11 by jpshortstuff
Log created at 21:00 on 25/05/2016 by Sven
Administrator - Elevation successful

========== folderfind ==========

Searching for "*Tencent*"
C:\AdwCleaner\FileQuarantine\C\Program Files\Common Files\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Common Files\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\ProgramData\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\ProgramData\Application Data\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Users\Sven\AppData\Roaming\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Users\Sven\AppData\Roaming\tencent\Tencentdl	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\config\systemprofile\AppData\Roaming\tencent	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\config\systemprofile\AppData\Roaming\tencent\Tencentdl	d------	[20:36 17/05/2016]
C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\Tencent	d------	[11:16 17/05/2016]
C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\Tencent\Tencentdl	d------	[11:17 17/05/2016]
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent	d------	[11:16 17/05/2016]
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent	d------	[11:16 17/05/2016]

Searching for "*QQPCMgr*"
C:\AdwCleaner\FileQuarantine\C\Program Files\Common Files\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\ProgramData\Application Data\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\ProgramData\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Users\Sven\AppData\Roaming\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\config\systemprofile\AppData\Roaming\tencent\QQPCMgr	d------	[20:36 17/05/2016]
C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\Tencent\QQPCMgr	d------	[11:16 17/05/2016]
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent\QQPCMgr	d------	[11:16 17/05/2016]
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent\QQPCMgr	d------	[11:16 17/05/2016]

Searching for "*QMDeskTopGCIcon*"
No folders found.

Searching for "*zdengine*"
C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\config\systemprofile\AppData\Local\zdengine	d------	[20:36 17/05/2016]

Searching for "*Muftion*"
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion	d------	[20:36 17/05/2016]

Searching for "*UCBrowser*"
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\UCBrowser	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\Users\Sven\AppData\Local\UCBrowser	d------	[20:36 17/05/2016]
C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Local\UCBrowser	d------	[11:28 17/05/2016]

Searching for "*ttwifi*"
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\ttwifi	d------	[20:36 17/05/2016]
C:\AdwCleaner\FileQuarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\ttwifi	d------	[20:36 17/05/2016]

Searching for "*Prompt Downloader*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Prompt Downloader	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Prompt Downloader	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Prompt Downloader	d------	[22:27 13/02/2016]

Searching for "*Smart Driver Updater*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Driver Updater	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\Smart Driver Updater	d------	[17:51 16/02/2016]

Searching for "*SearchesToYesbnd*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd	d------	[22:27 13/02/2016]

Searching for "*safesoft*"
No folders found.

Searching for "*ilivid*"
C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\LocalLow\ilividtoolbargaw	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Roaming\Mozilla\Firefox\Profiles\zbvehzph.default\ilividtoolbargaw	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\LocalLow\ilividtoolbargaw	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\ilividtoolbargaw	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\LocalLow\ilividtoolbargaw	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\ilividtoolbargaw	d------	[22:27 13/02/2016]

Searching for "*SuperEasy Software*"
C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Roaming\SuperEasy Software	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Roaming\SuperEasy Software	d------	[22:27 13/02/2016]
C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\SuperEasy Software	d------	[22:27 13/02/2016]

Searching for "*TXQMPC*"
No folders found.

Searching for "*QuickSearch*"
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch	d------	[20:36 17/05/2016]
C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.QuickSearch.Implementation	d------	[22:33 06/01/2014]
C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualC.QuickSearch.Implementation.resources	d------	[22:37 06/01/2014]
C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider	d------	[22:33 06/01/2014]
C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources	d------	[22:37 06/01/2014]

Searching for "*CleanBrowser*"
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\CleanBrowser	d------	[20:36 17/05/2016]

Searching for "*QMContext*"
No folders found.

Searching for "*WajIEnhance*"
No folders found.

========== regfind ==========

Searching for "Tencent"
[HKEY_CURRENT_USER\Software\Tencent]
[HKEY_CURRENT_USER\Software\Tencent\AndroidServer\1.0.0.510]
"InstallPath"="C:\Users\Sven\AppData\Roaming\Tencent\AndroidServer\1.0.0.510"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextUninstall64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextScan64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\DefaultIcon]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\Shell\Open\Command]
@=""C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"%1 "
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}\1.0\0\win32]
@="C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\opendlg\command]
@=""C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCFileOpen.exe" "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}\1.0\0\win32]
@="C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}]
"AppPath"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\DeskUpdate\QQSoftMgr]
"ExeString"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCSoftMgr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\QQPCMgr]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\QQPCMgr]
"ExeString"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}\1.0\0\win32]
@="C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_USERS\.DEFAULT\Software\Tencent]
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Tencent]
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Tencent\AndroidServer\1.0.0.510]
"InstallPath"="C:\Users\Sven\AppData\Roaming\Tencent\AndroidServer\1.0.0.510"
[HKEY_USERS\S-1-5-18\Software\Tencent]

Searching for "QQPCMgr"
[HKEY_CURRENT_USER\Software\Tencent\QQPCMgr]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.qbox]
@="QQPCMgr.qbox"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextUninstall64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextScan64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\DefaultIcon]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions\Shell\Open\Command]
@=""C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"%1 "
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Unknown\shell\opendlg\command]
@=""C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCFileOpen.exe" "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}]
"AppPath"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\DeskUpdate\QQSoftMgr]
"ExeString"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCSoftMgr.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\QQPCMgr]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\QQPCMgr]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent\QQPCMgr]
"ExeString"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCMgr.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TSKSP]
"InstallDir"="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219"
[HKEY_USERS\.DEFAULT\Software\Tencent\QQPCMgr]
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Tencent\QQPCMgr]
[HKEY_USERS\S-1-5-18\Software\Tencent\QQPCMgr]

Searching for "QMDeskTopGCIcon"
No data found.

Searching for "zdengine"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\zdengine]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"ProtocolName"="zdengine over [MSAFD-Tcpip [TCP/IPv6]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"ProtocolName"="zdengine over [MSAFD-Tcpip [UDP/IPv6]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"ProtocolName"="zdengine over [MSAFD-Tcpip [TCP/IP]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"ProtocolName"="zdengine over [MSAFD-Tcpip [UDP/IP]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000001]
"ProtocolName"="zdengine over [MSAFD-Tcpip [TCP/IPv6]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000002]
"ProtocolName"="zdengine over [MSAFD-Tcpip [UDP/IPv6]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000003]
"ProtocolName"="zdengine over [MSAFD-Tcpip [TCP/IP]]"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries64\000000000004]
"ProtocolName"="zdengine over [MSAFD-Tcpip [UDP/IP]]"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"

Searching for "Muftion"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\muftionSysSrv]

Searching for "UCBrowser"
[HKEY_CURRENT_USER\Software\UCBrowser]
[HKEY_CURRENT_USER\Software\Classes\UCHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,1"
[HKEY_CURRENT_USER\Software\Classes\UCHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.CRX\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,4"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.CRX\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.HTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.HTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.HTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.HTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.MHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.MHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.SHTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.SHTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.SHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.SHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.WEBP\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.WEBP\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.XHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.XHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.XHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_CURRENT_USER\Software\Classes\UCHTML.AssocFile.XHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.CRX\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,4"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.CRX\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.HTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.HTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.HTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.HTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.MHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.MHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.SHTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.SHTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.SHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.SHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.WEBP\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.WEBP\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.XHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.XHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.XHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\UCHTML.AssocFile.XHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser]
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\Capabilities]
"ApplicationIcon"="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\Capabilities\Startmenu]
"StartMenuInternet"="UCBrowser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"ReinstallCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --make-default-browser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"HideIconsCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --hide-icons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"ShowIconsCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --show-icons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
"Path"="C:\Program Files (x86)\UCBrowser\Application"
[HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications]
"UCBrowser"="Software\Clients\StartMenuInternet\UCBrowser\Capabilities"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe]
"Path"="C:\Program Files (x86)\UCBrowser\Application"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser]
"UninstallString"="C:\Program Files (x86)\UCBrowser\Application\Uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser]
"InstallerSuccessLaunchCmdLine"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser\Commands\on-os-upgrade]
"CommandLine"=""C:\Program Files (x86)\UCBrowser\Application\5.6.12150.8\Installer\setup.exe" --on-os-upgrade --system-level --verbose-logging"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowserPID]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\Capabilities]
"ApplicationIcon"="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\Capabilities\Startmenu]
"StartMenuInternet"="UCBrowser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"ReinstallCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --make-default-browser"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"HideIconsCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --hide-icons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\InstallInfo]
"ShowIconsCommand"=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" --show-icons"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\RegisteredApplications]
"UCBrowser"="Software\Clients\StartMenuInternet\UCBrowser\Capabilities"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe|Name=Chromium (mDNS-In)|Desc=Eingangsregel für die Zulassung von mDNS-Verkehr in Chromium|EmbedCtxt=UC浏览器|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe|Name=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|Desc=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe|Name=Chromium (mDNS-In)|Desc=Eingangsregel für die Zulassung von mDNS-Verkehr in Chromium|EmbedCtxt=UC浏览器|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe|Name=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|Desc=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=5353|App=C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe|Name=Chromium (mDNS-In)|Desc=Eingangsregel für die Zulassung von mDNS-Verkehr in Chromium|EmbedCtxt=UC浏览器|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}"="v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe|Name=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|Desc=è¿…é›·äº‘åŠ*é€Ÿå¼€æ”¾å¹³å°|"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\UCBrowser]
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,1"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.CRX\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,4"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.CRX\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.HTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.HTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.HTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.HTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.MHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.MHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.SHTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.SHTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.SHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.SHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.WEBP\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.WEBP\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.XHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.XHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.XHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\UCHTML.AssocFile.XHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,1"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.CRX\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,4"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.CRX\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.HTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.HTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.HTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.HTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.MHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.MHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.SHTM\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.SHTM\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.SHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.SHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.WEBP\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.WEBP\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.XHT\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.XHT\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.XHTML\DefaultIcon]
@="C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe,3"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\UCHTML.AssocFile.XHTML\shell\open\command]
@=""C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1""

Searching for "ttwifi"
No data found.

Searching for "Prompt Downloader"
No data found.

Searching for "Smart Driver Updater"
No data found.

Searching for "SearchesToYesbnd"
No data found.

Searching for "safesoft"
No data found.

Searching for "ilivid"
No data found.

Searching for "SuperEasy Software"
No data found.

Searching for "TXQMPC"
No data found.

Searching for "QuickSearch"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_CURRENT_USER\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Microsoft|VC|NavigateTo|de|Microsoft.VisualC.QuickSearch.Implementation.resources.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Microsoft|VC|NavigateTo|de|Microsoft.VisualC.QuickSearch.Implementation.resources.dll]
"Microsoft.VisualC.QuickSearch.Implementation.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""="xYMswH$a88xhIxjnSi!.VCpp_for_VS_7_Pro_x86_deu>G.[yvufnL=N*l2_5oQ7u 0suDOp$ax5_9IpDmaE2KWD_Express_x86_deu>G.[yvufnL=N*l2_5oQ7u"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Microsoft|VC|NavigateTo|Microsoft.VisualC.QuickSearch.Implementation.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Microsoft|VC|NavigateTo|Microsoft.VisualC.QuickSearch.Implementation.dll]
"Microsoft.VisualC.QuickSearch.Implementation,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""="h)mz+'%D-6?UFgZT9IdHWD_Express_x86_enu>aXXf9,'=u=[Rq.vJw%Bq I7^DWdEHZ4I*WNu(`)*8VCpp_for_VS_7_Pro_x86_enu>aXXf9,'=u=[Rq.vJw%Bq"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Platform|NavigateTo|FileProvider|de|Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Platform|NavigateTo|FileProvider|de|Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources.dll]
"Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""="xYMswH$a88xhIxjnSi!.VB_for_VS_7_Pro_11320_x86_deu>}c4s7~P'.9J9j.5c0~RA 0suDOp$ax5_9IpDmaE2KWD_Express_x86_deu>}c4s7~P'.9J9j.5c0~RA"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Platform|NavigateTo|FileProvider|Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|CommonExtensions|Platform|NavigateTo|FileProvider|Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.dll]
"Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""="h)mz+'%D-6?UFgZT9IdHWD_Express_x86_enu>^Xp5mcJz&?G9$yHYRAcY I7^DWdEHZ4I*WNu(`)*8VB_for_VS_7_Pro_11320_x86_enu>^Xp5mcJz&?G9$yHYRAcY"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|de|Microsoft.VisualStudio.QuickSearch.Package.resources.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|de|Microsoft.VisualStudio.QuickSearch.Package.resources.dll]
"Microsoft.VisualStudio.QuickSearch.Package.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""="xYMswH$a88xhIxjnSi!.VB_for_VS_7_Pro_11320_x86_deu>Fgk-O6Zfi?Xl1CNXG%dL 0suDOp$ax5_9IpDmaE2KWD_Express_x86_deu>Fgk-O6Zfi?Xl1CNXG%dL"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|Microsoft.VisualStudio.QuickSearch.Package.dll]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\C:|Program Files (x86)|Microsoft Visual Studio 11.0|Common7|IDE|Microsoft.VisualStudio.QuickSearch.Package.dll]
"Microsoft.VisualStudio.QuickSearch.Package,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""="h)mz+'%D-6?UFgZT9IdHWD_Express_x86_enu>(OMZlnXO0@zPKWk.zmbB I7^DWdEHZ4I*WNu(`)*8VB_for_VS_7_Pro_11320_x86_enu>(OMZlnXO0@zPKWk.zmbB"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global]
"Microsoft.VisualC.QuickSearch.Implementation,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""="h)mz+'%D-6?UFgZT9IdHWD_Express_x86_enu>=!1y]1r-=?Kb-,mZHx@U I7^DWdEHZ4I*WNu(`)*8VCpp_for_VS_7_Pro_x86_enu>=!1y]1r-=?Kb-,mZHx@U"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global]
"Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""="h)mz+'%D-6?UFgZT9IdHWD_Express_x86_enu>azcq)fzDK9PxOSdyO_nm I7^DWdEHZ4I*WNu(`)*8VB_for_VS_7_Pro_11320_x86_enu>azcq)fzDK9PxOSdyO_nm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global]
"Microsoft.VisualC.QuickSearch.Implementation.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""="xYMswH$a88xhIxjnSi!.VCpp_for_VS_7_Pro_x86_deu>rDV]QHbbX9!hXg$&_f)L 0suDOp$ax5_9IpDmaE2KWD_Express_x86_deu>rDV]QHbbX9!hXg$&_f)L"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global]
"Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""="xYMswH$a88xhIxjnSi!.VB_for_VS_7_Pro_11320_x86_deu>MXFJnNT!~=@gQ*GQK!~Y 0suDOp$ax5_9IpDmaE2KWD_Express_x86_deu>MXFJnNT!~=@gQ*GQK!~Y"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\054AD7183BA0F1342B1E66508FDA1407]
"D62176A78F74FC73F918BB95A7A9C6D6"="<\Microsoft.VisualC.QuickSearch.Implementation.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\054AD7183BA0F1342B1E66508FDA1407]
"1430A65F545FBFE37A4B52DC760D0422"="<\Microsoft.VisualC.QuickSearch.Implementation.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\054AD7183BA0F1342B1E66508FDA1407\1430A65F545FBFE37A4B52DC760D0422]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\054AD7183BA0F1342B1E66508FDA1407\D62176A78F74FC73F918BB95A7A9C6D6]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D56F42D890412B498C861FC3D633035]
"6EFA2EB1E9022683EA54ADD9D312DB56"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\Microsoft.VisualStudio.QuickSearch.Package.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D56F42D890412B498C861FC3D633035]
"8AC9843965660A335ACA0EDEDE1BC7E3"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\Microsoft.VisualStudio.QuickSearch.Package.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D56F42D890412B498C861FC3D633035\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_Microsoft.VisualStudio.QuickSearch.Package_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D56F42D890412B498C861FC3D633035\8AC9843965660A335ACA0EDEDE1BC7E3]
"File"="FL_Microsoft.VisualStudio.QuickSearch.Package_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FDB1F7DCBB968749B34AB06D67988B9]
"D62176A78F74FC73F918BB95A7A9C6D6"="<\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FDB1F7DCBB968749B34AB06D67988B9]
"1430A65F545FBFE37A4B52DC760D0422"="<\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="de""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FDB1F7DCBB968749B34AB06D67988B9\1430A65F545FBFE37A4B52DC760D0422]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2FDB1F7DCBB968749B34AB06D67988B9\D62176A78F74FC73F918BB95A7A9C6D6]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B07A34DB3205B741836E766747B79A9]
"6EFA2EB1E9022683EA54ADD9D312DB56"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Platform\NavigateTo\FileProvider\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B07A34DB3205B741836E766747B79A9]
"8AC9843965660A335ACA0EDEDE1BC7E3"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Platform\NavigateTo\FileProvider\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B07A34DB3205B741836E766747B79A9\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B07A34DB3205B741836E766747B79A9\8AC9843965660A335ACA0EDEDE1BC7E3]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DE44551A4E02A24CADE929BE26DF16D]
"6EFA2EB1E9022683EA54ADD9D312DB56"="<\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DE44551A4E02A24CADE929BE26DF16D]
"8AC9843965660A335ACA0EDEDE1BC7E3"="<\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DE44551A4E02A24CADE929BE26DF16D\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DE44551A4E02A24CADE929BE26DF16D\8AC9843965660A335ACA0EDEDE1BC7E3]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DBD79345D30E37499BF200F45849F0E]
"6EFA2EB1E9022683EA54ADD9D312DB56"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Microsoft\VC\NavigateTo\Microsoft.VisualC.QuickSearch.Implementation.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DBD79345D30E37499BF200F45849F0E]
"8AC9843965660A335ACA0EDEDE1BC7E3"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Microsoft\VC\NavigateTo\Microsoft.VisualC.QuickSearch.Implementation.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DBD79345D30E37499BF200F45849F0E\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DBD79345D30E37499BF200F45849F0E\8AC9843965660A335ACA0EDEDE1BC7E3]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB5F77191584F8346B7F9823DE4DEDC0]
"6EFA2EB1E9022683EA54ADD9D312DB56"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpressExtensions\Extensions\QuickSearch.pkgdef"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB5F77191584F8346B7F9823DE4DEDC0\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_QuickSearch_WDExpress_pkgdef"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC025DD34357EB144851355351FCB5F4]
"D62176A78F74FC73F918BB95A7A9C6D6"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Platform\NavigateTo\FileProvider\de\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC025DD34357EB144851355351FCB5F4]
"1430A65F545FBFE37A4B52DC760D0422"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Platform\NavigateTo\FileProvider\de\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC025DD34357EB144851355351FCB5F4\1430A65F545FBFE37A4B52DC760D0422]
"File"="FL_Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFA80C6211C858741B7B3AB3F0A038A3\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_VC_QuickSearchProvider.extension.vsixmanifest_x86"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E663782F4707CC540B39E88A39C0E2DE]
"D62176A78F74FC73F918BB95A7A9C6D6"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Microsoft\VC\NavigateTo\de\Microsoft.VisualC.QuickSearch.Implementation.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E663782F4707CC540B39E88A39C0E2DE]
"1430A65F545FBFE37A4B52DC760D0422"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\CommonExtensions\Microsoft\VC\NavigateTo\de\Microsoft.VisualC.QuickSearch.Implementation.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E663782F4707CC540B39E88A39C0E2DE\1430A65F545FBFE37A4B52DC760D0422]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F974DB978617EE9499A3A37707CCB227]
"D62176A78F74FC73F918BB95A7A9C6D6"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\de\Microsoft.VisualStudio.QuickSearch.Package.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F974DB978617EE9499A3A37707CCB227]
"1430A65F545FBFE37A4B52DC760D0422"="C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\de\Microsoft.VisualStudio.QuickSearch.Package.resources.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F974DB978617EE9499A3A37707CCB227\1430A65F545FBFE37A4B52DC760D0422]
"File"="FL_Microsoft.VisualStudio.QuickSearch.Package_x86_deu.3643236F_FC70_11D3_A536_0090278A1BB8"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFC0AB4A9C64F5843A2C8E3DEB9FCEC8]
"6EFA2EB1E9022683EA54ADD9D312DB56"="<\Microsoft.VisualC.QuickSearch.Implementation,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFC0AB4A9C64F5843A2C8E3DEB9FCEC8]
"8AC9843965660A335ACA0EDEDE1BC7E3"="<\Microsoft.VisualC.QuickSearch.Implementation,version="11.0.0.0",publicKeyToken="b03f5f7f11d50a3a",processorArchitecture="MSIL",fileVersion="11.0.50727.1",culture="neutral""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFC0AB4A9C64F5843A2C8E3DEB9FCEC8\6EFA2EB1E9022683EA54ADD9D312DB56]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFC0AB4A9C64F5843A2C8E3DEB9FCEC8\8AC9843965660A335ACA0EDEDE1BC7E3]
"File"="FL_Microsoft.VisualC.QuickSearch.Implementation_x86.3643236F_FC70_11D3_A536_0090278A1BB8_GAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\Microsoft.VisualC.QuickSearch.Implementation, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v2.0.50727\NGENService\Roots\Microsoft.VisualStudio.Language.QuickSearch.FileNameProvider, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\11.0\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\11.0\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\VisualStudio\11.0\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\AppId_Catalog\3263F22B]
"AppFullPath"="C:\Program Files (x86)\QuickSearch\zdengine.exe"
[HKEY_USERS\.DEFAULT\Software\Microsoft\VisualStudio\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\.DEFAULT\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\.DEFAULT\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\.DEFAULT\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\VisualStudio\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\WDExpress\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_USERS\S-1-5-18\Software\Microsoft\VisualStudio\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\S-1-5-18\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\S-1-5-18\Software\Microsoft\VisualStudio\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\Menus]
"{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}"=", QuickSearch.ctmenu, 1"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Class"="Microsoft.VisualStudio.QuickSearch.Package.HostPackage"
[HKEY_USERS\S-1-5-18\Software\Microsoft\WDExpress\11.0_Config\Packages\{5CB51D20-CA1E-4b7e-94D9-CC3E77198E7A}]
"Assembly"="Microsoft.VisualStudio.QuickSearch.Package, Version=11.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a"

Searching for "CleanBrowser"
No data found.

