| |
| |||||||
Log-Analyse und Auswertung: BKA-Trojaner, und keine Ahnung wie es läuftWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
10.09.2012, 13:31
| #1 |
 |  BKA-Trojaner, und keine Ahnung wie es läuft Hallo liebe Forenmitglieder und Helfer, ich habe mir gestern abend dann auch diesen BKA Trojaner gefangen. Leider muss ich gestehen, das ich reiner Anwender bin, und nicht viel Ahnung habe. Soweit ich mich hier im Forum informiert habe, muss ich einen OTL Scan machen. Meine Frage wie funktioniert das? Wenn ich den Rechner hochfahre kann ich nix mehr machen ausser Neustart oder Runterfahren. Wie kann ich da nen OTL.exe downloaden? Eine Kollegin sagte mir das es eventuell funktioniert wenn ich den Rechner im "abgesicherten Modus" starte. Alternativ habe ich auch noch einen zweiten laptop, den ich natürlich auch noch ans Netz hängen kann. Weiß aber nicht ob das sinn macht. Ich wäre euch für eure Hilfe sehr dankbar. Viele Grüße Sven |
|
11.09.2012, 01:22
| #2 |
| /// Helfer-Team  | BKA-Trojaner, und keine Ahnung wie es läuft Von einem sauberen PC OTL.exe runterladen auf USB Stick. Infizierten Rechner ohne Internet im abgesicherten Modus starten. OTL.exe auf Desktop kopieren und Log erstellen. Systemscan mit OTL (bebilderte Anleitung)
__________________ |
|
12.09.2012, 08:43
| #3 |
| | BKA-Trojaner, und keine Ahnung wie es läuft Guten Morgen,
__________________entschuldigung das ich erst jetzt dazu komme, war die letzten zwei Tage aber erst zu spät zu Hause. So ich hoffe das funktioniert jetzt, Scan habe ich gemacht.OTL Logfile: Code:
ATTFilter OTL logfile created on: 9/12/2012 9:21:22 AM - Run 1 OTL by OldTimer - Version 3.2.61.3 Folder = C:\Users\Sven\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7.91 Gb Total Physical Memory | 6.82 Gb Available Physical Memory | 86.23% Memory free 15.82 Gb Paging File | 14.76 Gb Available in Paging File | 93.28% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 230.00 Gb Total Space | 106.57 Gb Free Space | 46.34% Space Free | Partition Type: NTFS Drive D: | 343.41 Gb Total Space | 315.61 Gb Free Space | 91.91% Space Free | Partition Type: NTFS Drive E: | 336.68 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Drive F: | 3.76 Gb Total Space | 3.20 Gb Free Space | 85.18% Space Free | Partition Type: FAT32 Computer Name: ***** | User Name: ***** | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Sven\Desktop\OTL.exe (OldTimer Tools) ========== Modules (No Company Name) ========== ========== Services (SafeList) ========== SRV:64bit: - (btwdins) -- C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Broadcom Corporation.) SRV:64bit: - (TurboBoost) -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation) SRV:64bit: - (wlcrasvc) -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation) SRV:64bit: - (Samsung UPD Service) -- C:\Windows\SysNative\SUPDSvc.exe (Samsung Electronics CO., LTD.) SRV:64bit: - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation) SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies) SRV - (TeamViewer7) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH) SRV - (Sony Ericsson PCCompanion) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software) SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe (Symantec Corporation) SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.) SRV - (SeaPort) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation) SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation) SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation) SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) SRV - (CLKMSVC10_38F51D56) -- C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe (CyberLink) SRV - (NOBU) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (YahooAUService) -- C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.) ========== Driver Services (SafeList) ========== DRV:64bit: - (fssfltr) -- C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation) DRV:64bit: - (Fs_Rec) -- C:\windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation) DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation) DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys (Symantec Corporation) DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys (Symantec Corporation) DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys (Symantec Corporation) DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys (Symantec Corporation) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys (Symantec Corporation) DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys (Symantec Corporation) DRV:64bit: - (nvpciflt) -- C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation) DRV:64bit: - (nusb3xhc) -- C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation) DRV:64bit: - (nusb3hub) -- C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation) DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation) DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek ) DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation) DRV:64bit: - (clwvd) -- C:\Windows\SysNative\drivers\clwvd.sys (CyberLink Corporation) DRV:64bit: - (IntcDAud) -- C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation) DRV:64bit: - (TurboB) -- C:\Windows\SysNative\drivers\TurboB.sys (Intel(R) Corporation) DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation) DRV:64bit: - (BTWAMPFL) -- C:\Windows\SysNative\drivers\btwampfl.sys (Broadcom Corporation.) DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys (Broadcom Corporation.) DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys (Broadcom Corporation.) DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation) DRV:64bit: - (ETD) -- C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.) DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys (Broadcom Corporation.) DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation) DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys (Broadcom Corporation.) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV:64bit: - (SABI) -- C:\Windows\SysNative\drivers\SABI.sys (SAMSUNG ELECTRONICS) DRV:64bit: - (KMWDFILTER) -- C:\Windows\SysNative\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider) DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110922.024\EX64.SYS (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20110922.024\ENG64.SYS (Symantec Corporation) DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110922.030\IDSviA64.sys (Symantec Corporation) DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110909.001\BHDrvx64.sys (Symantec Corporation) DRV - (rtport) -- C:\Windows\SysWOW64\drivers\rtport.sys (Windows (R) 2003 DDK 3790 provider) DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Program Files (x86)\Yahoo!\Shared\npYState.dll (Yahoo! Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon) FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC) FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sven\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2011/10/01 09:12:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn_2011_7_12_1 [2012/09/09 23:44:52 | 000,000,000 | ---D | M] ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms} CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms} CHR - homepage: hxxp://www.google.com/ CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\gcswf32.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\Application\17.0.963.56\pdf.dll CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll CHR - plugin: WordCaptureX (Enabled) = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\npWCX.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonEU\NGM\npNxGameeu.dll CHR - plugin: Nexon Game Controller (Enabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll CHR - plugin: Unity Player (Enabled) = C:\Users\Sven\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\ CHR - Extension: Google-Suche = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\ CHR - Extension: Skype Click to Call = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\ CHR - Extension: Word CaptureX Extension = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjdepfkicdcciagbigfcmdhknnoaaegf\1.1_0\ CHR - Extension: Google Mail = C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation) O2 - BHO: (Samsung BHO Class) - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll () O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc) O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.) O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation) O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe () O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{4C998393-5696-6508-B037-E626C5D685F3}] C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe () O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe () O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [huapcfpuomvvpnj] C:\ProgramData\huapcfpu.exe () O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [kbdapiserv] C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll () O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe (NEXON Inc.) O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet File not found O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson) O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Userinit] C:\Users\Sven\AppData\Roaming\appconf32.exe () O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8:64bit: - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm () O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:64bit: - Extra Button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9:64bit: - Extra 'Tools' menuitem : @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra Button: Samsung AnyWeb Print - {328ECD19-C167-40eb-A0C7-16FE7634105E} - C:\Program Files\Samsung AnyWeb Print\W2PBrowser.dll () O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Senden an Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O9 - Extra 'Tools' menuitem : Senden an &Bluetooth-Gerät... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm () O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites) O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in ) O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in ) O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: soe.com ([]* in Trusted sites) O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: sony.com ([]* in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E9708CBF-106F-4D1A-A98D-C33CB40DE433}: DhcpNameServer = 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC904E33-8639-4D89-824C-AC2E96468948}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - AppInit_DLLs: (C:\windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation) O20 - AppInit_DLLs: (C:\windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\windows\SysWow64\userinit.exe (Microsoft Corporation) O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008/03/13 20:39:10 | 000,000,061 | R--- | M] () - E:\autorun.inf -- [ CDFS ] O32 - AutoRun File - [2011/12/16 17:48:12 | 000,000,101 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ] O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Einstiegsseite.exe -- [2009/12/10 17:43:32 | 001,569,744 | R--- | M] (HanseNet Telekommunikation GmbH) O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell - "" = AutoRun O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell\AutoRun\command - "" = F:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012/09/12 09:20:15 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe [2012/09/09 23:28:47 | 000,000,000 | ---D | C] -- C:\ProgramData\urkvkanuoxokarg [2012/09/09 12:03:12 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{DBF127D1-DE80-4AC9-8036-5893E47EE261} [2012/09/09 00:02:48 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{9F7901AD-AC8C-4FDC-8DBA-99A9729BAF5D} [2012/09/08 09:15:51 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online [2012/09/08 09:14:55 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{4C064FCC-E223-4C9F-B694-83D009449D9B} [2012/09/07 16:06:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0BD85775-BDA6-4C06-95BD-CF41764C69DD} [2012/09/07 12:21:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{EED70098-F0E8-4408-8D66-C2FD5C70C106} [2012/09/07 07:07:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{5F59D1DF-A803-445F-86EE-4A6ABC806BC0} [2012/09/06 17:31:15 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{5F4FF0DB-2EB8-4EBB-A80F-DE7141EC449D} [2012/09/05 20:34:05 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{FBA21B49-767C-4771-81F3-989957411704} [2012/09/04 22:45:36 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F064D0C6-8B83-4818-A263-2C446D3E3372} [2012/09/03 17:42:56 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{C23EADB2-757C-4AE7-B476-AF1166E461B3} [2012/09/03 08:19:15 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{B9264354-A820-467C-AF6D-6EBB2A3CE227} [2012/09/02 03:28:13 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{4E526F44-00BF-4AEC-A049-310661C00985} [2012/09/01 12:29:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{7D88B79B-CC07-4DD0-855B-DAE8A41E8C38} [2012/09/01 07:38:30 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\Mfc42loc.dll [2012/09/01 07:38:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks [2012/09/01 07:38:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bethesda Softworks [2012/09/01 07:25:20 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{3F3921C4-ED9E-47DB-AE97-A9CBC100BB25} [2012/08/31 17:39:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{32D0AF8B-0C08-4DF7-B737-0482CA912417} [2012/08/30 17:53:32 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{99DFE1BD-2D82-4E91-BC53-7E4E831F7322} [2012/08/28 18:40:53 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6B6A0121-C931-4F43-850C-81A5A05CD330} [2012/08/27 19:36:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{2B73406A-55E5-4CB8-AC60-3D2E30D2345D} [2012/08/26 15:09:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{B3020C5C-BD05-497C-96FA-5A970B3E151C} [2012/08/26 08:55:06 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{7F04B80D-97D8-429C-8E4A-4E0AD53B73F8} [2012/08/25 23:07:40 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{BEE152AE-345F-4AEB-95A5-1518CE4F0123} [2012/08/25 17:13:04 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\WildTangent [2012/08/25 16:53:19 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Microsoft Games [2012/08/25 16:52:09 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E12EA5E0-F099-4645-A0AD-FF64D4EB2001} [2012/08/25 15:19:26 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{2FA54C86-2C32-4248-9D91-9BC301A51ED3} [2012/08/25 14:57:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{CA936F18-DBC3-4193-A648-2F9D528EAF49} [2012/08/25 12:55:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Isle [2012/08/25 12:55:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Black Isle [2012/08/25 12:38:53 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{1102379D-EF8F-462A-A27B-D196D515C034} [2012/08/25 12:25:22 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Sony [2012/08/25 12:24:46 | 000,000,000 | ---D | C] -- C:\Users\Sven\Podcasts [2012/08/25 12:24:46 | 000,000,000 | ---D | C] -- C:\Users\Sven\Documents\Media Go [2012/08/25 12:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony [2012/08/25 12:24:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Sony Shared [2012/08/25 12:24:22 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Downloaded Installations [2012/08/25 12:24:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Corporation [2012/08/25 12:24:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony [2012/08/25 12:24:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2012/08/25 12:23:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2012/08/25 12:23:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2012/08/25 12:23:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2012/08/25 12:23:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2012/08/25 12:23:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\Apple [2012/08/25 12:23:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2012/08/25 12:21:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Media Go Install [2012/08/25 12:20:59 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Roaming\Sony [2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Sony Ericsson [2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony Ericsson [2012/08/25 12:19:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sony Ericsson [2012/08/25 11:46:48 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{21874DB6-7A85-465C-96BB-38186F228419} [2012/08/25 08:00:51 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0AA2E4F4-7BFE-499D-9747-C19063EC675B} [2012/08/24 18:53:04 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{A6C72AF9-4943-4AB9-BC11-78B5B62CA537} [2012/08/23 18:35:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{DA3860EF-3CEB-4B5A-8B3D-43DB2F0ED6F0} [2012/08/22 20:41:11 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{CB4DE8FD-8BA1-4244-A20F-D9513AC8B2D0} [2012/08/21 16:51:11 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6EAAD736-3CA7-4282-A589-DB83D1595FE0} [2012/08/20 17:17:23 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6F6AE82B-9B92-4EFB-802E-36569991F96F} [2012/08/19 14:55:34 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{0CCCCCB5-BF84-443C-B565-D8A6C7751662} [2012/08/19 06:34:38 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F72F79EC-FE5D-458E-BE5A-B3C68C917EB6} [2012/08/18 22:11:30 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E9B0E67C-8553-4F8B-BD92-E2B0CA9B7824} [2012/08/18 22:11:19 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{38621D50-6C9E-4685-95CF-AFE4A94F93C8} [2012/08/18 20:09:43 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{C4825CA9-E4D7-42DA-8439-D246729E05EE} [2012/08/18 20:09:32 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E61F70A7-E9D9-45A1-A4D7-2551AEC560CC} [2012/08/18 17:45:49 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{FB3D0793-C91D-404F-B426-AE3642ECE9CB} [2012/08/18 17:45:37 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F3D9409E-8C64-4A68-81F4-055AFFD87315} [2012/08/18 09:13:23 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F5237665-2AE5-4D83-B6A7-B4DE2D547201} [2012/08/18 02:43:01 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{769B5498-5EC4-4350-BC1A-C18DAAC35010} [2012/08/17 20:49:55 | 000,217,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\strmdll.dll [2012/08/17 20:49:55 | 000,182,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\dxtmsft3.dll [2012/08/17 20:49:55 | 000,155,408 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\LMRT.dll [2012/08/17 20:49:55 | 000,140,800 | ---- | C] (The Duck Corporation) -- C:\windows\SysWow64\tm20dec.ax [2012/08/17 20:49:55 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\unam4ie.exe [2012/08/17 20:49:55 | 000,038,160 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\LMRTREND.dll [2012/08/17 20:49:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call To Power 2 [2012/08/17 20:49:53 | 001,088,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\danim.dll [2012/08/17 20:49:53 | 000,194,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\qcut.dll [2012/08/17 20:49:53 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mciqtz.drv [2012/08/17 20:49:53 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf32.dll [2012/08/17 20:49:53 | 000,002,272 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf16.dll [2012/08/17 20:46:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Activision [2012/08/17 20:38:59 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{417BE153-BBD7-4F79-8BE4-8BD33FBB81C9} [2012/08/17 18:45:05 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{6F117DCE-BF8E-40A6-A88B-174A075AD19E} [2012/08/16 19:43:24 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{A559B2B4-B4DA-41CB-BE67-886A230239FC} [2012/08/16 19:43:10 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{750BEFC2-886A-4108-B122-FFD89D1978D1} [2012/08/15 23:24:53 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\mshtmled.dll [2012/08/15 23:24:53 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\mshtmled.dll [2012/08/15 23:24:52 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\url.dll [2012/08/15 23:24:52 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\url.dll [2012/08/15 23:24:52 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieui.dll [2012/08/15 23:24:51 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript9.dll [2012/08/15 23:24:51 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\inetcpl.cpl [2012/08/15 23:24:51 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\inetcpl.cpl [2012/08/15 23:24:51 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieui.dll [2012/08/15 23:24:51 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\ieUnatt.exe [2012/08/15 23:24:51 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\ieUnatt.exe [2012/08/15 23:24:50 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\jscript.dll [2012/08/15 23:24:50 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\jscript.dll [2012/08/15 16:56:04 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\srcore.dll [2012/08/15 16:55:37 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\win32spl.dll [2012/08/15 16:55:36 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\win32spl.dll [2012/08/15 16:55:36 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\windows\splwow64.exe [2012/08/15 16:50:28 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\netapi32.dll [2012/08/15 16:50:28 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\browcli.dll [2012/08/15 16:50:28 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\windows\SysWow64\browcli.dll [2012/08/15 16:50:14 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\windows\SysNative\localspl.dll [2012/08/15 16:32:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{E9576017-9020-445A-8BB3-F9AC917EA871} [2012/08/15 16:32:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F6537DA0-27F1-4334-9263-2E26F7F6D9AA} [2012/08/15 14:06:55 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{8EE2F7A6-0F9F-451C-AF19-D2943BBEA76E} [2012/08/15 14:06:43 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{F2B88BB9-FFD6-4C16-9F5B-1F170E84FAE2} [2012/08/15 10:54:35 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{61F725DA-BDB9-4975-9724-70DB26AB52DC} [2012/08/15 10:54:21 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{BBEC2F38-4BCD-4E2E-9CD2-48B5ECDE22CE} [2012/08/15 06:40:47 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{88455F34-53CE-4268-9D17-D9630DFC879C} [2012/08/14 22:21:50 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{8338CE03-EFA7-405C-8417-A00D1747474F} [2012/08/14 22:20:41 | 000,000,000 | ---D | C] -- C:\Users\Sven\AppData\Local\{945D24C1-579B-4F4F-B6AF-9CA0A606508E} [2011/12/23 14:12:29 | 000,351,184 | ---- | C] (Adobe Systems, Incorporated) -- C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll [1 C:\Users\Sven\AppData\Roaming\*.tmp files -> C:\Users\Sven\AppData\Roaming\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012/09/12 09:19:08 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat [2012/09/12 09:18:57 | 4201,766,911 | -HS- | M] () -- C:\hiberfil.sys [2012/09/11 09:44:30 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\Sven\Desktop\OTL.exe [2012/09/09 23:50:51 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012/09/09 23:50:51 | 000,020,992 | -H-- | M] () -- C:\windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012/09/09 23:28:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\bdccfjlrwixtvuw [2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\Users\Sven\ms.exe [2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\ProgramData\huapcfpu.exe [2012/09/08 09:15:51 | 000,001,968 | ---- | M] () -- C:\Users\Sven\Desktop\Drakensang Online.lnk [2012/09/01 07:43:30 | 000,001,960 | ---- | M] () -- C:\Users\Public\Desktop\The Elder Scrolls Construction Set.lnk [2012/09/01 07:38:27 | 000,001,038 | ---- | M] () -- C:\Users\Public\Desktop\Morrowind.lnk [2012/08/25 12:24:36 | 000,001,885 | ---- | M] () -- C:\Users\Public\Desktop\Media Go.lnk [2012/08/25 12:24:02 | 000,001,845 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2012/08/25 12:19:06 | 000,002,264 | ---- | M] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2012/08/25 12:17:52 | 000,000,000 | -H-- | M] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012/08/17 20:49:53 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf32.dll [2012/08/17 20:49:53 | 000,002,272 | ---- | M] (Microsoft Corporation) -- C:\windows\SysWow64\w95inf16.dll [2012/08/16 19:42:21 | 000,276,240 | ---- | M] () -- C:\windows\SysNative\FNTCACHE.DAT [1 C:\Users\Sven\AppData\Roaming\*.tmp files -> C:\Users\Sven\AppData\Roaming\*.tmp -> ] ========== Files Created - No Company Name ========== [2012/09/09 23:28:47 | 000,054,272 | ---- | C] () -- C:\ProgramData\huapcfpu.exe [2012/09/09 23:28:34 | 000,000,051 | ---- | C] () -- C:\ProgramData\bdccfjlrwixtvuw [2012/09/09 23:28:32 | 000,054,272 | ---- | C] () -- C:\Users\Sven\ms.exe [2012/09/01 07:43:30 | 000,001,960 | ---- | C] () -- C:\Users\Public\Desktop\The Elder Scrolls Construction Set.lnk [2012/09/01 07:38:27 | 000,001,038 | ---- | C] () -- C:\Users\Public\Desktop\Morrowind.lnk [2012/08/25 12:24:36 | 000,001,885 | ---- | C] () -- C:\Users\Public\Desktop\Media Go.lnk [2012/08/25 12:24:02 | 000,001,845 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2012/08/25 12:23:35 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2012/08/25 12:19:06 | 000,002,264 | ---- | C] () -- C:\Users\Public\Desktop\Sony Ericsson PC Companion 2.0.lnk [2012/08/25 12:17:52 | 000,000,000 | -H-- | C] () -- C:\windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2012/08/17 20:49:53 | 000,010,240 | ---- | C] () -- C:\windows\SysWow64\vidx16.dll [2012/08/17 20:49:53 | 000,005,672 | ---- | C] () -- C:\windows\SysWow64\quartz.vxd [2012/05/29 11:21:15 | 000,000,013 | ---- | C] () -- C:\Users\Sven\AppData\Roaming\urhtps.dat [2012/04/10 00:40:15 | 000,073,703 | ---- | C] () -- C:\Users\Sven\geometry.jpg [2012/04/10 00:40:15 | 000,053,859 | ---- | C] () -- C:\Users\Sven\malb.jpg [2012/04/10 00:40:15 | 000,039,497 | ---- | C] () -- C:\Users\Sven\dracula.jpg [2012/04/10 00:40:15 | 000,035,585 | ---- | C] () -- C:\Users\Sven\christ,dress.jpg [2012/04/10 00:40:15 | 000,033,041 | ---- | C] () -- C:\Users\Sven\malb6.jpg [2012/04/10 00:40:15 | 000,028,377 | ---- | C] () -- C:\Users\Sven\DC17560.jpg [2012/04/10 00:40:15 | 000,013,255 | ---- | C] () -- C:\Users\Sven\DC20737.jpg [2012/04/10 00:39:30 | 000,095,038 | ---- | C] () -- C:\Users\Sven\pentalfa.jpg [2012/04/10 00:39:30 | 000,058,381 | ---- | C] () -- C:\Users\Sven\my paint ball gun =).jpg [2012/04/10 00:39:30 | 000,045,500 | ---- | C] () -- C:\Users\Sven\promotion.jpg [2012/04/10 00:39:30 | 000,042,322 | ---- | C] () -- C:\Users\Sven\petalouditsa!.jpg [2012/04/10 