Searching for "QMContext"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextUninstall64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}\InProcServer32]
@="C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMContextScan64.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}]
@="IQMContextUninstallMenu"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}]
@="IQMContextScanMenu"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextScan]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextUninstall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}"="QMContextUninstallMenu Class"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved]
"{63332668-8CE1-445D-A5EE-25929176714E}"="QMContextScanMenu Class"

Searching for "WajIEnhance"
No data found.

Searching for "         "
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0]
"SerialNumber"="            6VPK855E"
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 0\Target Id 0\Logical Unit Id 0]
"Identifier"="ST31000524AS            JC45"
[HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\Scsi\Scsi Port 0\Scsi Bus 1\Target Id 0\Logical Unit Id 0]
"SerialNumber"="K4NC4II3347         "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"="             <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" >                 <InitializationParameters>                     <Param Name="PSVersion" Value="2.0"/>                 </InitializationParameters>                 <Resources>                     <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true">                         <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                         <Capability Type="Shell"/>                     </Resource>                 </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" >                         <InitializationParameters>                             <Param Name="PSVersion" Value="2.0"/>                         </InitializationParameters>                         <Resources>                             <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true">                                 <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>                                
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_EPSON&PROD_STORAGE&REV_1.00#7&33489CD6&0&525950593031383801&0#]
"DeviceDesc"="Storage         "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&0#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&1#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&2#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_EPSON&PROD_STORAGE&REV_1.00#7&33489CD6&0&525950593031383801&0#]
"DeviceDesc"="Storage         "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&0#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&1#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&2#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_EPSON&PROD_STORAGE&REV_1.00#7&33489CD6&0&525950593031383801&0#]
"DeviceDesc"="Storage         "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&0#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&1#]
"DeviceDesc"="GC-FM1          "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_JVC&PROD_GC-FM1&REV_1.00#065P9498&2#]
"DeviceDesc"="GC-FM1          "

-= EOF =-

M-K-D-B · 25.05.2016, 22:22

Servus,

wir entfernen die letzten Reste und kontrollieren nochmal alles.

Hinweis: Der Suchlauf mit ESET kann länger dauern.

Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130985414249645890&GUID=7F8C3B90-5CC0-4E52-AEC6-D920222F3C58
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001 -> DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001 -> {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
Unlock: C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent
Unlock: C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent
DeleteKey: HKEY_CURRENT_USER\Software\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
CMD: sc delete TSKSP
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TSKSP
DeleteKey: HKEY_USERS\.DEFAULT\Software\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.qbox
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\zdengine
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\muftionSysSrv
DeleteKey: HKEY_CURRENT_USER\Software\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications" /v UCBrowser /f
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowserPID
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextScan
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextUninstall
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {CBDECEF7-7A29-4cbf-A009-2673D82C7BF9} /f
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {63332668-8CE1-445D-A5EE-25929176714E} /f
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 3
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Schritt 4

Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Gibt es jetzt noch Probleme mit dem PC? Wenn ja, welche?

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix,
die Logdatei von ESET,
die Logdatei von HitmanPro,
die beiden neuen Logdateien von FRST,
die Beantwortung der gestellten Fragen.

M-K-D-B · 28.05.2016, 20:15

Fehlende Rückmeldung
Dieses Thema wurde aus den Abos gelöscht. Somit bekomme ich keine Benachrichtigung über neue Antworten.
PM an mich falls Du denoch weiter machen willst.

Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen!

Terrenay · 03.06.2016, 08:26

Hier die Fixlog:

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016
durchgeführt von Sven (2016-05-26 20:22:34) Run:2
Gestartet von C:\Users\Sven\Desktop
Geladene Profile: Sven (Verfügbare Profile: Mirjam Zanetti & Sven & Tim & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130985414249645890&GUID=7F8C3B90-5CC0-4E52-AEC6-D920222F3C58
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001 -> DefaultScope {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001 -> {FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
Unlock: C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent
Unlock: C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent
DeleteKey: HKEY_CURRENT_USER\Software\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81}
CMD: sc delete TSKSP
DeleteKey: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TSKSP
DeleteKey: HKEY_USERS\.DEFAULT\Software\Tencent
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.qbox
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1}
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\zdengine
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\muftionSysSrv
DeleteKey: HKEY_CURRENT_USER\Software\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications" /v UCBrowser /f
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowserPID
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextScan
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextUninstall
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {CBDECEF7-7A29-4cbf-A009-2673D82C7BF9} /f
CMD: reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {63332668-8CE1-445D-A5EE-25929176714E} /f
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
         
*****************

Prozess erfolgreich geschlossen.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
"HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wert erfolgreich wiederhergestellt
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich entfernt
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
"HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich entfernt
"HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{FBC74BB4-EFB2-4CD0-A19E-91D3FCDB1C71} => Schlüssel nicht gefunden. 
"C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent" => wurde entsperrt
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\Program Files (x86)\Tencent => erfolgreich verschoben
"C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent" => wurde entsperrt
C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore\ProgramData\Tencent => erfolgreich verschoben
HKEY_CURRENT_USER\Software\Tencent => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_CURRENT_USER\Software\Tencent => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81} => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1} => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCMgrRepairIEExtensions => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81} => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81} => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81} => Schlüssel nicht gefunden. 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{16EE6530-8649-4F42-A9E4-F6A3295AF975} => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Tencent => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{DA624F8F-98BF-4B03-AD11-A12D07119E81} => Schlüssel nicht gefunden. 

=========  sc delete TSKSP =========

[SC] OpenService FEHLER 1060:

Der angegebene Dienst ist kein installierter Dienst.


========= Ende von CMD: =========

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\TSKSP => Schlüssel erfolgreich entfernt
HKEY_USERS\.DEFAULT\Software\Tencent => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_USERS\.DEFAULT\Software\Tencent => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.qbox => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4801E96-E7A1-45F6-B124-7A36DFB40B81} => Schlüssel nicht gefunden. 
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E52EB753-1F56-4DF7-BE53-2C314AC5F8A1} => Schlüssel nicht gefunden. 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\zdengine => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\muftionSysSrv => Schlüssel erfolgreich entfernt
HKEY_CURRENT_USER\Software\UCBrowser => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_CURRENT_USER\Software\UCBrowser => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\UCBrowser => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe => Schlüssel erfolgreich entfernt

=========  reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications" /v UCBrowser /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\UCBrowser.exe => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\UCBrowser.exe => Schlüssel nicht gefunden. 
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowser => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\UCBrowserPID => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\UCBrowser => Schlüssel nicht gefunden. 
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextScan => Schlüssel erfolgreich entfernt
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\QMContextUninstall => Schlüssel erfolgreich entfernt

=========  reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {CBDECEF7-7A29-4cbf-A009-2673D82C7BF9} /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========


=========  reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved" /v {63332668-8CE1-445D-A5EE-25929176714E} /f =========

Der Vorgang wurde erfolgreich beendet.


========= Ende von CMD: =========


========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


=========  ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= Ende von CMD: =========


=========  netsh winsock reset =========


Der Winsock-Katalog wurde zur�ckgesetzt.
Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.


========= Ende von CMD: =========

EmptyTemp: => 942.7 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 20:24:00 ====

ESET 1:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# engine=19292
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2014-07-22 05:01:44
# local_time=2014-07-22 07:01:44 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 99 24407 1749303 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 1044732 157678354 0 0
# scanned=465891
# found=120
# cleaned=0
# scan_time=20175
sh=56F97635244C5FE6110E9F236E6781A393FA7E71 ft=1 fh=a47ab27fb62c8fdd vn="Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Inbox Toolbar\Inbox.dll.vir"
sh=3DDA54CB59A3D4FF98E8C06805F535672993B0CC ft=1 fh=9ff77835b7eceea8 vn="Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Inbox Toolbar\Inbox.exe.vir"
sh=30E4FDF12037141E45096AD3D1ED55CFAE3B35A1 ft=1 fh=2f632d837a71a50a vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\LPT\srbu.dll.vir"
sh=95826B332BD1AC0543C2BA4DB637D082A994B1E5 ft=1 fh=f3159d8e366dd55a vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\DaemonProcess.exe.vir"
sh=5454230820B9172472548B91677FA99352A16A35 ft=1 fh=83c1a584ac14f3e4 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Mobogenie\Mobogenie.exe.vir"
sh=E12820C3C449E8DF12132666647822B9FE266BA3 ft=1 fh=661cdf041cef5cb3 vn="MSIL/Adware.Proxomoto.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\Installer.dll.vir"
sh=E99D65BD24FAF328D7314F02B98EE8C3BD793B77 ft=1 fh=8661b13c20727ec0 vn="MSIL/Adware.Proxomoto.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\InstallerLibrary.dll.vir"
sh=B11B91F706EA1AFD3D4D625201192EAB850FD3CE ft=1 fh=04b2478a5da86198 vn="MSIL/Adware.Proxomoto.B Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\InstallFirefoxExtension.dll.vir"
sh=5BD97BEAE0E1E79B233B821DA6813A831B5075FB ft=1 fh=5310de0062903084 vn="MSIL/Adware.Proxomoto.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\NewVersionUploader.exe.vir"
sh=49DEEED4E6B0E6134D47A582E209511FCBFD2B72 ft=1 fh=14e2fb72d7f3d82c vn="MSIL/Adware.Proxomoto.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\WindowsUpdater.exe.vir"
sh=E99D65BD24FAF328D7314F02B98EE8C3BD793B77 ft=1 fh=8661b13c20727ec0 vn="MSIL/Adware.Proxomoto.A Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MSR\backup\System Update kb70007\backup\InstallerLibrary.dll.vir"
sh=D27A68F6EF9CE37B868C1BB552F421F6267B388A ft=1 fh=81883bb8e65510c3 vn="Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\VideoPad\videopad.exe.vir"
sh=668DA74E2A420A17F0585584D5804ECB5A94AD9E ft=1 fh=e7f0db176fa10659 vn="Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\VideoPad\videopadsetup_v3.14.exe.vir"
sh=7CE7298D509A1065506D526BBDDFE4D1340CF9D2 ft=1 fh=a1a858753285fc75 vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\WavePad\wavepad.exe.vir"
sh=1B239A5C8B868F9BE8D85EB8FE5D94290B1098F6 ft=1 fh=9a4954e6f7732eeb vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\WavePad\wavepadsetup_v5.71.exe.vir"
sh=D66A9321CE00698A16ADB63C879EBE754CC0F4B3 ft=1 fh=2140d8cb8f743c7c vn="Variante von Win32/Toolbar.Inbox.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RebateInformer\RebateI.dll.vir"
sh=2B32C0B38904B5F874809DED9EAD98E59FD725B8 ft=1 fh=7223a3a63cb18ec4 vn="Win32/Toolbar.Inbox.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\RebateInformer\RebateInf.exe.vir"
sh=31663FAE62AF97E6B3D902A4F2450973C8CF2883 ft=0 fh=0000000000000000 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.2.1.zip.vir"
sh=FA514CFD3E5723DAB7D11540FACA8CBE0599849D ft=1 fh=70d54a4234b8df0a vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir"
sh=6EC57865ED208C318564DE2295B61B28D188656C ft=1 fh=338bcf4266cc94f8 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir"
sh=408F051AE5CCB844CC630E6178BB8643BBC2513B ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir"
sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\nengine.dll.vir"
sh=8D45A490B5CB7ACDFB91658E5BEE502013BE0368 ft=1 fh=79b7b2043640cc2a vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir"
sh=8E6A6992A3C7FEC4000FA1A4D764DD597109E0B5 ft=1 fh=c71c0011cd00713e vn="Win32/NextLive.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\genienext\nengine.dll.vir"
sh=30E4FDF12037141E45096AD3D1ED55CFAE3B35A1 ft=1 fh=2f632d837a71a50a vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\LPT\srbu.dll.vir"
sh=2D9C684E3D8A9C02F9FB590C3950ACB740461B68 ft=0 fh=0000000000000000 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.2.1.zip.vir"
sh=3B0392ADB64821DAD5347AA89CA7ADA85D4AD5C9 ft=0 fh=0000000000000000 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie2.2.2.zip.vir"
sh=A2D473E09F7C019315030A2124DCED3B90CB4F87 ft=1 fh=37fc42c7c433ae0f vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\DaemonProcess.exe.vir"
sh=5454230820B9172472548B91677FA99352A16A35 ft=1 fh=83c1a584ac14f3e4 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\Mobogenie.exe.vir"
sh=5BC0BBC3AC54D016E4C7878598350F9BE2A134F9 ft=0 fh=0000000000000000 vn="Variante von Android/Mobserv.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\MUServer.apk.vir"
sh=04DF5DA720E5E531F57BD14454EAF99E750D8BED ft=1 fh=f3c242e732b4b342 vn="Variante von Win32/Mobogenie.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Mobogenie\Version\OldVersion\Mobogenie\New_UpdateMoboGenie.exe.vir"
sh=1CEC7AA77FA068F352A4E31505200DF9ABEC80D1 ft=1 fh=a0413f534a95c8cc vn="Variante von MSIL/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\SmartbarInternetExplorerExtension2.dll.vir"
sh=30E4FDF12037141E45096AD3D1ED55CFAE3B35A1 ft=1 fh=2f632d837a71a50a vn="Variante von MSIL/Toolbar.Linkury.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\srbu.dll.vir"
sh=1793EEF0872D59964420999F39F6D8BA08C12C40 ft=1 fh=538fe6170dc4c850 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir"
sh=DDEE4ECC57189382D7EA52F9A9AB447E84924FFB ft=1 fh=639409b2309719d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_23.dll.vir"
sh=6040092424A7B8298D81FB5D4EF0E016A6489E8D ft=1 fh=790979363571c5c3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_24.dll.vir"
sh=31641217EF0869BD3F7AE067475C87BB2C928FED ft=1 fh=1d2d1d6fef21cc10 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_25.dll.vir"
sh=0E3AFF471842C942800AE0EEF2E523A7E14FDA7E ft=1 fh=a8f479fdaa579bc5 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_26.dll.vir"
sh=8EB19B2238CDB6BC532FD7CA840F90363285CC4F ft=1 fh=825b7c86c47f0139 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_27.dll.vir"
sh=D6B2BC84B55998E3F50FB9DEE19170BDA7487523 ft=1 fh=2faa5ff2077cf2de vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Smartbar\Application\helperbar@helperbar.com\components\SmartbarFireFoxRemotePlugin_28.dll.vir"
sh=2D66061E822B4F17BEFD4B59D478F67C1EED73A5 ft=1 fh=5954dd1cc4c1c036 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\VNT\vntldr.exe.vir"
sh=92B359D33855BF27D6F0C1F58510D7B493A1162B ft=1 fh=4d6af7cbc920e55f vn="Variante von Win32/LoadTubes.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\loadtbs\uninstall.exe.vir"
sh=3ADCDCA1A498741C7AC6AA5823E25AE473D73D38 ft=0 fh=0000000000000000 vn="Win32/LoadTubes.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\loadtbs\chrome@loadtubes.com\background.js.vir"
sh=5945A9770E07DE7F1033477CBE392BCFB6A4869F ft=0 fh=0000000000000000 vn="Win32/LoadTubes.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\Extensions\staged\software@loadtubes.com\chrome\content\loadtbs.js.vir"