00:39:30 | 000,033,854 | ---- | C] () -- C:\Users\Sven\myworld.jpg [2012/04/10 00:38:53 | 000,040,596 | ---- | C] () -- C:\Users\Sven\theatro skala.jpg [2012/04/10 00:38:53 | 000,038,317 | ---- | C] () -- C:\Users\Sven\tina n me.jpg [2012/04/10 00:38:53 | 000,019,108 | ---- | C] () -- C:\Users\Sven\watcher.jpg [2012/04/10 00:38:16 | 000,049,785 | ---- | C] () -- C:\Users\Sven\004.jpg [2012/04/10 00:38:16 | 000,043,459 | ---- | C] () -- C:\Users\Sven\003.jpg [2012/04/10 00:38:16 | 000,042,907 | ---- | C] () -- C:\Users\Sven\005.jpg [2012/04/10 00:38:16 | 000,038,537 | ---- | C] () -- C:\Users\Sven\03.jpg [2011/04/09 02:30:10 | 000,258,864 | ---- | C] () -- C:\windows\SUPDRun.exe [2011/04/09 02:25:12 | 000,960,940 | ---- | C] () -- C:\windows\SysWow64\igkrng600.bin [2011/04/09 02:25:11 | 000,206,952 | ---- | C] () -- C:\windows\SysWow64\igfcg600m.bin [2011/04/09 02:25:11 | 000,145,804 | ---- | C] () -- C:\windows\SysWow64\igcompkrng600.bin [2011/04/08 12:25:06 | 000,307,200 | ---- | C] () -- C:\windows\SetDisplayResolution.exe [2011/04/08 11:50:29 | 000,000,258 | ---- | C] () -- C:\windows\HotFixList.ini [2011/04/08 11:49:36 | 000,142,128 | ---- | C] () -- C:\windows\wiainst64.exe [2011/04/08 11:17:49 | 000,008,192 | ---- | C] () -- C:\windows\SysWow64\drivers\IntelMEFWVer.dll [2008/12/09 17:23:13 | 000,051,536 | RHS- | C] () -- C:\Users\Sven\AppData\Roaming\appconf32.exe ========== LOP Check ========== [2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Aqehx [2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Aqteer [2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Atalo [2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Baqeh [2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Byoh [2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ciewe [2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Cuin [2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Daok [2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dees [2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dili [2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Dyna [2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ecwi [2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Eknee [2012/05/11 18:14:35 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ekoneg [2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ekqo [2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Eqanan [2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Fuwowi [2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Gefe [2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Geus [2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Giwev [2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Giyhly [2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Guxyw [2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Gyixo [2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Hiep [2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Hyqyta [2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Init [2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Inoz [2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ivvu [2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ixlib [2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Kacet [2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Kaox [2011/12/16 23:02:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\kock [2012/01/30 18:56:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\LolClient [2012/06/06 08:25:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\LolClient2 [2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Losa [2012/03/15 19:25:50 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Loyrke [2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Meykg [2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Minis [2012/02/29 19:19:28 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Muadsy [2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Naewur [2012/05/29 16:06:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Nega [2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Nuex [2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Okvuo [2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Omutew [2012/02/29 20:20:00 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oqecp [2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Otdi [2012/01/29 10:46:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Overyn [2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oxhuby [2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Oxurt [2012/06/12 17:32:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozegi [2012/08/23 18:35:18 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozurl [2012/02/29 19:39:38 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ozyk [2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Qoakaf [2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Quoc [2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Raaw [2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Rucou [2012/05/31 07:31:03 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ruko [2012/05/20 08:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Siciyv [2012/08/25 12:24:45 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Sony [2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Sybeys [2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Taygva [2012/05/25 11:18:26 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\TeamViewer [2012/06/17 16:51:41 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Tosy [2012/09/08 01:44:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\UAs [2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ubif [2012/02/19 23:19:47 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uceqvas [2012/05/21 17:33:08 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uhxema [2012/02/29 19:49:44 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Umosda [2012/02/13 10:36:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Unity [2012/06/19 18:29:09 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Upipuf [2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Upluib [2012/05/28 19:10:48 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Urbu [2012/06/17 06:51:13 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Urxu [2012/06/25 06:26:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Usudi [2012/05/12 18:05:07 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uvexid [2012/02/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Uzdoym [2012/05/21 07:33:06 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Vagi [2012/02/29 20:30:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Vuvo [2012/08/25 17:13:04 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\WildTangent [2012/02/29 20:09:55 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Wily [2012/02/17 20:46:05 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Wouqh [2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Xinypi [2012/09/08 01:45:43 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\xmldm [2012/05/15 07:24:52 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yfomig [2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yhxuh [2012/03/21 19:28:32 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ylib [2012/02/29 19:29:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yqfa [2012/05/18 09:48:36 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Ytgoh [2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Yxutc [2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zeaqb [2012/02/29 19:59:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zeyvyx [2012/05/29 06:05:33 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\Zuraut [2012/08/05 17:45:44 | 000,032,632 | ---- | M] () -- C:\windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > |
|
12.09.2012, 08:45
| #4 |
| | BKA-Trojaner, und keine Ahnung wie es läuft Die Extras wollte er nicht mitnehmen Hier noch die ExtraOTL EXTRAS Logfile: Code:
ATTFilter OTL Extras logfile created on: 9/12/2012 9:21:22 AM - Run 1
OTL by OldTimer - Version 3.2.61.3 Folder = C:\Users\Sven\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
7.91 Gb Total Physical Memory | 6.82 Gb Available Physical Memory | 86.23% Memory free
15.82 Gb Paging File | 14.76 Gb Available in Paging File | 93.28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 230.00 Gb Total Space | 106.57 Gb Free Space | 46.34% Space Free | Partition Type: NTFS
Drive D: | 343.41 Gb Total Space | 315.61 Gb Free Space | 91.91% Space Free | Partition Type: NTFS
Drive E: | 336.68 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Drive F: | 3.76 Gb Total Space | 3.20 Gb Free Space | 85.18% Space Free | Partition Type: FAT32
Computer Name: **** | User Name: **** | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\windows\SysWow64\control.exe (Microsoft Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0BBD7962-AF7E-4A1D-8CFA-2972E01AC42C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1644E397-863A-4AA2-ABC5-86F486D5752D}" = rport=138 | protocol=17 | dir=out | app=system |
"{16C8E120-D866-44A8-B0C0-AE6933F85787}" = rport=139 | protocol=6 | dir=out | app=system |
"{1F359B1F-1DB0-42B3-B8DA-82A1B7722390}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{31262D21-7305-4B5F-AC09-E06F0B715DC0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{408FB8BB-BA31-4B74-90E9-4172E7D061FC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{43CAAE23-DE5C-4634-944B-CE026F430A78}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{4BA6F4DD-4A75-42B0-A06B-E72F3367A332}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{533A7D08-9B62-4837-ABC3-43FFD966CE44}" = lport=137 | protocol=17 | dir=in | app=system |
"{60FC7B97-0478-4894-B468-8397EABB1295}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{6852951F-C6E5-4508-9C3E-834194413ED2}" = lport=139 | protocol=6 | dir=in | app=system |
"{6F19E15C-1405-4935-B979-05ABB128249D}" = lport=10243 | protocol=6 | dir=in | app=system |
"{78ACBAA9-7162-4710-8E44-E35391029AAC}" = lport=138 | protocol=17 | dir=in | app=system |
"{7AC0A53C-E1D6-412C-885A-F5B057D401D5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9236F596-C724-467A-AC50-DE3E0C26A377}" = lport=445 | protocol=6 | dir=in | app=system |
"{9D9A98EA-33CE-4072-8A5A-E8DF8E80B5CB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AAE19A23-56F6-4759-A720-A072AD8DA9E6}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{AB9D47C7-DA52-4940-9B3F-2F0213F0BFF0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BD6EE134-B7DF-48CA-BB3A-E6F913348EA5}" = rport=137 | protocol=17 | dir=out | app=system |
"{D1AC7F2B-3CAB-40D0-BB63-841A778818E5}" = rport=445 | protocol=6 | dir=out | app=system |
"{D214CE66-E9E5-4FF2-96B6-5DEC6F7BE6C8}" = rport=10243 | protocol=6 | dir=out | app=system |
"{E0720B51-6E88-4DBA-97BC-46E6AB2AB0CA}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EF192547-EA27-4917-BC54-F9838AB83E4C}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{007246D7-31BA-45E0-AE2D-A9532557F00B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{00AED4C5-F862-4931-88AA-6603AC6F597D}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{02FB5898-08B5-4F02-AA12-7A8EE3B126DC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{09071670-D8C0-49AD-AFD7-4E40A3D49284}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{0C08350E-5613-4E0F-848E-F11BBB20B9DD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{11398CE5-E3DE-49D9-9BB1-6C3947ECE9A9}" = protocol=6 | dir=in | app=c:\nexon\vindictus\en-us\nmservice.exe |
"{14D2E43F-8CB7-49EB-8FA6-7D190CB7A7AD}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe |
"{1B499585-614F-47A8-87B7-6DC8D5C2F8C3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{20791422-F8CB-4F43-9512-5366D4A7FCC8}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{22FC8870-6958-4F22-9DCB-02B47191A76E}" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\temp\dsoclient\dlcache\app.n3app |
"{3248F1F1-7A9F-457E-B47F-E955BAD06324}" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{34F1E861-34F8-4FA8-A203-5D02BC131031}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{39FC6378-6BD1-4D7B-A8DD-F6CCF97C56AB}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |
"{4BF1537E-F4EA-40BE-86FA-7FAC5DE40D63}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{52A16A12-5597-4C99-A961-6EC284181B04}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{58306080-2EEA-4D8C-AFEA-E75F242A7676}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{620421FD-19A1-440C-8369-6A1775CD6B10}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{628C7CB0-802B-43EE-861E-0D6CF78028C3}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{6B106F9F-B366-49F0-85BD-9638ABDD3167}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{73C088DE-832E-4A66-8C7C-B007127CD02C}" = protocol=17 | dir=in | app=c:\nexon\vindictus\en-us\nmservice.exe |
"{755574E5-CFA4-49C2-ADD0-77426A67BCBD}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{775D6631-409A-4C1D-9B3D-C8D434EAF3A3}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{7E9CC218-3CB0-4BA9-86BB-7B13091DFC8B}" = protocol=6 | dir=out | app=system |
"{840C3685-4E4B-445C-BDA1-ED4F94CDE0A5}" = protocol=6 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{8515E6C5-5517-44B9-BD36-2EEAA9CF5678}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{86E82A95-31D4-4EFC-90D1-0DF06F0B0D2B}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{878869A1-CCFD-4FC0-BC83-997626CACE04}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe |
"{8FCD5B57-E4F7-4198-964E-D62B6BE09975}" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\temp\dsoclient\dlcache\app.n3app |
"{9DAF8D96-1190-4290-A101-F5FA967F59D1}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{A089324C-3BC5-4986-94C3-6A7EAEBFF65F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{AA1A25CA-6242-4B46-8111-F8912A689503}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |
"{AF475CAC-8444-4B92-B3C8-B2A1A097C109}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\usdagent.exe |
"{B814D340-446A-401F-AB39-27C0D704B7F1}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{BDB38178-BF33-457F-A795-556FBC8735D1}" = protocol=17 | dir=in | app=c:\windows\system32\supdsvc.exe |
"{C55AD6C2-B43A-472B-BD68-2A3CF5D8CC58}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{CBAA696F-15B5-4466-890B-E9E860911A11}" = protocol=6 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{CC1A6000-FD09-49CE-8455-FF9C64BAB5DF}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |
"{D4016FE6-751C-457E-B803-73526454EEEA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D595F6F8-C7EF-48DA-A426-82E45DD5A084}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd9.exe |
"{D5C7581B-98C6-41EC-B09A-917F139642F0}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{DFEA2439-5C9D-4F3F-B585-E21B46384779}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{E274F8E9-0178-445F-85FD-A3AF3977CE30}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{E3791715-B065-4FC0-8DB3-E647773B94F8}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung universal scan driver\iccupdater.exe |
"{EDACF116-4E41-4933-9994-6B6ED9D787C7}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector\pdr8.exe |
"{F3A63BDB-FF1B-412E-8E40-DEA8581D5369}" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\nmservice.exe |
"{F5163597-F70F-4DB8-973C-5671DA120EDF}" = protocol=17 | dir=in | app=c:\programdata\nexoneu\ngm\ngm.exe |
"{F59151EB-6D18-498A-B91B-1F0EB47827A4}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FA3AF611-9DA0-47E8-AA1D-CBC909F829C6}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |
"{FB2E446A-F9F4-4EEC-8249-00B095FBF473}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{FC55BF59-C81D-4559-8357-EAFE0FE99198}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{FE0C3C0F-941A-4FF6-8783-A3510E1C7771}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{FF75AE40-2A64-49B4-A22E-A33F047640E0}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{53579848-346C-489C-8D58-9B2F74DFD6C2}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe |
"TCP Query User{606FC957-3C76-4CD5-A57E-C25DA65847A9}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe |
"TCP Query User{7611CC06-3600-4250-9BEB-B218A93E85E2}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe |
"TCP Query User{B0352A48-D3A0-43C3-9B76-32A88BDA77B0}C:\nexon\vindictus\en-us\vindictus.exe" = protocol=6 | dir=in | app=c:\nexon\vindictus\en-us\vindictus.exe |
"TCP Query User{B03A3FF3-0425-4C72-BDB2-08073F0F1E55}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe |
"TCP Query User{D441C019-8ACB-49A6-94EB-3FFE630FAE03}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{EBD6C08D-0834-48F0-B039-98D03AECE524}C:\nexon\combat arms eu\engine.exe" = protocol=6 | dir=in | app=c:\nexon\combat arms eu\engine.exe |
"TCP Query User{EFF4CB3B-34A2-4847-B973-57FA3D030BC1}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=6 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"TCP Query User{F3D186F2-6F0D-485D-BFF5-E3A2C124007A}C:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe" = protocol=6 | dir=in | app=c:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe |
"UDP Query User{1129C5ED-DC42-4AFE-9A3A-2CF3CC5E20A0}C:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\local\microsoft\windows\temporary internet files\content.ie5\9ub1e7z7\gunblade-dlm.exe |
"UDP Query User{17AFA276-8066-4BAD-B9FE-51D755D1EA05}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe |
"UDP Query User{4C3563D3-0816-4E21-B087-BC43FFD01C6F}C:\nexon\vindictus\en-us\vindictus.exe" = protocol=17 | dir=in | app=c:\nexon\vindictus\en-us\vindictus.exe |
"UDP Query User{646A1F60-DB02-4E0D-B0E2-73055A22560F}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{880BED04-4102-404C-ACD4-28BFFEBAB58D}C:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe" = protocol=17 | dir=in | app=c:\nexon\nexon_eu_downloader\nexon_eu_downloader_engine.exe |
"UDP Query User{9C2D20AE-1C00-4933-AE6D-C94A62F70438}C:\users\sven\appdata\roaming\overyn\ukzeup.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\overyn\ukzeup.exe |
"UDP Query User{E874128D-DE68-4F56-A978-C37E0ED5F829}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe |
"UDP Query User{ECA4A891-4AEC-4059-9DAA-F5EABE80BA51}C:\nexon\combat arms eu\engine.exe" = protocol=17 | dir=in | app=c:\nexon\combat arms eu\engine.exe |
"UDP Query User{EFF8C38A-D7A2-43E9-86A1-A3280E96B800}C:\users\sven\appdata\roaming\wouqh\nyzym.exe" = protocol=17 | dir=in | app=c:\users\sven\appdata\roaming\wouqh\nyzym.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{02A5BD31-16AC-45DF-BE9F-A3167BC4AFB2}" = Windows Live Family Safety
"{02E5BCCA-317C-418F-9E06-42526E050829}" = Windows Live Family Safety
"{0919C44F-F18A-4E3B-A737-03685272CE72}" = Windows Live Remote Service Resources
"{0D87AE67-14EB-4C10-88A5-DA6C3181EB18}" = Windows Live Family Safety
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{1685AE50-97ED-485B-80F6-145071EE14B0}" = Windows Live Remote Service Resources
"{17A4FD95-A507-43F1-BC92-D8572AF8340A}" = Windows Live Remote Service Resources
"{19F09425-3C20-4730-9E2A-FC2E17C9F362}" = Windows Live Remote Service Resources
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1BF5ECDD-47AC-411B-9BC5-96F01346CD7C}" = Windows Live Family Safety
"{1D2596F8-5EDD-4F8A-BA88-734E5549DD72}" = Windows Live Family Safety
"{1EB2CFC3-E1C5-4FC4-B1F8-549DD6242C67}" = Windows Live Remote Service Resources
"{206BD2C5-DE08-4577-A0D7-D441A79D5A3A}" = Windows Live Remote Client Resources
"{2128559D-BBCD-4744-87F0-7C0CD5CFB464}" = Windows Live Family Safety
"{22AB5CFD-B3DB-414E-9F99-4D024CCF1DA6}" = Windows Live Remote Client Resources
"{2426E29F-9E8C-4C0B-97FC-0DB690C1ED98}" = Windows Live Remote Client Resources
"{24A534BC-AC8B-44A8-A417-135F28F8E9EE}" = Windows Live Family Safety
"{27B3E5AA-5B75-414A-AC37-F5ADDFA68BDB}" = Windows Live Family Safety
"{27F3F8DE-AC95-4E10-90A6-EBA999DDBCAF}" = Windows Live Remote Service Resources
"{287134AD-092F-4BD0-A6F4-911B0B351E87}" = Windows Live Family Safety
"{2998191E-A35E-47E2-BE38-7702C731D722}" = SRS Premium Sound Control Panel
"{29CFD07F-4971-41B0-B14D-621ACCC264AC}" = Windows Live Remote Service Resources
"{2C1A6191-9804-4FDC-AB01-6F9183C91A13}" = Windows Live Remote Client Resources
"{2F304EF4-0C31-47F4-8557-0641AAE4197C}" = Windows Live Remote Client Resources
"{34384A2A-2CA2-4446-AB0E-1F360BA2AAC5}" = Windows Live Remote Service Resources
"{350FD0E7-175A-4F86-84EF-05B77FCD7161}" = Windows Live Remote Service Resources
"{3921492E-82D2-4180-8124-E347AD2F2DB4}" = Windows Live Remote Client Resources
"{3F2A8756-C008-43D7-8E1D-7300AA394549}" = Windows Live Family Safety
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{456FB9B5-AFBC-4761-BBDC-BA6BAFBB818F}" = Windows Live Remote Client Resources
"{464F7B5E-80BB-4F34-A602-384F0702674A}" = Windows Live Family Safety
"{46CCB0D4-A98F-4009-B5A5-DE38A667D068}" = Windows Live Family Safety
"{480F28F0-8BCE-404A-A52E-0DBB7D1CE2EF}" = Windows Live Remote Service Resources
"{48491B19-3759-428B-9560-7AE4697B8FFF}" = Windows Live Family Safety
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4BB3027E-7ABE-43EA-BA1B-9521EF69B530}" = Windows Live Family Safety
"{4C2E49C0-9276-4324-841D-774CCCE5DB48}" = Windows Live Remote Client Resources
"{4C9845D5-9FAD-4C52-B389-CAEF0F216215}" = Windows Live Remote Client Resources
"{5141AA6E-5FAC-4473-BFFB-BEE69DDC7F2B}" = Windows Live Remote Service Resources
"{5151E2DB-0748-4FD1-86A2-72E2F94F8BE7}" = Windows Live Remote Service Resources
"{57F2BD1C-14A3-4785-8E48-2075B96EB2DF}" = Windows Live Remote Service Resources
"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources
"{5ECA80C9-7D7A-49AC-B487-52F1CF47ECEE}" = Windows Live Family Safety
"{5F44A3A1-5D24-4708-8776-66B42B174C64}" = Windows Live Remote Client Resources
"{5FCD6EFE-C2E7-4D77-8212-4BA223D8DF8E}" = Windows Live Remote Client Resources
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{5FEAD3E5-A158-4B66-B92B-0C959D7CF838}" = Windows Live Remote Service Resources
"{61407251-7F7D-4303-810D-226A04D5CFF3}" = Windows Live Remote Service Resources
"{641B32DB-8226-4250-86C9-34671162F5D5}" = Windows Live Remote Client Resources
"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources
"{692CCE55-9EAE-4F57-A834-092882E7FE0B}" = Windows Live Remote Client Resources
"{698EAE05-09DE-47D0-9586-29E41A0934DD}" = Windows Live Family Safety
"{6A2482BC-733A-404A-939A-2D5BC636E6F9}" = Windows Live Remote Service Resources
"{6C9D3F1D-DBBE-46F9-96A0-726CC72935AF}" = Windows Live Remote Service Resources
"{6CBFDC3C-CF21-4C02-A6DC-A5A2707FAF55}" = Windows Live Remote Service Resources
"{74AC7ECE-87E1-41F7-ABA2-5ED9B13CECFA}" = Windows Live Family Safety
"{78654366-5889-4A70-90D9-04B00709EEE0}" = Windows Live Remote Client Resources
"{7AD6F7FC-9C8A-4413-860C-E0668B7A8E15}" = Windows Live Family Safety
"{7AEC844D-448A-455E-A34E-E1032196BBCD}" = Windows Live Remote Service Resources
"{811D5159-D798-491F-B9C6-9BDBF6B02D06}" = Windows Live Remote Service Resources
"{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources
"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources
"{850B8072-2EA7-4EDC-B930-7FE569495E76}" = Windows Live Remote Client Resources
"{8832CAA2-4934-4916-A8BF-A9A51C6B58B3}" = Windows Live Family Safety
"{8970AE69-40BE-4058-9916-0ACB1B974A3D}" = Windows Live Remote Client Resources
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{944E73EF-857E-4F71-9DC4-CD059D7ADDEF}" = Windows Live Family Safety
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{97A295A7-8840-4B35-BB61-27A8F4512CA3}" = Windows Live Remote Service Resources
"{9E9C960F-7F47-46D5-A95D-950B354DE2B8}" = Windows Live Remote Service Resources
"{A060182D-CDBE-4AD6-B9B4-860B435D6CBD}" = Windows Live Remote Client Resources
"{A0CC1C12-528A-42A3-B9A3-10C4F9E65C9E}" = Windows Live Family Safety
"{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{A986CF32-C1C2-4B53-91AD-78EE027875C7}" = Windows Live Family Safety
"{AAE97E7E-B3A6-42BA-ADA5-04A0E6FD7224}" = Windows Live Family Safety
"{AE91E0F3-C49A-4EF4-8B98-A07BD409EB90}" = Windows Live Remote Service Resources
"{B0BF8602-EA52-4B0A-A2BD-EDABB0977030}" = Windows Live Remote Client Resources
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Display Control Panel
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 266.72
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B680A663-1A15-47A5-A07C-7DF9A97558B7}" = Windows Live Remote Client Resources
"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0
"{BFBE6E95-5724-47EC-85A0-74D436AD938F}" = Windows Live Family Safety
"{C504EC13-E122-4939-BD6E-EE5A3BAA5FEC}" = Windows Live Remote Client Resources
"{C61D639C-3A1B-4654-901F-08927C804321}" = Windows Live Family Safety
"{C9F05151-95A9-4B9B-B534-1760E2D014A5}" = Windows Live Remote Client Resources
"{CE6D49CE-ED18-47E1-8449-037BC7181450}" = Windows Live Family Safety
"{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources
"{D0C56275-9E7F-4BE5-AB37-15124BF808F2}" = Windows Live Family Safety
"{D1C1556C-7FF3-48A3-A5D6-7126F0FAFB66}" = Windows Live Remote Client Resources
"{D3E4F422-7E0F-49C7-8B00-F42490D7A385}" = Windows Live Remote Service Resources
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DBEDAF67-C5A3-4C91-951D-31F3FE63AF3F}" = Windows Live Remote Client Resources
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{E3525BFB-1C0B-4022-98EE-824E3757E83F}" = Windows Live Family Safety
"{E892324D-9386-4105-806C-5550304CE519}" = Windows Live Family Safety
"{ED421F97-E1C3-4E78-9F54-A53888215D58}" = Windows Live Remote Client Resources
"{EE312BFB-B096-4613-8888-4023064B62D2}" = Windows Live Family Safety
"{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources
"{F0793412-6407-4870-9A8C-6FE198A4EB12}" = Windows Live Remote Client Resources
"{F20B6800-68D7-48DB-A2EB-26BB7BFD1F77}" = Windows Live Family Safety
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F6CB2C5F-B2C1-4DF1-BF44-39D0DC06FE6F}" = Windows Live Remote Service Resources
"{F71F4E15-C711-4010-B1BD-74EE2618B86F}" = Windows Live Family Safety
"{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources
"{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources
"{FD41A335-9425-44CB-B1D6-E657C52F7DC6}" = Windows Live Family Safety
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"Elantech" = ETDWare PS/2-X64 8.0.7.1_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{000F2A10-9CDF-47BF-9CF2-9AC87567B433}" = Windows Live Photo Common
"{00884F14-05BD-4D8E-90E5-1ABF78948CA4}" = Windows Live Mesh
"{0119B342-476F-4F5A-B712-144B5CFA781F}" = Windows Live Movie Maker
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{03241D8D-2217-42F7-9FCB-6A68D141C14D}" = Windows Live 软件包
"{039480EE-6933-4845-88B8-77FD0C3D059D}" = Windows Live Mesh
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack
"{062E4D94-8306-46D5-81B6-45E6AD09C799}" = Windows Live Messenger
"{0654EA5D-308A-4196-882B-5C09744A5D81}" = Windows Live Photo Common
"{066219C8-4BE6-46D7-9E01-60FCFA6B32DC}" = Messenger Companion
"{073F306D-9851-4969-B828-7B6444D07D55}" = Windows Live Photo Common
"{07E15DDE-CAD9-434D-B24D-35708E3BEA09}" = Windows Live 필수 패키지
"{082E37F5-3924-4168-A69A-1B6B1FEA587C}" = Messenger Companion
"{09922FFE-D153-44AE-8B60-EA3CB8088F93}" = Windows Live UX Platform Language Pack
"{09B7C7EB-3140-4B5E-842F-9C79A7137139}" = Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger
"{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live
"{0AC07A77-0511-4904-9FA1-616DC9BEF50D}" = Gunblade Saga
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C1931EB-8339-4837-8BEC-75029BF42734}" = Windows Live UX Platform Language Pack
"{0C975FCC-A06E-4CB6-8F54-A9B52CF37781}" = Windows Liven sähköposti
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}" = Galeria de Fotografias do Windows Live
"{0F895695-33CC-4203-9C47-25EF2AC9441C}" = Media Go
"{10186F1A-6A14-43DF-A404-F0105D09BB07}" = Windows Live Mail
"{110668B7-54C6-47C9-BAC4-1CE77F156AF5}" = Windows Live Mesh
"{11417707-1F72-4279-95A3-01E0B898BBF5}" = Windows Live Mesh
"{11778DA1-0495-4ED9-972F-F9E0B0367CD5}" = Windows Live Writer
"{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar
"{122800FE-3AAF-4974-9FBD-54B023FA756A}" = „Windows Live Messenger“
"{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack
"{133D9D67-D475-4407-AC3C-D558087B2453}" = Windows Live Movie Maker
"{139C1D95-9037-3AB3-F5F4-4A79BF6831EC}" = WordCaptureX Pro
"{142D8CA7-2C6F-45A7-83E3-099AAFD99133}" = Samsung Update Plus
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution 5
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{168E7302-890A-4138-9109-A225ACAF7AD1}" = Windows Live Photo Common
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{17835B63-8308-427F-8CF5-D76E0D5FE457}" = Windows Live Essentials
"{17F99FCE-8F03-4439-860A-25C5A5434E18}" = Windows Live Essentials
"{198EA334-8A3F-4CB2-9D61-6C10B8168A6F}" = Windows Live Writer
"{19ADD3BF-C42B-47DC-81C6-5E9731B668C4}" = „Windows Live Essentials“
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19CBDE24-2761-49A5-816B-D2BA65D0CA8D}" = Kontrola Windows Live Mesh ActiveX za daljinske veze
"{1A72337E-D126-4BAF-AC89-E6122DB71866}" = Windows Liven valokuvavalikoima
"{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1D108D70-E7D1-4089-9A0A-99629C4D0CB8}" = Morrowind
"{1D6C2068-807F-4B76-A0C2-62ED05656593}" = Windows Live Writer
"{1DA6D447-C54D-4833-84D4-3EA31CAECE9B}" = Windows Live UX Platform Language Pack
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"{1FC83EAE-74C8-4C72-8400-2D8E40A017DE}" = Windows Live Writer
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{220C7F8C-929D-4F71-9DC7-F7A6823B38E4}" = Windows Live UX Platform Language Pack
"{241E7104-937A-4366-AD57-8FDDDB003939}" = Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi
"{249EE21B-8EDD-4F36-8A23-E580E9DBE80A}" = Windows Live Mail
"{24DF33E0-F924-4D0D-9B96-11F28F0D602D}" = Windows Live UX Platform Language Pack
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{25A381E1-0AB9-4E7A-ACCE-BA49D519CF4E}" = Windows Live Mail
"{25CD4B12-8CC5-433E-B723-C9CB41FA8C5A}" = Windows Live Writer
"{260E3D78-94E6-47EC-8E29-46301572BB1E}" = Control ActiveX Windows Live Mesh pentru conexiuni la distanță
"{26E3C07C-7FF7-4362-9E99-9E49E383CF16}" = Windows Live Writer Resources
"{2720009D-9566-45A7-A370-0E6DAC313F3F}" = „Windows Live Mail“
"{289AC7E0-0AEE-4a7b-913C-709D9803D23E}" = Nexon Game Manager
"{28B9D2D8-4304-483F-AD71-51890A063A74}" = Windows Live Photo Common
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2BA5FD10-653F-4CAF-9CCD-F685082A1DC1}" = Windows Live Writer
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh
"{2CC0789D-D31B-445F-8970-6E058BE39754}" = Windows Live UX Platform Language Pack
"{2D3E034E-F76B-410A-A169-55755D2637BB}" = Windows Live Mesh
"{2D49C296-BCCA-4800-BAF6-A0269EBDCF74}" = Windows Live Messenger
"{2DDC70C1-C77A-4D08-89D2-9AB648504533}" = Easy Content Share
"{2E50E321-4747-4EB5-9ECB-BBC6C3AC0F31}" = Windows Live Writer Resources
"{2F54E453-8C93-4B3B-936A-233C909E6CAC}" = Windows Live Messenger
"{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources
"{317D56AC-0DB3-48F5-929A-42032DAC9AD7}" = Windows Live Writer
"{318DBE01-1E6B-4243-84B0-210391FE789A}" = Samsung AnyWeb Print
"{331ECF61-69AF-4F57-AC35-AFED610231C3}" = Multimedia POP
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{368BEC2C-B7A2-4762-9213-2D8465D533CA}" = Windows Live UX Platform Language Pack
"{3705D53F-BB01-4BEE-8585-289E71CAC4B4}" = Компаньон Messenger
"{370F888E-42A7-4911-9E34-7D74632E17EB}" = Windows Live Photo Common
"{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}" = ActiveX-kontroll för fjärranslutningar för Windows Live Mesh
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3889988F-762B-4B85-AB17-71C9CC3AE445}" = Messenger Companion
"{39B3184E-0BFB-40FA-ADDC-E7E2D535CDA9}" = Controle ActiveX do Windows Live Mesh para Conexões Remotas
"{39F95B0B-A0B7-4FA7-BB6C-197DA2546468}" = Windows Live Mesh
"{3A09ED0F-8DDF-47BB-B53D-841AB9D1D3A7}" = Complemento Messenger
"{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials
"{3B8F240C-B75E-4A1E-BDCC-6C7F033078A3}" = Windows Live UX Platform Language Pack
"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{3F4143A1-9C21-4011-8679-3BC1014C6886}" = Windows Live Mesh
"{3F50512F-53DF-46B1-8CCB-6C7E638CADD6}" = PhoneShare
"{3FD1CB9F-807F-451B-926C-9D19C84CFC61}" = Messenger Suradnik
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{40BFD84C-64CD-42CC-9909-8734C50429C6}" = Windows Live UX Platform Language Pack
"{410DF0AA-882D-450D-9E1B-F5397ACFFA80}" = Windows Live Essentials
"{4264C020-850B-4F08-ACBE-98205D9C336C}" = Windows Live Writer
"{429DF1A0-3610-4E9E-8ACE-3C8AC1BA8FCA}" = Windows Live Photo Gallery
"{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials
"{442032CB-900C-49C7-B4B4-2B76525DD403}" = Windows Live Photo Common
"{443B561F-DE1B-4DEF-ADD9-484B684653C7}" = Windows Live Messenger
"{4444F27C-B1A8-464E-9486-4C37BAB39A09}" = Фотогалерия на Windows Live
"{458F399F-62AC-4747-99F5-499BBF073D29}" = Windows Live Writer Resources
"{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources
"{46872828-6453-4138-BE1C-CE35FBF67978}" = Windows Live Mesh
"{48294D95-EE9A-4377-8213-44FC4265FB27}" = Windows Live Messenger
"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A04DB63-8F81-4EF4-9D09-61A2057EF419}" = Windows Live Essentials
"{4A331D24-A9E8-484F-835E-1BA7B139689C}" = EasyBatteryManager
"{4B28D47A-5FF0-45F8-8745-11DC2A1C9D0F}" = Windows Live Writer
"{4B744C85-DBB1-4038-B989-4721EB22C582}" = Windows Live Messenger
"{4C378B16-46B7-4DA1-A2CE-2EE676F74680}" = Windows Live UX Platform Language Pack
"{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}" = Windows Live Meshin etäyhteyksien ActiveX-komponentti
"{4D141929-141B-4605-95D6-2B8650C1C6DA}" = Windows Live UX Platform Language Pack
"{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common
"{4F35DF91-F834-41F7-A287-0E377D55C486}" = Windows Live Photo Common
"{506FC723-8E6C-4417-9CFF-351F99130425}" = Windows Live UX Platform Language Pack
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{517EAAB9-C35E-4949-B8C2-20C241162BBB}" = Windows Live Pošta
"{51FFAC89-B6B0-4E6E-B76F-6D4E2E83086A}" = Windows Live 메일
"{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack
"{5275D81E-83AD-4DE4-BC2B-6E6BA3A33244}" = Windows Live Writer Resources
"{542DA303-FB91-4731-9F37-6E518368D3B9}" = Windows Live Messenger
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{545192D4-E817-4EAA-834D-623EA50CF268}" = Windows Live UX Platform Language Pack
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{56D42B00-572C-4AE9-BCFB-CD45A3B5D0E1}" = Messenger Assistent
"{57220148-3B2B-412A-A2E0-82B9DF423696}" = Windows Live Mesh ActiveX-objekt til fjernforbindelser
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{588CE0C0-860B-49A8-AFCF-3C69465B345F}" = Windows Live Mesh
"{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}" = TES Construction Set
"{5C2F5C1B-9732-4F81-8FBF-6711627DC508}" = Windows Live Fotogalleri
"{5CF5B1A5-CBC3-42F0-8533-5A5090665862}" = Windows Live Mesh
"{5D163056-96B7-440F-A836-89BA5D3CFF2F}" = Windows Live Photo Common
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5D2E7BD7-4B6F-4086-BA8A-E88484750624}" = Windows Live Writer Resources
"{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer
"{5E627606-53B9-42D1-97E1-D03F6229E248}" = Windows Live UX Platform Language Pack
"{60C3C026-DB53-4DAB-8B97-7C1241F9A847}" = Windows Live Movie Maker
"{61506B53-EE02-46CE-8464-3F806947978F}" = Windows Live Mesh
"{61920449-0393-4707-B7DD-E6C0013C8B2C}" = 원격 연결을 위한 Windows Live Mesh ActiveX 컨트롤
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources
"{63CF7D0C-B6E7-4EE9-8253-816B613CC437}" = Windows Live Mail
"{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker
"{64376910-1860-4CEF-8B34-AA5D205FC5F1}" = Poczta usługi Windows Live
"{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh
"{6491AB99-A11E-41FD-A5E7-32DE8A097B8E}" = Windows Live Essentials
"{64B2D6B3-71AC-45A7-A6A1-2E07ABF58341}" = Windows Live Movie Maker
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{677AAD91-1790-4FC5-B285-0E6A9D65F7DC}" = Windows Live Mail
"{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69C9C672-400A-43A0-B2DE-9DB38C371282}" = Windows Live Writer
"{69CAC24D-B1DC-4B97-A1BE-FE21843108FE}" = Windows Live Writer Resources
"{6A4ABCDC-0A49-4132-944E-01FBCCB3465C}" = Windows Live UX Platform Language Pack
"{6A67578E-095B-4661-88F7-0B199CEC3371}" = Windows Live Messenger
"{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"{6ABE832B-A5C7-44C1-B697-3E123B7B4D5B}" = Windows Live Mesh
"{6B3BAE39-4ED1-4EEB-9769-A3AA0AA58CB4}" = Windows Live Movie Maker
"{6B556C37-8919-4991-AC34-93D018B9EA49}" = Windows Live Photo Common
"{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker
"{6D2F0A26-ECEA-49CE-833C-9A6125F3D5E8}" = Doplnok programu Messenger
"{6DCE9C3E-3DB7-4C3C-8B80-BC55781BB7B6}" = Windows Live Writer Resources
"{6DD3B54B-F0D0-4A69-8344-F52033225A02}" = Messenger Companion
"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker
"{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}" = Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz
"{6E5324C1-84FC-4F76-9A3A-C65E07F80EE6}" = Complément Messenger
"{6E8AFC13-F7B8-41D8-88AB-F1D0CFC56305}" = Windows Live Messenger
"{6EF2BE2C-3121-48B7-B7A6-C56046B3A588}" = Windows Live Movie Maker
"{6F37D92B-41AA-44B7-80D2-457ABDE11896}" = Windows Live Photo Common
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7115EEBC-DA7B-434C-B81C-EA5B26EA9A94}" = Windows Live Writer Resources
"{71684DFF-CDED-450C-AF0C-4A1A6438A1A5}" = Windows Live Essentials
"{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer
"{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh
"{7272F232-A7E0-4B2B-A5D2-71B7C5E2379C}" = Windows Live Fotótár
"{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack
"{734104DE-C2BF-412F-BB97-FCCE1EC94229}" = Windows Live Writer Resources
"{7373E17D-18E0-44A7-AC3A-6A3BFB85D3B3}" = Windows Live Movie Maker
"{73FC3510-6421-40F7-9503-EDAE4D0CF70D}" = Windows Live Photo Common
"{7465A996-0FCA-4D2D-A52C-F833B0829B5B}" = Windows Live Movie Maker
"{7496FD31-E5CB-4AE4-82D3-31099558BF6A}" = Windows Live Mesh
"{74E8A7F6-575D-42C7-9178-E87D1B3BEFE8}" = Windows Live UX Platform Language Pack
"{753F0A72-59C3-41CE-A36A-F2DF2079275C}" = Windows Live Mail
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{7780682A-47C9-480D-90BE-247539342595}" = Windows Live UX Platform Language Pack
"{77BC9EAF-14C7-4338-9B1C-D5A3E142C0B8}" = Windows Live Photo Common
"{77DAF553-291A-4471-988C-5677D90DB57E}" = Windows Live Writer Resources
"{77F45ECD-FAFC-45A8-8896-CFFB139DAAA3}" = Fast Start
"{77F69CA1-E53D-4D77-8BA3-FA07606CC851}" = Фотоальбом Windows Live
"{781E0319-15CD-4A4C-A47E-D9FFF697E7A1}" = Messenger Companion
"{78906B56-0E81-42A7-AC25-F54C946E1538}" = Windows Live Photo Common
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{78DBE8CE-61F6-4D6C-806C-A0FFF65F5E1D}" = Windows Live Messenger
"{7A9D47BA-6D50-4087-866F-0800D8B89383}" = Podstawowe programy Windows Live
"{7ADFA72D-2A9F-4DEC-80A5-2FAA27E23F0F}" = Windows Live Photo Common
"{7AF32AB1-CB97-11D4-9607-0050BA84F5F7}" = Baldur's Gate(TM) II - Schatten von Amn(TM)
"{7AF8E500-B349-4A77-8265-9854E9A47925}" = Windows Live Movie Maker
"{7B982EBD-D017-4527-BF1A-FC489EC6B100}" = Windows Live 照片库
"{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}" = Pošta Windows Live
"{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common
"{7CB529B2-6C74-4878-9C3F-C29C3C3BBDC6}" = Windows Live Writer Resources
"{7D0DE76C-874E-4BDE-A204-F4240160693E}" = Windows Live Photo Common
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{7E274911-32ED-4489-9B04-4EF100D0E4D3}" = „Messenger“ pagalbinė priemonė
"{7E90B133-FF47-48BB-91B8-36FC5A548FE9}" = Windows Live Writer Resources
"{7F061FA8-5A87-4758-876B-17EE28B358D0}" = Messenger 浏览器插件
"{7F6F62F0-7884-4CFB-B86C-597A4A6D9C4D}" = Movie Color Enhancer
"{7FF11E53-C002-4F40-8D68-6BE751E5DD62}" = Windows Live Writer Resources
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"{80E8C65A-8F70-4585-88A2-ABC54BABD576}" = Windows Live Mesh
"{8142D25E-028A-4563-86ED-5755783C8029}" = Messenger Companion
"{827D3E4A-0186-48B7-9801-7D1E9DD40C07}" = Windows Live Essentials
"{82803FF3-563F-414F-A403-8D4C167D4120}" = Windows Live Mail
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83D2FFB0-E378-49FE-8A53-580CA7B5761F}" = Windows Live Messenger
"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh
"{84267681-BF16-40B6-9564-27BC57D7D71C}" = Windows Live Photo Common
"{847C879C-1467-4924-A491-1302B4C58F70}" = Messenger Companion
"{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials
"{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery
"{86E6D3A7-3ADC-44C0-B94E-85D2A9DD36B0}" = Windows Live Writer
"{8732818E-CA78-4ACB-B077-22311BF4C0E4}" = Easy Network Manager
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{885F1BCD-C344-4758-85BD-09640CF449A5}" = Windows Live Photo Gallery
"{8909CFA8-97BF-4077-AC0F-6925243FFE08}" = Windows Liven asennustyökalu
"{8985AE5E-622A-4980-8BF8-0A1830643220}" = Windows Live Mesh ActiveX kontrola za daljinske veze
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CF5D47D-27B7-49D6-A14F-10550B92749D}" = Windows Live UX Platform Language Pack
"{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FF3891F-01B5-4A71-BFCD-20761890471C}" = Windows Live Messenger
"{9024FE65-46B8-4C8A-9D98-8DCB6BD5F598}" = „Windows Live Mesh ActiveX“ nuotolinių ryšių valdiklis
"{902585EB-8FA3-43A5-AD1C-5C9821A77114}" = Messenger Pratilac
"{903EDF14-4E28-4463-AA5E-4AEE71C0263B}" = Windows Live Movie Maker
"{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends
"{924B4D82-1B97-48EB-8F1E-55C4353C22DB}" = Windows Live Mail
"{92D50865-FC60-4EA8-BA7A-5581B0D13EFB}" = ChargeableUSB
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{93E464B3-D075-4989-87FD-A828B5C308B1}" = Windows Live Writer Resources
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96403552-88D1-429F-9C92-388B814B885E}" = Messenger Companion
"{97F77D62-5110-4FA3-A2D3-410B92D31199}" = Windows Live Fotogaléria
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{99BE7F5D-AB52-4404-9E03-4240FFAA7DE9}" = Windows Live Mesh
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}" = פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9DA3F03B-2CEE-4344-838E-117861E61FAF}" = Windows Live Mail
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9E771D5B-C429-4CBC-8730-3EBD9EC99E4C}" = Windows Live Movie Maker
"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail
"{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail
"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A101F637-2E56-42C0-8E08-F1E9086BFAF3}" = Windows Live Movie Maker
"{A1668729-C4D2-49AE-877B-FB608362FFF1}" = Windows Live Essentials
"{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A2EDAEEB-C981-46D5-8163-CF8F5F640EEE}" = ตัวควบคุม ActiveX ใน Windows Live Mesh สำหรับการเชื่อมต่อระยะไกล (ไทย)
"{A3389C72-1782-4BB4-BBAA-33345DE52E3F}" = Windows Live Messenger
"{A3A775C9-5A63-4C55-8FDD-427A5B8F5D2B}" = Windows Live Mesh ActiveX vadīkla attālajiem savienojumiem
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A7056D45-C63A-4FE4-A69D-FB54EF9B21BB}" = Windows Live Messenger
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB067785-9646-456B-91C3-E71228132A4C}" = Messenger 사이트 공유
"{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh
"{AB5977C5-11AE-4003-BA7D-261C48F2BC35}" = מסייע Messenger
"{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger
"{AB78C965-5C67-409B-8433-D7B5BDB12073}" = Windows Live Writer Resources
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{ABE2F2AA-7ADC-4717-9573-BF3F83C696AC}" = Windows Live Mail
"{AC76BA86-7AD7-1031-7B44-A91000000001}" = Adobe Reader 9.1 - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AD001A69-88CC-4766-B2DB-3C1DFAB9AC72}" = Windows Live Mesh
"{AD86049C-3D9C-43E1-BE73-643F57D83D50}" = Easy Migration
"{ADE85655-8D1E-4E4B-BF88-5E312FB2C74F}" = Windows Live Mail
"{ADFE4AED-7F8E-4658-8D6E-742B15B9F120}" = Windows Live Photo Common
"{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh
"{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}" = Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych
"{B0AD205F-60D0-4084-AFB8-34D9A706D9A8}" = Windows Live Essentials
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B2E90616-C50D-4B89-A40D-92377AC669E5}" = Windows Live Messenger
"{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common
"{B3BA4D1C-23EF-4859-9C11-1B2CCB7FADBB}" = ActiveX контрола на Windows Live Mesh за отдалечени връзки
"{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer
"{B44F3823-52DD-45CA-A916-8B320778715D}" = Messenger Companion
"{B4712CB7-27D7-4F61-8805-BCF9BE1CFC4A}" = Windows Live Writer Resources
"{B618C3BF-5142-4630-81DD-F96864F97C7E}" = Windows Live Essentials
"{B6190387-0036-4BEB-8D74-A0AFC5F14706}" = Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení
"{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}" = Почта Windows Live
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7B67AA5-12DA-4F01-918D-B1BF66779D8A}" = Windows Live Writer Resources
"{B81722D3-0A95-4BDE-AA1A-A2A5D12FCDB2}" = Windows Live Foto-galerija
"{B9B66F77-9D00-4CA4-BDF1-BBA8236B4DB6}" = Windows Live Writer
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{BAEE89D5-6E87-4F89-9603-A1C100479181}" = Windows Live Messenger
"{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}" = Элемент управления Windows Live Mesh ActiveX для удаленных подключений
"{BD0C3887-64E6-41D8-9A38-BC6F34369352}" = Windows Live Messenger
"{BD4EBDB5-EB14-4120-BB04-BE0A26C7FB3E}" = Windows Live Photo Common
"{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi
"{BD8DA595-F501-4ABE-85A0-5C23E82472A0}" = Pomocnik Messenger
"{BF022D76-9F72-4203-B8FA-6522DC66DFDA}" = Windows Live Movie Maker
"{BF35168D-F6F9-4202-BA87-86B5E3C9BF7A}" = Windows Live Mesh
"{BFC47A0B-D487-4DF0-889E-D6D392DF31E0}" = Windows Live Messenger
"{C00C2A91-6CB3-483F-80B3-2958E29468F1}" = Συλλογή φωτογραφιών του Windows Live
"{C01FCACE-CC3D-49A2-ADC2-583A49857C58}" = Windows Live Essentials
"{C08D5964-C42F-48EE-A893-2396F9562A7C}" = Windows Live Mesh
"{C1C9D199-B4DD-4895-92DD-9A726A2FE341}" = Windows Live Writer
"{C29FC15D-E84B-4EEC-8505-4DED94414C59}" = Windows Live Writer Resources
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C2FD7DB5-FE30-49B6-8A2F-C5652E053C31}" = Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C454280F-3C3E-4929-B60E-9E6CED5717E7}" = Windows Live Mail
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C7DAD22D-29D4-438F-B986-03B9ED582EA4}" = Messenger Companion
"{C8421D85-CA0E-4E93-A9A9-B826C4FB88EA}" = Windows Live Mail
"{C877E454-FA36-409A-A00E-1240CEC61BBD}" = „Windows Live“ fotogalerija
"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common
"{C8A2793D-EFF2-4069-95BF-A28192E39DEB}" = Windows Live Writer
"{C95A5A77-622F-45CA-9540-84468FCB18B1}" = Windows Live Messenger
"{C9E1343D-E21E-4508-A1BE-04A089EC137D}" = Windows Live Messenger
"{CA227A9D-09BE-4BFB-9764-48FED2DA5454}" = Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}" = Galeria fotografii usługi Windows Live
"{CB66242D-12B1-4494-82D2-6F53A7E024A3}" = Galerie foto Windows Live
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CBFD061C-4B27-4A89-ADD8-210316EEFA11}" = Windows Live Messenger
"{CD442136-9115-4236-9C14-278F6A9DCB3F}" = Windows Live Movie Maker
"{CD7CB1E6-267A-408F-877D-B532AD2C882E}" = Windows Live Photo Common
"{CDC39BF2-9697-4959-B893-A2EE05EF6ACB}" = Windows Live Writer
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CF088261-BC81-4FB9-9BA0-7B5B9602D01A}" = Messenger 分享元件
"{CF671BFE-6BA3-44E7-98C1-500D9C51D947}" = Windows Live Photo Gallery
"{CF936193-C584-458C-B793-15FA945621AF}" = Windows Live fotoattēlu galerija
"{CF9DEFAA-12CD-4D04-AA45-F9F667D21E2E}" = Windows Live Movie Maker
"{D06F10C5-3EDD-4B29-A3B5-16BBB9A047F8}" = Windows Live Mesh
"{D07B1FDA-876B-4914-9E9A-309732B6D44F}" = Windows Live Mail
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D27DF849-C8C7-4892-A7F1-E0B381A1BD01}" = Windows Live Writer
"{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack
"{D31169F2-CD71-4337-B783-3E53F29F4CAD}" = Windows Live Mail
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D47C66BE-0EB5-4587-93FE-D1E176C4B25C}" = Windows Live Messenger
"{D4F81B27-4054-4AD6-A588-265508BAA17C}" = Messenger Companion
"{D57D43BF-699A-429F-AF8C-AF1867222800}" = Windows Live 사진 갤러리
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D58E381C-DE02-46A9-B9D1-A2CB807D2676}" = Messenger Companion
"{D657CCB5-9F2F-4D3C-B93D-F77EBEF79B66}" = Messenger-kumppani
"{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D987098B-3AD4-4E88-B80E-CF27A32D1955}" = Windows Live Writer Resources
"{DA29F644-2420-4448-8128-1331BE588999}" = Windows Live Writer
"{DAEF48AD-89C8-4A93-B1DD-45B7E4FB6071}" = Windows Live Movie Maker
"{DB1208F4-B2FE-44E9-BFE6-8824DBD7891B}" = Windows Live Movie Maker
"{DBAA2B17-D596-4195-A169-BA2166B0D69B}" = Windows Live Mail
"{DCAB6BA7-6533-44BF-9235-E5BF33B7431C}" = Windows Live Writer
"{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{DE7C13A6-E4EA-4296-B0D5-5D7E8AD69501}" = Windows Live Writer
"{DE8F99FD-2FC7-4C98-AA67-2729FDE1F040}" = Windows Live Writer Resources
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DEF91E0F-D266-453D-B6F2-1BA002B40CB6}" = Windows Live Essentials
"{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E18B30AA-6E2D-480C-B918-AF61009F4010}" = عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5377D46-83C5-445A-A1F1-830336B42A10}" = Windows Live Galerija fotografija
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligações Remotas
"{E55E0C35-AC3C-4683-BA2F-834348577B80}" = Windows Live Writer
"{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}" = Fotogalerija Windows Live
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5DD4723-FE0B-436E-A815-DC23CF902A0B}" = Windows Live UX Platform Language Pack
"{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E83DC314-C926-4214-AD58-147691D6FE9F}" = Основные компоненты Windows Live
"{E8524B28-3BBB-4763-AC83-0E83FE31C350}" = Windows Live Writer
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E9AD2143-26D5-4201-BED1-19DCC03B407D}" = Windows Live Messenger
"{E9D98402-21AB-4E9F-BF6B-47AF36EF7E97}" = Windows Live Writer Resources
"{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}" = Nexon Game Manager
"{EA76E65F-6679-495A-A8A6-42AD6602ED4C}" = EasyFileShare
"{EA777812-4905-4C08-8F6E-13BDCC734609}" = Windows Live UX Platform Language Pack
"{EAB1BDF2-734A-4D44-9169-7615D185C974}" = Windows Live Mesh
"{EC20FB81-9B5E-4B97-92A2-8DC52548EFCE}" = Windows Live Mesh
"{ED16B700-D91F-44B0-867C-7EB5253CA38D}" = Raccolta foto di Windows Live
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.210
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F0F9505B-3ACF-4158-9311-D0285136AA00}" = Windows Live Essentials
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F14F9EE9-9B68-42B4-90F7-0924F7619281}" = Spremljevalec Messenger
"{F2979AAA-FDD7-4CB3-93BC-5C24D965D679}" = Windows Live Messenger
"{F35DC85A-E96B-496B-ABE7-F04192824856}" = Windows Live Messenger
"{F3ECEB0A-82A0-4DB9-BB44-393A66BA0871}" = Messenger kísérő
"{F4BEA6C1-AAC3-4810-AAEA-588E26E0F237}" = Windows Live UX Platform Language Pack
"{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources
"{F66430D8-08E6-4C96-B9B7-90E66E27D58C}" = Windows Live Mail
"{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}" = Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις
"{F687E657-F636-44DF-8125-9FEEA2C362F5}" = Samsung Support Center
"{F783464C-C7C6-4E9B-AC40-BC90E5414BAF}" = Windows Live Messenger
"{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos
"{F7E80BA7-A09D-4DD1-828B-C4A0274D4720}" = Windows Live Mesh
"{F80E5450-3EF3-4270-B26C-6AC53BEC5E76}" = Windows Live Movie Maker
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{F992409C-9D10-4AE2-BAEB-B5409AD3785E}" = 用于远程连接的 Windows Live Mesh ActiveX 控件(简体中文)
"{FA20D803-14E5-4B00-8F03-B519D46F9D4A}" = Windows Live Messenger
"{FA6CF94F-DACF-4FE7-959D-55C421B91B17}" = Windows Live Mail
"{FB3D07AE-73D0-47A9-AC12-6F50BF8B6202}" = Windows Live Movie Maker
"{FB79FDB7-4DE1-453D-99FE-9A880F57380E}" = Windows Live Fotogalerie
"{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live
"{FCDE76CB-989D-4E32-9739-6A272D2B0ED7}" = Windows Live Mesh
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FE62C88B-425B-4BDE-8B70-CD5AE3B83176}" = Windows Live Essentials
"{FEA0181F-3758-46DA-B7EC-F3CDFA7E0CE7}" = Помощник на Messenger
"{FEEF7F78-5876-438B-B554-C4CC426A4302}" = Windows Live Essentials
"{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker
"{FF3DFA01-1E98-46B4-A065-DA8AD47C9598}" = Windows Live Movie Maker
"{FF737490-5A2D-4269-9D82-97DB2F7C0B09}" = Windows Live Movie Maker
"{FFD0E594-823B-4E2B-B680-720B3C852588}" = BatteryLifeExtender
"{FFFA0584-8E3D-4195-8283-CCA3AD73C746}" = Windows Live Messenger
"Activision_CTP2UninstallKey" = Call To Power 2
"Adobe AIR" = Adobe AIR
"Atlantica" = Atlantica
"BandiMPEG1" = Bandisoft MPEG-1 Decoder
"Combat Arms EU" = Combat Arms EU
"Drakensang Online" = Drakensang Online
"EA Installer.-1797597899" = EA Installer
"FLV Player" = FLV Player 2.0 (build 25)
"FUSSBALL MANAGER 11" = FUSSBALL MANAGER 11
"Game Console - WildGames" = WildTangent ORB Game Console
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}" = AION Free-To-Play
"InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}" = CyberLink MediaShow
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD 10
"NCLauncher_GameForge" = NC Launcher (GameForge)
"NIS" = Norton Internet Security
"Samsung Printer Live Update" = Samsung Printer Live Update
"Samsung Universal Print Driver" = Samsung Universal Print Driver
"Samsung Universal Scan Driver" = Samsung Universal Scan Driver
"TeamViewer 7" = TeamViewer 7
"WildTangent wildgames Master Uninstall" = WildTangent Games
"WinLiveSuite" = Windows Live Essentials
"WT085559" = Diner Dash 2 Restaurant Rescue
"WT085567" = Chuzzle Deluxe
"WT085580" = John Deere Drive Green
"WT085581" = Penguins!