sh=5945A9770E07DE7F1033477CBE392BCFB6A4869F ft=0 fh=0000000000000000 vn="Win32/LoadTubes.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\Extensions\software@loadtubes.com\chrome\content\loadtbs.js.vir"
sh=5E6A03871B397414C36AF1E1359FE014C7761B74 ft=1 fh=ee8c5e224a6823f5 vn="Variante von Win32/Bundled.Toolbar.Ask.A potenziell unsichere Anwendung" ac=I fn="C:\OEM\Preload\Autorun\APP\Nero 10 Essentials Acer Edition\ISSetupPrerequisites\{BF80A1C0-C3FF-4B1C-ABEF-22CD4F97A0AB}\Toolbar.exe"
sh=CA3F51EC1897756636232998193325B830F22F26 ft=1 fh=3702c3e3af3ccb17 vn="Variante von Win32/HackTool.CheatEngine.AF potenziell unsichere Anwendung" ac=I fn="C:\Program Files (x86)\Cheat Engine 6.2\standalonephase1.dat"
sh=0DAFA42039405F8D49A6790180194076BD57C833 ft=1 fh=c71c001147036410 vn="Variante von Win32/AdWare.MultiPlug.N Anwendung" ac=I fn="C:\Program Files (x86)\NextCouuP\f.dll"
sh=6BB16D37C39BB23A500B12BCE5CDA4182C805D6F ft=1 fh=1a2102acc8b58f79 vn="Variante von Win32/SProtector.B evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\SK Supporter\uninstall.exe"
sh=0B3C33074E33259971642644563979D10F391A28 ft=1 fh=9672dfcc6bbf1dd8 vn="Variante von MSIL/Rebrand.LittleRegClean.A evtl. unerwünschte Anwendung" ac=I fn="C:\Program Files (x86)\WinTuneUp\WinTuneUp.exe"
sh=2BCCEBC28E3FD681658772292F892A67F6A6F56B ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{28A2ADA2-C360-4CDF-AE34-8B42F3418F54}\Custom.dll"
sh=C17FA19479A7559F666A30D2932A2B9D540BD0EE ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{2AD0B7DB-E986-4A38-A8D3-A1A4F133952D}\Custom.dll"
sh=98C66433798B8A1659A530D6BE06A1CDF6C638FB ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{8463AD8C-5BBE-4454-A6BF-139C5F808F7A}\Custom.dll"
sh=44C239840FB295279C2078E9E9CB7081FA517D19 ft=1 fh=b75aaecba1cb0f99 vn="Variante von Win32/SProtector.B evtl. unerwünschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Program Files (x86)\PSupport\uninstall.exe.vir"
sh=2BCCEBC28E3FD681658772292F892A67F6A6F56B ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{28A2ADA2-C360-4CDF-AE34-8B42F3418F54}\Custom.dll"
sh=C17FA19479A7559F666A30D2932A2B9D540BD0EE ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{2AD0B7DB-E986-4A38-A8D3-A1A4F133952D}\Custom.dll"
sh=98C66433798B8A1659A530D6BE06A1CDF6C638FB ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{8463AD8C-5BBE-4454-A6BF-139C5F808F7A}\Custom.dll"
sh=1B4E4B3487DE267E90F5BFEAB9F34EFEBEAEBA6B ft=1 fh=b278f95df86919f2 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabMaint.x"
sh=E0067CF5A6BE84FF9BA5C352CB017A0EAAE91248 ft=1 fh=57424e617ad2e09b vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabylonChromeToolBar.dll"
sh=89A74C79EF979A42A6DA9E1036DE72E20948B2CD ft=1 fh=59292a47a6152b22 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BUSolution.dll"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BabMaint.x"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BUSolution.dll"
sh=F5C514F93292C6B027DCB2898E0010C534428DDA ft=1 fh=5629cfffb69b4f20 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\NPObject.dll"
sh=245EE219F65DAEA82C4F24EF5B24592085F185CA ft=0 fh=0000000000000000 vn="Win32/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\42h3y7h3.default\extensions\firefox@secretsauce.biz.xpi"
sh=302A8E774E178A4C8F0E60B944712B74804DDC84 ft=1 fh=ecc5a64da13b123a vn="Win32/AdWare.1ClickDownload.AR Anwendung" ac=I fn="C:\Users\Sven\Downloads\Eragon_-_Das_Vermächtnis_der_Drachenreiter.exe"
sh=65A863F00DCFC421B3EAE508287682BB131DB2D4 ft=1 fh=66d4a1d59af4d4df vn="Variante von MSIL/Soft32Downloader.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\everest home edition setup.exe"
sh=14810DC56829DCAB9AD47499BB60466043E148DD ft=1 fh=e9ecc738542a5ba4 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Sven\Downloads\FreemakeVideoConverterSetup.exe"
sh=6D33FD200A9ED2BDABE6123D684926A9ADB83D8C ft=1 fh=69fb1d9e21d87171 vn="Variante von Win32/iLivid.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\iLividSetup-r495-n-bc.exe"
sh=B9BBF64DB871DBF05BFF365295B2FA5703B488C3 ft=0 fh=0000000000000000 vn="Win32/OutBrowse.N evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\Reezaa MP4 to MP3 Converter Keygen.rar"
sh=D2B675261B813651278EA896C2FA5E1FBF80DF53 ft=1 fh=e00ebf3f2d1976d2 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\video-editor-sonc_full1107.exe"
sh=1B239A5C8B868F9BE8D85EB8FE5D94290B1098F6 ft=1 fh=9a4954e6f7732eeb vn="möglicherweise Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\Users\Sven\Downloads\wpsetup.exe"
sh=9B32FFC43297992B63A6C1962088AAACBE64898C ft=1 fh=85e7d3d53b12157e vn="Win32/InstalleRex.M evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0002eb"
sh=EF5C743986D12A7B297B0FB4824B3FA1FFFB9805 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Local\Mozilla\Firefox\Profiles\d90ilwv0.default\Cache\E\3E\77108d01"
sh=8038EBAAE72F63C7028DFC56E2028402762C0286 ft=0 fh=0000000000000000 vn="Win32/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\4b32mscn.default\extensions\{b9a19c25-a741-47e5-91a2-0b62bef307ff}.xpi"
sh=8038EBAAE72F63C7028DFC56E2028402762C0286 ft=0 fh=0000000000000000 vn="Win32/BrowseFox.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{b9a19c25-a741-47e5-91a2-0b62bef307ff}.xpi"
sh=DDEE4ECC57189382D7EA52F9A9AB447E84924FFB ft=1 fh=639409b2309719d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=6040092424A7B8298D81FB5D4EF0E016A6489E8D ft=1 fh=790979363571c5c3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=31641217EF0869BD3F7AE067475C87BB2C928FED ft=1 fh=1d2d1d6fef21cc10 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=0E3AFF471842C942800AE0EEF2E523A7E14FDA7E ft=1 fh=a8f479fdaa579bc5 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_26.dll"
sh=8EB19B2238CDB6BC532FD7CA840F90363285CC4F ft=1 fh=825b7c86c47f0139 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_27.dll"
sh=D6B2BC84B55998E3F50FB9DEE19170BDA7487523 ft=1 fh=2faa5ff2077cf2de vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=DDEE4ECC57189382D7EA52F9A9AB447E84924FFB ft=1 fh=639409b2309719d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=6040092424A7B8298D81FB5D4EF0E016A6489E8D ft=1 fh=790979363571c5c3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=31641217EF0869BD3F7AE067475C87BB2C928FED ft=1 fh=1d2d1d6fef21cc10 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=0E3AFF471842C942800AE0EEF2E523A7E14FDA7E ft=1 fh=a8f479fdaa579bc5 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_26.dll"
sh=8EB19B2238CDB6BC532FD7CA840F90363285CC4F ft=1 fh=825b7c86c47f0139 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_27.dll"
sh=D6B2BC84B55998E3F50FB9DEE19170BDA7487523 ft=1 fh=2faa5ff2077cf2de vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=668DA74E2A420A17F0585584D5804ECB5A94AD9E ft=1 fh=e7f0db176fa10659 vn="Variante von Win32/Bundled.Toolbar.Google.C potenziell unsichere Anwendung" ac=I fn="C:\Users\Tim\Desktop\vpsetup.exe"
sh=FF1C0A120BB6EA0887670E108C1CD4AED5F334C5 ft=0 fh=0000000000000000 vn="Variante von MSIL/PSW.Agent.NFX Trojaner" ac=I fn="C:\Users\Tim\Downloads\4story Gold Hack 2014 4.4.rar"
sh=DAAD2913A2C32BB285A2DD27F72CC59B95F54F4C ft=1 fh=5ce71ac0a7eff41f vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Tim\Downloads\any-video-converter-free555.exe"
sh=19876B0C21073CE7AC4725124851FC36B7EA7301 ft=1 fh=31b372839de59c7b vn="Variante von Win32/CNETInstaller.B evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\cbsidlm-cbsi188-Kalydo_Player-ORG-10909421.exe"
sh=D0EAE3A2526722FD44D5EB46F7AD03E74F363F15 ft=1 fh=2580fcee2b3d23f1 vn="Variante von Win32/LoadTubes.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\Chs27.0_Final__1453.116.exe"
sh=3ABE06C35E9FFA6F15F1E32D291050AD4D174FB6 ft=1 fh=811fea32ae186626 vn="Win32/OpenCandy potenziell unsichere Anwendung" ac=I fn="C:\Users\Tim\Downloads\FreemakeVideoConverterSetup_4.1.3.6.exe"
sh=7284CD5BBFBF08B8D6B1FC6558A2603D9DB83A48 ft=1 fh=ed8007f9b7369fac vn="Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\MusicSetup (1).exe"
sh=6FEA5DDAD4BE20B1C703BFF7FF978A205B30E33A ft=1 fh=e627e49be4a5612c vn="Win32/Toolbar.Inbox.H evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\MusicSetup.exe"
sh=3FE66AA1A4BB01D65065E4CD4B316FB277AFE2B1 ft=1 fh=47e45a3d9b2dfcf8 vn="Win32/Malavida.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\photoshop-windows-downloader (1).exe"
sh=E864D3B4B3DF2C61E473CA9F58FB82C4E5EE791D ft=1 fh=fb0a65f98d67d21a vn="Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\SoftonicDownloader_fuer_gimp.exe"
sh=50A9DF1A2EA9C2E988BF1FE2206E66B533B5BD25 ft=1 fh=67b0a96df7e6bb8d vn="Variante von Win32/SoftonicDownloader.F evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\SoftonicDownloader_fuer_vegas-movie-studio-platinum.exe"
sh=ECE633D288A0E81CCB096BB7C019142FAAF45B80 ft=0 fh=0000000000000000 vn="MSIL/Adware.Proxomoto.D Anwendung" ac=I fn="C:\Windows\Installer\119cf1b.msi"
sh=4E2FFDA2B4D7081B06D0B608D60683838A94C5F7 ft=0 fh=0000000000000000 vn="Variante von MSIL/Toolbar.Linkury.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\41551a.msi"
sh=9E01A44A8B5DD51CA24DE50931C35A6E3B2457BB ft=0 fh=0000000000000000 vn="Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\Installer\8c97d7.msi"
sh=ED72F5BBCAB3AECEAE89495DF7F0FCC39295CFC7 ft=1 fh=25323ec16c75ffc6 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\Installer\MSI75B2.tmp"
sh=FDFDBE0F7F16EDADBA62EEF6B866199B13FD21C0 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[1].7z"
sh=9DEFACF17CF67D8ECDFC71408E687937068526AC ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[2].7z"
sh=1EBE6AB9E3837698707FD28AE8A7BE1D203F848E ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[3].7z"
sh=7A3BD2076C1A4266CCD420F61A52C164DDA971E4 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[4].7z"
sh=D450200C21E4F3DBE2D371762311C829AB2A8D22 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[5].7z"
sh=C6E4F27AB99DDB8C2ABED11CA837B3A44065695A ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[6].7z"
sh=C14731FD3DE04A625C35BC69DF63C843B591A01C ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[7].7z"
sh=056E218A858E2738D9A183A9F144B8FFD240C55E ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[1].7z"
sh=639E127666A351BB89B7366641EDD59911DFB93F ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[2].7z"
sh=FDFDBE0F7F16EDADBA62EEF6B866199B13FD21C0 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[1].7z"
sh=9DEFACF17CF67D8ECDFC71408E687937068526AC ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[2].7z"
sh=1EBE6AB9E3837698707FD28AE8A7BE1D203F848E ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[3].7z"
sh=7A3BD2076C1A4266CCD420F61A52C164DDA971E4 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[4].7z"
sh=D450200C21E4F3DBE2D371762311C829AB2A8D22 ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[5].7z"
sh=C6E4F27AB99DDB8C2ABED11CA837B3A44065695A ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[6].7z"
sh=C14731FD3DE04A625C35BC69DF63C843B591A01C ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ATU4-V7[7].7z"
sh=056E218A858E2738D9A183A9F144B8FFD240C55E ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[1].7z"
sh=639E127666A351BB89B7366641EDD59911DFB93F ft=0 fh=0000000000000000 vn="Variante von Win32/Bundled.Toolbar.Ask.F potenziell unsichere Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\AskToolbarInstaller-ORJ-V7C[2].7z"
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=init
# utc_time=2016-05-26 06:46:07
# local_time=2016-05-26 08:46:07 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29601
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=updated
# utc_time=2016-05-26 06:56:17
# local_time=2016-05-26 08:56:17 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# engine=29601
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-05-26 07:24:56
# local_time=2016-05-26 09:24:56 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 7975279 87271090 0 0
# scanned=37170
# found=135
# cleaned=0
# scan_time=1718
sh=A396E7CEF6865A2D3ABC675CD87F0ABBD444B0AD ft=1 fh=125b4479048e56a7 vn="Variante von Win32/Adware.ConvertAd.XV Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\hnse1CF4.tmp.vir"
sh=B64AF0D23CAC7035C62CABA436D4FDBBEBF8C326 ft=1 fh=274bc530eb73b8d8 vn="Variante von Win32/Adware.ConvertAd.ABM Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\jnspF5E3.tmp.vir"
sh=E3AA974E528AF802C6A0B65ADFFECD1316549DB5 ft=1 fh=d34c979374bbe37f vn="Variante von Win32/Adware.ConvertAd.AHO Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\knsk550E.tmp.vir"
sh=988502F4B76CF0AD4A3AF4B674094054E621AF8A ft=1 fh=1d89c56e7c7461ff vn="Win32/Adware.ConvertAd.AEY Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\Uninstall.exe.vir"
sh=AA4CCF8E365B9B402DF15AED90737A8D2DD492E8 ft=1 fh=f0e0b0ee4328f643 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\vnsz82C1.tmp.vir"
sh=B1A870F1D1406D594305310CF57B859A8FC822D5 ft=1 fh=b5ccec6123085ddf vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysSrv.exe.vir"
sh=420CB7E6C26C7398FD7D162D234B84F538AF6D85 ft=1 fh=848ea6542d9060ba vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysTsk.exe.vir"
sh=043059310CC1303FE4EA7223E1A7FFE7E2689440 ft=1 fh=b61d2769f25e0dac vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL.dll.vir"
sh=59CE1756B396E253266BD15FCDE2C71C2733AE0B ft=1 fh=a5db81c43e392270 vn="Variante von Win64/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.dll.vir"
sh=3D5741F6FFF23E4DBA2473A746B29C47706E7E06 ft=1 fh=3bface7d54f8d5bc vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.exe.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.dll.vir"
sh=820F39F552BC88473ED9249DDA3AD1F02D7E9DFB ft=1 fh=123f42b47d435196 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine64.dll.vir"
sh=E5FA0B692C275F815ED2F62353D1910A8762F59D ft=1 fh=9a603fe0221e7ad9 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdenginecert.dll.vir"
sh=F63E9C4897911CE79AEB317ED5D176D1150C1B3F ft=1 fh=fb70d74cb41c11d0 vn="Variante von Win32/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine.exe.vir"
sh=2F9F31CF31BA49F3F21B813BEBE560D960630807 ft=1 fh=a4621f1c5a284b4c vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine64.exe.vir"
sh=B4EF1764EB2F744A8B6C542D4DDB047E64F90DF0 ft=1 fh=e7c8c83abe4d90a5 vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\ttwifi\tiantianwifi.exe.vir"
sh=B9EFC99074825DA016AA2126026BF812DD8F5E5F ft=1 fh=503d985b5a380a4b vn="Variante von Win32/Taobao.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\UCBrowser\Application\Uninstall.exe.vir"
sh=D01713291E5F4802605DBF42F87968D8F698E8F9 ft=1 fh=28e8c9d0ac095984 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll.vir"
sh=4AA8102D6C8697B92336FB15E9BACECB62E60A3F ft=1 fh=2d58dca7270301ca vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\osmsg.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysNative\zdengine64.dll.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\zdengine.dll.vir"
sh=06016E1D51521E52E98E3195AC021D61AC3F5156 ft=1 fh=6ddffeee52663c62 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\bugreport.exe.vir"
sh=0DEDEFFC257FBF913895A5E682D26707F91F97B2 ft=1 fh=cb9f4ed7e337f8d5 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ccuter.exe.vir"
sh=7472E8AB346A58B849E6E4669442DB4EE52D76C8 ft=1 fh=e0c88d57d6adb74c vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ffuter.exe.vir"
sh=7A50A7AFEAB0AA3A66D51B27F33A83EE70613A2A ft=1 fh=e5d31af663169d8f vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\shortboost.exe.vir"
sh=76D4CA7BD48F0301FC572F82D0EA0469ECBB2172 ft=1 fh=a1af2135c68259a9 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\unIns.exe.vir"
sh=8A96EE0F07C6D9B211F6E87D417331065CFDC21E ft=1 fh=1bdc2c3db687c77e vn="Variante von Win32/Adware.SpeedingUpMyPC.AO Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUTray.exe.vir"
sh=B3F33ABCC92BB111AFD192D6F6AB9628CE1840F9 ft=1 fh=f0c9d2e774a108ff vn="Variante von Win32/Adware.SpeedingUpMyPC.AL Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUUninstaller.exe.vir"
sh=79259C6E8D2BC187B2692EE0AE53249B53FB85AE ft=1 fh=e122f0f62e52792f vn="Variante von Win32/Adware.SpeedingUpMyPC.AM Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SmartDriverUpdater.exe.vir"
sh=3BB05CAB0A9CC9BE7437A979C12C16A0203BDE08 ft=1 fh=9c273e59e3cd0fcd vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Winsere\Winsere\Winsere.exe.vir"
sh=47A25602A2172CF3A2E1CC54703A2E9F7DF41112 ft=1 fh=8df17d7a5e89b937 vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=1B4E4B3487DE267E90F5BFEAB9F34EFEBEAEBA6B ft=1 fh=b278f95df86919f2 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabMaint.x.vir"
sh=E0067CF5A6BE84FF9BA5C352CB017A0EAAE91248 ft=1 fh=57424e617ad2e09b vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabylonChromeToolBar.dll.vir"
sh=89A74C79EF979A42A6DA9E1036DE72E20948B2CD ft=1 fh=59292a47a6152b22 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BUSolution.dll.vir"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BabMaint.x.vir"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BUSolution.dll.vir"
sh=F5C514F93292C6B027DCB2898E0010C534428DDA ft=1 fh=5629cfffb69b4f20 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\NPObject.dll.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=3D29D74B68D749D45596EB04063C4640A523C0BA ft=1 fh=25de6d9bfad9eb37 vn="Variante von Win32/Wajam.AH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\2de24050b9ce0e6894fad8412baf2d6f.exe"
sh=3206B710C232E952BB8CC0F3EE2B669F2F5633A5 ft=1 fh=ad043b8b76f957d1 vn="Variante von Win32/Packed.NSISmod.R verdÃ¤chtige Datei" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\8178baefb0fa9dc188cf02763d3585cd.exe"
sh=D87E74013FDBF408E3A3F54400974A3983689FA2 ft=1 fh=f53eba53f38e925b vn="Variante von Win32/HideBaid.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files (x86)\badu\Bind.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\svrupg.exe"
sh=97C867CCE7B4B223CF31701F11782224B4A7F16D ft=1 fh=e3d13535f0a49e04 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\tmp\carssn---.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Sven\AppData\Roaming\svrupg.exe.xBAD"
sh=FA0E376F07A07228969860985E41A0B3C771840B ft=1 fh=632a91d9111d7d05 vn="Win32/Adware.ConvertAd.AHL Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Local\Could not connect. Error code = 0x-1463489703---\Uninstall.exe"
sh=2239AB4357629138138E18F87452A917E34862DD ft=1 fh=8d8797eb99268dcb vn="Variante von Win32/Adware.ArwenApp.A Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\conhost.exe"
sh=F299C99DF28556656065D7B288DEA680A3F0B8D1 ft=1 fh=04fdbabeb0e83364 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\service.exe"
sh=AFE68E2F690633C4CE2A4062092BD9E67C225697 ft=1 fh=e3d135356ca24d45 vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\yeaplayer_51490.exe"

Terrenay · 03.06.2016, 08:51

ESET 2:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=init
# utc_time=2016-05-29 06:24:17
# local_time=2016-05-29 08:24:17 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29627
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=updated
# utc_time=2016-05-29 06:26:14
# local_time=2016-05-29 08:26:14 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=restart
# utc_time=2016-05-29 07:34:52
# local_time=2016-05-29 09:34:52 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 8235075 87530886 0 0
# scanned=180858
# found=135
# cleaned=0
# scan_time=4117
sh=A396E7CEF6865A2D3ABC675CD87F0ABBD444B0AD ft=1 fh=125b4479048e56a7 vn="Variante von Win32/Adware.ConvertAd.XV Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\hnse1CF4.tmp.vir"
sh=B64AF0D23CAC7035C62CABA436D4FDBBEBF8C326 ft=1 fh=274bc530eb73b8d8 vn="Variante von Win32/Adware.ConvertAd.ABM Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\jnspF5E3.tmp.vir"
sh=E3AA974E528AF802C6A0B65ADFFECD1316549DB5 ft=1 fh=d34c979374bbe37f vn="Variante von Win32/Adware.ConvertAd.AHO Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\knsk550E.tmp.vir"
sh=988502F4B76CF0AD4A3AF4B674094054E621AF8A ft=1 fh=1d89c56e7c7461ff vn="Win32/Adware.ConvertAd.AEY Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\Uninstall.exe.vir"
sh=AA4CCF8E365B9B402DF15AED90737A8D2DD492E8 ft=1 fh=f0e0b0ee4328f643 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\vnsz82C1.tmp.vir"
sh=B1A870F1D1406D594305310CF57B859A8FC822D5 ft=1 fh=b5ccec6123085ddf vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysSrv.exe.vir"
sh=420CB7E6C26C7398FD7D162D234B84F538AF6D85 ft=1 fh=848ea6542d9060ba vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysTsk.exe.vir"
sh=043059310CC1303FE4EA7223E1A7FFE7E2689440 ft=1 fh=b61d2769f25e0dac vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL.dll.vir"
sh=59CE1756B396E253266BD15FCDE2C71C2733AE0B ft=1 fh=a5db81c43e392270 vn="Variante von Win64/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.dll.vir"
sh=3D5741F6FFF23E4DBA2473A746B29C47706E7E06 ft=1 fh=3bface7d54f8d5bc vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.exe.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.dll.vir"
sh=820F39F552BC88473ED9249DDA3AD1F02D7E9DFB ft=1 fh=123f42b47d435196 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine64.dll.vir"
sh=E5FA0B692C275F815ED2F62353D1910A8762F59D ft=1 fh=9a603fe0221e7ad9 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdenginecert.dll.vir"
sh=F63E9C4897911CE79AEB317ED5D176D1150C1B3F ft=1 fh=fb70d74cb41c11d0 vn="Variante von Win32/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine.exe.vir"
sh=2F9F31CF31BA49F3F21B813BEBE560D960630807 ft=1 fh=a4621f1c5a284b4c vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine64.exe.vir"
sh=B4EF1764EB2F744A8B6C542D4DDB047E64F90DF0 ft=1 fh=e7c8c83abe4d90a5 vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\ttwifi\tiantianwifi.exe.vir"
sh=B9EFC99074825DA016AA2126026BF812DD8F5E5F ft=1 fh=503d985b5a380a4b vn="Variante von Win32/Taobao.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\UCBrowser\Application\Uninstall.exe.vir"
sh=D01713291E5F4802605DBF42F87968D8F698E8F9 ft=1 fh=28e8c9d0ac095984 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll.vir"
sh=4AA8102D6C8697B92336FB15E9BACECB62E60A3F ft=1 fh=2d58dca7270301ca vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\osmsg.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysNative\zdengine64.dll.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\zdengine.dll.vir"
sh=06016E1D51521E52E98E3195AC021D61AC3F5156 ft=1 fh=6ddffeee52663c62 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\bugreport.exe.vir"
sh=0DEDEFFC257FBF913895A5E682D26707F91F97B2 ft=1 fh=cb9f4ed7e337f8d5 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ccuter.exe.vir"
sh=7472E8AB346A58B849E6E4669442DB4EE52D76C8 ft=1 fh=e0c88d57d6adb74c vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ffuter.exe.vir"
sh=7A50A7AFEAB0AA3A66D51B27F33A83EE70613A2A ft=1 fh=e5d31af663169d8f vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\shortboost.exe.vir"
sh=76D4CA7BD48F0301FC572F82D0EA0469ECBB2172 ft=1 fh=a1af2135c68259a9 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\unIns.exe.vir"
sh=8A96EE0F07C6D9B211F6E87D417331065CFDC21E ft=1 fh=1bdc2c3db687c77e vn="Variante von Win32/Adware.SpeedingUpMyPC.AO Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUTray.exe.vir"
sh=B3F33ABCC92BB111AFD192D6F6AB9628CE1840F9 ft=1 fh=f0c9d2e774a108ff vn="Variante von Win32/Adware.SpeedingUpMyPC.AL Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUUninstaller.exe.vir"
sh=79259C6E8D2BC187B2692EE0AE53249B53FB85AE ft=1 fh=e122f0f62e52792f vn="Variante von Win32/Adware.SpeedingUpMyPC.AM Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SmartDriverUpdater.exe.vir"
sh=3BB05CAB0A9CC9BE7437A979C12C16A0203BDE08 ft=1 fh=9c273e59e3cd0fcd vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Winsere\Winsere\Winsere.exe.vir"
sh=47A25602A2172CF3A2E1CC54703A2E9F7DF41112 ft=1 fh=8df17d7a5e89b937 vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=1B4E4B3487DE267E90F5BFEAB9F34EFEBEAEBA6B ft=1 fh=b278f95df86919f2 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabMaint.x.vir"
sh=E0067CF5A6BE84FF9BA5C352CB017A0EAAE91248 ft=1 fh=57424e617ad2e09b vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabylonChromeToolBar.dll.vir"
sh=89A74C79EF979A42A6DA9E1036DE72E20948B2CD ft=1 fh=59292a47a6152b22 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BUSolution.dll.vir"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BabMaint.x.vir"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BUSolution.dll.vir"
sh=F5C514F93292C6B027DCB2898E0010C534428DDA ft=1 fh=5629cfffb69b4f20 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\NPObject.dll.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=3D29D74B68D749D45596EB04063C4640A523C0BA ft=1 fh=25de6d9bfad9eb37 vn="Variante von Win32/Wajam.AH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\2de24050b9ce0e6894fad8412baf2d6f.exe"
sh=3206B710C232E952BB8CC0F3EE2B669F2F5633A5 ft=1 fh=ad043b8b76f957d1 vn="Variante von Win32/Packed.NSISmod.R verdÃ¤chtige Datei" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\8178baefb0fa9dc188cf02763d3585cd.exe"
sh=D87E74013FDBF408E3A3F54400974A3983689FA2 ft=1 fh=f53eba53f38e925b vn="Variante von Win32/HideBaid.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files (x86)\badu\Bind.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\svrupg.exe"
sh=97C867CCE7B4B223CF31701F11782224B4A7F16D ft=1 fh=e3d13535f0a49e04 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\tmp\carssn---.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Sven\AppData\Roaming\svrupg.exe.xBAD"
sh=FA0E376F07A07228969860985E41A0B3C771840B ft=1 fh=632a91d9111d7d05 vn="Win32/Adware.ConvertAd.AHL Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Local\Could not connect. Error code = 0x-1463489703---\Uninstall.exe"
sh=2239AB4357629138138E18F87452A917E34862DD ft=1 fh=8d8797eb99268dcb vn="Variante von Win32/Adware.ArwenApp.A Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\conhost.exe"
sh=F299C99DF28556656065D7B288DEA680A3F0B8D1 ft=1 fh=04fdbabeb0e83364 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\service.exe"
sh=AFE68E2F690633C4CE2A4062092BD9E67C225697 ft=1 fh=e3d135356ca24d45 vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\yeaplayer_51490.exe"
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=init
# utc_time=2016-06-02 09:04:00
# local_time=2016-06-02 11:04:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 29669
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# end=updated
# utc_time=2016-06-02 09:14:51
# local_time=2016-06-02 11:14:51 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=40d661f0052cf644a514a3b23d74a3b1
# engine=29669
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-06-02 02:51:00
# local_time=2016-06-02 04:51:00 (+0100, Mitteleuropäische Sommerzeit)
# country="Switzerland"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Microsoft Security Essentials'
# compatibility_mode=5895 16777213 100 100 8560043 87859454 0 0
# scanned=715671
# found=157
# cleaned=0
# scan_time=20168
sh=A396E7CEF6865A2D3ABC675CD87F0ABBD444B0AD ft=1 fh=125b4479048e56a7 vn="Variante von Win32/Adware.ConvertAd.XV Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\hnse1CF4.tmp.vir"
sh=B64AF0D23CAC7035C62CABA436D4FDBBEBF8C326 ft=1 fh=274bc530eb73b8d8 vn="Variante von Win32/Adware.ConvertAd.ABM Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\jnspF5E3.tmp.vir"
sh=E3AA974E528AF802C6A0B65ADFFECD1316549DB5 ft=1 fh=d34c979374bbe37f vn="Variante von Win32/Adware.ConvertAd.AHO Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\knsk550E.tmp.vir"
sh=E9C06ACA0E6390C27FDDE0E9283A0DC4CC2F009E ft=1 fh=d8165b5759d6bf85 vn="Variante von Win32/Adware.ConvertAd.AHU.gen Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\rnszE1B3.exe.vir"
sh=988502F4B76CF0AD4A3AF4B674094054E621AF8A ft=1 fh=1d89c56e7c7461ff vn="Win32/Adware.ConvertAd.AEY Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\Uninstall.exe.vir"
sh=AA4CCF8E365B9B402DF15AED90737A8D2DD492E8 ft=1 fh=f0e0b0ee4328f643 vn="Mehrere Bedrohungen" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\56410FF8-1463416557-1220-0629-075207000000\vnsz82C1.tmp.vir"
sh=B1A870F1D1406D594305310CF57B859A8FC822D5 ft=1 fh=b5ccec6123085ddf vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysSrv.exe.vir"
sh=420CB7E6C26C7398FD7D162D234B84F538AF6D85 ft=1 fh=848ea6542d9060ba vn="Variante von Win32/ELEX.IA evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\Muftion\muftionSysTsk.exe.vir"
sh=043059310CC1303FE4EA7223E1A7FFE7E2689440 ft=1 fh=b61d2769f25e0dac vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL.dll.vir"
sh=59CE1756B396E253266BD15FCDE2C71C2733AE0B ft=1 fh=a5db81c43e392270 vn="Variante von Win64/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.dll.vir"
sh=3D5741F6FFF23E4DBA2473A746B29C47706E7E06 ft=1 fh=3bface7d54f8d5bc vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ZDDLL64.exe.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.dll.vir"
sh=820F39F552BC88473ED9249DDA3AD1F02D7E9DFB ft=1 fh=123f42b47d435196 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdengine64.dll.vir"
sh=E5FA0B692C275F815ED2F62353D1910A8762F59D ft=1 fh=9a603fe0221e7ad9 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\zdenginecert.dll.vir"
sh=F63E9C4897911CE79AEB317ED5D176D1150C1B3F ft=1 fh=fb70d74cb41c11d0 vn="Variante von Win32/Packed.Komodia.F verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine.exe.vir"
sh=2F9F31CF31BA49F3F21B813BEBE560D960630807 ft=1 fh=a4621f1c5a284b4c vn="Variante von Win64/Packed.Komodia.D verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\QuickSearch\ziengine64.exe.vir"
sh=B4EF1764EB2F744A8B6C542D4DDB047E64F90DF0 ft=1 fh=e7c8c83abe4d90a5 vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\ttwifi\tiantianwifi.exe.vir"
sh=B9EFC99074825DA016AA2126026BF812DD8F5E5F ft=1 fh=503d985b5a380a4b vn="Variante von Win32/Taobao.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\UCBrowser\Application\Uninstall.exe.vir"
sh=D01713291E5F4802605DBF42F87968D8F698E8F9 ft=1 fh=28e8c9d0ac095984 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\675D131108D4FD145B0BFBC68A3E018A.dll.vir"
sh=4AA8102D6C8697B92336FB15E9BACECB62E60A3F ft=1 fh=2d58dca7270301ca vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\AdwCleaner\FileQuarantine\C\ProgramData\WindowsMsg\osmsg.exe.vir"
sh=DF0CDB0A3DF10CF0B87A8BF1A334CD5C59A7EA95 ft=1 fh=489a623ae4a629a1 vn="Variante von Win64/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysNative\zdengine64.dll.vir"
sh=7E440105D466C1DB55D33EF0AE52650DA9BC8C44 ft=1 fh=2f107851ceb59301 vn="Variante von Win32/Packed.Komodia.E verdÃ¤chtige Datei" ac=I fn="C:\AdwCleaner\FileQuarantine\C\Windows\SysWOW64\zdengine.dll.vir"
sh=06016E1D51521E52E98E3195AC021D61AC3F5156 ft=1 fh=6ddffeee52663c62 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\bugreport.exe.vir"
sh=0DEDEFFC257FBF913895A5E682D26707F91F97B2 ft=1 fh=cb9f4ed7e337f8d5 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ccuter.exe.vir"
sh=7472E8AB346A58B849E6E4669442DB4EE52D76C8 ft=1 fh=e0c88d57d6adb74c vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\ffuter.exe.vir"
sh=7A50A7AFEAB0AA3A66D51B27F33A83EE70613A2A ft=1 fh=e5d31af663169d8f vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\shortboost.exe.vir"
sh=76D4CA7BD48F0301FC572F82D0EA0469ECBB2172 ft=1 fh=a1af2135c68259a9 vn="Variante von Win32/ELEX.HI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\SearchesToYesbnd\unIns.exe.vir"
sh=8A96EE0F07C6D9B211F6E87D417331065CFDC21E ft=1 fh=1bdc2c3db687c77e vn="Variante von Win32/Adware.SpeedingUpMyPC.AO Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUTray.exe.vir"
sh=B3F33ABCC92BB111AFD192D6F6AB9628CE1840F9 ft=1 fh=f0c9d2e774a108ff vn="Variante von Win32/Adware.SpeedingUpMyPC.AL Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SDUUninstaller.exe.vir"
sh=79259C6E8D2BC187B2692EE0AE53249B53FB85AE ft=1 fh=e122f0f62e52792f vn="Variante von Win32/Adware.SpeedingUpMyPC.AM Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Smart Driver Updater\SmartDriverUpdater.exe.vir"
sh=3BB05CAB0A9CC9BE7437A979C12C16A0203BDE08 ft=1 fh=9c273e59e3cd0fcd vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Winsere\Winsere\Winsere.exe.vir"
sh=47A25602A2172CF3A2E1CC54703A2E9F7DF41112 ft=1 fh=8df17d7a5e89b937 vn="Variante von Win32/ELEX.HH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\WinTaske\WinTaske\WinTaske.exe.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Mirjam Zanetti\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=1B4E4B3487DE267E90F5BFEAB9F34EFEBEAEBA6B ft=1 fh=b278f95df86919f2 vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabMaint.x.vir"
sh=E0067CF5A6BE84FF9BA5C352CB017A0EAAE91248 ft=1 fh=57424e617ad2e09b vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BabylonChromeToolBar.dll.vir"
sh=89A74C79EF979A42A6DA9E1036DE72E20948B2CD ft=1 fh=59292a47a6152b22 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.12_0\BUSolution.dll.vir"
sh=58495F0458EDDC16D9A14A6E84CEE9C61AAE5E52 ft=1 fh=85d80dff1da9eafb vn="Variante von Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BabMaint.x.vir"
sh=56371D74005B39D794FF8F30891F27BACECA56C8 ft=1 fh=c3e79ff37423ee01 vn="Variante von Win32/Toolbar.Babylon.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\BUSolution.dll.vir"
sh=F5C514F93292C6B027DCB2898E0010C534428DDA ft=1 fh=5629cfffb69b4f20 vn="Variante von Win32/Toolbar.Babylon.Q evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Chromium\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.3_0\NPObject.dll.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Sven\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\content.js.vir"
sh=BAD90C3897AC1DB4F6690E7821A95852FFABC9D3 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bgpfjfeecmmfbnjidgkemcinhdelgjhm\2.14\j0HJ8X.js.vir"
sh=3FE93C4DA542F235F671D003C10CDD8CFD9160C2 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bojkmbbmebjaajhonpndibidbmaplmne\1.1\rLu_W.js.vir"
sh=05DA1C627E73DAF1564B3FE4DD79D8971CACF6C0 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ffdcfjdljhbehggjdkdioajnknjcpbjb\223\r18XDjli1Ap.js.vir"
sh=745E0E732C33D1D00A1937A79690A68D7E3F2B6E ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hiccdblgkplmggimblnjnemlejfajkca\1.0\N5cMThNhc.js.vir"
sh=9C00C9E007469F48D41221898A6274CAE51BBE82 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.L Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\content.js.vir"
sh=D643A21256CC50D700654A69A09CEFB9A5670176 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\hkiblpicaebkkeehcnpekpjombkbibhf\2.1\y7xzM4Z1Hzpw.js.vir"
sh=A087876BA1C7C31FC3831B83716742B32F9DD98D ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\content.js.vir"
sh=C442F787E096A887175C450C4F2AC527D1141314 ft=0 fh=0000000000000000 vn="JS/Chromex.Agent.M Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\lsdb.js.vir"
sh=2436251F22888D32315759B72784C6367B669FDA ft=0 fh=0000000000000000 vn="JS/Kryptik.ATK Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kajikfljakilcjiohkhbolokhfiaknkc\3.7\ZCs.js.vir"
sh=3BC220514BE09237D357093A99C02CF0230CFC88 ft=0 fh=0000000000000000 vn="JS/Kryptik.ATB Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Tim\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\kflbaljfmkohmflbeacgibmnjnmghmkb\2.1\MLzb8N.js.vir"
sh=3D29D74B68D749D45596EB04063C4640A523C0BA ft=1 fh=25de6d9bfad9eb37 vn="Variante von Win32/Wajam.AH evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\2de24050b9ce0e6894fad8412baf2d6f.exe"
sh=3206B710C232E952BB8CC0F3EE2B669F2F5633A5 ft=1 fh=ad043b8b76f957d1 vn="Variante von Win32/Packed.NSISmod.R verdÃ¤chtige Datei" ac=I fn="C:\FRST\Quarantine\C\Program Files\6252fcdab494a399247c79cfd21d523e\8178baefb0fa9dc188cf02763d3585cd.exe"
sh=D87E74013FDBF408E3A3F54400974A3983689FA2 ft=1 fh=f53eba53f38e925b vn="Variante von Win32/HideBaid.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\FRST\Quarantine\C\Program Files (x86)\badu\Bind.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\svrupg.exe"
sh=97C867CCE7B4B223CF31701F11782224B4A7F16D ft=1 fh=e3d13535f0a49e04 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\ProgramData\Windows Update\tmp\carssn---.exe"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Sven\AppData\Roaming\svrupg.exe.xBAD"
sh=FA0E376F07A07228969860985E41A0B3C771840B ft=1 fh=632a91d9111d7d05 vn="Win32/Adware.ConvertAd.AHL Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Local\Could not connect. Error code = 0x-1463489703---\Uninstall.exe"
sh=2239AB4357629138138E18F87452A917E34862DD ft=1 fh=8d8797eb99268dcb vn="Variante von Win32/Adware.ArwenApp.A Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\conhost.exe"
sh=F299C99DF28556656065D7B288DEA680A3F0B8D1 ft=1 fh=04fdbabeb0e83364 vn="Variante von Win32/Adware.Agent.NPK Anwendung" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\service.exe"
sh=AFE68E2F690633C4CE2A4062092BD9E67C225697 ft=1 fh=e3d135356ca24d45 vn="Mehrere Bedrohungen" ac=I fn="C:\FRST\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\UPUpdata\yeaplayer_51490.exe"
sh=0B3C33074E33259971642644563979D10F391A28 ft=1 fh=9672dfcc6bbf1dd8 vn="Variante von MSIL/Rebrand.LittleRegClean.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Program Files (x86)\WinTuneUp\WinTuneUp.exe"
sh=2BCCEBC28E3FD681658772292F892A67F6A6F56B ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{28A2ADA2-C360-4CDF-AE34-8B42F3418F54}\Custom.dll"
sh=C17FA19479A7559F666A30D2932A2B9D540BD0EE ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{2AD0B7DB-E986-4A38-A8D3-A1A4F133952D}\Custom.dll"
sh=98C66433798B8A1659A530D6BE06A1CDF6C638FB ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\ProgramData\InstallMate\{8463AD8C-5BBE-4454-A6BF-139C5F808F7A}\Custom.dll"
sh=E821D8E204B8D2B53CC0E6BC048CC774D135AB2C ft=1 fh=ccabb5ab1ae85e8b vn="Variante von Win32/Adware.Agent.NPN Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\Tim.MirjamZanetti\AppData\Roaming\svrupg.exe.vir"
sh=2BCCEBC28E3FD681658772292F892A67F6A6F56B ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{28A2ADA2-C360-4CDF-AE34-8B42F3418F54}\Custom.dll"
sh=C17FA19479A7559F666A30D2932A2B9D540BD0EE ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{2AD0B7DB-E986-4A38-A8D3-A1A4F133952D}\Custom.dll"
sh=98C66433798B8A1659A530D6BE06A1CDF6C638FB ft=1 fh=c71c001198f425ea vn="Win32/InstalleRex.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\All Users\InstallMate\{8463AD8C-5BBE-4454-A6BF-139C5F808F7A}\Custom.dll"
sh=D82BA33B04FBAE9B2C4B89CA5DDD9075C115C31A ft=1 fh=100f1aa2d6e3b55e vn="Win32/Somoto.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\File System\000\t\00\00000000"
sh=AEE0B5F1AE8564D7E4CCD032EDF7AD88339BFF4E ft=1 fh=88c3bdc65b0afccf vn="Variante von Win32/Systweak.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\HP_(Hewlett_Packard)_Photosmart_7520_Treiber_Update_01-2014.exe"
sh=A423BABEC72D0D1C6B86F12ECFBB4F4E25022E46 ft=1 fh=c19e43806b0ca485 vn="Variante von Win32/Systweak.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\supereasy_driver_updater_1.1.1_7870.exe"
sh=D2B675261B813651278EA896C2FA5E1FBF80DF53 ft=1 fh=e00ebf3f2d1976d2 vn="Variante von Win32/Toolbar.Widgi.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Sven\Downloads\video-editor-sonc_full1107.exe"
sh=DDEE4ECC57189382D7EA52F9A9AB447E84924FFB ft=1 fh=639409b2309719d3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_23.dll"
sh=6040092424A7B8298D81FB5D4EF0E016A6489E8D ft=1 fh=790979363571c5c3 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_24.dll"
sh=31641217EF0869BD3F7AE067475C87BB2C928FED ft=1 fh=1d2d1d6fef21cc10 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_25.dll"
sh=0E3AFF471842C942800AE0EEF2E523A7E14FDA7E ft=1 fh=a8f479fdaa579bc5 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_26.dll"
sh=8EB19B2238CDB6BC532FD7CA840F90363285CC4F ft=1 fh=825b7c86c47f0139 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_27.dll"
sh=D6B2BC84B55998E3F50FB9DEE19170BDA7487523 ft=1 fh=2faa5ff2077cf2de vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=19876B0C21073CE7AC4725124851FC36B7EA7301 ft=1 fh=31b372839de59c7b vn="Variante von Win32/CNETInstaller.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\cbsidlm-cbsi188-Kalydo_Player-ORG-10909421.exe"
sh=E69BCACB130F2390E51DD5171D7C671DCBC75F59 ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\Tim\Downloads\wz180gev-64.msi"
sh=E69BCACB130F2390E51DD5171D7C671DCBC75F59 ft=0 fh=0000000000000000 vn="Variante von Win32/Systweak.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\Installer\11bfd2b.msi"

Hitman:

Code:

ATTFilter

HitmanPro 3.7.14.265
www.hitmanpro.com

   Computer name . . . . : MirjamZanetti
   Windows . . . . . . . : 6.1.1.7601.X64/2
   User name . . . . . . : MirjamZanetti\Sven
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2016-06-03 09:31:26
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 14m 11s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 57

   Objects scanned . . . : 4'934'668
   Files scanned . . . . : 263'339
   Remnants scanned  . . : 1'744'698 files / 2'926'631 keys

Suspicious files ____________________________________________________________

   C:\Users\Mirjam Zanetti\Desktop\FRST64.exe
      Size . . . . . . . : 2'093'568 bytes
      Age  . . . . . . . : 677.5 days (2014-07-26 21:21:40)
      Entropy  . . . . . : 7.5
      SHA-256  . . . . . : E3FBF3D6D21ABA0787DC8C3E0BF91E1AC08BC688CB3FE89996C273DC4991B19F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 22.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.

   C:\Users\Sven\Desktop\FRST64.exe
      Size . . . . . . . : 2'382'336 bytes
      Age  . . . . . . . : 17.6 days (2016-05-16 19:24:17)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : 6A95F0C39E619A8E3BB70D658939E9F600BE775E374C23B10DAC66164F09722F
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 23.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      References
         HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\C:\Users\Sven\Desktop\FRST64.exe


Potential Unwanted Programs _________________________________________________

   extensions.rvv5COD6U.url
   C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\ngipf8qa.default\prefs.js

   HKLM\SOFTWARE\Classes\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}\ (iMesh)
   HKLM\SOFTWARE\Classes\Interface\{1B3843C0-3C67-418C-B795-0E6D07DE7A77}\ (AmazonBrowserBar)
   HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415552}\ (iPumper)
   HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416652}\ (iPumper)
   HKLM\SOFTWARE\Classes\Interface\{FECA4FD3-F0F9-432E-9EA4-3EC4D4AA59D2}\ (AmazonBrowserBar)
   HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}\ (iMesh)
   HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}\ (InboxToolbar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08D05D38D7D092348847B7481BB59E27\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B4750D705E2564409328D661F3A08E1\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2100E8859603A3F4197D1B27E573732C\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26E983F1377593143A37E3BA1C65CB74\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3988C1233C05DA343BC7CA3722778352\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3C036A97566BFD147A3318BA9E8EA65E\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CC84F27D09408149894EC0F9A7C017F\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BDFB2601A205D344828E68FC902CAE9\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61C6C9723DC74D64EBD13F8B7F055FE9\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CDC79C82D453D74B90AD77658CE0F2B\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\862061A20CBCB5844ADD940E3D4D97F0\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92BE82F4D303DB55D901F45A13BBBC98\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D010CDB0C7815A48A7F780C5F8AACA7\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A35FB0BA5A29617419E9385DD008C23C\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB101CA032D21DE4B95FECA174B489FE\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFEEBDA8013CAA74C8052DC06F9F22D8\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C65E7C17918171F44B397779E7B97E1F\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D8695A29617419E9385DD008C23C\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC063FFF6402E614191D191F0DE5C5B4\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F18FD125C322BC84286AD21D8B685F2F\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1C8F66181D6DDD488BB6F772F71324A\ (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C\ (Iminent)
   HKLM\SOFTWARE\Wow6432Node\Loader\Iminent (Iminent)
   HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}\ (InboxToolbar)
   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Iminent\ (Iminent)
   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Registry Helper Service\ (RegistryHelper)
   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm\ (FTDownloader)
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Iminent\ (Iminent)
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Registry Helper Service\ (RegistryHelper)
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm\ (FTDownloader)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Iminent\ (Iminent)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Registry Helper Service\ (RegistryHelper)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm\ (FTDownloader)
   HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16\ (iPumper)
   HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}\ (DefaultTab)
   HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}\ (DefaultTab)
   HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16\ (iPumper)
   HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}\ (DefaultTab)
   HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}\ (DefaultTab)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16\ (iPumper)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} (Claro)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9D717F81-9148-4F12-8568-69135F087DB0} (SearchQU)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files (x86)\Mobogenie\ (Rocketfuel)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:\C:\Program Files (x86)\Mobogenie\ (Rocketfuel)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Program Files (x86)\Mobogenie\ (Rocketfuel)
   HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16\ (iPumper)