"WT085583" = Polar Golfer
"WT085587" = Agatha Christie - Death on the Nile
"WT085597" = Build-a-lot
"WT085618" = Farm Frenzy
"WT085622" = Insaniquarium Deluxe
"WT085663" = Peggle
"WT089285" = Zuma Deluxe
"WT089286" = Bejeweled 2 Deluxe
"Yahoo! Companion" = Yahoo! Toolbar
"Yahoo! Messenger" = Yahoo! Messenger
"Yahoo! Software Update" = Yahoo! Software Update
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"SOE-EverQuest II" = EverQuest II
"UnityWebPlayer" = Unity Web Player
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 6/22/2012 4:36:31 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: chrome.exe, Version: 17.0.963.56,
Zeitstempel: 0x4f3b1160 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x77b4ad95 ID des fehlerhaften
Prozesses: 0xb00 Startzeit der fehlerhaften Anwendung: 0x01cd50b6b0167dca Pfad der
fehlerhaften Anwendung: C:\Users\Sven\AppData\Local\Google\Chrome\Application\chrome.exe
Pfad
des fehlerhaften Moduls: unknown Berichtskennung: f276c6f3-bca9-11e1-aece-90a4de6a3cc6
Error - 6/22/2012 4:42:26 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
Zeitstempel: 0x4a5bc637 Name des fehlerhaften Moduls: iertutil.dll, Version: 9.0.8112.16446,
Zeitstempel: 0x4fb57b3c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00002440 ID des fehlerhaften
Prozesses: 0xe70 Startzeit der fehlerhaften Anwendung: 0x01cd50b7877af7ad Pfad der
fehlerhaften Anwendung: C:\windows\SysWOW64\rundll32.exe Pfad des fehlerhaften Moduls:
C:\windows\syswow64\iertutil.dll Berichtskennung: c67a2edc-bcaa-11e1-aece-90a4de6a3cc6
Error - 6/22/2012 4:47:28 PM | Computer Name = Sven-PC | Source = Microsoft-Windows-RestartManager | ID = 10006
Description = Die Anwendung oder der Dienst "Windows Search" konnte nicht heruntergefahren
werden.
Error - 6/22/2012 4:52:27 PM | Computer Name = Sven-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385,
Zeitstempel: 0x4a5bc637 Name des fehlerhaften Moduls: iertutil.dll, Version: 9.0.8112.16446,
Zeitstempel: 0x4fb57b3c Ausnahmecode: 0xc0000005 Fehleroffset: 0x00002440 ID des fehlerhaften
Prozesses: 0x15f0 Startzeit der fehlerhaften Anwendung: 0x01cd50b8ed1dbbeb Pfad der
fehlerhaften Anwendung: C:\windows\SysWOW64\rundll32.exe Pfad des fehlerhaften Moduls:
C:\windows\syswow64\iertutil.dll Berichtskennung: 2c40f661-bcac-11e1-aece-90a4de6a3cc6
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description =
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description =
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description =
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description =
Error - 6/22/2012 4:54:09 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 10005
Description =
Error - 6/22/2012 4:54:10 PM | Computer Name = Sven-PC | Source = MsiInstaller | ID = 1024
Description =
[ System Events ]
Error - 4/24/2012 11:38:15 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error - 4/24/2012 11:41:26 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
Error - 4/25/2012 11:10:36 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error - 4/25/2012 11:14:23 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
Error - 4/26/2012 12:08:17 PM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error - 4/26/2012 12:11:36 PM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
Error - 4/27/2012 10:52:08 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "NVIDIA Update Service Daemon" wurde nicht richtig gestartet.
Error - 4/27/2012 10:54:40 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows-Bilderfassung (WIA)" wurde nicht richtig gestartet.
Error - 4/29/2012 4:20:09 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error - 4/29/2012 4:22:11 AM | Computer Name = Sven-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Intel(R) Management and Security Application User Notification
Service" wurde nicht richtig gestartet.
< End of report >
|
|
12.09.2012, 13:03
| #5 |
| /// Helfer-Team | BKA-Trojaner, und keine Ahnung wie es läuftFixen mit OTL Lade (falls noch nicht vorhanden) OTL von Oldtimer herunter und speichere es auf Deinem Desktop (nicht woanders hin).
Ersetze die *** Sternchen wieder in den Benutzernamen zurück! Code:
ATTFilter :OTL
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SMSTDF&pc=MASM&src=IE-SearchBox
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O2 - BHO: (SingleInstance Class) - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll (Yahoo! Inc)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll (Yahoo! Inc.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{4C998393-5696-6508-B037-E626C5D685F3}] C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}] C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [huapcfpuomvvpnj] C:\ProgramData\huapcfpu.exe ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [kbdapiserv] C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll ()
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Messenger (Yahoo!)] "C:\PROGRA~2\Yahoo!\Messenger\YahooMessenger.exe" -quiet File not found
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Sony Ericsson PC Companion] C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001..\Run: [Userinit] C:\Users\Sven\AppData\Roaming\appConf32.exe ()
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1241931330-1321431864-582149410-1001\..Trusted Domains: sony.com ([]* in Trusted sites)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/03/13 20:39:10 | 000,000,061 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2011/12/16 17:48:12 | 000,000,101 | ---- | M] () - F:\Autorun.inf -- [ FAT32 ]
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Einstiegsseite.exe -- [2009/12/10 17:43:32 | 001,569,744 | R--- | M] (HanseNet Telekommunikation GmbH)
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell - "" = AutoRun
O33 - MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\Shell\AutoRun\command - "" = F:\Startme.exe
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\Users\Sven\ms.exe
[2012/09/09 23:28:32 | 000,054,272 | ---- | M] () -- C:\ProgramData\huapcfpu.exe
[2008/12/09 17:23:13 | 000,051,536 | RHS- | C] () -- C:\Users\Sven\AppData\Roaming\appConf32.exe
[2011/12/23 14:12:29 | 000,351,184 | ---- | C] (Adobe Systems, Incorporated) -- C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll
[2012/09/09 23:28:47 | 000,000,000 | ---D | C] -- C:\ProgramData\urkvkanuoxokarg
[2012/09/09 23:28:47 | 000,000,051 | ---- | M] () -- C:\ProgramData\bdccfjlrwixtvuw
[2011/12/16 23:02:14 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\kock
[2012/09/08 01:44:49 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\UAs
[2012/09/08 01:45:43 | 000,000,000 | ---D | M] -- C:\Users\Sven\AppData\Roaming\xmldm
:Files
C:\Users\Sven\AppData\Roaming\*roIEHelp*.*
C:\ProgramData\*.exe
C:\ProgramData\TEMP
C:\Users\*****\AppData\Local\{*}
C:\Users\*****\AppData\Local\Temp\*.exe
C:\Users\*****\AppData\LocalLow\Sun\Java\Deployment\cache
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk
ipconfig /flushdns /c
:Commands
[emptytemp]
Hinweis für Mitleser: Obiges OTL-Script ist ausschließlich für diesen User in dieser Situtation erstellt worden. Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen! |
|
12.09.2012, 13:58
| #6 |
| | BKA-Trojaner, und keine Ahnung wie es läuft All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! HKU\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully. C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}\ deleted successfully. C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll moved successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ deleted successfully. C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll moved successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully. File C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked deleted successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\ not found. File C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll not found. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully. C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\{4C998393-5696-6508-B037-E626C5D685F3} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4C998393-5696-6508-B037-E626C5D685F3}\ not found. C:\Users\Sven\AppData\Roaming\Overyn\ukzeup.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\{B2E663E4-B92C-68B3-A965-E9D64E2F4C84} deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B2E663E4-B92C-68B3-A965-E9D64E2F4C84}\ not found. File C:\Users\Sven\AppData\Roaming\Wouqh\nyzym.exe not found. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\huapcfpuomvvpnj deleted successfully. C:\ProgramData\huapcfpu.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\kbdapiserv deleted successfully. C:\Users\Sven\AppData\Local\kbdapiserv\eapPad32.dll moved successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Messenger (Yahoo!) deleted successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Sony Ericsson PC Companion deleted successfully. C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe moved successfully. Registry value HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Userinit deleted successfully. C:\Users\Sven\AppData\Roaming\appConf32.exe moved successfully. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorAdmin deleted successfully. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\\ConsentPromptBehaviorUser deleted successfully. Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully. Registry key HKEY_USERS\S-1-5-21-1241931330-1321431864-582149410-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully. 64bit-Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\\WebCheck deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\ not found. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! File move failed. E:\autorun.inf scheduled to be moved on reboot. F:\Autorun.inf moved successfully. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9997dfd3-b97e-11e0-9b8a-806e6f6e6963}\ not found. File move failed. E:\Einstiegsseite.exe scheduled to be moved on reboot. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{a64879b2-ee99-11e1-bd8b-90a4de6a3cc6}\ not found. File F:\Startme.exe not found. C:\Users\Sven\ms.exe moved successfully. File C:\ProgramData\huapcfpu.exe not found. File C:\Users\Sven\AppData\Roaming\appConf32.exe not found. C:\Users\Sven\AppData\Roaming\AcroIEHelpe068.dll moved successfully. C:\ProgramData\urkvkanuoxokarg folder moved successfully. C:\ProgramData\bdccfjlrwixtvuw moved successfully. C:\Users\Sven\AppData\Roaming\kock folder moved successfully. C:\Users\Sven\AppData\Roaming\UAs folder moved successfully. C:\Users\Sven\AppData\Roaming\xmldm folder moved successfully. ========== FILES ========== C:\Users\Sven\AppData\Roaming\AcroIEHelpe.txt moved successfully. File\Folder C:\ProgramData\*.exe not found. C:\ProgramData\Temp\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} folder moved successfully. C:\ProgramData\Temp\{CB099890-1D5F-11D5-9EA9-0050BAE317E1} folder moved successfully. C:\ProgramData\Temp\{80E158EA-7181-40FE-A701-301CE6BE64AB} folder moved successfully. C:\ProgramData\Temp\{5DB1DF0C-AABC-4362-8A6D-CEFDFB036E41} folder moved successfully. C:\ProgramData\Temp\{40BF1E83-20EB-11D8-97C5-0009C5020658} folder moved successfully. C:\ProgramData\Temp\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79} folder moved successfully. C:\ProgramData\Temp\{01FB4998-33C4-4431-85ED-079E3EEFE75D} folder moved successfully. C:\ProgramData\Temp folder moved successfully. C:\Users\Sven\AppData\Local\{00936415-E1F9-4E70-9105-10081C14065C} folder moved successfully. C:\Users\Sven\AppData\Local\{01049D40-CE9F-4549-BA6F-F2042797A57A} folder moved successfully. C:\Users\Sven\AppData\Local\{019C53D6-66BE-45D1-8B83-D3C19A4F43EE} folder moved successfully. C:\Users\Sven\AppData\Local\{0239A1C9-32DF-4D23-B6CE-ED185B6C3112} folder moved successfully. C:\Users\Sven\AppData\Local\{025E3C88-7DBD-4057-99AC-992F37224E23} folder moved successfully. C:\Users\Sven\AppData\Local\{02612168-8E3C-46E0-AECD-74F86765B8E9} folder moved successfully. C:\Users\Sven\AppData\Local\{0288E047-1F31-4CE7-92FD-895A7773C335} folder moved successfully. C:\Users\Sven\AppData\Local\{02B98233-5C80-4D5A-966D-FDAFFBB2F193} folder moved successfully. C:\Users\Sven\AppData\Local\{02BD70E0-9AC7-430E-AD06-EE39AC07F605} folder moved successfully. C:\Users\Sven\AppData\Local\{02FAE782-83E9-41F0-9043-DEA7D1433E1F} folder moved successfully. C:\Users\Sven\AppData\Local\{039B57EC-39EE-45B3-84B8-7CD04F982174} folder moved successfully. C:\Users\Sven\AppData\Local\{03FF347C-C527-4F99-B111-222EED4D9E42} folder moved successfully. C:\Users\Sven\AppData\Local\{04370C77-4ABC-4F0C-AE4D-4FBE20A87867} folder moved successfully. C:\Users\Sven\AppData\Local\{04686241-95B2-4F65-AACE-5C3F110AD874} folder moved successfully. C:\Users\Sven\AppData\Local\{04E5D34D-DB8C-4717-8DDB-B18918F05CE6} folder moved successfully. C:\Users\Sven\AppData\Local\{053F08F1-D769-45E5-A3E0-0F8B9FE61F67} folder moved successfully. C:\Users\Sven\AppData\Local\{05B231B0-738E-443C-ABEC-D13E84DC2C0E} folder moved successfully. C:\Users\Sven\AppData\Local\{05D29B31-8B99-43FD-9DFD-4F96412A224E} folder moved successfully. C:\Users\Sven\AppData\Local\{05F8AB72-7045-4652-AFE8-0BDD00416242} folder moved successfully. C:\Users\Sven\AppData\Local\{06416366-3CDA-4EB6-BB9E-1BC842DCDF78} folder moved successfully. C:\Users\Sven\AppData\Local\{0679827A-C566-49D2-8F60-A0EEDD4E4301} folder moved successfully. C:\Users\Sven\AppData\Local\{069106AA-8D86-4CA3-9F43-4FE91E25CBE7} folder moved successfully. C:\Users\Sven\AppData\Local\{06CE3FE3-88EC-4640-8DB6-5F0AE0A6417C} folder moved successfully. C:\Users\Sven\AppData\Local\{06FCBE9B-0D56-4021-8E3D-725A6BB4A562} folder moved successfully. C:\Users\Sven\AppData\Local\{07A2FAC9-67D5-444B-966D-2C34FC792EC9} folder moved successfully. C:\Users\Sven\AppData\Local\{07F7C2E0-1C60-427D-8948-5E5F8E11C3A3} folder moved successfully. C:\Users\Sven\AppData\Local\{081E88CB-CA1F-4E7F-B7EB-24B7B7FC3C41} folder moved successfully. C:\Users\Sven\AppData\Local\{09170B83-4DEF-4AC0-85E4-EB02DE1105A1} folder moved successfully. C:\Users\Sven\AppData\Local\{0A1EA684-AB0A-4D13-BF8C-896B29CD1513} folder moved successfully. C:\Users\Sven\AppData\Local\{0A7D5A5B-9B6A-43B6-92F7-FEC82AA6FE09} folder moved successfully. C:\Users\Sven\AppData\Local\{0AA2E4F4-7BFE-499D-9747-C19063EC675B} folder moved successfully. C:\Users\Sven\AppData\Local\{0AE2BECC-8D76-4DA0-B5F9-476722D39039} folder moved successfully. C:\Users\Sven\AppData\Local\{0B1EB304-E7A5-4E68-B24E-4686D832F7B3} folder moved successfully. C:\Users\Sven\AppData\Local\{0B812061-2D23-4CD5-8611-F9F519C425E8} folder moved successfully. C:\Users\Sven\AppData\Local\{0BD85775-BDA6-4C06-95BD-CF41764C69DD} folder moved successfully. C:\Users\Sven\AppData\Local\{0BDE136D-FB13-4AF0-A151-CB41FF312B85} folder moved successfully. C:\Users\Sven\AppData\Local\{0C300529-3B7C-4283-83E7-99CF51053560} folder moved successfully. C:\Users\Sven\AppData\Local\{0CCCCCB5-BF84-443C-B565-D8A6C7751662} folder moved successfully. C:\Users\Sven\AppData\Local\{0CDADEE3-7DED-46EA-99C2-A0F83DBA172E} folder moved successfully. C:\Users\Sven\AppData\Local\{0D8ECD93-37D7-466F-AE0A-506C564C1775} folder moved successfully. C:\Users\Sven\AppData\Local\{0DCCBF48-6A67-4118-9AB5-35711FF31EDF} folder moved successfully. C:\Users\Sven\AppData\Local\{0DF0AD9E-B9AE-4621-8572-4E067990270E} folder moved successfully. C:\Users\Sven\AppData\Local\{0E0AC019-B576-41C5-8EA9-6BF62D36262E} folder moved successfully. C:\Users\Sven\AppData\Local\{0E40FA2F-36FF-444B-891F-09B69970998E} folder moved successfully. C:\Users\Sven\AppData\Local\{10A5C6E0-31D3-4B98-9F62-076E314827C3} folder moved successfully. C:\Users\Sven\AppData\Local\{1102379D-EF8F-462A-A27B-D196D515C034} folder moved successfully. C:\Users\Sven\AppData\Local\{115E3044-A4A6-48F8-AAFC-C223B92B23F3} folder moved successfully. C:\Users\Sven\AppData\Local\{11659C0B-5F4C-4F09-98C9-C9498D2B14FD} folder moved successfully. C:\Users\Sven\AppData\Local\{11FD66C7-9BF4-424F-B725-34012E3582E3} folder moved successfully. C:\Users\Sven\AppData\Local\{12845692-9D0D-4527-A566-5EB63D2DD4C0} folder moved successfully. C:\Users\Sven\AppData\Local\{1388C119-E550-4BCD-8E11-88804DB2A194} folder moved successfully. C:\Users\Sven\AppData\Local\{138E8B54-C2A7-42CD-BAB7-86BB5615851B} folder moved successfully. C:\Users\Sven\AppData\Local\{13BEC485-6983-452B-B978-5BFEDFB9B5D3} folder moved successfully. C:\Users\Sven\AppData\Local\{13F63CFC-200B-46F2-896F-C380C4ACC533} folder moved successfully. C:\Users\Sven\AppData\Local\{147A8627-84C4-4BC1-A559-55483BFA7ABB} folder moved successfully. C:\Users\Sven\AppData\Local\{14915615-8751-41E5-8501-8CC438E3F60E} folder moved successfully. C:\Users\Sven\AppData\Local\{155B5BEA-56E2-44D5-87DA-8427D42E170D} folder moved successfully. C:\Users\Sven\AppData\Local\{155DFB51-2DF2-49D3-98E0-671325C1D94F} folder moved successfully. C:\Users\Sven\AppData\Local\{158A4C78-6E5B-4D17-9592-02C7F243D642} folder moved successfully. C:\Users\Sven\AppData\Local\{15E95555-3039-4AF9-9A79-5C2DB1D0473C} folder moved successfully. C:\Users\Sven\AppData\Local\{15EA5DB1-ECCC-4A57-B1A3-B13064D9F565} folder moved successfully. C:\Users\Sven\AppData\Local\{163AE9EC-0C2B-4A1D-B2A9-0933D161F2E6} folder moved successfully. C:\Users\Sven\AppData\Local\{164D6201-D402-4A61-BBC6-C57A474E3863} folder moved successfully. C:\Users\Sven\AppData\Local\{165CD50D-0600-477C-A51F-8883E4B4F0D4} folder moved successfully. C:\Users\Sven\AppData\Local\{166CA21D-4382-4E16-A05B-DC77771C08A4} folder moved successfully. C:\Users\Sven\AppData\Local\{16D688A5-8726-4AF9-8EB2-E5DA26E54306} folder moved successfully. C:\Users\Sven\AppData\Local\{179952AD-99A8-48B9-B508-9243A4495A9D} folder moved successfully. C:\Users\Sven\AppData\Local\{17B1C00C-565C-4DFD-8312-75860761D685} folder moved successfully. C:\Users\Sven\AppData\Local\{1839B90E-59DC-4859-9EBE-D1C3EA3AFE9C} folder moved successfully. C:\Users\Sven\AppData\Local\{188271BE-3CC0-4AB1-8184-4F84C2D7AA35} folder moved successfully. C:\Users\Sven\AppData\Local\{189A7250-FA6B-42A8-ADF6-CBCD5747EDF3} folder moved successfully. C:\Users\Sven\AppData\Local\{18ECBE82-6E50-40A5-A507-A9ABB0D2D365} folder moved successfully. C:\Users\Sven\AppData\Local\{18F91AF2-23A8-485E-B3EF-086686684573} folder moved successfully. C:\Users\Sven\AppData\Local\{19A65A2F-54CF-46E3-8A4D-F715CC8D2881} folder moved successfully. C:\Users\Sven\AppData\Local\{19D03CE7-DA7A-459C-ACE0-CE42344D1797} folder moved successfully. C:\Users\Sven\AppData\Local\{19DF1BBE-7569-4559-BCA8-9BBC86DD0233} folder moved successfully. C:\Users\Sven\AppData\Local\{1A2C33F5-92D4-4C03-8FA1-51A0DFC61C3B} folder moved successfully. C:\Users\Sven\AppData\Local\{1A6047A3-7B65-4CF1-936A-7FF169723515} folder moved successfully. C:\Users\Sven\AppData\Local\{1A6CDCAB-2D37-4CA4-AD97-2C2CBCDD7439} folder moved successfully. C:\Users\Sven\AppData\Local\{1A7A6603-0B9F-4022-8F8E-7CF907D9747E} folder moved successfully. C:\Users\Sven\AppData\Local\{1A8F68A1-BC01-4915-B8A5-1FA65D261DD1} folder moved successfully. C:\Users\Sven\AppData\Local\{1A9825AB-2C03-4FDE-B02C-6CE00E3E656D} folder moved successfully. C:\Users\Sven\AppData\Local\{1AABBB9B-E9AF-4412-9337-030A4ADCCD2D} folder moved successfully. C:\Users\Sven\AppData\Local\{1B50BFAE-0E41-4CDB-B71B-4B5C37C02518} folder moved successfully. C:\Users\Sven\AppData\Local\{1B5423B4-EE87-4C45-84F9-32B0B51DDD3B} folder moved successfully. C:\Users\Sven\AppData\Local\{1B6D4F42-017D-4870-A479-EC72FE7690CA} folder moved successfully. C:\Users\Sven\AppData\Local\{1B9B7717-F69D-4D9A-8405-CA207F6DB7CC} folder