Terrenay · 03.06.2016, 08:53

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:16-05-2016
durchgeführt von Sven (Administrator) auf MirjamZanetti (03-06-2016 09:47:55)
Gestartet von C:\Users\Sven\Desktop
Geladene Profile: Mirjam Zanetti & Sven & Tim & Gast (Verfügbare Profile: Mirjam Zanetti & Sven & Tim & Gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(Malwarebytes) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Highresolution Enterprises) C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1127408 2015-10-19] (Highresolution Enterprises)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-05-06] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596504 2016-04-01] (Oracle Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Run: [HP Photosmart 7520 series (NET)] => C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] ()
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [Google Update] => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-26] (Google Inc.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [InetStat] => "C:\Users\Tim\AppData\Roaming\InetStat\inetstat.exe" /c=14
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [uTorrent] => C:\Users\Tim\AppData\Roaming\uTorrent\uTorrent.exe [1385808 2014-10-13] (BitTorrent Inc.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [Google+ Auto Backup] => C:\Users\Tim\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3746120 2014-08-13] (Google Inc.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53130368 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] ()
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\Run: [osmsg] => C:\ProgramData\WindowsMsg\osmsg.exe  /AUTORUN
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\RunOnce: [Uninstall C:\Users\Tim.MirjamZanetti\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Tim.MirjamZanetti\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64"
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\RunOnce: [Uninstall C:\Users\Tim.MirjamZanetti\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Tim.MirjamZanetti\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910"
HKU\S-1-5-21-1536315646-4119356758-1407283469-501\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\Acer.scr [456224 2010-07-29] ()
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
Startup: C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk [2014-01-14]
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{CAFC688E-6314-427C-8B2E-F1D3D855A2BF}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{CAFC688E-6314-427C-8B2E-F1D3D855A2BF}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130985414288158093&GUID=7F8C3B90-5CC0-4E52-AEC6-D920222F3C58
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130985414271397134&GUID=7F8C3B90-5CC0-4E52-AEC6-D920222F3C58
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKU\S-1-5-21-1536315646-4119356758-1407283469-501\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=130985414257806357&GUID=7F8C3B90-5CC0-4E52-AEC6-D920222F3C58
HKU\S-1-5-21-1536315646-4119356758-1407283469-501\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=AARTDF&pc=MAAR&src=IE-SearchBox
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-04-26] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-26] (Oracle Corporation)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11] (BitComet)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\ArcPluginIE.dll [2014-10-21] (Perfect World Entertainment Inc)
BHO-x32: Microsoft Web Test Recorder 10.0 Helper -> {876d9f09-c6d6-4324-a2cc-04dd9a4de12f} -> C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-30] (Microsoft Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.)
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1002 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)

FireFox:
========
FF ProfilePath: C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169
FF Homepage: google.ch
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-26] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1221171.dll [2015-10-19] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll [2012-03-29] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Perfect World Entertainment\Arc\Plugins\npArcPluginFF.dll [2014-10-21] (Perfect World Entertainment Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2013-10-08] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1000: @eximion.com/KalydoPlayer -> C:\Users\Mirjam Zanetti\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll [2013-01-14] (Eximion B.V.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1001: @eximion.com/KalydoPlayer -> C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll [2013-01-17] (Eximion B.V.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: @eximion.com/KalydoPlayer -> C:\Users\Tim\AppData\Roaming\Kalydo\KalydoPlayer\bin2\npkalydo.dll [2013-09-16] (Eximion B.V.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: @talk.google.com/GoogleTalkPlugin -> C:\Users\Tim\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-06-06] (Google)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: @talk.google.com/O1DPlugin -> C:\Users\Tim\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-06-06] (Google)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: @tools.google.com/Google Update;version=3 -> C:\Users\Tim\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: @tools.google.com/Google Update;version=9 -> C:\Users\Tim\AppData\Local\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-1536315646-4119356758-1407283469-1002: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npBitCometAgent.dll [2012-01-12] (BitComet)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2016-04-23] (Adobe Systems Inc.)
FF Extension: Rikaichan Japanese-German Dictionary File - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\rikaichan-jpde@polarcloud.com [2016-02-27]
FF Extension: Rikaichan Japanese-English Dictionary File - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\rikaichan-jpen@polarcloud.com [2016-02-27]
FF Extension: Rikaichan Japanese Names Dictionary File - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\rikaichan-jpnames@polarcloud.com [2016-03-16]
FF Extension: DownThemAll! - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2016-04-15]
FF Extension: Greasemonkey - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2016-05-16]
FF Extension: Rikaisama - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\extensions\{697F6AFE-5321-4DE1-BFE6-4471C3721BD4} [2016-06-01]
FF Extension: AdBlocker Ultimate - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\Extensions\adblockultimate@adblockultimate.net.xpi [2016-05-15]
FF Extension: NoScript - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2016-05-12]
FF Extension: Adblock Plus - C:\Users\Sven\AppData\Roaming\Mozilla\Firefox\Profiles\dk8rovbg.default-1456592647169\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-05-01]

Chrome: 
=======
CHR Profile: C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-11]
CHR Extension: (Google Docs) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-11]
CHR Extension: (Google Drive) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-11]
CHR Extension: (YouTube) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-11]
CHR Extension: (Google Search) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-01-01]
CHR Extension: (Google Sheets) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-11]
CHR Extension: (Bookmark Manager) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-06-01]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-21]
CHR Extension: (Google Wallet) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-14]
CHR Extension: (Gmail) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-01-01]
CHR Profile: C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
S4 ArcService; C:\Program Files (x86)\Perfect World Entertainment\Arc\ArcService.exe [88400 2014-10-21] (Perfect World Entertainment Inc)
S4 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
S4 DTSRVC; C:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138032 2012-04-13] (Portrait Displays, Inc.)
S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.0\App Certification Kit\fussvc.exe [139776 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [240736 2013-10-07] (WildTangent)
S4 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [419248 2016-05-06] (LogMeIn, Inc.)
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation)
S4 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [12288 2015-07-20] () [Datei ist nicht signiert]
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5206008 2013-08-25] (INCA Internet Co., Ltd.) [Datei ist nicht signiert]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1286896 2016-05-19] (Overwolf LTD)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [188072 2015-09-23] ()
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [129168 2015-11-13] (Razer Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.0\Testing\Runtimes\TAEF\Wex.Services.exe [126976 2012-07-25] (Microsoft Corporation) [Datei ist nicht signiert]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-08-07] (BlueStack Systems)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-06-03] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
R3 PdiPorts; C:\Windows\System32\DRIVERS\PdiPorts.sys [20784 2012-04-13] (Portrait Displays, Inc.)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-09-23] (Razer, Inc.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-10-16] (Anchorfree Inc.)
S3 VSPerfDrv110; C:\Program Files (x86)\Microsoft Visual Studio 11.0\Team Tools\Performance Tools\x64\VSPerfDrv110.sys [70264 2012-07-13] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-03 09:47 - 2016-06-03 09:48 - 00026108 _____ C:\Users\Sven\Desktop\FRST.txt
2016-06-03 09:30 - 2016-06-03 09:46 - 00000000 ____D C:\ProgramData\HitmanPro
2016-06-02 23:01 - 2016-06-02 23:02 - 11438608 _____ (SurfRight B.V.) C:\Users\Sven\Desktop\HitmanPro_x64.exe
2016-05-31 19:40 - 2016-05-31 19:40 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Documents\League of Legends
2016-05-31 16:09 - 2016-05-31 16:09 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\LolClient
2016-05-31 12:33 - 2016-05-31 12:34 - 02595848 _____ C:\Users\Tim.MirjamZanetti\Downloads\GEHPelevenPRE.zip
2016-05-26 21:26 - 2016-05-26 21:32 - 00014554 _____ C:\Users\Sven\Downloads\Jan Z. Flucht nach Europa (Text 2)
2016-05-26 21:22 - 2016-05-26 21:22 - 00013434 _____ C:\Users\Sven\Downloads\Jan Z. Sparen, aber wo (Thema 3)
2016-05-26 20:42 - 2016-05-26 20:42 - 02870984 _____ (ESET) C:\Users\Sven\Desktop\esetsmartinstaller_deu.exe
2016-05-26 20:22 - 2016-05-26 20:24 - 00014372 _____ C:\Users\Sven\Desktop\Fixlog.txt
2016-05-26 08:45 - 2016-05-26 08:45 - 00001383 _____ C:\Users\Public\Desktop\4Story.lnk
2016-05-25 21:00 - 2016-05-25 21:41 - 00128222 _____ C:\Users\Sven\Desktop\SystemLook.txt
2016-05-25 20:58 - 2016-05-25 20:59 - 00165376 _____ C:\Users\Sven\Desktop\SystemLook_x64.exe
2016-05-24 19:45 - 2016-05-24 19:45 - 00048433 _____ C:\Users\Mirjam Zanetti\Downloads\Wohnungsbewerbungsformular.pdf
2016-05-24 13:42 - 2016-05-24 13:42 - 00001110 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-05-24 12:33 - 2016-05-24 12:33 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\Gameforge4d
2016-05-24 12:32 - 2016-05-24 12:32 - 00001075 _____ C:\Users\Public\Desktop\Gameforge Live.lnk
2016-05-24 12:25 - 2016-05-24 12:31 - 20267568 _____ (Gameforge ) C:\Users\Tim.MirjamZanetti\Downloads\4Story_GameforgeLiveSetup.exe
2016-05-23 22:33 - 2016-05-23 22:33 - 03651136 _____ C:\Users\Sven\Desktop\AdwCleaner_5.117.exe
2016-05-23 19:42 - 2016-05-23 19:42 - 00029363 _____ C:\ComboFix.txt
2016-05-23 19:13 - 2016-05-23 19:42 - 00000000 ____D C:\Qoobox
2016-05-23 19:13 - 2016-05-23 19:42 - 00000000 ____D C:\ComboFix
2016-05-23 19:13 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2016-05-23 19:13 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2016-05-23 19:13 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2016-05-23 19:13 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2016-05-23 19:13 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2016-05-23 19:13 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2016-05-23 19:13 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2016-05-23 19:13 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2016-05-23 19:07 - 2016-05-23 19:08 - 05659526 ____R (Swearware) C:\Users\Sven\Desktop\ComboFix.exe
2016-05-17 22:37 - 2016-05-23 19:47 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-05-17 22:26 - 2016-05-17 22:26 - 01610816 _____ (Malwarebytes) C:\Users\Sven\Desktop\JRT.exe
2016-05-17 21:19 - 2016-05-23 19:42 - 00976682 _____ C:\Windows\ntbtlog.txt
2016-05-16 19:29 - 2016-05-16 19:31 - 00089955 _____ C:\Users\Sven\Downloads\Addition.txt
2016-05-16 19:25 - 2016-06-03 09:47 - 00000000 ____D C:\FRST
2016-05-16 19:25 - 2016-05-16 19:31 - 00080128 _____ C:\Users\Sven\Downloads\FRST.txt
2016-05-16 19:24 - 2016-05-16 19:24 - 02382336 _____ (Farbar) C:\Users\Sven\Desktop\FRST64.exe
2016-05-16 19:19 - 2016-05-17 22:22 - 00000000 ____D C:\Users\Sven\AppData\Local\app
2016-05-16 19:05 - 2016-05-16 19:05 - 00000000 ____D C:\found.002
2016-05-16 18:52 - 2016-05-17 12:38 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\app
2016-05-16 18:48 - 2016-05-16 18:48 - 00000000 ____D C:\Users\Public\Thunder Network
2016-05-16 18:48 - 2016-05-16 18:48 - 00000000 ____D C:\ProgramData\Thunder Network
2016-05-16 18:36 - 2016-05-16 18:33 - 00000509 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-05-13 15:47 - 2016-05-13 15:47 - 00000000 ____D C:\Program Files (x86)\Sizer
2016-05-13 15:46 - 2016-05-13 15:46 - 00001993 _____ C:\Windows\unins003.dat
2016-05-13 15:46 - 2016-05-13 15:45 - 00715038 _____ C:\Windows\unins003.exe
2016-05-13 15:46 - 2011-12-07 19:37 - 00148992 _____ ( ) C:\Windows\system32\lagarith.dll
2016-05-13 15:46 - 2011-12-07 19:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2016-05-13 15:45 - 2016-05-13 15:45 - 00443445 _____ ( ) C:\Users\Tim.MirjamZanetti\Downloads\LagarithSetup_1327.exe
2016-05-13 12:53 - 2016-05-13 12:58 - 00000000 _____ C:\Users\Tim.MirjamZanetti\Downloads\checkOS.txt
2016-05-13 12:53 - 2016-05-13 12:53 - 00207114 _____ C:\Users\Tim.MirjamZanetti\Downloads\Lagarith_1327.zip
2016-05-13 12:46 - 2016-05-13 12:46 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\Dxtory Software
2016-05-13 12:46 - 2016-05-13 12:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dxtory2.0
2016-05-13 12:46 - 2016-05-13 12:46 - 00000000 ____D C:\Program Files (x86)\ExKode
2016-05-13 12:46 - 2014-06-08 22:14 - 02610736 _____ (ExKode Co. Ltd.) C:\Windows\system32\DxtoryCodec.dll
2016-05-13 12:46 - 2014-06-08 22:14 - 02508336 _____ (ExKode Co. Ltd.) C:\Windows\SysWOW64\DxtoryCodec.dll
2016-05-12 19:34 - 2016-05-12 19:34 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-11 12:29 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 12:29 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 12:29 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 12:29 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-05-11 12:29 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-05-11 12:29 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-05-11 12:29 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 12:29 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 12:29 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-05-11 12:29 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-05-11 12:29 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-05-11 12:29 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-05-11 12:29 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-05-11 12:29 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-05-11 12:29 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 12:29 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-05-11 12:29 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-05-11 12:29 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-05-11 12:29 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 12:29 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-05-11 12:29 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-05-11 12:29 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-05-11 12:29 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-05-11 12:29 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-05-11 12:29 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-05-11 12:29 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-05-11 12:29 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2016-05-11 12:29 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-05-11 12:29 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 12:29 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 12:29 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 12:29 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2016-05-11 12:29 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2016-05-11 12:29 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 12:29 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2016-05-11 12:29 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2016-05-11 12:29 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-05-11 12:29 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 12:29 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 12:29 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 12:29 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2016-05-11 12:29 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2016-05-11 12:29 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 12:29 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2016-05-11 12:29 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 12:29 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2016-05-11 12:29 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2016-05-11 12:29 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 12:29 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2016-05-11 12:29 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2016-05-11 12:29 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2016-05-11 12:29 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2016-05-11 12:29 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2016-05-11 12:29 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2016-05-11 12:29 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 12:29 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2016-05-11 12:29 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 12:29 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 12:29 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 12:29 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 12:29 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2016-05-11 12:29 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 12:29 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 12:29 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 12:29 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 12:29 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 12:20 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-05-11 12:20 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2016-05-11 12:20 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-11 12:19 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 12:19 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 12:19 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 12:19 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-05-11 12:19 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 12:19 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-05-11 12:19 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 12:19 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-05-11 12:19 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-05-11 12:19 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2016-05-11 12:12 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 12:12 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 12:12 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 12:12 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-05-11 12:12 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-05-11 12:12 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2016-05-11 12:12 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2016-05-11 12:12 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-05-11 12:12 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-05-11 12:12 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-05-11 12:12 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-05-11 12:12 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-05-11 12:12 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2016-05-11 12:12 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-05-11 12:12 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 12:12 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 12:12 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 12:12 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-05-11 12:12 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-05-11 12:12 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2016-05-11 12:12 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2016-05-11 12:12 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2016-05-11 12:12 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2016-05-11 12:12 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2016-05-11 12:12 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2016-05-11 12:12 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2016-05-11 12:12 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 12:12 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-10 16:14 - 2016-05-10 16:14 - 00000000 ____D C:\Users\Mirjam Zanetti\AppData\Roaming\Highresolution Enterprises
2016-05-10 12:47 - 2016-05-11 12:25 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Documents\Videos zum Hochladen
2016-05-10 12:32 - 2016-05-10 12:36 - 33024937 _____ C:\Users\Tim.MirjamZanetti\Downloads\macx-video-converter-pro.dmg
2016-05-09 12:26 - 2016-05-09 12:26 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Documents\Camtasia Studio
2016-05-09 12:24 - 2016-05-09 12:24 - 00001172 _____ C:\Users\Public\Desktop\Camtasia Studio 8.lnk
2016-05-09 12:24 - 2016-05-09 12:24 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2016-05-09 12:24 - 2016-05-09 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2016-05-09 12:24 - 2016-05-09 12:24 - 00000000 ____D C:\Program Files (x86)\TechSmith
2016-05-09 12:24 - 2016-05-09 12:24 - 00000000 ____D C:\Program Files (x86)\QuickTime
2016-05-07 19:47 - 2016-05-07 19:47 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\Skinn animationen
2016-05-07 19:45 - 2014-12-02 13:06 - 00343552 _____ C:\Users\Tim.MirjamZanetti\Desktop\Minecraft Skin Viewer.exe
2016-05-07 18:36 - 2016-05-07 18:36 - 00000000 ____D C:\ProgramData\Riot Games
2016-05-07 18:16 - 2016-05-07 18:16 - 00001613 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-05-07 18:16 - 2016-05-07 18:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-05-07 18:14 - 2016-05-09 17:07 - 00002096 _____ C:\Users\Tim.MirjamZanetti\Desktop\Lightworks x64 (12.6).lnk
2016-05-07 18:14 - 2016-05-07 18:18 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\Riot Games
2016-05-07 18:09 - 2016-05-07 18:14 - 30668968 _____ (Riot Games) C:\Users\Tim.MirjamZanetti\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe
2016-05-06 21:45 - 2016-05-31 15:50 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\1.8 mods
2016-05-06 21:45 - 2016-05-09 13:00 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\1.7 mods
2016-05-06 21:01 - 2016-05-06 21:02 - 00377138 _____ C:\Users\Tim.MirjamZanetti\Downloads\14154167906_13998673914_OptiFine-HD-D5-Ultra-1.5.2.zip
2016-05-06 20:56 - 2016-05-06 20:56 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\Highresolution Enterprises
2016-05-06 15:19 - 2016-05-07 15:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-05-06 15:06 - 2016-05-06 15:06 - 01497654 _____ C:\Users\Sven\Documents\gekq89qg.bmp
2016-05-06 14:55 - 2016-05-06 14:55 - 00000000 ____D C:\Users\Sven\AppData\Roaming\Highresolution Enterprises
2016-05-06 14:55 - 2016-05-06 14:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Highresolution Enterprises
2016-05-06 14:55 - 2016-05-06 14:55 - 00000000 ____D C:\Program Files\Highresolution Enterprises
2016-05-06 14:54 - 2016-05-06 14:55 - 04324944 _____ C:\Users\Sven\Downloads\XMouseButtonControlSetup.2.12.1.exe
2016-05-05 22:37 - 2016-05-05 22:37 - 01175328 _____ C:\Users\Tim.MirjamZanetti\Downloads\Nevermine Mod Installer 1.7.10.exe
2016-05-05 20:57 - 2016-05-05 21:10 - 00002082 _____ C:\Users\Tim.MirjamZanetti\Desktop\Blender.lnk

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-06-03 09:33 - 2014-07-23 09:45 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-06-03 09:33 - 2014-04-16 22:09 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-06-03 09:23 - 2009-07-14 06:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-06-03 09:23 - 2009-07-14 06:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-06-03 09:21 - 2013-03-03 20:30 - 00000000 ____D C:\Users\Sven\AppData\Local\LogMeIn Hamachi
2016-06-03 09:18 - 2016-02-16 23:00 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-06-03 09:14 - 2016-02-16 23:00 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-06-03 09:09 - 2014-01-23 13:44 - 00000320 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2016-06-03 09:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-06-02 21:42 - 2016-01-31 15:05 - 00001149 _____ C:\Users\Tim.MirjamZanetti\Desktop\nativelog.txt
2016-06-02 21:13 - 2016-01-31 15:12 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\.minecraft
2016-06-02 20:13 - 2015-10-29 16:40 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\Skype
2016-06-02 18:48 - 2016-02-15 18:31 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\LogMeIn Hamachi
2016-06-02 18:26 - 2013-02-28 23:35 - 00000000 ____D C:\Users\Mirjam Zanetti\AppData\Local\LogMeIn Hamachi
2016-06-02 12:30 - 2014-01-26 18:18 - 00001060 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job
2016-06-01 22:00 - 2015-02-13 19:52 - 00000000 ____D C:\Users\Sven\Documents\Anki
2016-06-01 21:58 - 2016-02-28 00:56 - 00000000 ____D C:\Users\Sven\Desktop\Anki RikaiSama
2016-06-01 13:41 - 2014-10-30 13:12 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Downloads\Gameforge Live
2016-05-31 06:49 - 2012-06-24 20:13 - 00742794 _____ C:\Windows\system32\perfh010.dat
2016-05-31 06:49 - 2012-06-24 20:13 - 00152352 _____ C:\Windows\system32\perfc010.dat
2016-05-31 06:49 - 2012-06-24 20:06 - 00748104 _____ C:\Windows\system32\perfh00C.dat
2016-05-31 06:49 - 2012-06-24 20:06 - 00154994 _____ C:\Windows\system32\perfc00C.dat
2016-05-31 06:49 - 2012-06-24 19:58 - 00710502 _____ C:\Windows\system32\perfh007.dat
2016-05-31 06:49 - 2012-06-24 19:58 - 00154832 _____ C:\Windows\system32\perfc007.dat
2016-05-31 06:49 - 2009-07-14 07:13 - 03450454 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-31 06:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2016-05-26 17:16 - 2016-01-28 19:13 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-05-26 17:16 - 2012-03-23 01:43 - 00000000 ____D C:\ProgramData\Skype
2016-05-26 14:01 - 2015-04-04 14:03 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-05-26 14:01 - 2015-04-04 14:03 - 00000000 ___SD C:\Windows\system32\GWX
2016-05-26 08:45 - 2013-02-03 17:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2016-05-25 07:14 - 2013-01-28 21:28 - 00000000 ____D C:\Users\Mirjam Zanetti\AppData\Local\CrashDumps
2016-05-24 22:29 - 2014-01-01 16:21 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-05-24 17:46 - 2011-01-02 17:01 - 00001203 _____ C:\Users\Sven\Desktop\mbam.txt
2016-05-24 17:24 - 2012-03-23 02:16 - 00000000 ____D C:\Windows\OEMTemp
2016-05-24 13:42 - 2014-04-16 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2016-05-24 13:42 - 2014-04-16 22:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2016-05-24 12:32 - 2013-02-03 17:47 - 00000000 ____D C:\Program Files (x86)\GameforgeLive
2016-05-24 12:21 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-05-23 22:37 - 2016-02-14 00:17 - 00000000 ____D C:\AdwCleaner
2016-05-23 20:27 - 2012-12-02 19:53 - 00133168 _____ C:\Users\Sven\AppData\Local\GDIPFONTCACHEV1.DAT
2016-05-23 19:47 - 2012-12-01 11:20 - 00000008 __RSH C:\Users\Sven\ntuser.pol
2016-05-23 19:47 - 2012-12-01 11:20 - 00000000 ____D C:\Users\Sven
2016-05-23 19:37 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2016-05-23 19:13 - 2014-07-09 14:09 - 00000000 ____D C:\Windows\erdnt
2016-05-18 12:21 - 2014-10-28 19:04 - 00133168 _____ C:\Users\Tim.MirjamZanetti\AppData\Local\GDIPFONTCACHEV1.DAT
2016-05-18 12:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2016-05-17 14:42 - 2014-01-26 20:12 - 00002302 _____ C:\Users\Tim\Desktop\Google Chrome.lnk
2016-05-17 14:33 - 2016-02-16 23:06 - 00002356 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-17 14:33 - 2016-02-16 23:06 - 00002338 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-05-17 14:33 - 2013-06-11 21:56 - 00002289 _____ C:\Users\Gast\Desktop\Google Chrome.lnk
2016-05-17 13:35 - 2009-07-14 06:45 - 00466424 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-17 13:19 - 2014-10-28 19:03 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\VirtualStore
2016-05-16 18:53 - 2016-03-02 13:14 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\selbst gemacht Texturen
2016-05-16 18:43 - 2016-02-27 19:03 - 00002095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-15 20:49 - 2016-03-14 20:13 - 00010721 _____ C:\Users\Sven\Desktop\Kanji Plan neu.xlsx
2016-05-13 16:17 - 2016-02-22 10:33 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\OBS Aufnahmen
2016-05-13 16:17 - 2016-02-22 09:04 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\OBS
2016-05-12 23:25 - 2012-12-06 14:07 - 03383434 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2016-05-12 23:20 - 2014-12-11 15:51 - 00000000 ____D C:\Windows\system32\appraiser
2016-05-12 19:34 - 2014-07-23 09:45 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-12 19:34 - 2012-03-23 02:24 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-12 19:34 - 2012-03-23 02:24 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-12 18:29 - 2014-09-06 12:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2016-05-12 18:29 - 2014-09-06 12:00 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2016-05-11 20:09 - 2016-02-05 11:57 - 05914582 _____ C:\Users\Tim.MirjamZanetti\Desktop\faithfuleditMesucha.zip
2016-05-11 20:07 - 2014-12-21 18:02 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\paint.net
2016-05-11 19:17 - 2016-02-18 21:37 - 00000000 ____D C:\ftb
2016-05-11 15:15 - 2016-04-03 09:13 - 00000739 _____ C:\Users\Tim.MirjamZanetti\Desktop\Script codes.txt
2016-05-11 15:08 - 2010-11-21 09:17 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 14:39 - 2013-12-19 21:04 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 14:02 - 2012-11-07 14:34 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-11 12:30 - 2016-03-16 20:22 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Documents\bäh
2016-05-11 12:25 - 2015-11-08 12:58 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\HandBrake
2016-05-11 12:18 - 2015-11-08 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Handbrake
2016-05-11 10:28 - 2015-03-25 22:04 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2016-05-11 10:09 - 2014-07-29 18:35 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 10:09 - 2014-07-29 18:35 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-10 16:26 - 2015-10-24 16:33 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-05-09 12:24 - 2016-03-03 19:10 - 00000000 ____D C:\ProgramData\TechSmith
2016-05-07 19:43 - 2016-03-23 18:03 - 00555342 _____ C:\Users\Tim.MirjamZanetti\Downloads\SkinEdit_Alpha_3_pre_7.zip
2016-05-07 18:27 - 2014-01-09 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs
2016-05-07 18:14 - 2016-04-27 13:58 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\Audacity
2016-05-07 15:12 - 2016-02-27 19:03 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-05-06 19:29 - 2014-03-02 17:33 - 00000000 ____D C:\Users\Sven\AppData\Local\Paint.NET
2016-05-06 18:50 - 2014-07-29 14:22 - 00000968 _____ C:\Windows\wininit.ini
2016-05-06 16:29 - 2013-02-28 23:36 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2016-05-05 20:58 - 2016-03-08 13:57 - 00000000 ____D C:\Users\Tim.MirjamZanetti\Desktop\Neuer Ordner
2016-05-04 20:33 - 2016-03-18 18:53 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Roaming\TS3Client
2016-05-04 11:41 - 2016-03-18 18:53 - 00000000 ____D C:\Users\Tim.MirjamZanetti\AppData\Local\TeamSpeak 3 Client

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-02-16 10:13 - 2014-04-16 19:50 - 0000015 _____ () C:\Users\Sven\AppData\Roaming\Box1.txt
2014-02-16 10:13 - 2014-02-16 10:13 - 0000000 _____ () C:\Users\Sven\AppData\Roaming\Box2.txt
2014-02-16 10:13 - 2014-02-16 10:13 - 0000000 _____ () C:\Users\Sven\AppData\Roaming\Box3.txt
2014-02-16 10:13 - 2014-02-16 10:13 - 0000000 _____ () C:\Users\Sven\AppData\Roaming\Box4.txt
2014-02-16 10:13 - 2014-02-16 10:13 - 0000000 _____ () C:\Users\Sven\AppData\Roaming\Box5.txt
2014-02-16 10:13 - 2014-02-16 10:13 - 0000000 _____ () C:\Users\Sven\AppData\Roaming\Box6.txt
2015-01-18 14:51 - 2015-09-27 17:40 - 0000137 _____ () C:\Users\Sven\AppData\Roaming\Charaktere.xml
2014-02-17 22:11 - 2014-04-16 19:48 - 0000656 _____ () C:\Users\Sven\AppData\Roaming\Karteikarten v2.xml
2014-02-14 19:23 - 2015-03-26 20:51 - 0000309 _____ () C:\Users\Sven\AppData\Roaming\Karteikarten.xml
2014-02-16 21:15 - 2015-12-19 17:12 - 0000001 _____ () C:\Users\Sven\AppData\Roaming\NexusHighscore.txt
2015-10-01 16:52 - 2016-03-06 20:37 - 0004052 _____ () C:\Users\Sven\AppData\Roaming\RubiksTimes.xml
2015-03-26 20:51 - 2015-03-26 20:51 - 0000007 _____ () C:\Users\Sven\AppData\Roaming\WKcmb.txt
2013-03-06 16:03 - 2013-06-12 12:59 - 0004608 _____ () C:\Users\Sven\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-31 23:09 - 2014-01-31 23:09 - 0000092 _____ () C:\Users\Sven\AppData\Local\fusioncache.dat
2015-11-14 13:29 - 2015-11-14 13:29 - 0000845 _____ () C:\Users\Sven\AppData\Local\recently-used.xbel
2013-12-14 17:35 - 2015-02-12 20:07 - 0007598 _____ () C:\Users\Sven\AppData\Local\Resmon.ResmonCfg
2014-01-19 20:06 - 2014-01-19 20:06 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-06-29 12:55 - 2012-06-29 12:57 - 0002472 _____ () C:\ProgramData\clear.fiSDK20.log
2012-06-29 12:56 - 2012-06-29 12:56 - 0000032 _____ () C:\ProgramData\PS.log

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2013-03-25 09:03

==================== Ende von FRST.txt ============================

Terrenay · 03.06.2016, 08:54

Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016
durchgeführt von Sven (2016-06-03 09:49:13)
Gestartet von C:\Users\Sven\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2012-11-07 09:27:53)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1536315646-4119356758-1407283469-500 - Administrator - Disabled)
Gast (S-1-5-21-1536315646-4119356758-1407283469-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-1536315646-4119356758-1407283469-1009 - Limited - Enabled)
Mirjam Zanetti (S-1-5-21-1536315646-4119356758-1407283469-1000 - Administrator - Enabled) => C:\Users\Mirjam Zanetti
Sven (S-1-5-21-1536315646-4119356758-1407283469-1001 - Administrator - Enabled) => C:\Users\Sven
Tim (S-1-5-21-1536315646-4119356758-1407283469-1010 - Administrator - Enabled) => C:\Users\Tim.MirjamZanetti

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Microsoft Security Essentials (Disabled - Up to date) {768124D7-F5F7-6D2F-DDC2-94DFA4017C95}
AS: Microsoft Security Essentials (Disabled - Up to date) {CDE0C533-D3CD-62A1-E772-AFADDF863628}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\uTorrent) (Version: 3.4.2.34309 - BitTorrent Inc.)
4Story (HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\Kalydo App 4Story) (Version: 4.02.02.6 - )
4Story (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Kalydo App 4Story) (Version: 4.02.02.17 - )
4Story DE 5.1.271 (HKLM-x32\...\4Story_DE_is1) (Version: 5.1.271 - Gameforge4D GmbH)
4story_cycle (HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Kalydo App 4story_cycle) (Version: 4.01.00.22 - )
4story_cycle (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Kalydo App 4story_cycle) (Version: 4.01.00.35 - )
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version:  - )
Acer eDisplay Management (HKLM-x32\...\{A586DC50-B18D-48FB-B7CC-A598200457C2}) (Version: 1.37.007 - Portrait Displays, Inc.)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3507 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3506 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0609.2011 - Acer Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.16) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.16 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.1.171 - Adobe Systems, Inc.)
Agatha Christie - Death on the Nile (x32 Version: 2.2.0.98 - WildTangent) Hidden
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.5 - Sereby Corporation)
AMD Catalyst Install Manager (HKLM\...\{6119B3A6-3603-9695-0398-CDF2AF0A13F8}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.)
AncientMagic_New (HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\785aa0fbe9abac3c) (Version: 0.0.0.2 - AncientMagic_New)
Anki (HKLM-x32\...\Anki) (Version:  - )
Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 2.9.4272 - DsNET Corp)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avidemux 2.6 (32-bit) (HKLM-x32\...\Avidemux 2.6) (Version: 2.6.7.8981 - )
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.4.0.895 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Benutzerhandbuch - Grundlagen EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Bog) (Version:  - )
Benutzerhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Useg) (Version:  - )
Bing Bar (HKLM-x32\...\{3365E735-48A6-4194-9988-CE59AC5AE503}) (Version: 7.3.132.0 - Microsoft Corporation)
BitComet 1.36 64-bit (HKLM-x32\...\BitComet_x64) (Version: 1.36 - CometNetwork)
Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 DEU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden
Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden
Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)
Blender (HKLM-x32\...\{1115EF75-E8C1-4BA1-829F-1B8460D47701}) (Version: 2.76.2 - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Camtasia Studio 8 (HKLM-x32\...\{F6EC4C4E-C87B-4F50-851B-1C86E0C94F00}) (Version: 8.6.0.2055 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.11 - Piriform)
Chat Mapper (HKLM-x32\...\{498F0DC0-3B5E-4DC7-B571-578F61306058}) (Version: 1.7.0.0 - Urban Brain Studios, Inc.)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cinema 4D version R12 (HKLM-x32\...\{7D9D8134-9FA3-4FFF-ADA1-BF609F29997A}_is1) (Version: R12 - Salat Production)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.00.3004 - Acer Incorporated)
clear.fi SDK - MVP 2 (x32 Version: 2.0.1505 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (x32 Version: 2.0.1502 - CyberLink Corp.) Hidden
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1720_38230 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Devenv-Ressourcen für Microsoft Visual Studio 2012 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)
Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Dotfuscator and Analytics Community Edition Language Pack (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden
Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)
Druckerdeinstallation für EPSON XP-402 403 405 406 Series (HKLM\...\EPSON XP-402 403 405 406 Series) (Version:  - SEIKO EPSON Corporation)
Dxtory version 2.0.127 (HKLM-x32\...\Dxtory2.0_is1) (Version: 2.0.127 - ExKode Co. Ltd.)
eBay Worldwide (HKLM-x32\...\{D3E5A972-9A15-427D-AE78-8181A5FD943C}) (Version: 2.2.0409 - OEM)
Entity Framework Designer für Visual Studio 2012 - DEU (HKLM-x32\...\{B2BDC072-BE01-432D-B281-30891D597FBB}) (Version: 11.1.30729.00 - Microsoft Corporation)
Epson Easy Photo Print 2 (HKLM-x32\...\{30E01116-5666-4807-8EF1-D80E9FF16717}) (Version: 2.3.2.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
Epson Event Manager (HKLM-x32\...\{BECE9CCD-83F6-4BAA-9B26-227DF7D2E932}) (Version: 3.01.0000 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.5.00 - SEIKO EPSON CORPORATION)
FATE (x32 Version: 2.2.0.97 - WildTangent) Hidden
FileZilla Client 3.8.1 (HKLM-x32\...\FileZilla Client) (Version: 3.8.1 - Tim Kosse)
Final Drive: Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden
Finale 2014d DEMO (HKLM-x32\...\Finale 2014) (Version: 2014.4.5030.0 - MakeMusic)
Fotogaléria (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleri (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleriet (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Freemake Video Converter Version 4.1.7 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.7 - Ellora Assets Corporation)
Galeria de Fotografias (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotogràfica (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerija fotografija (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Gameforge Live 2.0.11 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.11 - Gameforge)
GIMP 2.8.4 (HKLM\...\GIMP-2_is1) (Version: 2.8.4 - The GIMP Team)
GLBasic SDK (HKLM-x32\...\GLBasic_SDK) (Version: 12.096 - Dream Design Entertainment)
GnuWin32: CoreUtils version 5.3.0 (HKLM-x32\...\CoreUtils-5.3.0_is1) (Version: 5.3.0 - GnuWin32)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)
Google Talk Plugin (HKLM-x32\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
Google+ Auto Backup (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Google+ Auto Backup) (Version: 1.0.26.151 - Google, Inc.)
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
hohosearch - Uninstall (HKLM-x32\...\{7DBBEBEE-C964-422D-B6BE-1866506CFC72}) (Version:  - )
Hotfix für Microsoft Visual C# 2010 Express - DEU (KB2635973) (HKLM-x32\...\{D81641E8-ABF1-3D07-803B-60E8FC619368}.KB2635973) (Version: 1 - Microsoft Corporation)
Hotkey Utility (HKLM-x32\...\Hotkey Utility) (Version: 2.05.3510 - Acer Incorporated)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.12412 - HP)
HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
HyperCam 3 (HKLM-x32\...\HyperCam 3 3.5.1211.29) (Version: 3.5.1211.29 - Solveig Multimedia)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated)
IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation)
IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version:  - )
IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version:  - )
Insaniquarium Deluxe (x32 Version: 2.2.0.97 - WildTangent) Hidden
InstallForge (HKLM-x32\...\InstallForge) (Version: 1.2.9.1 - solicus)
Interdiscount Fotoservice (HKLM-x32\...\Interdiscount Fotoservice) (Version: 4.8.6 - CEWE COLOR AG u Co. OHG)
iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 91 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418091F0}) (Version: 8.0.910.14 - Oracle Corporation)
JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden
JetBrains ReSharper 7.0.1 (HKLM-x32\...\{1322DAC7-A713-4015-8F36-035F07A06ECA}) (Version: 7.0.1098 - JetBrains Inc)
Jewel Quest Mysteries: The Seventh Gate Collector's Edition (x32 Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Kalydo Player 5.00.01 (HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\KalydoPlayer) (Version: 5.00.01 - Eximion B.V.)
Kalydo Player 6.00.00 (HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\KalydoPlayer) (Version: 6.00.00 - Eximion B.V.)
Kalydo Player 6.00.00 (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\KalydoPlayer) (Version: 6.00.00 - Eximion B.V.)
Lagarith Lossless Codec (1.3.27) (HKLM-x32\...\{F59AC46C-10C3-4023-882C-4212A92283B3}_is1) (Version:  - )
Last.fm Scrobbler 2.1.36 (HKLM-x32\...\LastFM_is1) (Version:  - Last.fm)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 12.6.0.0 - Lightworks)
LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden
LocalESPCui for de-de (x32 Version: 8.59.25584 - Microsoft) Hidden
LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.428 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.232 - LogMeIn, Inc.) Hidden
LogMeIn Hamachi (x32 Version: 2.2.0.428 - LogMeIn, Inc.) Hidden
LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.4.2 - LoiLo inc)
MAESTIA Version 201207 (HKLM-x32\...\{8F50EC3D-C482-4445-9E4B-991A766047D5}_is1) (Version: 201207 - RocWorks)
Magicka - Demo (HKLM-x32\...\Steam App 73050) (Version:  - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2656370) (HKLM-x32\...\M2656370) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version:  - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version:  - )
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (HKLM-x32\...\{98B45D1C-6EB1-460D-A87D-2B60678DC105}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft ASP.NET MVC 3 - DEU (HKLM-x32\...\{07AC2D83-E795-4AD5-970D-B9BD14A1E411}) (Version: 3.0.20105.0 - Microsoft Corporation)
Microsoft ASP.NET Web Pages - DEU (HKLM-x32\...\{93EEC4E9-EEFE-4027-ACD3-6E8C1D085975}) (Version: 1.0.20105.0 - Microsoft Corporation)
Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 1.0 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - DEU) (Version: 1.0.30319 - Microsoft Corporation)
Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Help Viewer 2.0 Language Pack - DEU (HKLM-x32\...\Microsoft Help Viewer 2.0 Language Pack - DEU) (Version: 2.0.50727 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISER) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0401-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0402-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0403-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0404-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0405-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0406-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0408-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0410-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0413-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0414-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0415-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0416-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0418-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0419-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041B-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041D-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041E-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-041F-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0424-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0816-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0C0A-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.9.218.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK - Deutsch (HKLM-x32\...\{8EA792A5-38AA-4F0E-8DFE-D1BAF1145431}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{A106D33E-6B43-42C0-9BFC-D03303261FA7}) (Version: 10.50.1447.4 - Microsoft Corporation)
Microsoft SQL Server 2012 Command Line Utilities  (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Data-Tier App Framework  (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server 2012 T-SQL Language Service  (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (HKLM\...\{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (HKLM-x32\...\{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (HKLM-x32\...\{00C84D22-DB8F-4159-BF70-682B8EA56A1E}) (Version: 11.1.20828.01 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{C668416A-9213-4058-B7F2-01A42D85559D}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation)
Microsoft Visual C# 2010 Express - DEU (HKLM-x32\...\Microsoft Visual C# 2010 Express - DEU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Runtime - 10.0.30319 (HKLM\...\{94D70749-4281-39AC-AD90-B56A0E0A402E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{aec97477-921a-4289-985a-9e29506625b6}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version:  - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (HKLM-x32\...\{69ec32be-d994-44de-9eae-6d86ced6f352}) (Version: 11.0.50727.42 - Microsoft Corporation)
Microsoft Visual Studio Ultimate 2012 (HKLM-x32\...\{ae17ae9b-af38-40d2-a194-6102c56ed502}) (Version: 11.0.50727.26 - Microsoft Corporation)
Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - DEU (HKLM-x32\...\{86756584-C41A-4CA3-B42D-4768C7720F56}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Microsoft XNA Game Studio Platform Tools (HKLM-x32\...\{89690B51-2E21-4E93-914E-F9CAC5B24A84}) (Version: 1.4.0.0 - Microsoft Corporation)
Minecraft Editor 64 bits (HKLM\...\{042CC934-54B5-4BEB-948D-F3780B2CE4D7}) (Version: 1.6.6 - Axialmedia)
MixPad Multitrack Recording Software (HKLM-x32\...\MixPad) (Version: 4.00 - NCH Software)
MonoGame (HKLM-x32\...\MonoGame) (Version: 3.0 - MonoGame)
MorphVOX Pro (HKLM-x32\...\{53AB1F25-D607-4B4D-8FD5-74E03F2F9414}) (Version: 4.4.7 - Screaming Bee)
Movavi Screen Capture Studio 7 (HKLM-x32\...\Movavi Screen Capture Studio 7) (Version: 7.1.0 - Movavi)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 46.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 46.0.1 (x86 de)) (Version: 46.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 46.0.1.5966 - Mozilla)
MP4 To MP3 Converter V3.0.5 (HKLM-x32\...\MP4 To MP3 Converter_is1) (Version:  - hxxp://www.MP4ToMP3Converter.net)
MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team)
MpcStar 5.4 (HKLM-x32\...\MpcStar) (Version: 5.4 - www.mpcstar.com)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\MyFreeCodec) (Version:  - )
MyWinLocker (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.18 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.18 - Egis Technology Inc.) Hidden
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.4.10500.1.100 - Nero AG)
Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.6.10700.5.100 - Nero AG)
Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86}) (Version: 10.6.10300 - Nero AG)
Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.6.10600.4.100 - Nero AG)
Netzwerkhandbuch EPSON XP-402 403 405 406 Series (HKLM-x32\...\EPSON XP-402 403 405 406 Series Netg) (Version:  - )
No-IP DUC (HKLM-x32\...\NoIPDUC) (Version: 4.1.1 - Vitalwerks Internet Solutions LLC)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
Online Weather (HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Online Weather) (Version: 1.0 - )
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.94.111.0 - Overwolf Ltd.)
Paint.NET v3.5.10 (HKLM\...\{529125EF-E3AC-4B74-97E6-F688A7C0F1C0}) (Version: 3.60.0 - dotPDN LLC)
Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pivot Pro Plugin (x32 Version: 9.50.110 - Portrait Displays, Inc.) Hidden
Pixsta (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Pokki_83453a3d886e527a470b5bb8291dd338de4b1e44) (Version: 3.0.3.52524 - Pokki)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98 - WildTangent) Hidden
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Pokemon Online 2.0.1 (HKLM-x32\...\{2C08D7E7-9EE1-4A08-AFE0-745F02DCD6A4}_is1) (Version:  - Dreambelievers)
POKéMON Simulator 4.5 (HKLM-x32\...\POKéGAME32) (Version: 4.5 - Birdiesoft)
Pokémon Trading Card Game Online (HKLM-x32\...\{F323157A-218F-4613-9673-F975AB9397CF}) (Version: 2.23.1 - The Pokémon Company International)
Pokki (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Pokki) (Version: 0.267.1.197 - Pokki)
Polar Bowler (x32 Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PreEmptive Analytics Client German Language Pack (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden
Prerequisites for SSDT  (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation)
Raccolta foto (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Raptr (HKLM-x32\...\Raptr) (Version:  - )
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 6.4.6.10930 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
S.K.I.L.L. - Special Force 2 (HKLM-x32\...\Special Force 2 Beta_is1) (Version:  - )
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16035.2 - Samsung Electronics Co., Ltd.) Hidden
SDK (x32 Version: 2.32.010 - Portrait Displays, Inc.) Hidden
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Sizer 3.34 (HKLM-x32\...\{DE43AA92-E8C0-4620-AFE2-FBD623C71643}) (Version: 3.3.4.0 - Brian Apps)
Skype™ 7.24 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Snap.Do Engine (HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\{fb6de4c0-4993-4821-9c14-d4e82f16a0c4}) (Version: 11.32.1.16055 - ReSoft Ltd.) <==== ACHTUNG
Software Updater (HKLM-x32\...\{7B3A525D-9D3D-4618-AE52-A31DE98C8AC3}) (Version: 4.1.4 - SEIKO EPSON CORPORATION)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Steuer 2012 13.0.3 (HKLM-x32\...\1382-8438-0790-3872) (Version: 13.0.3 - Information Factory AG)
Steuer 2013 14.0.1 (HKLM-x32\...\0166-6433-7072-1489) (Version: 14.0.1 - Information Factory AG)
Steuer 2014 15.0.4 (HKLM-x32\...\0557-1095-3602-3415) (Version: 15.0.4 - Information Factory AG)
Steuer St.Gallen 2015 nP 1.12.0 (HKLM-x32\...\2081-5105-2470-6923) (Version: 1.12.0 - Information Factory AG)
Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\...\TeamSpeak 3 Client) (Version: 3.0.13 - TeamSpeak Systems GmbH)
TeamSpeak 3 Client (HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
Torchlight (x32 Version: 2.2.0.98 - WildTangent) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0030-0000-0000-0000000FF1CE}_ENTERPRISER_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISER_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISER_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISER_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISER_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
UpdateStar (HKLM-x32\...\{4B75C1B1-D0C7-4E70-9EE4-09CE7F734B0C}) (Version: 10.0.1265 - UpdateStar GmbH)
Valokuvavalikoima (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Vegas Movie Studio HD 11.0 (HKLM-x32\...\{6E3FD14F-858B-11E1-BC4A-F04DA23A5C58}) (Version: 11.0.75 - Sony)
VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 4.31 - NCH Software)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 Update 4 (KB2707250) (HKLM-x32\...\{312d9252-c71c-4c84-b171-f4ad46e22098}) (Version: 11.0.61030 - Microsoft Corporation)
WavePad Sound Editor (HKLM-x32\...\WavePad) (Version: 6.33 - NCH Software)
WCF Data Services 5.0 (for OData v3) DEU Language Pack (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF Data Services Tools for Visual Studio 11 DEU Language Pack (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden
WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation)
weblica - 3.6.3 (HKLM-x32\...\weblica) (Version: 3.6.3 - empros gmbh)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3507 - Acer Incorporated)
WildTangent Games App (x32 Version: 4.0.10.5 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)
WinTuneUp 1.0 (HKLM-x32\...\WinTuneUp) (Version: 1.0 - WinTuneUp Apps. )
WinZip 18.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240DF}) (Version: 18.0.10661 - WinZip Computing, S.L. )
Wondershare Video Editor(Build 3.5.0) (HKLM-x32\...\Wondershare Video Editor_is1) (Version:  - Wondershare Software)
X-Mouse Button Control 2.12.1 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.12.1 - Highresolution Enterprises)
Zerius Vocoder (remove only) (HKLM-x32\...\VocoderGUI) (Version:  - )
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотогалерия (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
גלריית התמונות (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
معرض الصور (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
影像中心 (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
CustomCLSID: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\CLSID\{F7D4B6AD-AB5F-4fe8-9469-3A4697E41129}\InprocServer32 -> C:\Users\Sven\AppData\Roaming\Kalydo\KalydoPlayer\bin2\kalydoplayer64.dll (Eximion B.V.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0CCD72B3-24D9-4735-913B-6C29A494423B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {3CE40923-AC1D-4F0A-B3EC-9D65989E0DB4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {85F8BC69-CE46-4016-B752-7A19AA8B795D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {87E712A9-9E69-4B7C-9F54-5A79A168AF42} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {B48AFB8A-3786-4F8E-BDEB-E4F05F70409E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-10-19] (Piriform Ltd)
Task: {CA415D1F-7A72-4B84-8880-31511E6E3DB6} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-05-19] (Overwolf LTD)
Task: {CFC139DF-686C-45F9-A5F4-DCF738E94779} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-12] (Adobe Systems Incorporated)
Task: {E14BE1A6-9A64-40D3-940C-A52A49596E45} - System32\Tasks\HP Photo Creations Communicator => C:\ProgramData\HP Photo Creations\Communicator.exe [2014-01-23] ()
Task: {E45F4C4B-41F0-4A5B-983B-DB6815BF7334} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe [2014-01-26] (Google Inc.)
Task: {E4794289-C070-4F37-B566-94013D77DA74} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-16] (Google Inc.)
Task: {EAE46E20-611D-4E3F-A2E8-1BC4EBE690C2} - System32\Tasks\{C04C0424-B84F-4869-9FF1-4EB72C75A6E7} => Chrome.exe hxxp://ui.skype.com/ui/0/7.13.0.101/de/abandoninstall?source=lightinstaller&amp;page=tsInstall
Task: {F6E1D6E5-BA7F-4CF8-A9B3-E0570555F2CA} - System32\Tasks\{60145FA2-7B40-4FA2-9378-E17461215D59} => Chrome.exe hxxp://ui.skype.com/ui/0/7.18.0.109/de/abandoninstall?page=tsProgressBar