moved successfully. C:\Users\Sven\AppData\Local\{1C059564-0774-43DD-972C-8FA73DC32FF8} folder moved successfully. C:\Users\Sven\AppData\Local\{1C5BD25A-6C76-4BE7-8E69-5D18FD6337BA} folder moved successfully. C:\Users\Sven\AppData\Local\{1C8EEDA0-CB2F-4FAB-BC20-852BD7C7A70A} folder moved successfully. C:\Users\Sven\AppData\Local\{1CB472D8-1636-4A35-BAFC-EF0889B68258} folder moved successfully. C:\Users\Sven\AppData\Local\{1CD7C5F6-1C2C-4BB5-AFB6-0CB6E36CC18B} folder moved successfully. C:\Users\Sven\AppData\Local\{1CE8DEDF-5E6E-4BC2-9E74-6A09C230446E} folder moved successfully. C:\Users\Sven\AppData\Local\{1E201354-5779-43B4-BF87-DC6B5F310577} folder moved successfully. C:\Users\Sven\AppData\Local\{1E83918B-71DF-4FAD-8793-6645E0C8258C} folder moved successfully. C:\Users\Sven\AppData\Local\{1ED94D25-C939-4206-9F5B-54E4981CADBA} folder moved successfully. C:\Users\Sven\AppData\Local\{1FEFD9C6-91B0-4CBD-AEF5-423B29564C08} folder moved successfully. C:\Users\Sven\AppData\Local\{20E42385-41D8-4999-B560-2E43F2AD536F} folder moved successfully. C:\Users\Sven\AppData\Local\{21874DB6-7A85-465C-96BB-38186F228419} folder moved successfully. C:\Users\Sven\AppData\Local\{21B2AF57-9B95-47FD-B42E-929C15B27EA5} folder moved successfully. C:\Users\Sven\AppData\Local\{2254F274-3C5D-430D-8824-918067CA9612} folder moved successfully. C:\Users\Sven\AppData\Local\{22C4920B-71D5-49E1-B6A5-89D073FC1251} folder moved successfully. C:\Users\Sven\AppData\Local\{230F54DC-6180-4DAE-904A-FFE8416AB25B} folder moved successfully. C:\Users\Sven\AppData\Local\{2382026B-D81E-4194-8A40-13FDCCDEE854} folder moved successfully. C:\Users\Sven\AppData\Local\{239EE9E1-D3A0-4B05-A764-760A99C8412D} folder moved successfully. C:\Users\Sven\AppData\Local\{23E508E6-DD98-41C6-931C-BE5775015150} folder moved successfully. C:\Users\Sven\AppData\Local\{243DCBCD-FB62-480F-B99B-8236237A7BD3} folder moved successfully. C:\Users\Sven\AppData\Local\{243F80C5-6442-424E-A8B9-F1834C9B8D30} folder moved successfully. C:\Users\Sven\AppData\Local\{24EBED9C-3528-4C34-B22E-5913E196E2ED} folder moved successfully. C:\Users\Sven\AppData\Local\{259B4E32-9BB0-4BC0-8C03-4E3421238A36} folder moved successfully. C:\Users\Sven\AppData\Local\{25F6841A-5563-4A31-8A73-EB80AB7526A0} folder moved successfully. C:\Users\Sven\AppData\Local\{263038B3-612E-4582-81AD-F6EEFF9B8843} folder moved successfully. C:\Users\Sven\AppData\Local\{266F81D5-B023-4473-B66B-6521B0D6BFFA} folder moved successfully. C:\Users\Sven\AppData\Local\{26E3D46E-5140-4CD8-8E95-65CDF6AA4EE7} folder moved successfully. C:\Users\Sven\AppData\Local\{26F098C9-6F54-4C87-A0FA-79DBBD515894} folder moved successfully. C:\Users\Sven\AppData\Local\{27E337DC-F26C-4DED-805A-59E7AD0F4E54} folder moved successfully. C:\Users\Sven\AppData\Local\{28AE91C7-A6BF-4927-873F-17165D4F421E} folder moved successfully. C:\Users\Sven\AppData\Local\{28AF1B3D-C055-4A1A-B52A-8FBD0794A767} folder moved successfully. C:\Users\Sven\AppData\Local\{28FDB050-6586-4CE8-BFB7-1020E9C22CF3} folder moved successfully. C:\Users\Sven\AppData\Local\{29233047-FC3C-4905-9BC1-D2BDCB47AE6A} folder moved successfully. C:\Users\Sven\AppData\Local\{297CF956-DB67-49F1-BBEC-016C36AF503C} folder moved successfully. C:\Users\Sven\AppData\Local\{2995CE17-8B0E-4AD3-B1A4-F0F4A9677A8A} folder moved successfully. C:\Users\Sven\AppData\Local\{29A62EEC-01DB-4955-B638-69CBD3FB3906} folder moved successfully. C:\Users\Sven\AppData\Local\{2A0A7EB0-C31B-4DF5-BA11-E8E879AE8C66} folder moved successfully. C:\Users\Sven\AppData\Local\{2A933F67-9474-4C3B-A1BD-09440C673910} folder moved successfully. C:\Users\Sven\AppData\Local\{2A9E8D06-C6D7-46BA-BCFD-D77BCF96E948} folder moved successfully. C:\Users\Sven\AppData\Local\{2AFBA1B3-5F47-4E57-AD0D-B2765D9C7828} folder moved successfully. C:\Users\Sven\AppData\Local\{2B2AD9D5-4747-4E26-BA87-52A9A58C8135} folder moved successfully. C:\Users\Sven\AppData\Local\{2B73406A-55E5-4CB8-AC60-3D2E30D2345D} folder moved successfully. C:\Users\Sven\AppData\Local\{2C313425-1837-4A72-B5A4-B4F646A41542} folder moved successfully. C:\Users\Sven\AppData\Local\{2C6D4109-CB96-4CC1-B585-2CE75BF635FA} folder moved successfully. C:\Users\Sven\AppData\Local\{2E511AB0-F410-4D69-8185-D27AFE39149B} folder moved successfully. C:\Users\Sven\AppData\Local\{2FA54C86-2C32-4248-9D91-9BC301A51ED3} folder moved successfully. C:\Users\Sven\AppData\Local\{304168B0-94B5-4200-8982-A74246E8AC4F} folder moved successfully. C:\Users\Sven\AppData\Local\{3079DE30-740E-4DB1-A43E-C780D66D86B2} folder moved successfully. C:\Users\Sven\AppData\Local\{30B90928-EFBF-4B6E-990E-B069EE610E83} folder moved successfully. C:\Users\Sven\AppData\Local\{31B946A4-CDAE-45DE-9574-84315B56E023} folder moved successfully. C:\Users\Sven\AppData\Local\{31C287F5-D110-4AA9-BE55-C67E760F6964} folder moved successfully. C:\Users\Sven\AppData\Local\{31E04805-C109-4AB3-90CD-C8B20BE76B63} folder moved successfully. C:\Users\Sven\AppData\Local\{32D0AF8B-0C08-4DF7-B737-0482CA912417} folder moved successfully. C:\Users\Sven\AppData\Local\{3344FFCE-38E2-40BF-AF06-58BB4F99CA6C} folder moved successfully. C:\Users\Sven\AppData\Local\{3370D99F-9939-440E-8B88-B9AD77920106} folder moved successfully. C:\Users\Sven\AppData\Local\{3472C722-E1B3-4DB9-850D-E788C02BA6D5} folder moved successfully. C:\Users\Sven\AppData\Local\{3488043F-068F-4544-9550-201D692D8049} folder moved successfully. C:\Users\Sven\AppData\Local\{34A2D8F0-A9C6-4EEF-9677-6EB51DF1E48A} folder moved successfully. C:\Users\Sven\AppData\Local\{356CE69E-BA67-4699-8621-73B5058D4E07} folder moved successfully. C:\Users\Sven\AppData\Local\{3589B4FE-7E2E-4EB6-93B1-5D75332F72C4} folder moved successfully. C:\Users\Sven\AppData\Local\{35E58812-BB5E-47B9-9810-FC4937038475} folder moved successfully. C:\Users\Sven\AppData\Local\{35EA3B5A-36A8-4D12-A4C9-638CDB70390E} folder moved successfully. C:\Users\Sven\AppData\Local\{364849DC-11B6-4250-98B8-592555A696D3} folder moved successfully. C:\Users\Sven\AppData\Local\{36A3D46D-BE9A-49A4-A0C4-2E3B6BC560A5} folder moved successfully. C:\Users\Sven\AppData\Local\{3718CD7C-CF82-43EC-8A5F-619D71439B9F} folder moved successfully. C:\Users\Sven\AppData\Local\{374F35D3-6600-4F9B-95BB-8999374223FF} folder moved successfully. C:\Users\Sven\AppData\Local\{378639E7-044D-478B-9E27-B1EADD3C84BA} folder moved successfully. C:\Users\Sven\AppData\Local\{37F2A683-4978-464F-B232-BAE066922350} folder moved successfully. C:\Users\Sven\AppData\Local\{383078C3-8B4B-4878-AE2A-3213BAEDAFF4} folder moved successfully. C:\Users\Sven\AppData\Local\{38621D50-6C9E-4685-95CF-AFE4A94F93C8} folder moved successfully. C:\Users\Sven\AppData\Local\{38A6D430-4454-4199-89F9-F75746ABB192} folder moved successfully. C:\Users\Sven\AppData\Local\{396E095B-2EA7-4763-8781-B6E028C177AC} folder moved successfully. C:\Users\Sven\AppData\Local\{3AB4AA80-D87D-4522-99E6-81393CEE31C8} folder moved successfully. C:\Users\Sven\AppData\Local\{3AB4BA9C-797A-4797-84E2-D6668D248720} folder moved successfully. C:\Users\Sven\AppData\Local\{3B11B7E1-4BBD-4D25-A335-705F32E9C38A} folder moved successfully. C:\Users\Sven\AppData\Local\{3B7A73F1-A9EB-406E-AED0-B9265A7BA4BB} folder moved successfully. C:\Users\Sven\AppData\Local\{3C04E4F4-648C-4CD3-BB70-CF48821A32CF} folder moved successfully. C:\Users\Sven\AppData\Local\{3C27B45E-4FC6-45CC-96DC-C1A8EB7533F8} folder moved successfully. C:\Users\Sven\AppData\Local\{3C5A985F-1E63-4EA5-97DA-3C2FF31D09F6} folder moved successfully. C:\Users\Sven\AppData\Local\{3C67232D-2F10-447C-906A-4454B4B55B74} folder moved successfully. C:\Users\Sven\AppData\Local\{3CCE75FD-D94A-4F5F-8A48-23C69184323C} folder moved successfully. C:\Users\Sven\AppData\Local\{3DA207CF-434B-496F-BE0B-AF68931E7F8E} folder moved successfully. C:\Users\Sven\AppData\Local\{3DB0579E-8377-4C69-AC22-05993B44B29D} folder moved successfully. C:\Users\Sven\AppData\Local\{3DF03277-EAE7-4710-B016-0F7F7DEC9F45} folder moved successfully. C:\Users\Sven\AppData\Local\{3DF3A3EA-ED9E-401B-A6BA-F11FFAF0E988} folder moved successfully. C:\Users\Sven\AppData\Local\{3F3921C4-ED9E-47DB-AE97-A9CBC100BB25} folder moved successfully. C:\Users\Sven\AppData\Local\{3F6C4731-8108-42FC-A477-E6909B179074} folder moved successfully. C:\Users\Sven\AppData\Local\{3FD55DBD-78AC-4EFE-9DA0-F054FF141A35} folder moved successfully. C:\Users\Sven\AppData\Local\{40232D44-7C19-40B8-9E0B-AFC5F4B263D6} folder moved successfully. C:\Users\Sven\AppData\Local\{40E2C034-84FF-4A92-831E-49C31C65CC73} folder moved successfully. C:\Users\Sven\AppData\Local\{4113EFA5-0853-4F34-ADCD-0AA91F322DF4} folder moved successfully. C:\Users\Sven\AppData\Local\{4167CED8-C2F2-4F9B-8036-F03BC9227893} folder moved successfully. C:\Users\Sven\AppData\Local\{417BE153-BBD7-4F79-8BE4-8BD33FBB81C9} folder moved successfully. C:\Users\Sven\AppData\Local\{41BB19E7-4153-4FED-BF3E-53E0FEA911B9} folder moved successfully. C:\Users\Sven\AppData\Local\{41F9AC32-BBB4-461A-97E4-8AA2D67E6BDF} folder moved successfully. C:\Users\Sven\AppData\Local\{42186F74-BCB1-4C86-B8D9-7AC714ED6537} folder moved successfully. C:\Users\Sven\AppData\Local\{429BE549-A6AF-4034-9591-C6AC88406D5E} folder moved successfully. C:\Users\Sven\AppData\Local\{42B04F56-51FE-42CB-8B32-F6B2F98960C1} folder moved successfully. C:\Users\Sven\AppData\Local\{433957F1-5673-4129-A087-9E610F526887} folder moved successfully. C:\Users\Sven\AppData\Local\{4351F37D-4358-45DE-8B28-ACC0BD434688} folder moved successfully. C:\Users\Sven\AppData\Local\{43E8095B-67A8-403B-9516-4C6346173849} folder moved successfully. C:\Users\Sven\AppData\Local\{440E2599-ADEC-4A56-A6F0-A9B23D24AE31} folder moved successfully. C:\Users\Sven\AppData\Local\{4482CC97-A17E-48B5-AA2B-8D8455194F8D} folder moved successfully. C:\Users\Sven\AppData\Local\{449A5B04-D20D-4C72-B343-AEA9B9E27046} folder moved successfully. C:\Users\Sven\AppData\Local\{44AC8039-2855-45FC-B7F5-2C776BFD949B} folder moved successfully. C:\Users\Sven\AppData\Local\{45459726-E779-407E-A7CF-9D51F07C9ECA} folder moved successfully. C:\Users\Sven\AppData\Local\{456227C4-1E93-44FC-8907-9B9FEE34E294} folder moved successfully. C:\Users\Sven\AppData\Local\{45A76C6F-1E4D-4636-BE78-8096200F9E2C} folder moved successfully. C:\Users\Sven\AppData\Local\{45C34F7F-6B04-47D3-9BDE-1FD1B3D07B04} folder moved successfully. C:\Users\Sven\AppData\Local\{463E4A3A-3AB7-4901-9381-4FF39498CD24} folder moved successfully. C:\Users\Sven\AppData\Local\{4707D4F4-083F-40D0-9A92-B6A3D156DF0A} folder moved successfully. C:\Users\Sven\AppData\Local\{4740CACC-3B38-4367-8129-EDEC1910BCCD} folder moved successfully. C:\Users\Sven\AppData\Local\{47548E20-918F-449F-AE1B-CEF14452584D} folder moved successfully. C:\Users\Sven\AppData\Local\{479BC984-EDC6-4990-822B-940431824881} folder moved successfully. C:\Users\Sven\AppData\Local\{47A331F2-44BB-4426-844D-86EE6DEA5B88} folder moved successfully. C:\Users\Sven\AppData\Local\{4825DD7C-14BF-4C6A-9AAA-0A2E9FA5B78F} folder moved successfully. C:\Users\Sven\AppData\Local\{496B4EC3-DBB5-4E0D-B5D9-B3B2E6A7842F} folder moved successfully. C:\Users\Sven\AppData\Local\{49E63433-4711-44CC-A5DD-664C49B0AA28} folder moved successfully. C:\Users\Sven\AppData\Local\{4A313B4A-9A21-4897-B1C3-15744DFB913F} folder moved successfully. C:\Users\Sven\AppData\Local\{4B6D98B6-34CB-48D1-84D8-A4F4A9D70A2A} folder moved successfully. C:\Users\Sven\AppData\Local\{4B80CB56-2F8C-4C86-877C-12CBD555B1F0} folder moved successfully. C:\Users\Sven\AppData\Local\{4BB16372-DF3C-45CF-A49F-C5D121BD1B2A} folder moved successfully. C:\Users\Sven\AppData\Local\{4C064FCC-E223-4C9F-B694-83D009449D9B} folder moved successfully. C:\Users\Sven\AppData\Local\{4CCD6D22-92B3-4655-9CCD-F53F9AAB7975} folder moved successfully. C:\Users\Sven\AppData\Local\{4D6B17AF-A6F7-46CE-A7A5-9043C990F28C} folder moved successfully. C:\Users\Sven\AppData\Local\{4DA9E4A9-06D1-430F-9AC2-8E1906D6516C} folder moved successfully. C:\Users\Sven\AppData\Local\{4DF6E7BB-AB7C-4DBA-829B-2976B8A6D7D3} folder moved successfully. C:\Users\Sven\AppData\Local\{4DFB2D05-1B68-4310-A9B2-5B76885075AB} folder moved successfully. C:\Users\Sven\AppData\Local\{4E526F44-00BF-4AEC-A049-310661C00985} folder moved successfully. C:\Users\Sven\AppData\Local\{4F71AF1F-5E8D-421F-98C4-EB7F361DF55A} folder moved successfully. C:\Users\Sven\AppData\Local\{4F92E2C9-98F8-4AD1-BE18-2123C44D65CB} folder moved successfully. C:\Users\Sven\AppData\Local\{5009A097-3D9B-49C9-85E5-DEE9904F1FEB} folder moved successfully. C:\Users\Sven\AppData\Local\{50381187-BB2B-44E9-AD5F-4C1C91159278} folder moved successfully. C:\Users\Sven\AppData\Local\{50DF6CD2-3697-4283-8D7A-29129A51897A} folder moved successfully. C:\Users\Sven\AppData\Local\{511EF2C1-CFC7-470A-ABEA-D149CA155C34} folder moved successfully. C:\Users\Sven\AppData\Local\{5241BB1A-604F-4775-BE84-82458523456C} folder moved successfully. C:\Users\Sven\AppData\Local\{5248BEDE-6A7A-46D5-B0B2-887114F18536} folder moved successfully. C:\Users\Sven\AppData\Local\{526885FC-F627-4DFE-9EA8-9D00AD1FEF0E} folder moved successfully. C:\Users\Sven\AppData\Local\{527212B1-0EB8-4291-A673-DA21042796B8} folder moved successfully. C:\Users\Sven\AppData\Local\{52B1B748-2333-4585-B9EE-BD3DC2384110} folder moved successfully. C:\Users\Sven\AppData\Local\{52C8F275-AF61-434A-989A-3EFA161B2F99} folder moved successfully. C:\Users\Sven\AppData\Local\{53A11C4D-CF5D-4C96-B561-8E1E659B17BA} folder moved successfully. C:\Users\Sven\AppData\Local\{53BD9674-4B86-4EC5-8EE9-940D6CF220F1} folder moved successfully. C:\Users\Sven\AppData\Local\{54B67781-63A8-4387-BF92-26854C83050F} folder moved successfully. C:\Users\Sven\AppData\Local\{54D499CE-BFEF-4C46-8EB6-A81E9915A41F} folder moved successfully. C:\Users\Sven\AppData\Local\{55CE5FE2-6046-4006-9C3E-6F27702F4A97} folder moved successfully. C:\Users\Sven\AppData\Local\{55D42A66-0529-4A61-BD31-7CD033FB0F22} folder moved successfully. C:\Users\Sven\AppData\Local\{56183EFC-65D3-4F89-9EB7-983DA02F0271} folder moved successfully. C:\Users\Sven\AppData\Local\{562F4CAD-9AE2-47BB-A468-A34F7B0AA2C7} folder moved successfully. C:\Users\Sven\AppData\Local\{56487CC0-672B-475E-A9EA-91B9D1EAF5BC} folder moved successfully. C:\Users\Sven\AppData\Local\{56A43E45-23C2-4A56-845D-F0DCA0C619BB} folder moved successfully. C:\Users\Sven\AppData\Local\{56B4F212-8CDC-4F27-81E9-FEAF49A59920} folder moved successfully. C:\Users\Sven\AppData\Local\{56BC9CA6-F3FB-4EC0-948E-2748D07D9876} folder moved successfully. C:\Users\Sven\AppData\Local\{56C3563F-3AD9-4296-BAB4-E07EA4340ACE} folder moved successfully. C:\Users\Sven\AppData\Local\{5776EECB-1EB5-4BB3-82FF-D494CB17FA19} folder moved successfully. C:\Users\Sven\AppData\Local\{57E4B5B0-5351-4351-A99C-5C6D4F525402} folder moved successfully. C:\Users\Sven\AppData\Local\{595D2146-8387-49B6-A1C2-735DAEC5EA1E} folder moved successfully. C:\Users\Sven\AppData\Local\{59E0BA94-A8A3-423E-8A1A-4EFE11192935} folder moved successfully. C:\Users\Sven\AppData\Local\{5A6B7BFC-07E1-4B1E-BFC6-4B729D2F4774} folder moved successfully. C:\Users\Sven\AppData\Local\{5A6F02F4-2CB0-47F2-B5F2-A399304D8701} folder moved successfully. C:\Users\Sven\AppData\Local\{5AA6072D-E956-488A-8FFD-F3179090A862} folder moved successfully. C:\Users\Sven\AppData\Local\{5AF18D85-68E2-4DAD-9379-A7D8D0A73DD7} folder moved successfully. C:\Users\Sven\AppData\Local\{5B8768E0-F02A-4E2D-92B7-9A05BEDEE27F} folder moved successfully. C:\Users\Sven\AppData\Local\{5C9F7758-F49D-456C-9FFB-6DE5A8956A66} folder moved successfully. C:\Users\Sven\AppData\Local\{5D20E9AD-9EFE-4E45-A18C-F701A1ABA2EA} folder moved successfully. C:\Users\Sven\AppData\Local\{5D3ECAFD-692B-4F90-9FD1-43CF4BFEFE98} folder moved successfully. C:\Users\Sven\AppData\Local\{5E4BB609-F808-40E4-BB8A-3FC0DC2DE4CB} folder moved successfully. C:\Users\Sven\AppData\Local\{5F4FF0DB-2EB8-4EBB-A80F-DE7141EC449D} folder moved successfully. C:\Users\Sven\AppData\Local\{5F59D1DF-A803-445F-86EE-4A6ABC806BC0} folder moved successfully. C:\Users\Sven\AppData\Local\{5FF11F92-A831-413E-AFEA-9C2419266558} folder moved successfully. C:\Users\Sven\AppData\Local\{6017019D-F394-4193-B0C8-59D27D40A7DF} folder moved successfully. C:\Users\Sven\AppData\Local\{60AE6ED6-BF0F-4BFC-B3AA-B4A8540CE0EA} folder moved successfully. C:\Users\Sven\AppData\Local\{610DDD72-52DE-408C-AFA5-A42A91EDE5F4} folder moved successfully. C:\Users\Sven\AppData\Local\{616EE18A-663B-45EF-AACC-6E61495E4A0F} folder moved successfully. C:\Users\Sven\AppData\Local\{6195DC5E-4CB8-496A-82D7-58BD0F4E83E1} folder moved successfully. C:\Users\Sven\AppData\Local\{61F4256D-095C-4C2A-88CA-36FEE0529A3A} folder moved successfully. C:\Users\Sven\AppData\Local\{61F725DA-BDB9-4975-9724-70DB26AB52DC} folder moved successfully. C:\Users\Sven\AppData\Local\{622ECE0A-9982-4BE3-A628-0F634E33FC48} folder moved successfully. C:\Users\Sven\AppData\Local\{62C2624E-5A89-45C5-9FDD-6445195D8E1A} folder moved successfully. C:\Users\Sven\AppData\Local\{63AA2BFC-AB1F-49EA-B363-1D997A4F4E6D} folder moved successfully. C:\Users\Sven\AppData\Local\{63B2BEEA-8ABE-4865-BBEE-62EBD1935533} folder moved successfully. C:\Users\Sven\AppData\Local\{64E55A05-19D5-4678-9F73-1201F4FB0111} folder moved successfully. C:\Users\Sven\AppData\Local\{65449DF9-F500-4EAC-AD3B-93A6FACCD704} folder moved successfully. C:\Users\Sven\AppData\Local\{655130DE-9B5E-4285-98DE-A8AD93F4CC9C} folder moved successfully. C:\Users\Sven\AppData\Local\{65589F55-977D-455F-B8CD-3EA29A9E6978} folder moved successfully. C:\Users\Sven\AppData\Local\{6579A806-0D70-45B6-9A62-641D36D4AEC8} folder moved successfully. C:\Users\Sven\AppData\Local\{670201BE-3869-46CC-BE0B-6D1EBBD2D95B} folder moved successfully. C:\Users\Sven\AppData\Local\{6704EFB1-3552-4C6A-BDB6-80C9E6CDFBB0} folder moved successfully. C:\Users\Sven\AppData\Local\{67D902B0-06D6-460A-95A2-C8DD3D076B58} folder moved successfully. C:\Users\Sven\AppData\Local\{67DCDB29-3BBE-415A-AA58-223927DB6727} folder moved successfully. C:\Users\Sven\AppData\Local\{6804AD71-884A-4363-A3E5-3249FA8A723E} folder moved successfully. C:\Users\Sven\AppData\Local\{68EA3CB5-9251-4D57-971D-4B40713EC042} folder moved successfully. C:\Users\Sven\AppData\Local\{694A34B6-3D73-4213-98D0-FFD5B78415BC} folder moved successfully. C:\Users\Sven\AppData\Local\{6A59704C-FB61-498D-8D1D-A88DACD956AF} folder moved successfully. C:\Users\Sven\AppData\Local\{6A7EE957-A894-4D07-9CD1-30D2519EB62C} folder moved successfully. C:\Users\Sven\AppData\Local\{6AD55406-B645-4120-AC61-D2F0FE598F87} folder moved successfully. C:\Users\Sven\AppData\Local\{6B6A0121-C931-4F43-850C-81A5A05CD330} folder moved successfully. C:\Users\Sven\AppData\Local\{6B7A5B13-552E-4285-83B0-5591360B2342} folder moved successfully. C:\Users\Sven\AppData\Local\{6B8D4453-B43F-413A-BF13-9CF1369C7888} folder moved successfully. C:\Users\Sven\AppData\Local\{6BAF1E9C-C466-4BF6-8523-5BA2FF1D4A20} folder moved successfully. C:\Users\Sven\AppData\Local\{6C9A815D-3B21-465C-8C91-98C94B463B71} folder moved successfully. C:\Users\Sven\AppData\Local\{6CB438AF-6981-4A00-A1A0-90BE4FA74E91} folder moved successfully. C:\Users\Sven\AppData\Local\{6E5939D9-A562-47A3-91F8-C98BCAD163C7} folder moved successfully. C:\Users\Sven\AppData\Local\{6EAAD736-3CA7-4282-A589-DB83D1595FE0} folder moved successfully. C:\Users\Sven\AppData\Local\{6ECFD8D1-0814-41AE-AF04-DD78EC9DE53A} folder moved successfully. C:\Users\Sven\AppData\Local\{6F0E6944-6553-4CB9-A2AA-30DB73F5AD88} folder moved successfully. C:\Users\Sven\AppData\Local\{6F117DCE-BF8E-40A6-A88B-174A075AD19E} folder moved successfully. C:\Users\Sven\AppData\Local\{6F3E1F5B-0C4C-4BD5-9EB8-BFCCD63EEFDF} folder moved