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1536315646-4119356758-1407283469-1002Core.job => C:\Users\Tim\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 19:38 - 2015-12-17 19:38 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-09-23 23:41 - 2015-09-23 23:41 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2014-05-01 21:29 - 2014-05-01 21:29 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2009-01-22 01:45 - 2009-01-22 01:45 - 01401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2012-06-18 17:24 - 2012-06-18 17:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2016-05-23 19:37 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Mirjam Zanetti\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Tim\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\Control Panel\Desktop\\Wallpaper -> C:\Users\Tim.MirjamZanetti\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
HKU\S-1-5-21-1536315646-4119356758-1407283469-501\Control Panel\Desktop\\Wallpaper -> C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

MSCONFIG\Services: ArcService => 3
MSCONFIG\Services: BITCOMET_HELPER_SERVICE => 3
MSCONFIG\Services: dowidoly => 2
MSCONFIG\Services: DTSRVC => 2
MSCONFIG\Services: EgisTec Ticket Service => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: hekipemezbt => 2
MSCONFIG\Services: LMIGuardianSvc => 2
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: NoIPDUCService4 => 2
MSCONFIG\Services: PdiService => 2
MSCONFIG\Services: rijufoze => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: WdiSystemHost => 3
MSCONFIG\Services: WebClient => 3
MSCONFIG\Services: Wecsvc => 3
MSCONFIG\Services: wercplsupport => 3
MSCONFIG\Services: WerSvc => 3
MSCONFIG\Services: WinDefend => 3
MSCONFIG\Services: WinHttpAutoProxySvc => 3
MSCONFIG\Services: Winmgmt => 2
MSCONFIG\Services: WinRM => 3
MSCONFIG\Services: Wlansvc => 3
MSCONFIG\Services: wlidsvc => 2
MSCONFIG\Services: wmiApSrv => 3
MSCONFIG\Services: WMPNetworkSvc => 3
MSCONFIG\Services: WPCSvc => 3
MSCONFIG\Services: WPDBusEnum => 3
MSCONFIG\Services: wscsvc => 2
MSCONFIG\Services: WSearch => 2
MSCONFIG\Services: wuauserv => 2
MSCONFIG\Services: wudfsvc => 3
MSCONFIG\Services: WwanSvc => 3
MSCONFIG\startupreg: 4StoryPrePatch => C:\Program Files (x86)\Gameforge4D\4Story\PrePatch.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DT ACR => C:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe -ACR
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: EgisTecPMMUpdate => "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"
MSCONFIG\startupreg: EgisUpdate => "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d
MSCONFIG\startupreg: EPLTarget => 
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: Hotkey Utility => C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: Norton Online Backup => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
MSCONFIG\startupreg: NUSB3MON => "C:\Program Files (x86)\ATI Technologies\AMDUSB3DeviceDetector\nusb3mon.exe"
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Pando Media Booster => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
MSCONFIG\startupreg: PivotSoftware => "C:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
MSCONFIG\startupreg: Raptr => C:\PROGRA~2\Raptr\raptrstub.exe --startup
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: UpdateStar => "C:\Users\Sven\AppData\Roaming\UpdateStar\UpdateStar.exe" -A
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{9462B2D3-A17E-4CC8-9F50-078AAC69E435}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{580618D5-E9DB-4E3B-B25E-A59EF5B51494}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{82D2F429-74BB-4C32-922E-1E7A892D765C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{AC1B5820-04E9-456F-8B76-AE66AB0F4CB6}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{7D24A664-1155-4C1C-B241-94D252E17CB8}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe
FirewallRules: [{5B815E70-F584-4277-9742-4389D1AF5CFC}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{148B2BE4-1FCC-4212-AE2C-74E2225A0A88}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe
FirewallRules: [{DC978FB0-C1DF-4D0C-A2C7-AEE4FEBF032E}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{0CF50B5A-0F19-46E4-9419-C1F5126EAA4C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe
FirewallRules: [{78A4AA6C-A139-4088-A14D-FC7D70BE525C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{C0592437-A85B-4FB8-9CAB-32B397731B9B}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe
FirewallRules: [{0EF361D3-FEE7-4075-8CEC-675F48FAE460}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\VideoPlayer.exe
FirewallRules: [{2D67AC77-B7F6-4588-A540-3D265A4CA75C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK20\MVP\MusicPlayer.exe
FirewallRules: [TCP Query User{1F3FD1FD-BD9C-4D4F-B3C2-97BE8F91A91A}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [UDP Query User{93864273-E271-41A8-8094-9140C2870233}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Block) C:\program files (x86)\epson software\event manager\eeventmanager.exe
FirewallRules: [{726EAD03-473D-4442-8554-6ED54D57CD2E}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{2552CF72-F890-4F19-A4F7-75EA026A3C43}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{DE7791AC-4518-4C0D-B5E6-F45D69B8D6B2}] => (Allow) LPort=20475
FirewallRules: [{5F33F7DE-A149-482A-AE9D-D5C6D2B1C222}] => (Allow) LPort=20475
FirewallRules: [{0463379A-5979-497D-84B2-8420FEFFA404}] => (Allow) LPort=9091
FirewallRules: [{E566F44D-7C25-44BD-907B-3365562953F0}] => (Allow) C:\Users\Tim\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{9C70EB12-27FB-405A-B9BE-1E349D01E4E5}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\WDExpress.exe
FirewallRules: [{238943EF-0A5C-4705-8C4B-F3F134AE9564}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\bin\FaxApplications.exe
FirewallRules: [{4B590E3A-3070-44A9-8599-7043D13FDB68}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\bin\DigitalWizards.exe
FirewallRules: [{8049C2E0-DEF7-4907-8D02-B31D3F3E5010}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\bin\SendAFax.exe
FirewallRules: [{818EC397-B395-4005-93DE-4ED04A396B80}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\Bin\DeviceSetup.exe
FirewallRules: [{8910907D-DB90-47F2-AFE6-902C841D3ED7}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{552C363C-A18C-47B5-8A72-BBCB79454CC3}] => (Allow) C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{707B4CA6-D4CA-4044-9693-A22EE2EE7626}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{A0FFA398-E6FC-4B47-953E-D2ADCC428CF5}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{B09BCB3E-BDEE-4D80-A800-1AA517621E65}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{34B2E825-442D-4088-9A8A-280FF08582D4}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{62F14F56-43C5-4430-A95F-D7145AD172FD}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{C21B1F76-0F02-4F0D-A909-3A5268E2EAFE}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{05930C5E-594E-44D8-81FA-8B55EA1B9A8C}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{07D73A5B-2525-4995-9E8B-A2509473A5C4}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{C315DD86-D029-494D-B1E0-D86849A50A44}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{AB7EECAB-E63E-48C4-AF91-A2FAEEC890C7}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{5E5AC77A-5FDD-4EF4-B7AF-2F0A9602786F}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{A3ED048D-448A-46B3-A06E-9F369587FF85}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{C6AF2A33-45F6-4AEC-9BFF-8157D80726D1}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{E29C1C7D-8E35-44D2-85DC-76F859A055C2}] => (Allow) C:\Program Files (x86)\Microsoft Visual Studio 11.0\Common7\IDE\devenv.exe
FirewallRules: [{954C7ADB-9796-4012-978D-70DAF07A310A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{37E6984D-15E1-4912-BEFF-6EA27C2ACC35}] => (Allow) LPort=2869
FirewallRules: [{72A7AA2D-7F88-40DE-8E26-93771149922A}] => (Allow) LPort=1900
FirewallRules: [{431410E7-1283-4A12-ABDB-9E798F0559D0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{DEE2A875-CF6A-42D7-842F-0BA46756A5CA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A3473D84-BE66-4C04-B45C-DA9F26AB2BC9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka demo\Magicka.exe
FirewallRules: [{A08355AC-BB6F-4962-B4B9-883AC93E05AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magicka demo\Magicka.exe
FirewallRules: [TCP Query User{A51E5F08-F63E-447A-A0ED-1537C6D26B71}C:\users\tim\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\tim\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{73A0DD47-C10F-43EF-9560-BA70B97B720A}C:\users\tim\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\tim\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{71698641-3411-4752-A070-C273C8ECF826}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{2A621AB4-F2A0-405A-91A4-E508877800FC}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe
FirewallRules: [{C7B2EE33-A7A5-4874-BD04-AACD119FD624}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{5C4D119C-6BD1-4087-9E04-399E0066AAA4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe
FirewallRules: [{A9BF5DA8-4DD5-48EF-BE51-9F339055AA94}] => (Allow) C:\Program Files (x86)\weblica\weblica.exe
FirewallRules: [TCP Query User{1C32A07E-0764-4714-849E-9127709524D5}C:\program files (x86)\weblica\plugins\ch.weblica.apache.core_1.3.7\apache\weblica_apache.exe] => (Allow) C:\program files (x86)\weblica\plugins\ch.weblica.apache.core_1.3.7\apache\weblica_apache.exe
FirewallRules: [UDP Query User{A489BEDA-7D2D-4369-8750-0A7F0BA8D533}C:\program files (x86)\weblica\plugins\ch.weblica.apache.core_1.3.7\apache\weblica_apache.exe] => (Allow) C:\program files (x86)\weblica\plugins\ch.weblica.apache.core_1.3.7\apache\weblica_apache.exe
FirewallRules: [TCP Query User{4B0BC44D-C4D3-415F-9D50-0320D1CF63DF}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{2A2B5DBE-4290-4371-8657-27BCFF96AA27}C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [{76E0C5DA-76AD-4ACA-BA05-09AFF3F5BA57}] => (Block) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [{D9F8508B-8AB8-43A0-86B7-3BBE11C811D6}] => (Block) C:\program files (x86)\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [TCP Query User{B6B13C98-98E8-45C1-97F1-ADB83E155563}C:\program files\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [UDP Query User{26930909-FD48-45D1-9DCD-583EA2D3F7D6}C:\program files\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{D062F345-F169-4C2D-97C7-68C50DDE0F2F}] => (Allow) C:\Users\Tim.MirjamZanetti\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [TCP Query User{42937A0C-11C4-4C5F-8C88-E917E8C9133E}C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [UDP Query User{CADEF76C-18F7-4242-A333-D9F9A290EF40}C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{6214BF3E-DEA2-4DA1-8BC0-B0450231A7BD}] => (Block) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{C5AACCD9-20B2-40EC-8907-7C5E0A45DC02}] => (Block) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [TCP Query User{D7661791-1AC4-4DEB-8D8E-747E3195D95D}C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [UDP Query User{99C8B889-1A19-4391-B5FC-032A0263B386}C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{575B3235-CE38-47F7-AABC-A954E3804BFE}] => (Block) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{BF8913AD-6D75-4819-A928-A0C2DFB85261}] => (Block) C:\users\tim.mirjamzanetti\downloads\teamspeak3-server_win32-3.0.11.4\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [TCP Query User{0D79849A-87CB-4292-BAB5-DD031FE3ADBA}C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [UDP Query User{C9B0DB83-7A59-40F9-9693-B3812AA6AB1D}C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{A01ECB6A-3DD0-4822-B2B4-D32916434CF0}] => (Block) C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{799AEF50-1F7B-4E0B-92A9-9BB78EA9AF4B}] => (Block) C:\users\tim.mirjamzanetti\downloads\ts3server\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [TCP Query User{644F6E26-BA68-4728-931A-E7B4ECD54177}C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [UDP Query User{D35CAF44-07ED-464F-A21A-416CB261E0E5}C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{79DF9FA1-0C13-44DA-8305-A04023294881}] => (Block) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [{2CFA280C-184A-4C0A-BF0B-62C111A5B551}] => (Block) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win32\ts3server_win32.exe
FirewallRules: [TCP Query User{09A80C48-34DF-4804-8C3C-73D9BEB23A80}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{58DE412E-BE98-46DA-A836-E64118BA42AA}C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{D44C6DFF-000A-415B-ADE9-05A8AD145221}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{D76097E7-7B6E-4903-9F1A-0BBE012ED859}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [TCP Query User{D7A99EB7-7181-43DE-ADF9-B4CE249EB75B}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [UDP Query User{F9E55F25-029D-42C0-9C0D-23A5BD2A5D89}C:\program files\java\jre1.8.0_66\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{139F0E93-4023-4244-BBCE-94D02D2EAFE5}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{CBFA3DAE-BAEC-4A32-9D41-B9877D141C68}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [TCP Query User{723CC834-E0CF-4C52-9AF4-A9307DF1A7BA}C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{1D73E402-DDC8-48B4-9E96-6D677ED9B7A9}C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{B55CE91E-6821-45ED-9AAA-7D4D8155187F}] => (Block) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{3529908A-203B-4B0E-9CE5-AEFECAA110EC}] => (Block) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{89EF4555-2A4F-485B-9336-0A04ED4B4DDB}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{14CAF6E5-9CEA-440C-A2C0-126B55897457}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{146C773A-1C44-4674-87F8-409A43FBCA35}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{29991097-16C7-4AFF-8EF1-7F76C7C9790C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{42C2C346-A081-4CCC-9410-FE689B82C1BF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{BE590231-FF49-4DF1-B27E-3990810CACEF}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [UDP Query User{43E8356B-D4E7-4022-AD7A-559157F3FCAC}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{9DABADB6-6476-48DC-8619-876C4608E43D}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{9CAE6AE7-2E60-4CBB-9F86-60B64D025163}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [TCP Query User{81525426-587F-4C46-B49A-7E84B9331B15}C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [UDP Query User{0BC50DC2-B972-4B2E-9F7C-80955877D179}C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [{99C531F6-4C59-4F85-B7DD-3FAF8DBAA57A}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [{386833E1-0094-4E22-841F-5D98A5C38D9F}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [TCP Query User{2C69B31C-8296-41E4-ACFA-B54C332C3F70}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{90AC6A06-A386-46A7-84C5-8FA5A8F95579}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{D492CA87-3F7F-4A89-970A-F196C0D3A958}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{A27BF2F7-A806-48DD-906C-7B41EAA73DD3}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{3D762C8F-843D-4E18-8827-81B66F1B72C6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{50C50E55-44A6-468B-B084-8C684BA0EF37}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{CFD82FE1-E14C-45AE-B064-5EF9B4E38F9E}C:\program files (x86)\anki\anki.exe] => (Allow) C:\program files (x86)\anki\anki.exe
FirewallRules: [UDP Query User{FA06B19A-77E5-4269-9C68-CD15B9667446}C:\program files (x86)\anki\anki.exe] => (Allow) C:\program files (x86)\anki\anki.exe
FirewallRules: [{5967758D-5A30-4A57-9CEC-49944729B37F}] => (Block) C:\program files (x86)\anki\anki.exe
FirewallRules: [{DBB61106-9103-4EB5-B142-6BAAD9F2E8B1}] => (Block) C:\program files (x86)\anki\anki.exe
FirewallRules: [{E4EBAD19-D98D-4A68-8928-17179F2B2B84}] => (Allow) C:\program files\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{A3BA9110-A287-4142-A675-8F6429A2F441}] => (Allow) C:\program files\java\jre1.8.0_60\bin\javaw.exe
FirewallRules: [{1F7A58EC-C141-4522-81E2-78A3D7CAAF99}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{C84053CC-6143-428A-8235-DE6A6EFBA175}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{532D0AD1-C154-4E02-A95A-E493BDC61F28}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{6062F188-855C-470E-87B1-B76BD2302474}] => (Allow) C:\program files (x86)\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{155EAD8C-C20C-47BD-A3BE-CD5037099636}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{67DCC890-4FCB-407D-B753-DF3F09DC3D55}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{75421F0A-C574-464A-8B34-9CFA8A5E9B4F}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{19E0F77A-BE06-4EA2-BD71-8222A3F00762}] => (Allow) C:\program files\java\jre1.8.0_66\bin\javaw.exe
FirewallRules: [{94347B14-8E17-4310-99FC-B96A0F398C7F}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{4CA02776-654A-477A-8040-9A73CF1D26AF}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{4A235AF6-81F2-4638-85EC-1BA6EC1A70E2}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{81E6C42E-5F7F-4191-AD34-F803F0679D92}] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe
FirewallRules: [{8A4DFF82-4453-4102-8C30-EFE83DE909E0}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{362B98DE-B0F2-4CF7-BC58-D843B8E38EC6}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{D2B6E33A-5AD0-4FB6-A3CB-D500346B366F}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{AC9CAB53-F1DE-417B-BE92-F76CDD58C9B2}] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{3D3169C4-8DDD-463D-945B-C4AEC78FB6DA}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [{3C4A2C3D-4B58-480F-B13F-6152F7EC4BFB}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\java.exe
FirewallRules: [{22F4AE47-6DF2-4514-8230-66B3D5F8BA0A}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{FAD529B9-CE0D-440D-B384-1B7126CB2C5C}] => (Allow) C:\users\tim.mirjamzanetti\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{B72EF3FA-1679-4197-AAC3-3CDAC2CF7F90}C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe
FirewallRules: [UDP Query User{3C3B4DD1-7BFD-41B1-BE44-BEE8FE7EAE72}C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe] => (Allow) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{1A92D334-CA0C-437A-A9DA-2E2F22714831}] => (Block) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe
FirewallRules: [{BC06FD6D-B17F-4571-88F4-DEF21F3EE978}] => (Block) C:\users\tim.mirjamzanetti\desktop\teamspeak3-server_win64\ts3server.exe
FirewallRules: [TCP Query User{A41D731E-F85F-42E7-B7C6-DD7874DE4E3E}C:\program files\lightworks\ntcardvt.exe] => (Allow) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [UDP Query User{DB044B71-F7BC-4E14-8B8C-EFBA02FE55A8}C:\program files\lightworks\ntcardvt.exe] => (Allow) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [{C938815B-C129-4F41-BDBB-0C77B507E310}] => (Block) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [{0D01FE75-2F3E-4117-8068-1663DA564E10}] => (Block) C:\program files\lightworks\ntcardvt.exe
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [TCP Query User{7502DF01-5692-4142-AB62-58EFA3061381}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{8481F0AA-84EE-4D8E-B5E6-7982D762E0E3}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{061CC91F-2D86-4EA1-9653-7B27D5F57831}] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{FDFA7AB4-FD42-4BA1-9F40-E5FF1F6754DF}] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{C1A739D2-C0E9-4FEC-A7BB-0B9108A2CB88}] => (Allow) LPort=8317
FirewallRules: [{1BE42650-067A-4837-A76B-870D73A2934A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{A5AFFC60-B30F-44F8-9069-58D992CB449D}] => (Allow) C:\ProgramData\download\MiniThunderPlatform.exe
FirewallRules: [{79168D0F-D48B-4C6E-8A2C-57F3C501CC82}] => (Allow) C:\ProgramData\download\MiniThunderPlatform.exe
FirewallRules: [{C442D9FB-A4C1-40A8-B16D-FB28E20DD5C8}] => (Allow) C:\Windows\Temp\download\MiniThunderPlatform.exe
FirewallRules: [{88BE814F-1F0E-4F4D-A035-91EEEC2AAF4C}] => (Allow) C:\Windows\Temp\download\MiniThunderPlatform.exe
FirewallRules: [{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
FirewallRules: [{78608174-2026-4588-B748-997D69EEE460}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe

==================== Wiederherstellungspunkte =========================

28-05-2016 14:00:14 Windows Update
29-05-2016 14:00:11 Windows Update
29-05-2016 21:40:20 Windows Update
30-05-2016 14:00:15 Windows Update
30-05-2016 22:42:43 Windows Update
31-05-2016 14:00:18 Windows Update
01-06-2016 14:00:16 Windows Update
01-06-2016 22:11:04 Windows Update
02-06-2016 14:00:18 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/03/2016 09:06:00 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (06/02/2016 10:57:57 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/02/2016 02:02:18 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.41212.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.

Error: (06/02/2016 02:02:18 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2705. The arguments are: Directory, ,

Error: (06/02/2016 02:02:17 PM) (Source: MsiInstaller) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Product: Microsoft Silverlight -- The installer has encountered an unexpected error installing this package. This may indicate a problem with this package. The error code is 2753. The arguments are: XAPAuthenticodeSIPDLL, ,

Error: (06/02/2016 11:03:19 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/02/2016 11:03:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/02/2016 11:03:16 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (06/02/2016 11:00:22 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (06/01/2016 10:11:51 PM) (Source: MsiInstaller) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Produkt: Microsoft Silverlight - Update "Microsoft Silverlight Developer Package 5.1.41212.0" konnte nicht installiert werden. Fehlercode 1603. Weitere Informationen sind in der Protokolldatei C:\Windows\TEMP\SilverlightMSI.log enthalten.


Systemfehler:
=============
Error: (06/03/2016 09:07:04 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)

Error: (06/03/2016 09:06:58 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC)

Error: (06/03/2016 09:06:00 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (06/03/2016 09:05:14 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎06.‎2016 um 23:28:50 unerwartet heruntergefahren.

Error: (06/02/2016 02:04:43 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Sicherheitsupdate für Microsoft Silverlight (KB3126036)

Error: (06/02/2016 11:14:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/02/2016 11:14:42 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Sven\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/02/2016 11:14:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (06/02/2016 11:14:41 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\Sven\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (06/02/2016 11:14:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


CodeIntegrity:
===================================
  Date: 2016-05-23 19:37:16.334
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-05-23 19:37:16.038
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-05-23 19:37:15.741
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-05-23 19:37:15.429
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2016-03-11 09:46:17.345
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-11 09:46:17.095
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-11 09:46:16.830
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-11 09:45:34.753
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-11 09:45:34.483
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-11 09:45:34.165
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Prozessor: AMD E2-3200 APU with Radeon(tm) HD Graphics
Prozentuale Nutzung des RAM: 49%
Installierter physikalischer RAM: 3540.71 MB
Verfügbarer physikalischer RAM: 1774.76 MB
Summe virtueller Speicher: 7079.6 MB
Verfügbarer virtueller Speicher: 5203.46 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:456.45 GB) (Free:145.37 GB) NTFS
Drive d: (DATA) (Fixed) (Total:456.96 GB) (Free:456.71 GB) NTFS
Drive h: () (Removable) (Total:7.47 GB) (Free:7.46 GB) FAT32

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 6CE78890)
Partition 1: (Not Active) - (Size=18 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456.5 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=457 GB) - (Type=07 NTFS)

========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 7.5 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=7.5 GB) - (Type=0C)

==================== Ende von Addition.txt ============================

Und nein, sind keine Probleme mehr vorhanden, danke

M-K-D-B · 03.06.2016, 20:41

Servus,

Zitat:

CHIP-Installer.exe

Bitte keinen Chip-Installer mehr verwenden! Bitte lesen: CHIP-Installer – was ist das?

Reste entfernen
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
CloseProcesses:
C:\ProgramData\InstallMate
C:\Users\Sven\Downloads\supereasy_driver_updater_1.1.1_7870.exe
C:\Users\Sven\Downloads\video-editor-sonc_full1107.exe
C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}
C:\Users\Tim\Downloads\cbsidlm-cbsi188-Kalydo_Player-ORG-10909421.exe
C:\Users\Tim\Downloads\wz180gev-64.msi
C:\Windows\Installer\11bfd2b.msi
C:\Program Files (x86)\WinTuneUp
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [InetStat] => "C:\Users\Tim\AppData\Roaming\InetStat\inetstat.exe" /c=14
C:\Users\Tim\AppData\Roaming\InetStat
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\Run: [osmsg] => C:\ProgramData\WindowsMsg\osmsg.exe  /AUTORUN
C:\ProgramData\WindowsMsg
FirewallRules: [{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1002 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{fb6de4c0-4993-4821-9c14-d4e82f16a0c4}
DeleteKey: HKLM\SOFTWARE\Classes\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{1B3843C0-3C67-418C-B795-0E6D07DE7A77}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415552}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416652}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{FECA4FD3-F0F9-432E-9EA4-3EC4D4AA59D2}
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}
DeleteKey: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08D05D38D7D092348847B7481BB59E27
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B4750D705E2564409328D661F3A08E1
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2100E8859603A3F4197D1B27E573732C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26E983F1377593143A37E3BA1C65CB74
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3988C1233C05DA343BC7CA3722778352
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3C036A97566BFD147A3318BA9E8EA65E
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CC84F27D09408149894EC0F9A7C017F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BDFB2601A205D344828E68FC902CAE9
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61C6C9723DC74D64EBD13F8B7F055FE9
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CDC79C82D453D74B90AD77658CE0F2B
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\862061A20CBCB5844ADD940E3D4D97F0
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92BE82F4D303DB55D901F45A13BBBC98
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D010CDB0C7815A48A7F780C5F8AACA7
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A35FB0BA5A29617419E9385DD008C23C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB101CA032D21DE4B95FECA174B489FE
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFEEBDA8013CAA74C8052DC06F9F22D8
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C65E7C17918171F44B397779E7B97E1F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D8695A29617419E9385DD008C23C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC063FFF6402E614191D191F0DE5C5B4
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F18FD125C322BC84286AD21D8B685F2F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1C8F66181D6DDD488BB6F772F71324A
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Loader\Iminent
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm
DeleteKey: HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
DeleteKey: HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9D717F81-9148-4F12-8568-69135F087DB0}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Die Fixlog von FRST gleich posten, da diese sonst mit DelFix (siehe weiter unten) automatisch entfernt wird!

Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Cleanup:
Alle Logs gepostet? Dann lade Dir bitte

DelFix herunter.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.

Hinweis:
DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:
Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

	Emsisoft	Microsoft Security Essentials	ESET

Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür.

Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:

Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.

NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.

Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.

Lade Software von einem sauberen Portal wie

.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .

Abschließend noch ein paar grundsätzliche Bemerkungen:

Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...

und/oder das Forum mit einer kleinen Spende unterstützen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Terrenay · 05.06.2016, 20:28

Code:

ATTFilter

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:16-05-2016
durchgeführt von Sven (2016-06-05 20:44:43) Run:3
Gestartet von C:\Users\Sven\Desktop
Geladene Profile: Sven (Verfügbare Profile: Mirjam Zanetti & Sven & Tim & Gast)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
C:\ProgramData\InstallMate
C:\Users\Sven\Downloads\supereasy_driver_updater_1.1.1_7870.exe
C:\Users\Sven\Downloads\video-editor-sonc_full1107.exe
C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a}
C:\Users\Tim\Downloads\cbsidlm-cbsi188-Kalydo_Player-ORG-10909421.exe
C:\Users\Tim\Downloads\wz180gev-64.msi
C:\Windows\Installer\11bfd2b.msi
C:\Program Files (x86)\WinTuneUp
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\...\MountPoints2: {2bcee651-c1d5-11e1-9a2e-806e6f6e6963} - E:\Setup.exe
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Run: [InetStat] => "C:\Users\Tim\AppData\Roaming\InetStat\inetstat.exe" /c=14
C:\Users\Tim\AppData\Roaming\InetStat
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\system: [DisableClock] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoFind] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoNetworkConnections] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoCommonGroups] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\...\Policies\Explorer: [NoViewContextMenu] 0
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\...\Run: [osmsg] => C:\ProgramData\WindowsMsg\osmsg.exe  /AUTORUN
C:\ProgramData\WindowsMsg
FirewallRules: [{927E9E4D-8506-4BBC-BAB6-5E78BBE95149}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe
FirewallRules: [{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572}] => (Allow) C:\Program Files (x86)\UCBrowser\Application\Downloader\download\MiniThunderPlatform.exe
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1000 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Toolbar: HKU\S-1-5-21-1536315646-4119356758-1407283469-1002 -> Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{fb6de4c0-4993-4821-9c14-d4e82f16a0c4}
DeleteKey: HKLM\SOFTWARE\Classes\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{1B3843C0-3C67-418C-B795-0E6D07DE7A77}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415552}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416652}
DeleteKey: HKLM\SOFTWARE\Classes\Interface\{FECA4FD3-F0F9-432E-9EA4-3EC4D4AA59D2}
DeleteKey: HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C41C967C-1BD4-404c-8393-A34F94156193}
DeleteKey: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08D05D38D7D092348847B7481BB59E27
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B4750D705E2564409328D661F3A08E1
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2100E8859603A3F4197D1B27E573732C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26E983F1377593143A37E3BA1C65CB74
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3988C1233C05DA343BC7CA3722778352
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3C036A97566BFD147A3318BA9E8EA65E
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CC84F27D09408149894EC0F9A7C017F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BDFB2601A205D344828E68FC902CAE9
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61C6C9723DC74D64EBD13F8B7F055FE9
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CDC79C82D453D74B90AD77658CE0F2B
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\862061A20CBCB5844ADD940E3D4D97F0
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92BE82F4D303DB55D901F45A13BBBC98
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D010CDB0C7815A48A7F780C5F8AACA7
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A35FB0BA5A29617419E9385DD008C23C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB101CA032D21DE4B95FECA174B489FE
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFEEBDA8013CAA74C8052DC06F9F22D8
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C65E7C17918171F44B397779E7B97E1F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D8695A29617419E9385DD008C23C
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC063FFF6402E614191D191F0DE5C5B4
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F18FD125C322BC84286AD21D8B685F2F
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1C8F66181D6DDD488BB6F772F71324A
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Loader\Iminent
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311}
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Iminent
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Registry Helper Service
DeleteKey: HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm
DeleteKey: HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}
DeleteKey: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
DeleteKey: HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01}
DeleteKey: HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9D717F81-9148-4F12-8568-69135F087DB0}
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Program Files (x86)\Mobogenie
DeleteKey: HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16
EmptyTemp:
end
         
*****************

Prozess erfolgreich geschlossen.
C:\ProgramData\InstallMate => erfolgreich verschoben
C:\Users\Sven\Downloads\supereasy_driver_updater_1.1.1_7870.exe => erfolgreich verschoben
C:\Users\Sven\Downloads\video-editor-sonc_full1107.exe => erfolgreich verschoben
C:\Users\Tim\AppData\Roaming\Mozilla\Firefox\Profiles\d90ilwv0.default\extensions\staged\{fadb7a8d-1d6c-4aed-8923-2c72b4b8346a} => erfolgreich verschoben
C:\Users\Tim\Downloads\cbsidlm-cbsi188-Kalydo_Player-ORG-10909421.exe => erfolgreich verschoben
C:\Users\Tim\Downloads\wz180gev-64.msi => erfolgreich verschoben
C:\Windows\Installer\11bfd2b.msi => erfolgreich verschoben
C:\Program Files (x86)\WinTuneUp => erfolgreich verschoben
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\system\\DisableClock => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFind => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoNetworkConnections => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoChangeStartMenu => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoCommonGroups => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoSaveSettings => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoViewContextMenu => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2bcee651-c1d5-11e1-9a2e-806e6f6e6963} => Schlüssel nicht gefunden. 
HKCR\CLSID\{2bcee651-c1d5-11e1-9a2e-806e6f6e6963} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Run\\InetStat => Wert nicht gefunden.
"C:\Users\Tim\AppData\Roaming\InetStat" => nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\system\\DisableClock => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFind => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoNetworkConnections => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoChangeStartMenu => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoCommonGroups => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoSaveSettings => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoViewContextMenu => Wert nicht gefunden.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1010\Software\Microsoft\Windows\CurrentVersion\Run\\osmsg => Wert nicht gefunden.
"C:\ProgramData\WindowsMsg" => nicht gefunden.
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{927E9E4D-8506-4BBC-BAB6-5E78BBE95149} => Wert erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECBF61AE-E74B-4CD6-BFD6-39D74CD46572} => Wert erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Wert nicht gefunden.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Wert nicht gefunden.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{fb6de4c0-4993-4821-9c14-d4e82f16a0c4} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Classes\AppID\{C41C967C-1BD4-404c-8393-A34F94156193} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{1B3843C0-3C67-418C-B795-0E6D07DE7A77} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415552} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416652} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Interface\{FECA4FD3-F0F9-432E-9EA4-3EC4D4AA59D2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{C41C967C-1BD4-404c-8393-A34F94156193} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08D05D38D7D092348847B7481BB59E27 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B4750D705E2564409328D661F3A08E1 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2100E8859603A3F4197D1B27E573732C => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\26E983F1377593143A37E3BA1C65CB74 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3988C1233C05DA343BC7CA3722778352 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3C036A97566BFD147A3318BA9E8EA65E => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CC84F27D09408149894EC0F9A7C017F => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BDFB2601A205D344828E68FC902CAE9 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\61C6C9723DC74D64EBD13F8B7F055FE9 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CDC79C82D453D74B90AD77658CE0F2B => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\862061A20CBCB5844ADD940E3D4D97F0 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92BE82F4D303DB55D901F45A13BBBC98 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D010CDB0C7815A48A7F780C5F8AACA7 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A35FB0BA5A29617419E9385DD008C23C => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB101CA032D21DE4B95FECA174B489FE => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFEEBDA8013CAA74C8052DC06F9F22D8 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C65E7C17918171F44B397779E7B97E1F => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB13D8695A29617419E9385DD008C23C => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC063FFF6402E614191D191F0DE5C5B4 => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F18FD125C322BC84286AD21D8B685F2F => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1C8F66181D6DDD488BB6F772F71324A => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F71371A90E93D605C8B0A71F163F625C => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Loader\Iminent => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7DFDE1A-30B3-43C9-82C4-92D3A5789311} => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Iminent => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Registry Helper Service => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Iminent => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Registry Helper Service => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm => Schlüssel erfolgreich entfernt
HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Iminent => Schlüssel nicht gefunden. 
HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Registry Helper Service => Schlüssel nicht gefunden. 
HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm => Schlüssel nicht gefunden. 
HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16 => Schlüssel erfolgreich entfernt
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01} => Schlüssel erfolgreich entfernt
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} => Schlüssel erfolgreich entfernt
HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16 => Schlüssel nicht gefunden. 
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{7F6AFBF1-E065-4627-A2FD-810366367D01} => Schlüssel nicht gefunden. 
HKU\S-1-5-18\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16 => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9D717F81-9148-4F12-8568-69135F087DB0} => Schlüssel nicht gefunden. 
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files (x86)\Mobogenie => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Program Files (x86)\Mobogenie => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:\C:\Program Files (x86)\Mobogenie => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QSqlDriverFactoryInterface:\C:\Program Files (x86)\Mobogenie => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Program Files (x86)\Mobogenie => konnte nicht entfernt werden im ersten Versuch (ErrorCode: C0000121), siehe nächste Zeile.
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Program Files (x86)\Mobogenie => Schlüssel erfolgreich entfernt
HKU\S-1-5-21-1536315646-4119356758-1407283469-1001_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\ElectroLyrics-16 => Schlüssel nicht gefunden. 
EmptyTemp: => 1.9 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 20:45:34 ====

Code:

ATTFilter

# DelFix v1.013 - Datei am 05/06/2016 um 20:54:09 erstellt
# Aktualisiert am 17/04/2016 von Xplode
# Benutzer : Sven - MirjamZanetti
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

~ Aktiviere die Benutzerkontensteuerung ... OK

~ Entferne die Bereinigungsprogramme ...

Gelöscht : C:\Qoobox
Gelöscht : C:\Combofix
Gelöscht : C:\FRST
Gelöscht : C:\AdwCleaner
Gelöscht : C:\ComboFix.txt
Gelöscht : C:\Users\Sven\Desktop\Addition.txt
Gelöscht : C:\Users\Sven\Desktop\AdwCleaner_5.117.exe
Gelöscht : C:\Users\Sven\Desktop\ComboFix.exe
Gelöscht : C:\Users\Sven\Desktop\esetsmartinstaller_deu.exe
Gelöscht : C:\Users\Sven\Desktop\Fixlog.txt
Gelöscht : C:\Users\Sven\Desktop\FRST.txt
Gelöscht : C:\Users\Sven\Desktop\FRST64.exe
Gelöscht : C:\Users\Sven\Desktop\JRT.exe
Gelöscht : C:\Users\Sven\Desktop\SystemLook.txt
Gelöscht : C:\Users\Sven\Desktop\SystemLook_x64.exe
Gelöscht : C:\Users\Sven\Desktop\TFC.exe
Gelöscht : C:\Users\Sven\Downloads\Addition.txt
Gelöscht : C:\Users\Sven\Downloads\AdwCleaner_5.033.exe
Gelöscht : C:\Users\Sven\Downloads\FRST.txt
Gelöscht : C:\Windows\grep.exe
Gelöscht : C:\Windows\PEV.exe
Gelöscht : C:\Windows\NIRCMD.exe
Gelöscht : C:\Windows\MBR.exe
Gelöscht : C:\Windows\SED.exe
Gelöscht : C:\Windows\SWREG.exe
Gelöscht : C:\Windows\SWSC.exe
Gelöscht : C:\Windows\SWXCACLS.exe
Gelöscht : C:\Windows\Zip.exe
Gelöscht : HKLM\SOFTWARE\Swearware
Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

~ Erstelle ein Backup der Registrierungsdatenbank ... OK

~ Lösche die Wiederherstellungspunkte ...

Gelöscht : RP #1419 [Windows Update | 05/30/2016 20:42:43]
Gelöscht : RP #1420 [Windows Update | 05/31/2016 12:00:18]
Gelöscht : RP #1421 [Windows Update | 06/01/2016 12:00:16]
Gelöscht : RP #1422 [Windows Update | 06/01/2016 20:11:04]
Gelöscht : RP #1423 [Windows Update | 06/02/2016 12:00:18]
Gelöscht : RP #1424 [Windows Update | 06/03/2016 12:00:13]
Gelöscht : RP #1425 [Windows Update | 06/04/2016 09:16:14]
Gelöscht : RP #1426 [Windows Update | 06/04/2016 12:00:21]
Gelöscht : RP #1427 [Windows Update | 06/05/2016 12:00:15]

Ein neuer Wiederherstellungspunkt wurde erstellt !

~ Stelle die Systemeinstellungen wieder her ... OK

########## - EOF - ##########

Habe alles geupdated und alles getan, was du empfohlen hast.
Habe jetzt keine Probleme mehr.

VIELEN DANK!

M-K-D-B · 06.06.2016, 15:07

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Windows 7 Werbung bei Systemstart, Popups während Benutzung, Werbung im Internet

Log-Analyse und Auswertung: Windows 7 Werbung bei Systemstart, Popups während Benutzung, Werbung im Internet