successfully. C:\Users\Sven\AppData\Local\{6F6AE82B-9B92-4EFB-802E-36569991F96F} folder moved successfully. C:\Users\Sven\AppData\Local\{6F975F0A-D1AA-4185-AC0E-7CAC10EDACCE} folder moved successfully. C:\Users\Sven\AppData\Local\{6FC4906B-BB23-4229-B01E-AFECF7A4D0D3} folder moved successfully. C:\Users\Sven\AppData\Local\{7090047B-C1CB-4E8B-BDAD-C1646BEC528E} folder moved successfully. C:\Users\Sven\AppData\Local\{70B8D0C6-A6DF-4663-AE67-F193DF8CB10A} folder moved successfully. C:\Users\Sven\AppData\Local\{712C4566-8182-42A0-86CF-0CEEB97D9DC4} folder moved successfully. C:\Users\Sven\AppData\Local\{714A92F7-D434-4553-A5E1-9A925E9741AE} folder moved successfully. C:\Users\Sven\AppData\Local\{715E2AC1-BFA4-471D-82CA-147D72E799C9} folder moved successfully. C:\Users\Sven\AppData\Local\{718EE4C3-47DB-4EEA-A53F-4FEA100CA51E} folder moved successfully. C:\Users\Sven\AppData\Local\{71CF264F-5B44-43F8-B0F1-8C77184A7D6C} folder moved successfully. C:\Users\Sven\AppData\Local\{728EEFCE-E186-4113-9F84-3DBEF5660CA1} folder moved successfully. C:\Users\Sven\AppData\Local\{72F6C344-4844-4A64-BADD-4A6AD3C8B4C3} folder moved successfully. C:\Users\Sven\AppData\Local\{73D17892-2EB1-4227-9D62-9D37F9C0E96E} folder moved successfully. C:\Users\Sven\AppData\Local\{743689B2-0A27-415C-9095-A4D5B550B06C} folder moved successfully. C:\Users\Sven\AppData\Local\{7474F435-663F-4123-985A-2641ABD1D7E6} folder moved successfully. C:\Users\Sven\AppData\Local\{7494FBEB-B4B3-4549-AFA7-1719F2DEBC1D} folder moved successfully. C:\Users\Sven\AppData\Local\{749D3AC4-6184-4730-B830-B1AA3EE7DA7F} folder moved successfully. C:\Users\Sven\AppData\Local\{750BEFC2-886A-4108-B122-FFD89D1978D1} folder moved successfully. C:\Users\Sven\AppData\Local\{75263FF0-FE85-4A6E-AB80-D195A9921FE3} folder moved successfully. C:\Users\Sven\AppData\Local\{754F4BAA-72AF-429F-B6EC-741B9CE841DE} folder moved successfully. C:\Users\Sven\AppData\Local\{755A6C0E-A2E7-4E07-82BD-A8AE2301D08C} folder moved successfully. C:\Users\Sven\AppData\Local\{75EAC62F-51FA-4B26-855D-3319D136F7F2} folder moved successfully. C:\Users\Sven\AppData\Local\{76003192-0FAC-4D7C-86C1-8B459063BA03} folder moved successfully. C:\Users\Sven\AppData\Local\{76548AA8-163D-47A4-90D5-7EF9C9A944E8} folder moved successfully. C:\Users\Sven\AppData\Local\{7673F433-9FD7-4BEC-ADE8-E2C3AC322174} folder moved successfully. C:\Users\Sven\AppData\Local\{769B5498-5EC4-4350-BC1A-C18DAAC35010} folder moved successfully. C:\Users\Sven\AppData\Local\{76CD54AC-614C-4E9E-A35D-1FE1FE93114B} folder moved successfully. C:\Users\Sven\AppData\Local\{7758BB46-0DB9-4559-A90D-97537F478AE2} folder moved successfully. C:\Users\Sven\AppData\Local\{77BEED78-925E-4972-9ECF-0FE793A822C8} folder moved successfully. C:\Users\Sven\AppData\Local\{77C164AF-FCF3-406E-AE6F-FFA5ED8B853C} folder moved successfully. C:\Users\Sven\AppData\Local\{798AD983-EE37-4634-9077-45783E81FF47} folder moved successfully. C:\Users\Sven\AppData\Local\{79A7D027-DCDF-474C-8044-282FBC75CAE5} folder moved successfully. C:\Users\Sven\AppData\Local\{7A6BE210-B081-45D3-AA81-72D55FDECCD3} folder moved successfully. C:\Users\Sven\AppData\Local\{7AD588C5-4496-4713-83E4-10137857D605} folder moved successfully. C:\Users\Sven\AppData\Local\{7AE3BDE0-E7C7-4787-8D14-4055E835EDD7} folder moved successfully. C:\Users\Sven\AppData\Local\{7B790EE5-E511-44C6-96D4-03E8141ECBEE} folder moved successfully. C:\Users\Sven\AppData\Local\{7B83A41A-E4E4-4665-A807-28061472BDF8} folder moved successfully. C:\Users\Sven\AppData\Local\{7C15419D-9E3F-4274-AA8F-EC45291B2553} folder moved successfully. C:\Users\Sven\AppData\Local\{7C3E21C4-1BBE-4E81-A0D7-E94F846EA97B} folder moved successfully. C:\Users\Sven\AppData\Local\{7C40315F-E2A3-45FF-AB7A-1AFC3023216E} folder moved successfully. C:\Users\Sven\AppData\Local\{7C51EEA9-FEFA-4727-B972-CB156C951984} folder moved successfully. C:\Users\Sven\AppData\Local\{7C80C80A-1FAF-4E6F-9750-03AD8AF048A7} folder moved successfully. C:\Users\Sven\AppData\Local\{7CFC2135-5DB9-49D2-B142-4E55DCEF7EBB} folder moved successfully. C:\Users\Sven\AppData\Local\{7D24626D-6D58-41DA-9913-A7CAE323A3F0} folder moved successfully. C:\Users\Sven\AppData\Local\{7D469858-3B7F-4F3C-93CE-CE88A1DB0A34} folder moved successfully. C:\Users\Sven\AppData\Local\{7D48775B-6317-4AE5-804A-901D0AE04275} folder moved successfully. C:\Users\Sven\AppData\Local\{7D58CA8B-4D61-489F-B60E-574DCB619AAA} folder moved successfully. C:\Users\Sven\AppData\Local\{7D88B79B-CC07-4DD0-855B-DAE8A41E8C38} folder moved successfully. C:\Users\Sven\AppData\Local\{7E0A822A-1371-4B6D-A8C2-F4D4462C93F0} folder moved successfully. C:\Users\Sven\AppData\Local\{7E2927CB-2CF8-4206-BDCB-BB1E16036EF0} folder moved successfully. C:\Users\Sven\AppData\Local\{7ED5AC22-9942-486B-839D-893A12FB1835} folder moved successfully. C:\Users\Sven\AppData\Local\{7F04B80D-97D8-429C-8E4A-4E0AD53B73F8} folder moved successfully. C:\Users\Sven\AppData\Local\{7F1FE0ED-429D-42FD-BE60-55648534F8D2} folder moved successfully. C:\Users\Sven\AppData\Local\{7FB488B3-3DA3-4BF7-99CF-960C78FA65F5} folder moved successfully. C:\Users\Sven\AppData\Local\{8053D988-17FC-4EA9-9F8D-CD7FFA3D90D6} folder moved successfully. C:\Users\Sven\AppData\Local\{8084AA7E-DC5B-455D-ABBC-A5A6BC2B2F0E} folder moved successfully. C:\Users\Sven\AppData\Local\{8113863D-EEDB-4AA7-9E8A-8E9B8CB1AC3D} folder moved successfully. C:\Users\Sven\AppData\Local\{8118BCB3-86C2-4AE9-B787-828D5AD6B3BB} folder moved successfully. C:\Users\Sven\AppData\Local\{812A886C-95D4-477C-A794-DD9DE02A342E} folder moved successfully. C:\Users\Sven\AppData\Local\{814A798A-9527-43EA-9A78-3A816836DCD4} folder moved successfully. C:\Users\Sven\AppData\Local\{816631AE-4AE6-45A0-91EB-CADD3E992591} folder moved successfully. C:\Users\Sven\AppData\Local\{824B7839-4905-4277-953B-AAFA105569C9} folder moved successfully. C:\Users\Sven\AppData\Local\{82D0D067-8B99-456C-BB97-46D143421479} folder moved successfully. C:\Users\Sven\AppData\Local\{830A0028-C70E-474E-86BC-93B4DE1419B3} folder moved successfully. C:\Users\Sven\AppData\Local\{831ECDFF-87FB-4A85-962C-C12BF0A9E454} folder moved successfully. C:\Users\Sven\AppData\Local\{8333B307-AD8D-4B69-A6FC-FF3C543DE38C} folder moved successfully. C:\Users\Sven\AppData\Local\{8338CE03-EFA7-405C-8417-A00D1747474F} folder moved successfully. C:\Users\Sven\AppData\Local\{843A126B-025B-4C1C-B776-6F41143E280A} folder moved successfully. C:\Users\Sven\AppData\Local\{84963B23-9073-4BD5-B484-03FD7E5D91FC} folder moved successfully. C:\Users\Sven\AppData\Local\{8583CE6A-FB95-4200-8C22-3C26F343C95D} folder moved successfully. C:\Users\Sven\AppData\Local\{85A416CE-C641-44C4-B7F3-7B95FF1D81E1} folder moved successfully. C:\Users\Sven\AppData\Local\{85C97D98-2A67-47F5-A9D9-CC39CFB0B905} folder moved successfully. C:\Users\Sven\AppData\Local\{86F13CA0-8301-475C-932F-F31D65FFD978} folder moved successfully. C:\Users\Sven\AppData\Local\{87768D6E-8DC4-4AE2-B34D-A72BDD9BF3BD} folder moved successfully. C:\Users\Sven\AppData\Local\{87CA5D87-AAF2-45D4-9018-8FC30210CFB8} folder moved successfully. C:\Users\Sven\AppData\Local\{8844DC50-7F8C-412B-B390-E83C58ACC0DB} folder moved successfully. C:\Users\Sven\AppData\Local\{88455F34-53CE-4268-9D17-D9630DFC879C} folder moved successfully. C:\Users\Sven\AppData\Local\{88C3859F-2AC4-4F74-9723-0C049A844F69} folder moved successfully. C:\Users\Sven\AppData\Local\{8959381F-D2A7-40E9-97D8-6D50B6B47D3E} folder moved successfully. C:\Users\Sven\AppData\Local\{8A089CAA-BD4B-4E6A-846B-5CDAEBA94370} folder moved successfully. C:\Users\Sven\AppData\Local\{8A541F7A-BC82-413F-B404-D64DA0C5094B} folder moved successfully. C:\Users\Sven\AppData\Local\{8A5E746B-F597-41F9-BE32-5CF1A3DCB912} folder moved successfully. C:\Users\Sven\AppData\Local\{8B7CAB14-765D-4FF4-8FBB-BB43EF8CC94F} folder moved successfully. C:\Users\Sven\AppData\Local\{8CA7DBD8-6E10-4860-87D9-990B2C09CFD3} folder moved successfully. C:\Users\Sven\AppData\Local\{8CCD22C9-4D9E-420A-9258-BFCAE2CA0B2B} folder moved successfully. C:\Users\Sven\AppData\Local\{8D968BDB-DA9E-4FB0-82A4-E99FE2F4808D} folder moved successfully. C:\Users\Sven\AppData\Local\{8EE2F7A6-0F9F-451C-AF19-D2943BBEA76E} folder moved successfully. C:\Users\Sven\AppData\Local\{8F37572B-1738-44A7-B004-D73AB03AA54F} folder moved successfully. C:\Users\Sven\AppData\Local\{8F4D6C1C-36E0-4886-83D9-58CA5F964AED} folder moved successfully. C:\Users\Sven\AppData\Local\{8F7CDE69-2C4E-49EE-A0E1-7D175EF88290} folder moved successfully. C:\Users\Sven\AppData\Local\{8FD2FEA1-D914-4151-9B0F-F2E96F029781} folder moved successfully. C:\Users\Sven\AppData\Local\{901D3AF0-B93F-45CC-BDF6-A8F651882EBC} folder moved successfully. C:\Users\Sven\AppData\Local\{90313CA1-7B44-48DA-8567-0BFC160FD1FD} folder moved successfully. C:\Users\Sven\AppData\Local\{904C66F3-C556-4540-9669-52899373A378} folder moved successfully. C:\Users\Sven\AppData\Local\{90808D10-7E93-4D80-9E7B-91E1A0A69192} folder moved successfully. C:\Users\Sven\AppData\Local\{90907692-013C-4366-A019-5B9EB9C3F842} folder moved successfully. C:\Users\Sven\AppData\Local\{909428E8-0B38-44A0-8C90-38332A039702} folder moved successfully. C:\Users\Sven\AppData\Local\{90D5F716-E178-4B55-8445-35A81538778B} folder moved successfully. C:\Users\Sven\AppData\Local\{90FE37F4-E6EE-49E5-9925-B0F1F529595E} folder moved successfully. C:\Users\Sven\AppData\Local\{925711BB-2825-4F10-94C8-9EFC9C9102E5} folder moved successfully. C:\Users\Sven\AppData\Local\{927EE47E-7279-4119-8EE9-9D394FCDF271} folder moved successfully. C:\Users\Sven\AppData\Local\{93F33F5B-6807-46C2-93BC-ACC2179BF3BE} folder moved successfully. C:\Users\Sven\AppData\Local\{9417C90F-0060-48B4-9A75-DEF5234F561E} folder moved successfully. C:\Users\Sven\AppData\Local\{945D24C1-579B-4F4F-B6AF-9CA0A606508E} folder moved successfully. C:\Users\Sven\AppData\Local\{94D61E81-1910-4F1B-BC64-7E2821CF7550} folder moved successfully. C:\Users\Sven\AppData\Local\{952C6532-A7F6-42CF-92B0-C8FB05CC9373} folder moved successfully. C:\Users\Sven\AppData\Local\{95378BE7-5E98-4911-8703-8CAC56FADDB1} folder moved successfully. C:\Users\Sven\AppData\Local\{956156CC-5655-41E8-93AF-06CA88C65871} folder moved successfully. C:\Users\Sven\AppData\Local\{957FF602-D72A-4A5C-B97C-E49B9DDA1741} folder moved successfully. C:\Users\Sven\AppData\Local\{9674D5F8-29EE-45AD-9A5F-82DDC5F8B0CC} folder moved successfully. C:\Users\Sven\AppData\Local\{9713B064-3C65-4B19-91F9-C850F7C7DBB9} folder moved successfully. C:\Users\Sven\AppData\Local\{9713C207-E275-428C-9044-5EDC971650DC} folder moved successfully. C:\Users\Sven\AppData\Local\{974FA431-B435-4968-AECB-BCB5946AEA2C} folder moved successfully. C:\Users\Sven\AppData\Local\{97693AC3-EABB-47D1-AB8B-AFCA402AC969} folder moved successfully. C:\Users\Sven\AppData\Local\{980F0035-FA24-4363-BEBF-EB250CA95968} folder moved successfully. C:\Users\Sven\AppData\Local\{9820158A-6219-41DC-913A-0A0CD158F97C} folder moved successfully. C:\Users\Sven\AppData\Local\{98585E46-F399-4722-AA07-74D2E262B617} folder moved successfully. C:\Users\Sven\AppData\Local\{99DFE1BD-2D82-4E91-BC53-7E4E831F7322} folder moved successfully. C:\Users\Sven\AppData\Local\{9B5832D4-8F88-435D-9307-4190BB9B31AB} folder moved successfully. C:\Users\Sven\AppData\Local\{9B670007-886A-4FDF-A7B7-6279141920F5} folder moved successfully. C:\Users\Sven\AppData\Local\{9B98F522-3EBD-4467-8BCD-25830E5A8251} folder moved successfully. C:\Users\Sven\AppData\Local\{9BCD45FE-61B6-48B0-881C-6606099C28F0} folder moved successfully. C:\Users\Sven\AppData\Local\{9C7E1AA8-21C1-4E85-A91C-5D4D0C87B8E3} folder moved successfully. C:\Users\Sven\AppData\Local\{9D5C96D3-2799-491D-A753-28CC1D14285B} folder moved successfully. C:\Users\Sven\AppData\Local\{9E35B0EB-EB68-4987-8316-6E78193B1583} folder moved successfully. C:\Users\Sven\AppData\Local\{9E62F18A-938D-493E-AB4A-834163478C6F} folder moved successfully. C:\Users\Sven\AppData\Local\{9E9CD3AF-8A26-4391-9F50-6A33CE3F4EB2} folder moved successfully. C:\Users\Sven\AppData\Local\{9EAE1EA1-D16F-45CF-93AD-2C2D7C8B0739} folder moved successfully. C:\Users\Sven\AppData\Local\{9ECDE9AC-90A2-47B2-A85F-DA51819FF358} folder moved successfully. C:\Users\Sven\AppData\Local\{9EF2ACA4-8E24-4241-8FF0-3CCCCA8341BA} folder moved successfully. C:\Users\Sven\AppData\Local\{9F7901AD-AC8C-4FDC-8DBA-99A9729BAF5D} folder moved successfully. C:\Users\Sven\AppData\Local\{9FC4AEB3-9DD9-4756-BA59-18B0BF91DAB3} folder moved successfully. C:\Users\Sven\AppData\Local\{A0679729-0C5E-4030-A61A-5BED0C7AFA13} folder moved successfully. C:\Users\Sven\AppData\Local\{A0914D42-6D21-4B40-A86C-F0BC9D25B017} folder moved successfully. C:\Users\Sven\AppData\Local\{A0E62C8A-3143-4B15-806F-02929A8EDE41} folder moved successfully. C:\Users\Sven\AppData\Local\{A0F3CC66-E061-4C2B-9CE0-BBADE4DB2FA1} folder moved successfully. C:\Users\Sven\AppData\Local\{A1EBF922-B4DF-4526-B1F1-13F518ED80EE} folder moved successfully. C:\Users\Sven\AppData\Local\{A24FADA0-D08B-4F39-9C0F-11C4EECC41C0} folder moved successfully. C:\Users\Sven\AppData\Local\{A355809A-7937-40E2-9FAE-C31CC396386F} folder moved successfully. C:\Users\Sven\AppData\Local\{A40C5F4E-689C-455F-9FE5-390056E37155} folder moved successfully. C:\Users\Sven\AppData\Local\{A424FBFE-D2D2-4DAD-AD0E-2C31C79A0349} folder moved successfully. C:\Users\Sven\AppData\Local\{A42C52C1-E32F-47F3-B3C0-393853116771} folder moved successfully. C:\Users\Sven\AppData\Local\{A448430F-29EE-470A-9DFC-540AC3E36944} folder moved successfully. C:\Users\Sven\AppData\Local\{A44A7E97-281F-4C39-B7E6-049809EE6C29} folder moved successfully. C:\Users\Sven\AppData\Local\{A5111138-B12E-4241-B41E-1E8DDE6679D7} folder moved successfully. C:\Users\Sven\AppData\Local\{A53FD1D9-9F98-4145-8DC2-E86CE5EFA8E5} folder moved successfully. C:\Users\Sven\AppData\Local\{A559B2B4-B4DA-41CB-BE67-886A230239FC} folder moved successfully. C:\Users\Sven\AppData\Local\{A58852CF-FC58-41D8-B563-06B33C9C6595} folder moved successfully. C:\Users\Sven\AppData\Local\{A592F5F3-BC15-41DE-9507-42EAAC0A97D8} folder moved successfully. C:\Users\Sven\AppData\Local\{A60567B7-9CD4-44A7-958C-8A13223CBBD3} folder moved successfully. C:\Users\Sven\AppData\Local\{A6133A34-3444-4B9F-8B84-8DE711617474} folder moved successfully. C:\Users\Sven\AppData\Local\{A698BCFE-26E8-4665-9583-FE29006500BA} folder moved successfully. C:\Users\Sven\AppData\Local\{A6C72AF9-4943-4AB9-BC11-78B5B62CA537} folder moved successfully. C:\Users\Sven\AppData\Local\{A78374B4-B73C-46CB-B49B-0A311F046B81} folder moved successfully. C:\Users\Sven\AppData\Local\{A7BECCCF-A8DE-4539-99D3-CA5B005F3312} folder moved successfully. C:\Users\Sven\AppData\Local\{A825C31E-A356-4ECB-BFAF-336964B85126} folder moved successfully. C:\Users\Sven\AppData\Local\{A88CD410-9E36-4341-AFA9-CD91A4E0D139} folder moved successfully. C:\Users\Sven\AppData\Local\{A8972AD6-0015-451E-BA29-66D7AA3E1667} folder moved successfully. C:\Users\Sven\AppData\Local\{A8B17019-7A02-4904-A55D-E1997171F375} folder moved successfully. C:\Users\Sven\AppData\Local\{A8CFE652-417B-4D3A-A702-B81439230CA9} folder moved successfully. C:\Users\Sven\AppData\Local\{A961EC15-A4C4-4E09-ABDF-249F2C585213} folder moved successfully. C:\Users\Sven\AppData\Local\{A9FB90E8-05F3-4749-B805-64DC6BDE36EE} folder moved successfully. C:\Users\Sven\AppData\Local\{AA5D3962-61DD-412A-8449-2E956C53FE5B} folder moved successfully. C:\Users\Sven\AppData\Local\{AAE20AF6-957C-4ACD-A912-BC809914820D} folder moved successfully. C:\Users\Sven\AppData\Local\{AAEBA2D9-1203-4EF7-A659-A504D272D540} folder moved successfully. C:\Users\Sven\AppData\Local\{AB100ED0-3CE0-44DA-B0DB-1AEA327EEE23} folder moved successfully. C:\Users\Sven\AppData\Local\{AC7ECE2F-BB17-476D-BDAF-85B8A0513516} folder moved successfully. C:\Users\Sven\AppData\Local\{AD25F425-AE96-4CB8-859F-7CBB028B4FBA} folder moved successfully. C:\Users\Sven\AppData\Local\{AD6715AE-E5B0-4528-8786-AFD8BC8CBF4D} folder moved successfully. C:\Users\Sven\AppData\Local\{ADB09058-8E7C-46A2-80E1-1B7A0872059B} folder moved successfully. C:\Users\Sven\AppData\Local\{ADDAA41C-ED22-475F-8248-132E62D5F232} folder moved successfully. C:\Users\Sven\AppData\Local\{ADECF444-3345-4B79-AB9F-2879862C9DCA} folder moved successfully. C:\Users\Sven\AppData\Local\{AE74B41D-5544-4A7E-9CD5-6843F3668F2A} folder moved successfully. C:\Users\Sven\AppData\Local\{AEA19FA2-EBC9-425D-A1ED-98E869C399C5} folder moved successfully. C:\Users\Sven\AppData\Local\{AF864FDA-A2DB-491B-B99B-7F2BF2DCAC26} folder moved successfully. C:\Users\Sven\AppData\Local\{AFE9735B-BBBB-4F6D-8ACA-360786391F71} folder moved successfully. C:\Users\Sven\AppData\Local\{B06A3BB4-780D-4D1C-B330-E426C7C454DE} folder moved successfully. C:\Users\Sven\AppData\Local\{B0A39733-3D47-4302-96B3-595156121B81} folder moved successfully. C:\Users\Sven\AppData\Local\{B0A44009-C390-4A7E-AF4F-519C504E3967} folder moved successfully. C:\Users\Sven\AppData\Local\{B0EED6BA-49A6-4717-BE91-F85AE41DE4CA} folder moved successfully. C:\Users\Sven\AppData\Local\{B0F196E4-5909-461D-A421-8F490EA83782} folder moved successfully. C:\Users\Sven\AppData\Local\{B0FD1749-7B47-4C34-AD46-0CE486C05D48} folder moved successfully. C:\Users\Sven\AppData\Local\{B141B426-A902-4B7D-8E33-73C615C3E9F8} folder moved successfully. C:\Users\Sven\AppData\Local\{B249090D-035A-46A5-8CD1-5B4CEDF4A316} folder moved successfully. C:\Users\Sven\AppData\Local\{B27837CC-A72F-4233-AD19-0472E200E6D3} folder moved successfully. C:\Users\Sven\AppData\Local\{B2CA18BE-81EB-4492-AEF0-584AEF1318B2} folder moved successfully. C:\Users\Sven\AppData\Local\{B3020C5C-BD05-497C-96FA-5A970B3E151C} folder moved successfully. C:\Users\Sven\AppData\Local\{B302A111-E058-4957-B7D5-249887267CCA} folder moved successfully. C:\Users\Sven\AppData\Local\{B3359A76-A69A-43A6-A74D-FCEEFCD733BE} folder moved successfully. C:\Users\Sven\AppData\Local\{B39F1D9B-A1BA-451B-913D-22A523E7120B} folder moved successfully. C:\Users\Sven\AppData\Local\{B3DDDD76-38C7-4D2C-9EEC-1E5BA706073E} folder moved successfully. C:\Users\Sven\AppData\Local\{B458FF99-47C1-4430-AAB2-3ADC3694232F} folder moved successfully. C:\Users\Sven\AppData\Local\{B47052F5-0F6A-4B7B-8FFD-4D9AA344B838} folder moved successfully. C:\Users\Sven\AppData\Local\{B5D9B91D-9207-41DF-96A6-C3A9E516DE26} folder moved successfully. C:\Users\Sven\AppData\Local\{B6093AF2-DCBE-4587-852C-7BC5C6EFC954} folder moved successfully. C:\Users\Sven\AppData\Local\{B672FC99-D30B-4744-B9E7-6D2569DD648B} folder moved successfully. C:\Users\Sven\AppData\Local\{B6E7EA2E-1A72-4AB2-8757-A437EAD4F6CD} folder moved successfully. C:\Users\Sven\AppData\Local\{B6F13723-617A-4CBA-98B5-AA1631A025BB} folder moved successfully. C:\Users\Sven\AppData\Local\{B77FFA56-3F02-4FA1-8D94-D81FE34D36DB} folder moved successfully. C:\Users\Sven\AppData\Local\{B7DAA915-0E21-41EC-9A1F-6EEB60114879} folder moved successfully. C:\Users\Sven\AppData\Local\{B9012995-4EC0-476F-922A-059507AD3D24} folder moved successfully. C:\Users\Sven\AppData\Local\{B9264354-A820-467C-AF6D-6EBB2A3CE227} folder moved successfully. C:\Users\Sven\AppData\Local\{B9BD9B1F-F6A0-4CF6-A1C7-C18423C7E3A6} folder moved successfully. C:\Users\Sven\AppData\Local\{BA219324-A0A9-416D-8F9E-2BBBD34E07FA} folder moved successfully. C:\Users\Sven\AppData\Local\{BA3C1824-DCE3-438E-A582-371D38759432} folder moved successfully. C:\Users\Sven\AppData\Local\{BA6A0656-6B74-4284-80CC-7C95E35D170B} folder moved successfully. C:\Users\Sven\AppData\Local\{BA73A0D0-FE4D-42B2-B2C3-93BC87110392} folder moved successfully. C:\Users\Sven\AppData\Local\{BB390CA9-036F-4FC1-AED4-1F5FDF71A609} folder moved successfully. C:\Users\Sven\AppData\Local\{BBEC2F38-4BCD-4E2E-9CD2-48B5ECDE22CE} folder moved successfully. C:\Users\Sven\AppData\Local\{BC3FCEC9-16A5-44B2-82E3-6B08F104A6A5} folder moved successfully. C:\Users\Sven\AppData\Local\{BD740062-D0DD-4A3F-923E-7B6154EEEDCB} folder moved successfully. C:\Users\Sven\AppData\Local\{BD971997-D9E2-4978-820F-58719A9A560E} folder moved successfully. C:\Users\Sven\AppData\Local\{BE8BF267-F69F-4884-98B9-F6B4DC6B09DD} folder moved successfully. C:\Users\Sven\AppData\Local\{BED992DE-E727-474A-9A0A-C737B61DA491} folder moved successfully. C:\Users\Sven\AppData\Local\{BEDEEA68-0CC9-40CE-A199-E6D3470ECB57} folder moved successfully. C:\Users\Sven\AppData\Local\{BEE152AE-345F-4AEB-95A5-1518CE4F0123} folder moved successfully. C:\Users\Sven\AppData\Local\{BF2BBD29-E7B2-40AA-B0A3-DA8980CD1448} folder moved successfully. C:\Users\Sven\AppData\Local\{BF399238-5D62-4E58-97C8-C73D202C8C85} folder moved successfully. C:\Users\Sven\AppData\Local\{BF780155-6A95-44E7-9AA0-E0D9E640930A} folder moved successfully. C:\Users\Sven\AppData\Local\{BFB648A3-3E0B-46FD-9E83-D845032DAF29} folder moved successfully. C:\Users\Sven\AppData\Local\{BFC1856C-1941-4C34-B49B-6533DD5F53D9} folder moved successfully. C:\Users\Sven\AppData\Local\{BFEF168F-D766-49C5-8ED2-2AA27B1621D7} folder moved successfully. C:\Users\Sven\AppData\Local\{C004D3AC-2DD1-4933-88FB-9A9E999AB652} folder moved successfully. C:\Users\Sven\AppData\Local\{C00CC026-A7D3-4625-99EC-167228A5F4B4} folder moved successfully. C:\Users\Sven\AppData\Local\{C06AF165-A91A-40F9-956F-1A7711F67C60} folder moved successfully. C:\Users\Sven\AppData\Local\{C080CE4E-F062-44D6-9AEB-D8E9473DF286} folder moved successfully. C:\Users\Sven\AppData\Local\{C0A8D588-231C-41B1-AFE9-F905895EEF6E} folder moved successfully. C:\Users\Sven\AppData\Local\{C0FB31A3-D76B-4D8F-9235-7A1505529CB7} folder moved successfully. C:\Users\Sven\AppData\Local\{C1431969-4A30-4097-9919-8B56C0D4F378} folder moved successfully. C:\Users\Sven\AppData\Local\{C183CA18-7196-4B97-8069-C58101D26313} folder moved successfully. C:\Users\Sven\AppData\Local\{C1CE9ADF-FF0E-4FB9-980D-3AE0DA096933} folder moved successfully. C:\Users\Sven\AppData\Local\{C23EADB2-757C-4AE7-B476-AF1166E461B3} folder moved successfully. C:\Users\Sven\AppData\Local\{C2733E0C-493B-4129-9C75-B4C228C93F7D} folder moved successfully. C:\Users\Sven\AppData\Local\{C2F72CF4-E0AA-4893-9D17-13DCEF105A97} folder moved successfully. C:\Users\Sven\AppData\Local\{C2FCB89B-40B3-42B0-93A5-197876D127FB} folder moved successfully. C:\Users\Sven\AppData\Local\{C3120517-EABA-4E3C-9924-14B8E45FE6C3} folder moved successfully. C:\Users\Sven\AppData\Local\{C350B915-E466-4746-8A4C-F6136066B1A5} folder moved successfully. C:\Users\Sven\AppData\Local\{C36C12DD-481C-40C3-B4C5-620368105AEA} folder moved successfully. C:\Users\Sven\AppData\Local\{C37CCDB0-C6D4-4F4E-85FB-107E7FCA56DC} folder moved successfully. C:\Users\Sven\AppData\Local\{C3C04CBB-FF45-41A6-996A-1B03534E3424} folder moved successfully. C:\Users\Sven\AppData\Local\{C3CBD260-0DCE-41BC-AB29-28168D8110E1} folder moved successfully. C:\Users\Sven\AppData\Local\{C3E6A419-BA31-46B0-B88E-151E574B7930} folder moved successfully. C:\Users\Sven\AppData\Local\{C3F70458-9880-4847-B92D-805A35A70B68} folder moved successfully. C:\Users\Sven\AppData\Local\{C4098BA4-5E15-4874-92E4-A251628D8E7E} folder moved successfully. C:\Users\Sven\AppData\Local\{C40EE440-AC22-4A8F-BA7A-F373A8816813} folder moved successfully. C:\Users\Sven\AppData\Local\{C457C6BA-DF1B-4011-A499-70B1065D237D} folder moved successfully. C:\Users\Sven\AppData\Local\{C4825CA9-E4D7-42DA-8439-D246729E05EE} folder moved successfully. C:\Users\Sven\AppData\Local\{C4FB7ECD-7662-45DC-9631-BA3001A20094} folder moved successfully. C:\Users\Sven\AppData\Local\{C5CCE64E-42B8-4E4A-A344-7DE24D8BD444} folder moved successfully. C:\Users\Sven\AppData\Local\{C5E5EB12-52EF-433B-A4B3-601CBBA28E91} folder moved successfully. C:\Users\Sven\AppData\Local\{C71F60C4-DB6B-4E65-B54F-B414644570FE} folder moved successfully. C:\Users\Sven\AppData\Local\{C75A155A-9B42-4938-8403-3FB1D2DB79A9} folder moved successfully. C:\Users\Sven\AppData\Local\{C7646A71-4DCD-4D43-9497-698D83A06F7C} folder moved successfully. C:\Users\Sven\AppData\Local\{C86623CC-23FF-4FEB-9236-D38569F6B8A9} folder moved successfully. C:\Users\Sven\AppData\Local\{C8D160B5-B709-4D2B-8EFC-F08770490418} folder moved successfully. C:\Users\Sven\AppData\Local\{C95295F9-D2E3-4D31-934A-36B3832EB4B6} folder moved successfully. C:\Users\Sven\AppData\Local\{CA936F18-DBC3-4193-A648-2F9D528EAF49} folder moved successfully. C:\Users\Sven\AppData\Local\{CB4DE8FD-8BA1-4244-A20F-D9513AC8B2D0} folder moved successfully. C:\Users\Sven\AppData\Local\{CB53873D-5BB0-4AA7-8686-6FC79761F53C} folder moved successfully. C:\Users\Sven\AppData\Local\{CB73C167-0663-4B44-82DD-06F3DCD032D1} folder moved successfully. C:\Users\Sven\AppData\Local\{CBA4EB05-763B-4095-BE34-A3E9F290E86A} folder moved successfully. C:\Users\Sven\AppData\Local\{CBAED954-956B-4A80-8102-5052887C1B8C} folder moved successfully. C:\Users\Sven\AppData\Local\{CBAF80CE-AD28-4E9C-9AEF-F471DE043041} folder moved successfully. C:\Users\Sven\AppData\Local\{CBCBF414-206D-4296-ADA1-F8BF9F1F6868} folder moved successfully. C:\Users\Sven\AppData\Local\{CC04B830-31BD-4468-B34E-9ED6337E9E45} folder moved successfully. C:\Users\Sven\AppData\Local\{CC21239C-36DF-49BD-A777-EAB77776E468} folder moved successfully. C:\Users\Sven\AppData\Local\{CC72FE0D-EA27-450C-83A9-F3B4AF50AF31} folder moved successfully. C:\Users\Sven\AppData\Local\{CC922187-6FFA-4825-A021-D22A8B31E885} folder moved successfully. C:\Users\Sven\AppData\Local\{CCC8CEC3-3D30-41BE-80C7-C11649384036} folder moved successfully. C:\Users\Sven\AppData\Local\{CD2D8C90-3EE3-4772-92F0-B394EC078A32} folder moved successfully. C:\Users\Sven\AppData\Local\{CD368FC6-87BE-4D5D-AF5E-836A698E0F7D} folder moved successfully. C:\Users\Sven\AppData\Local\{CD538659-F724-43E4-A7E6-5316E81BA439} folder moved successfully. C:\Users\Sven\AppData\Local\{CDB9C183-5ECF-4F56-83C9-B5089808FA96} folder moved successfully. C:\Users\Sven\AppData\Local\{CF5FD51E-ACEB-45E8-A78A-E1F0633E119E} folder moved successfully. C:\Users\Sven\AppData\Local\{CF89059A-6AD6-4F8F-9DF7-F281CA5F3DC6} folder moved successfully. C:\Users\Sven\AppData\Local\{CFDC7D70-9FCF-4E15-A4E4-47994DA01A98} folder moved successfully. C:\Users\Sven\AppData\Local\{CFF3FF82-C6B7-4F39-8BCB-34D30E992831} folder moved successfully. C:\Users\Sven\AppData\Local\{D0184946-59B0-437D-9E2F-27177F1A78A7} folder moved successfully. C:\Users\Sven\AppData\Local\{D056B32E-5687-421A-A9BD-12AD43827C9D} folder moved successfully. C:\Users\Sven\AppData\Local\{D07CBE26-B72C-4622-A81D-0C9F114EC490} folder moved successfully. C:\Users\Sven\AppData\Local\{D09DEAFA-F533-48B2-B46C-328E03FADE9B} folder moved successfully. C:\Users\Sven\AppData\Local\{D11F2652-0627-41D0-ACE7-20029C149CCF} folder moved successfully. C:\Users\Sven\AppData\Local\{D1866F08-AD2A-4215-8266-38662D655F56} folder moved successfully. C:\Users\Sven\AppData\Local\{D35946FA-50A3-4E27-A217-0E16173FEE2F} folder moved successfully. C:\Users\Sven\AppData\Local\{D3AC73F1-BF75-4952-81C0-C5C3D8E56BA4} folder moved successfully. C:\Users\Sven\AppData\Local\{D3ADAC83-392D-4A5E-98F8-36D3998BFFA8} folder moved successfully. C:\Users\Sven\AppData\Local\{D3E37F25-216D-437D-A2EC-AB1CAF63563A} folder moved successfully. C:\Users\Sven\AppData\Local\{D3F0CBF7-07AE-47F9-8E81-06E778282564} folder moved successfully. C:\Users\Sven\AppData\Local\{D421BA35-14EC-430F-9CE3-CC938DC933AF} folder moved successfully. C:\Users\Sven\AppData\Local\{D476E968-8282-4B6C-89EF-12FDFBF5F3C2} folder moved successfully. C:\Users\Sven\AppData\Local\{D4A3A8B2-60A5-4B9E-91B7-5710C0D6EEF8} folder moved successfully. C:\Users\Sven\AppData\Local\{D53FEBBA-2169-4366-8932-0527817A4193} folder moved successfully. C:\Users\Sven\AppData\Local\{D5941E33-184F-420C-84B8-8DD7FC159DB7} folder moved successfully. C:\Users\Sven\AppData\Local\{D6022B28-AC2F-458F-A09E-FE0BC29D00A8} folder moved successfully. C:\Users\Sven\AppData\Local\{D63F1F44-C2AC-4A23-98E3-019F6D797A42} folder moved successfully. C:\Users\Sven\AppData\Local\{D6D1FB7E-95AE-4BF9-9785-A29F49B5CCE1} folder moved successfully. C:\Users\Sven\AppData\Local\{D799962B-A916-4F23-B5E1-090D06C79972} folder moved successfully. C:\Users\Sven\AppData\Local\{D7FDA2D1-DAB4-41A9-8269-2AC1F49EBFE8} folder moved successfully. C:\Users\Sven\AppData\Local\{D804B7EB-9251-4FD8-9118-2E473964A5BC} folder moved successfully. C:\Users\Sven\AppData\Local\{D805F26B-40CC-4DE8-9E0C-A51EA6E68060} folder moved successfully. C:\Users\Sven\AppData\Local\{D80AE9FD-B839-40F5-8312-555077F60D7B} folder moved successfully. C:\Users\Sven\AppData\Local\{D84EC2FA-6355-479D-9036-35CF31455968} folder moved successfully. C:\Users\Sven\AppData\Local\{D8A69729-DC89-4868-8601-A9E6603E80C4} folder moved successfully. C:\Users\Sven\AppData\Local\{DA31BE96-9A9F-4585-91F5-753D27D25719} folder moved successfully. C:\Users\Sven\AppData\Local\{DA3860EF-3CEB-4B5A-8B3D-43DB2F0ED6F0} folder moved successfully. C:\Users\Sven\AppData\Local\{DA97AAC2-BD39-47E8-9E1C-9A188BC28D61} folder moved successfully. C:\Users\Sven\AppData\Local\{DBE32EE8-5A66-433A-94A4-4E439FC1BD8A} folder moved successfully. C:\Users\Sven\AppData\Local\{DBF127D1-DE80-4AC9-8036-5893E47EE261} folder moved successfully. C:\Users\Sven\AppData\Local\{DC043074-75DE-42D6-A536-82D032DA743C} folder moved successfully. C:\Users\Sven\AppData\Local\{DCC695C7-6B02-4C58-8B79-E4012069F580} folder moved successfully. C:\Users\Sven\AppData\Local\{DD729A1C-6C1F-4E70-8901-9C9950F8C6A5} folder moved successfully. C:\Users\Sven\AppData\Local\{DE687A9A-C116-478F-9010-153C2A13609F} folder moved successfully. C:\Users\Sven\AppData\Local\{DEA0943A-0A8F-40C4-87DB-169B01E634C9} folder moved successfully. C:\Users\Sven\AppData\Local\{DEB6B25A-99B5-4C2F-96CA-EEF309AB4AE9} folder moved successfully. C:\Users\Sven\AppData\Local\{DECDB5C2-EAC1-4A43-AD76-B5D83AFE790D} folder moved successfully. C:\Users\Sven\AppData\Local\{E0351158-4F71-49AE-8699-EA7A80FA496C} folder moved successfully. C:\Users\Sven\AppData\Local\{E0719E12-CB01-4182-8B5C-F89A894BC6D9} folder moved successfully. C:\Users\Sven\AppData\Local\{E102E871-E0CE-4E6F-B6A5-4FB4F10557CB} folder moved successfully. C:\Users\Sven\AppData\Local\{E1047D68-00BC-4228-8EB2-22DAE801D943} folder moved successfully. C:\Users\Sven\AppData\Local\{E12EA5E0-F099-4645-A0AD-FF64D4EB2001} folder moved successfully. C:\Users\Sven\AppData\Local\{E16FCA42-4622-4BDE-9CE3-884EFC25AB35} folder moved successfully. C:\Users\Sven\AppData\Local\{E1C83E41-00A7-4AA3-BE79-838F7996C13E} folder moved successfully. C:\Users\Sven\AppData\Local\{E24A4B48-5207-4737-BCEE-EBEAE916926A} folder moved successfully. C:\Users\Sven\AppData\Local\{E2B48F59-8E7F-4F06-9EF3-E2D8E0AC7A6E} folder moved successfully. C:\Users\Sven\AppData\Local\{E2E15F53-650B-47C0-A871-E4C600D41607} folder moved successfully. C:\Users\Sven\AppData\Local\{E3DFFCF0-464C-4D49-ABAE-120E1DF772D4} folder moved successfully. C:\Users\Sven\AppData\Local\{E4623159-32BB-4B00-8388-DD019DE21A63} folder moved successfully. C:\Users\Sven\AppData\Local\{E4F3041F-A559-4A7B-ACA8-2072D0AD769F} folder moved successfully. C:\Users\Sven\AppData\Local\{E4FFFD66-6816-402A-A00A-B50E098FC02D} folder moved successfully. C:\Users\Sven\AppData\Local\{E5250DC3-FDAB-4455-A46C-C215DD71E7E7} folder moved successfully. C:\Users\Sven\AppData\Local\{E5477671-5F86-4CC5-B846-5BFDA7A756FE} folder moved successfully. C:\Users\Sven\AppData\Local\{E61F70A7-E9D9-45A1-A4D7-2551AEC560CC} folder moved successfully. C:\Users\Sven\AppData\Local\{E6A4E35E-13E7-413E-95FC-F2D73913CE85} folder moved successfully. C:\Users\Sven\AppData\Local\{E6CFD378-C452-4385-9A0E-74846D86D1D4} folder moved successfully. C:\Users\Sven\AppData\Local\{E7BF9EC0-62A0-466C-9B02-59ED1AA9B0B9} folder moved successfully. C:\Users\Sven\AppData\Local\{E8843264-DD2C-4BC2-8734-CA205D8E13CD} folder moved successfully. C:\Users\Sven\AppData\Local\{E8904233-9BC6-49AD-84E7-4255F61B6EBB} folder moved successfully. C:\Users\Sven\AppData\Local\{E9576017-9020-445A-8BB3-F9AC917EA871} folder moved successfully. C:\Users\Sven\AppData\Local\{E9B0E67C-8553-4F8B-BD92-E2B0CA9B7824} folder moved successfully. C:\Users\Sven\AppData\Local\{E9E025B0-6750-4854-8767-E02A2B274F22} folder moved successfully. C:\Users\Sven\AppData\Local\{EA57EBE7-5A3D-41A1-9F73-20A3B250B3B8} folder moved successfully. C:\Users\Sven\AppData\Local\{EA8BCF8B-8747-4FA4-8E15-8E5857C1784A} folder moved successfully. C:\Users\Sven\AppData\Local\{EB894D79-750E-4F96-B02B-485173F599D2} folder moved successfully. C:\Users\Sven\AppData\Local\{EBBEC34A-B359-436A-858B-ABB60242FADB} folder moved successfully. C:\Users\Sven\AppData\Local\{EC2CB2D5-B49D-473F-9A95-D897B7C45939} folder moved successfully. C:\Users\Sven\AppData\Local\{EC7FFC8C-685C-4736-A63B-B2250350AC4E} folder moved successfully. C:\Users\Sven\AppData\Local\{ECB7D967-87FE-4A1B-9DDB-BE91D537521F} folder moved successfully. C:\Users\Sven\AppData\Local\{ECBC9173-70BA-454F-8540-F353B685AC78} folder moved successfully. C:\Users\Sven\AppData\Local\{ED95EBC6-CCE5-4D40-B7A8-013D431CF4D7} folder moved successfully. C:\Users\Sven\AppData\Local\{EDDDE7CD-654A-4C34-BC0D-F612B6ACDD29} folder moved successfully. C:\Users\Sven\AppData\Local\{EE659323-14D3-4F81-806A-21E52CE61662} folder moved successfully. C:\Users\Sven\AppData\Local\{EEC37987-685B-48A7-83EA-8454278BEC1B} folder moved successfully. C:\Users\Sven\AppData\Local\{EED70098-F0E8-4408-8D66-C2FD5C70C106} folder moved successfully. C:\Users\Sven\AppData\Local\{F055AE6D-559B-44D3-A0DA-8C0B4774A642} folder moved successfully. C:\Users\Sven\AppData\Local\{F064D0C6-8B83-4818-A263-2C446D3E3372} folder moved successfully. C:\Users\Sven\AppData\Local\{F07AB3E0-4D43-4B8F-AEF2-EE0B86B288C7} folder moved successfully. C:\Users\Sven\AppData\Local\{F082FC30-5716-45EA-B2AA-7873DA5052EA} folder moved successfully. C:\Users\Sven\AppData\Local\{F11BF86A-5CB5-45F7-B4F6-AD5C50BCB9B1} folder moved successfully. C:\Users\Sven\AppData\Local\{F127BA34-CE7A-4284-A52F-BECADC03E494} folder moved successfully. C:\Users\Sven\AppData\Local\{F1581F0F-7C18-42B8-9798-CFF3AD852E5F} folder moved successfully. C:\Users\Sven\AppData\Local\{F19EC60A-0DAB-4B64-86AB-9B1DB9DE16EC} folder moved successfully. C:\Users\Sven\AppData\Local\{F2653EE5-1778-4AB9-955F-95A722C3E8AE} folder moved successfully. C:\Users\Sven\AppData\Local\{F2B88BB9-FFD6-4C16-9F5B-1F170E84FAE2} folder moved successfully. C:\Users\Sven\AppData\Local\{F3D9409E-8C64-4A68-81F4-055AFFD87315} folder moved successfully. C:\Users\Sven\AppData\Local\{F470E81C-782C-40D8-B9E3-92D056FB76FC} folder moved successfully. C:\Users\Sven\AppData\Local\{F5237665-2AE5-4D83-B6A7-B4DE2D547201} folder moved successfully. C:\Users\Sven\AppData\Local\{F5552100-883A-4FD1-8783-D54214614EAD} folder moved successfully. C:\Users\Sven\AppData\Local\{F60D61DB-9D36-4CFB-A2D2-A75ADC02A694} folder moved successfully. C:\Users\Sven\AppData\Local\{F6537DA0-27F1-4334-9263-2E26F7F6D9AA} folder moved successfully. C:\Users\Sven\AppData\Local\{F6574383-CA7A-497D-B6F7-39C517494884} folder moved successfully. C:\Users\Sven\AppData\Local\{F676125B-8E36-478A-90F2-A8D5674CE58A} folder moved successfully. C:\Users\Sven\AppData\Local\{F72F79EC-FE5D-458E-BE5A-B3C68C917EB6} folder moved successfully. C:\Users\Sven\AppData\Local\{F740184A-325C-4A2F-A129-6CCDDEE5DA68} folder moved successfully. C:\Users\Sven\AppData\Local\{F7454BED-1580-4FFE-B248-F70A59C505C2} folder moved successfully. C:\Users\Sven\AppData\Local\{F85CA4B2-D12D-4058-A540-3F6C7159BFB0} folder moved successfully. C:\Users\Sven\AppData\Local\{F8760205-D61A-460B-8D9F-2371CECC3915} folder moved successfully. C:\Users\Sven\AppData\Local\{F8956F7D-8961-4952-A715-D7BF598D5EF7} folder moved successfully. C:\Users\Sven\AppData\Local\{F8A70DE8-03E7-43C8-9286-F77171E7B60B} folder moved successfully. C:\Users\Sven\AppData\Local\{FA32841A-9546-4D76-80D9-E8970699E5A4} folder moved successfully. C:\Users\Sven\AppData\Local\{FACCE02E-57EC-4845-9E12-EEA635144657} folder moved successfully. C:\Users\Sven\AppData\Local\{FB3D0793-C91D-404F-B426-AE3642ECE9CB} folder moved successfully. C:\Users\Sven\AppData\Local\{FB93C9C8-CCBA-41E5-A57D-B7DD9554465C} folder moved successfully. C:\Users\Sven\AppData\Local\{FBA21B49-767C-4771-81F3-989957411704} folder moved successfully. C:\Users\Sven\AppData\Local\{FBADBA3F-1493-404A-B1F5-8F8EB15CE260} folder moved successfully. C:\Users\Sven\AppData\Local\{FBB0581E-CD79-40CC-8A89-339D23F0DD8E} folder moved successfully. C:\Users\Sven\AppData\Local\{FC0705DB-14BF-4E14-957F-4FACFCB605E1} folder moved successfully. C:\Users\Sven\AppData\Local\{FC8E70B2-002F-43B0-AE3F-182E317EC175} folder moved successfully. C:\Users\Sven\AppData\Local\{FD88D89B-D7A4-42B0-A79B-1F34737D76AF} folder moved successfully. C:\Users\Sven\AppData\Local\{FDC8DFFA-8A32-4A0E-BB38-8EDFFE2EAC55} folder moved successfully. C:\Users\Sven\AppData\Local\{FDEE7821-43D2-44EC-B8C9-DEDB2AB119DA} folder moved successfully. C:\Users\Sven\AppData\Local\{FE662F28-6B15-4926-96A2-85F10F22863C} folder moved successfully. C:\Users\Sven\AppData\Local\{FE765DA8-C6FC-423E-BB4B-9E1365061E8F} folder moved successfully. C:\Users\Sven\AppData\Local\{FEB2A213-3EE7-4AC1-AED0-12065B6626D8} folder moved successfully. C:\Users\Sven\AppData\Local\Temp\131068.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\278524.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\385020.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\NGMSetup.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\SkypeSetup.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\tmp4f5fcf1c.exe moved successfully. C:\Users\Sven\AppData\Local\Temp\tmpe19c6cb8.exe moved successfully. File\Folder C:\Users\Sven\AppData\LocalLow\Sun\Java\Deployment\cache not found. File/Folder C:\Users\Sven\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ctfmon.lnk not found. < ipconfig /flushdns /c > Windows-IP-Konfiguration Der DNS-Aufl”sungscache konnte nicht geleert werden: Beim Ausfhren der Funktion ist ein Fehler aufgetreten. C:\Users\Sven\Desktop\cmd.bat deleted successfully. C:\Users\Sven\Desktop\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Public User: Sven ->Temp folder emptied: 638141800 bytes ->Temporary Internet Files folder emptied: 1283827197 bytes ->Google Chrome cache emptied: 365369200 bytes ->Flash cache emptied: 8223058 bytes User: UpdatusUser ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 318309753 bytes %systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36031353 bytes RecycleBin emptied: 4328544245 bytes Total Files Cleaned = 6,655.00 mb OTL by OldTimer - Version 3.2.61.3 log created on 09122012_144001 Files\Folders moved on Reboot... File move failed. E:\autorun.inf scheduled to be moved on reboot. File move failed. E:\Einstiegsseite.exe scheduled to be moved on reboot. C:\Users\Sven\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully. PendingFileRenameOperations files... Registry entries deleted on Reboot... da fällt mir ein... kann der rechner jetzt auch wieder ins internet? der alte über den ich jetzt hier schreibe ist schon sehr langsam ;-) |
|
15.09.2012, 10:24
| #7 |
| | BKA-Trojaner, und keine Ahnung wie es läuft hmm mal ne blöde Frage... bin ich mit der Prozedur schon durch? Muss ich noch irgendwas machen? VG Sven |
|
16.09.2012, 17:56
| #8 |
| /// Helfer-Team | BKA-Trojaner, und keine Ahnung wie es läuft Ich sage bescheid, wenn wir durch sind  Sehr gut!  Wie laeuft der Rechner? 1. Schritt Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.danach: 2. Schritt Downloade Dir bitte AdwCleaner auf deinen Desktop.
|
|
16.09.2012, 21:15
| #9 |
| | BKA-Trojaner, und keine Ahnung wie es läuft # AdwCleaner v2.002 - Datei am 09/16/2012 um 22:14:40 erstellt # Aktualisiert am 16/09/2012 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : Sven - SVEN-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Sven\Desktop\adwcleaner.exe # Option [Suche] **** [Dienste] **** ***** [Dateien / Ordner] ***** ***** [Registrierungsdatenbank] ***** Schlüssel Gefunden : HKLM\Software\Conduit ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Die Registrierungsdatenbank ist sauber. -\\ Google Chrome v17.0.963.56 Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [752 octets] - [16/09/2012 22:14:40] ########## EOF - C:\AdwCleaner[R1].txt - [811 octets] ########## |
|
18.09.2012, 02:11
| #10 |
| /// Helfer-Team | BKA-Trojaner, und keine Ahnung wie es läuft Bitte das Malwarebytes Logfile posten! (Reiter Logberichte) |
|
18.09.2012, 19:12
| #11 |
| | BKA-Trojaner, und keine Ahnung wie es läuft Malwarebytes Anti-Malware (Test) 1.65.0.1400 www.malwarebytes.org Datenbank Version: v2012.09.16.11 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Sven :: SVEN-PC [Administrator] Schutz: Aktiviert 16.09.2012 21:01:53 mbam-log-2012-09-16 (21-01-53).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 480306 Laufzeit: 1 Stunde(n), 49 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 4 HKCR\CLSID\{EFF39A40-C163-4d5d-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EFF39A40-C163-4D5D-B073-52FBB55C646A} (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 30 C:\Users\Sven\AppData\Roaming\Cuin\koado.exe (Spyware.Zbot) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Dees\agud.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Ecwi\uhink.exe (Trojan.Agent.TKH) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Eqanan\roazd.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Gefe\kaobm.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Geus\esyf.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Giyhly\byqy.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Hiep\cawi.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Hyqyta\utfa.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Kaox\loaco.exe (Trojan.Winlock.G) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Minis\ymhoz.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Raaw\afmu.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Siciyv\hyepu.exe (Trojan.Winlock) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Taygva\ufys.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Uvexid\kiuko.exe (Trojan.Agent.AZBGen) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Vagi\moce.exe (Trojan.MSIL) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Wily\suyq.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Yhxuh\eqku.exe (Trojan.MSIL) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Yqfa\icuwi.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Sven\AppData\Roaming\Zeaqb\lamy.exe (Trojan.VUPX.PTI1) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_ProgramData\huapcfpu.exe (Trojan.Ransom) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\ms.exe (Trojan.Ransom) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\131068.exe (Trojan.Dropper) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\278524.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\385020.exe (Backdoor.Bot) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\tmp4f5fcf1c.exe (Trojan.Inject) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Local\Temp\tmpe19c6cb8.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\AcroIEHelpe068.dll (Trojan.Passwords) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\appconf32.exe (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\_OTL\MovedFiles\09122012_144001\C_Users\Sven\AppData\Roaming\Wouqh\nyzym.exe (Spyware.Zbot.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) |
|
19.09.2012, 17:52
| #12 |
| /// Helfer-Team | BKA-Trojaner, und keine Ahnung wie es läuft Malware mit Combofix beseitigen Lade Combofix von einem der folgenden Download-Spiegel herunter: BleepingComputer.com - ForoSpyware.com und speichere das Programm auf den Desktop, nicht woanders hin, das ist wichtig! Beachte die ausführliche Original-Anleitung. Zurzeit ist Combofix auf folgenden Windows-Versionen lauffähig:
Vorbereitung und wichtige Hinweise
Combofix nicht auf eigene Faust einsetzen. Wenn keine entsprechende Infektion vorliegt, kann das den Rechner lahmlegen und/oder nachhaltig schädigen! |
|
24.09.2012, 17:05
| #13 |
| | BKA-Trojaner, und keine Ahnung wie es läuft Combofix Logfile: Code:
ATTFilter ComboFix 12-09-24.02 - Sven 24.09.2012 17:52:45.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8103.6375 [GMT 2:00]
ausgeführt von:: c:\users\Sven\Desktop\ComboFix.exe
AV: Norton Internet Security *Disabled/Outdated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Disabled/Outdated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Sven\003.jpg
c:\users\Sven\004.jpg
c:\users\Sven\005.jpg
c:\users\Sven\03.jpg
c:\users\Sven\AppData\Roaming\Aqehx
c:\users\Sven\AppData\Roaming\Aqehx\qyqiq.ive
c:\users\Sven\AppData\Roaming\Aqteer
c:\users\Sven\AppData\Roaming\Aqteer\luyx.evl
c:\users\Sven\AppData\Roaming\Atalo
c:\users\Sven\AppData\Roaming\Atalo\qevah.orc
c:\users\Sven\AppData\Roaming\Baqeh
c:\users\Sven\AppData\Roaming\Baqeh\iwuzm.afy
c:\users\Sven\AppData\Roaming\Byoh
c:\users\Sven\AppData\Roaming\Byoh\qiqua.dys
c:\users\Sven\AppData\Roaming\Ciewe
c:\users\Sven\AppData\Roaming\Ciewe\ekysd.exe
c:\users\Sven\AppData\Roaming\Daok
c:\users\Sven\AppData\Roaming\Daok\arucr.utc
c:\users\Sven\AppData\Roaming\Dili
c:\users\Sven\AppData\Roaming\Dili\yrmee.ing
c:\users\Sven\AppData\Roaming\Dyna
c:\users\Sven\AppData\Roaming\Dyna\ysqu.uku
c:\users\Sven\AppData\Roaming\Eknee
c:\users\Sven\AppData\Roaming\Eknee\hyne.usg
c:\users\Sven\AppData\Roaming\Ekoneg
c:\users\Sven\AppData\Roaming\Ekoneg\aqhoi.hye
c:\users\Sven\AppData\Roaming\Ekqo
c:\users\Sven\AppData\Roaming\Ekqo\ehoqf.ypg
c:\users\Sven\AppData\Roaming\Fuwowi
c:\users\Sven\AppData\Roaming\Fuwowi\hyemi.zun
c:\users\Sven\AppData\Roaming\Giwev
c:\users\Sven\AppData\Roaming\Giwev\toufm.ozy
c:\users\Sven\AppData\Roaming\Guxyw
c:\users\Sven\AppData\Roaming\Guxyw\ohcea.riv
c:\users\Sven\AppData\Roaming\Gyixo
c:\users\Sven\AppData\Roaming\Gyixo\kaewi.ota
c:\users\Sven\AppData\Roaming\Init
c:\users\Sven\AppData\Roaming\Init\puov.exe
c:\users\Sven\AppData\Roaming\Inoz
c:\users\Sven\AppData\Roaming\Inoz\atin.woi
c:\users\Sven\AppData\Roaming\Ivvu
c:\users\Sven\AppData\Roaming\Ivvu\wievi.ape
c:\users\Sven\AppData\Roaming\Ixlib
c:\users\Sven\AppData\Roaming\Ixlib\pyome.uba
c:\users\Sven\AppData\Roaming\Kacet
c:\users\Sven\AppData\Roaming\Kacet\erohm.exe
c:\users\Sven\AppData\Roaming\Losa
c:\users\Sven\AppData\Roaming\Losa\nain.bou
c:\users\Sven\AppData\Roaming\Loyrke
c:\users\Sven\AppData\Roaming\Loyrke\ibake.apm
c:\users\Sven\AppData\Roaming\Meykg
c:\users\Sven\AppData\Roaming\Meykg\xeaga.arc
c:\users\Sven\AppData\Roaming\Okvuo
c:\users\Sven\AppData\Roaming\Okvuo\ogobo.exe
c:\users\Sven\AppData\Roaming\Quoc
c:\users\Sven\AppData\Roaming\Quoc\icraz.exe
c:\users\Sven\AppData\Roaming\srvblck2.tmp
c:\users\Sven\AppData\Roaming\Zuraut
c:\users\Sven\AppData\Roaming\Zuraut\obkyb.exe
.
.
((((((((((((((((((((((( Dateien erstellt von 2012-08-24 bis 2012-09-24 ))))))))))))))))))))))))))))))
.
.
2012-09-24 16:00 . 2012-09-24 16:00 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-09-24 16:00 . 2012-09-24 16:00 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-09-24 15:57 . 2012-09-24 15:57 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{72D653DD-328F-4080-85D0-BBBC229D4E39}\offreg.dll
2012-09-21 19:56 . 2012-08-30 07:27 9308616 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{72D653DD-328F-4080-85D0-BBBC229D4E39}\mpengine.dll
2012-09-16 19:07 . 2012-08-22 18:12 950128 ----a-w- c:\windows\system32\drivers\ndis.sys
2012-09-16 19:07 . 2012-07-04 20:26 41472 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2012-09-16 19:07 . 2012-08-02 17:58 574464 ----a-w- c:\windows\system32\d3d10level9.dll
2012-09-16 19:07 . 2012-08-02 16:57 490496 ----a-w- c:\windows\SysWow64\d3d10level9.dll
2012-09-16 19:07 . 2012-08-22 18:12 1913200 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-09-16 19:07 . 2012-08-22 18:12 376688 ----a-w- c:\windows\system32\drivers\netio.sys
2012-09-16 19:07 . 2012-08-22 18:12 288624 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2012-09-16 19:00 . 2012-09-16 19:00 -------- d-----w- c:\users\Sven\AppData\Roaming\Malwarebytes
2012-09-16 19:00 . 2012-09-16 19:00 -------- d-----w- c:\programdata\Malwarebytes
2012-09-16 19:00 . 2012-09-16 19:00 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2012-09-16 19:00 . 2012-09-07 15:04 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-12 12:40 . 2012-09-12 12:40 -------- d-----w- C:\_OTL
2012-09-01 05:38 . 1998-06-17 17:07 57344 ----a-w- c:\windows\SysWow64\Mfc42loc.dll
2012-09-01 05:38 . 2012-09-01 05:38 -------- d-----w- c:\program files (x86)\Bethesda Softworks
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-08-17 18:49 . 2012-08-17 18:49 4608 ----a-w- c:\windows\SysWow64\w95inf32.dll
2012-08-17 18:49 . 2012-08-17 18:49 2272 ----a-w- c:\windows\SysWow64\w95inf16.dll
2012-07-18 18:15 . 2012-08-15 14:50 3148800 ----a-w- c:\windows\system32\win32k.sys
2012-07-06 20:07 . 2012-08-15 21:25 552960 ----a-w- c:\windows\system32\drivers\bthport.sys
2012-07-04 22:16 . 2012-08-15 14:50 73216 ----a-w- c:\windows\system32\netapi32.dll
2012-07-04 22:13 . 2012-08-15 14:50 59392 ----a-w- c:\windows\system32\browcli.dll
2012-07-04 22:13 . 2012-08-15 14:50 136704 ----a-w- c:\windows\system32\browser.dll
2012-07-04 21:14 . 2012-08-15 14:50 41984 ----a-w- c:\windows\SysWow64\browcli.dll
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"KPeerNexonEU"="c:\nexon\NEXON_EU_Downloader\nxEULauncher.exe" [2011-09-16 438272]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2008-09-06 413696]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-10-22 1133856]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R2 CLKMSVC10_38F51D56;CyberLink Product - 2011/04/08 18:32;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [2010-08-25 246256]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-01 183560]
R3 EagleX64;EagleX64;c:\windows\system32\drivers\EagleX64.sys [x]
R3 Samsung UPD Service;Samsung UPD Service;c:\windows\System32\SUPDSvc.exe [2010-08-09 166704]
R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016]
R3 X6va008;X6va008;c:\windows\SysWOW64\Drivers\X6va008 [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [2011-01-17 25960]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1207020.003\SYMDS64.SYS [2011-01-27 450680]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1207020.003\SYMEFA64.SYS [2011-03-15 912504]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20110909.001\BHDrvx64.sys [2011-09-09 1152632]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20110922.030\IDSvia64.sys [2011-09-15 488568]
S1 SABI;SAMSUNG Kernel Driver For Windows 7;c:\windows\system32\Drivers\SABI.sys [2009-05-28 13824]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [2011-01-27 171128]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [2011-04-21 386168]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-07 399432]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-07 676936]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [2011-04-17 130008]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-01-17 2009704]
S2 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-03-19 2666880]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [2010-10-08 19192]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-06 2655768]
S3 BTWAMPFL;BTWAMPFL;c:\windows\system32\DRIVERS\btwampfl.sys [2010-09-21 348712]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [2010-11-09 31088]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2011-09-17 136824]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [2010-08-31 118664]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-07 25928]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [2010-09-21 56344]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-12-03 80384]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-12-03 181248]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-11-25 409192]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_38F51D56
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-11-17 11613288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://samsung.msn.com
mStart Page = hxxp://samsung.msn.com
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.1.1
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\18.7.2.3\diMaster.dll\" /prefetch:1"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\X6va008]
"ImagePath"="\??\c:\windows\SysWOW64\Drivers\X6va008"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2012-09-24 18:04:01
ComboFix-quarantined-files.txt 2012-09-24 16:04
.
Vor Suchlauf: 13 Verzeichnis(se), 119.654.998.016 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 120.950.919.168 Bytes frei
.
- - End Of File - - 4D51DB9395B4BD1CB12CEB6F99DB80FC
?? ??? ?? Windows Live Mesh ActiveX ??? ??? ActiveX ?? Windows Live Mesh ???? ??????? ??????? ???? ??? Windows Live ???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ??????? ???? Windows Live ????? Messenger ????? Windows Live ?????? ??????? ?? Windows Live ??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? ??????? Windows Live Mesh ActiveX ??(????) ??????? Windows Live Mesh ActiveX ??? ???????? ?? Messenger ???????? ?????????? Windows Live ????????? ActiveX ?? Windows Live Mesh ????????????????????????? (???) ????????? Messenger ?????????? Windows Live ??????????? ?? Windows Live ActiveX-kontroll för fjärranslutningar för Windows Live Mesh ActiveX ???????? ?? Windows Live Mesh ?? ?????????? ?????? Adobe AIR Adobe Reader 9.1 - Deutsch Agatha Christie - Death on the Nile AION Free-To-Play „Messenger“ pagalbine priemone Apple Software Update Atlantica „Windows Live Essentials“ „Windows Live Mail“ „Windows Live Mesh ActiveX“ nuotoliniu ryšiu valdiklis „Windows Live Messenger“ „Windows Live“ fotogalerija Baldur's Gate(TM) II - Schatten von Amn(TM) Bandisoft MPEG-1 Decoder BatteryLifeExtender Bejeweled 2 Deluxe Bing Bar Build-a-lot Call To Power 2 ChargeableUSB Chuzzle Deluxe Combat Arms EU Complemento Messenger Complément Messenger Contrôle ActiveX Windows Live Mesh pour connexions à distance Control ActiveX de Windows Live Mesh para conexiones remotas Control ActiveX Windows Live Mesh pentru conexiuni la distan?a Controle ActiveX do Windows Live Mesh para Conexões Remotas Controlo ActiveX do Windows Live Mesh para Ligações Remotas CyberLink Media Suite CyberLink MediaShow CyberLink Power2Go CyberLink PowerDirector CyberLink PowerDVD 10 CyberLink YouCam D3DX10 Diner Dash 2 Restaurant Rescue Doplnok programu Messenger Drakensang Online EA Installer Easy Content Share Easy Display Manager Easy Migration Easy Network Manager Easy SpeedUp Manager EasyBatteryManager EasyFileShare EverQuest II Farm Frenzy Fast Start FLV Player 2.0 (build 25) Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych Fotogalerija Windows Live FUSSBALL MANAGER 11 Galeria de Fotografias do Windows Live Galeria fotografii uslugi Windows Live Galerie de photos Windows Live Galerie foto Windows Live Galería fotográfica de Windows Live Google Chrome Gunblade Saga Insaniquarium Deluxe Intel(R) Control Center Intel(R) Management Engine Components Intel(R) Processor Graphics Intel(R) Rapid Storage Technology John Deere Drive Green Junk Mail filter update Kontrola Windows Live Mesh ActiveX za daljinske veze Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave League of Legends Malwarebytes Anti-Malware Version 1.65.0.1400 Media Go Mesh Runtime Messenger-kumppani Messenger ??? ?? Messenger ???? Messenger ????? Messenger Assistent Messenger Companion Messenger kíséro Messenger Pratilac Messenger Suradnik Microsoft Office 2010 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2005 Redistributable - KB2467175 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Morrowind Movie Color Enhancer MSVCRT MSVCRT_amd64 Multimedia POP NC Launcher (GameForge) Nexon Game Manager Norton Internet Security Norton Online Backup Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená pripojení Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia Pando Media Booster Peggle Penguins! PhoneShare PlayStation(R)Network Downloader PlayStation(R)Store Poczta uslugi Windows Live Podstawowe programy Windows Live Polar Golfer Pomocnik Messenger Pošta Windows Live QuickTime Raccolta foto di Windows Live Realtek Ethernet Controller Driver Realtek High Definition Audio Driver Renesas Electronics USB 3.0 Host Controller Driver S?????? f?t???af??? t?? Windows Live Samsung AnyWeb Print Samsung Printer Live Update Samsung Recovery Solution 5 Samsung Support Center Samsung Universal Print Driver Samsung Universal Scan Driver Samsung Update Plus Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Skype Click to Call Skype™ 5.10 Sony Ericsson PC Companion 2.01.210 Spremljevalec Messenger St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? TeamViewer 7 TES Construction Set Unity Web Player Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) User Guide Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi WildTangent Games WildTangent ORB Game Console Windows Live Windows Live ?? Windows Live ?? ??? Windows Live ??? Windows Live ???? Windows Live Communications Platform Windows Live Essentials Windows Live Fotótár Windows Live Foto-galerija Windows Live fotoattelu galerija Windows Live Fotogalerie Windows Live Fotogalleri Windows Live Fotogaléria Windows Live Fotograf Galerisi Windows Live Galeria de Fotos Windows Live Galerija fotografija Windows Live Installer Windows Live Mail Windows Live Mesh Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger Windows Live Mesh ActiveX-objekt til fjernforbindelser Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz Windows Live Mesh ActiveX Control for Remote Connections Windows Live Mesh ActiveX kontrola za daljinske veze Windows Live Mesh ActiveX vadikla attalajiem savienojumiem Windows Live Meshin etäyhteyksien ActiveX-komponentti Windows Live Messenger Windows Live Messenger Companion Core Windows Live Movie Maker Windows Live Photo Common Windows Live Photo Gallery Windows Live PIMT Platform Windows Live Pošta Windows Live SOXE Windows Live SOXE Definitions Windows Live Temel Parçalar Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Liven asennustyökalu Windows Liven sähköposti Windows Liven valokuvavalikoima WordCaptureX Pro Yahoo! Messenger Yahoo! Software Update Yahoo! Toolbar Zuma Deluxe |
|
25.09.2012, 10:24
| #14 |
| /// Helfer-Team | BKA-Trojaner, und keine Ahnung wie es läuft Sehr gut!
danach: Malware-Scan mit Emsisoft Anti-Malware Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm. Lade über Jetzt Updaten die aktuellen Signaturen herunter. Wähle den Freeware-Modus aus. Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers. Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten. Anleitung: http://www.trojaner-board.de/103809-...i-malware.html |
|
01.10.2012, 05:59
| #15 |
| | BKA-Trojaner, und keine Ahnung wie es läuft # AdwCleaner v2.002 - Datei am 10/01/2012 um 06:53:29 erstellt # Aktualisiert am 16/09/2012 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : Sven - SVEN-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Sven\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** ***** [Dateien / Ordner] ***** ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKLM\Software\Conduit ***** [Internet Browser] ***** -\\ Internet Explorer v9.0.8112.16421 Wiederhergestellt : [HKCU\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] Wiederhergestellt : [HKU\S-1-5-21-1241931330-1321431864-582149410-1000\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope] -\\ Google Chrome v17.0.963.56 Datei : C:\Users\Sven\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] Die Datei ist sauber. ************************* AdwCleaner[R1].txt - [879 octets] - [16/09/2012 22:14:40] AdwCleaner[S1].txt - [1513 octets] - [01/10/2012 06:53:29] ########## EOF - C:\AdwCleaner[S1].txt - [1573 octets] ########## |
|
| Themen zu BKA-Trojaner, und keine Ahnung wie es läuft |
| abgesicherte, abgesicherten, backdoor.bot, bka trojaner, forum, funktioniert, mitglieder, natürlich, neustart, rechner, spyware.zbot, spyware.zbot.gen, trojan.agent, trojan.agent.azbgen, trojan.agent.tkh, trojan.downloader, trojan.dropper, trojan.inject, trojan.msil, trojan.passwords, trojan.ransom, trojan.vupx.pti1, trojan.winlock, trojan.winlock.g, trojaner |
Linear-Darstellung
