|
Plagegeister aller Art und deren Bekämpfung: c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
06.07.2013, 11:16 | #1 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Kaspersky Zeigt an das ein Trojaner gefunden wurde und zwar "c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe", wenn ich dann auf desinfizieren klicke und er die Gefahr bereinigt, funktioniert nichts mehr am PC. ich kann keine Programme mehr öffnen, kann nicht mal herunterfahren. Hab versucht System mal zurückstellen aber hat sich nichts gebracht. hab versucht die Datei Manual zu löschen auch ohne Erfolg. ich hab auch bisschen im Internet geschaut, aber werde nicht schlauer;/ mein frage: wie werde ich jtz den Trojaner los? (Da ich neue hier bin, bin ich mir nicht sicher ob ich das Problem richtig gepostet habe, falls nicht dann tut es mir leid.) Danke schonmal für eure Hilfe. |
06.07.2013, 11:19 | #2 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Hi,
__________________Systemscan mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
__________________ |
06.07.2013, 11:36 | #3 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Addition.txt
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-07-2013 Ran by Admin at 2013-07-06 12:32:26 Running from C:\Users\Admin\Desktop Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= µTorrent (x32 Version: 3.3.0.29677) 64 Bit HP CIO Components Installer (Version: 7.2.8) AC3Filter 1.63b (x32 Version: 1.63b) Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224) Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Adobe Shockwave Player 12.0 (x32 Version: 12.0.0.112) AION Free-To-Play (x32 Version: 2.70.0000) Akamai NetSession Interface (HKCU) AP Tuner 3.08 (x32) Apple Application Support (x32 Version: 2.3.3) Apple Mobile Device Support (Version: 6.1.0.13) Apple Software Update (x32 Version: 2.1.3.127) Assassin's Creed Brotherhood (x32 Version: 1.03) AUER Success.6 Lernversion (x32 Version: 06.00.0228) AutoCAD 2013 - Deutsch (German) (Version: 19.0.55.0) AutoCAD 2013 Language Pack - Deutsch (German) (Version: 19.0.55.0) Autodesk 3ds Max Design 2013 64-bit (Version: 15.0.0.347) Autodesk Backburner 2013.0.0 (x32 Version: 2013.0.0) Autodesk Content Service (x32 Version: 3.0.84.0) Autodesk Content Service Language Pack (x32 Version: 3.0.84.0) Autodesk Download Manager (x32 Version: 2.0.2.0) Autodesk FBX Plug-in 2013.1 - 3ds Max Design 2013 64-bit Autodesk Inventor Fusion 2013 (Version: 2.0.0.206) Autodesk Inventor Fusion Plugin for AutoCAD 2013 (Version: 0.2.0.230) Autodesk Inventor Fusion plug-in for AutoCAD 2013 (Version: 0.2.0.230) Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2013 (Version: 0.2.0.230) Autodesk Material Library 2013 (x32 Version: 3.0.13) Autodesk Material Library Base Resolution Image Library 2013 (x32 Version: 3.0.13) Autodesk Material Library Low Resolution Image Library 2013 (x32 Version: 3.0.13) Autodesk Material Library Medium Resolution Image Library 2013 (x32 Version: 3.0.13) Autodesk Revit 2013 (Version: 12.02.21203) Autodesk Sync (Version: 3.5.24.0) Axife Mouse Recorder DEMO 5.01 (x32) Bing Bar (x32 Version: 7.0.609.0) Bonjour (Version: 3.0.0.10) BufferChm (x32 Version: 130.0.331.000) Bundled software uninstaller (x32) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000) Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6) Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7) Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32) CCleaner (Version: 3.27) Clarity recorder (x32 Version: 1.0) Composite 2013 64-bit (Version: 8.0.0) ConvertHelper 2.2 (x32) Copy (x32 Version: 130.0.366.000) Crysis®3 (x32 Version: 1.1.0.0) D3DX10 (x32 Version: 15.4.2368.0902) DAEMON Tools Pro (x32 Version: 5.0.0316.0317) Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition Destinations (x32 Version: 130.0.0.0) DeviceDiscovery (x32 Version: 130.0.372.000) DivX-Setup (x32 Version: 2.6.1.44) DJ_AIO_06_F2400_SW_Min (x32 Version: 130.0.373.000) F2400 (x32 Version: 130.0.373.000) Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287) Facemoods Toolbar (x32) FARO LS 1.1.406.58 (x32 Version: 4.6.58.2) FARO LS 1.1.408.2 (x32 Version: 4.8.2.25521) FARO LS 4.8.2.25521 (x32) ffdshow v1.2.4422 [2012-04-09] (x32 Version: 1.2.4422.0) FilesFrog Update Checker (x32) FoxTab PDF Converter (HKCU) Free YouTube Download Manager (x32 Version: 1.0.0.4) Free YouTube to MP3 Converter version 3.12.5.628 (x32 Version: 3.12.5.628) Goodnight Timer 1.1 (x32) Google Chrome (x32 Version: 27.0.1453.116) Google Drive (x32 Version: 1.10.4769.632) Google Earth Plug-in (x32 Version: 7.0.3.8542) Google SketchUp Pro 8 (x32 Version: 3.0.14358) Google Toolbar for Internet Explorer (x32 Version: 1.0.0) Google Toolbar for Internet Explorer (x32 Version: 7.5.4209.2358) Google Update Helper (x32 Version: 1.3.21.145) GPBaseService2 (x32 Version: 130.0.371.000) GPL MPEG-1/2 DirectShow Decoder Filter (x32 Version: 0.1.2) GXTranscoder v2 (x32 Version: 2.24.2980) HDVidCodec (x32 Version: 2.1 Build 26473) HP Customer Participation Program 13.0 (Version: 13.0) HP Deskjet F2400 All-In-One Driver Software 13.0 Rel .6 (Version: 13.0) HP Imaging Device Functions 13.0 (Version: 13.0) HP Print Projects 1.0 (Version: 1.0) HP Smart Web Printing 4.5 (Version: 4.5) HP Solution Center 13.0 (Version: 13.0) HP Update (x32 Version: 4.000.011.006) HPDiagnosticAlert (x32 Version: 1.00.0000) HPPhotoGadget (x32 Version: 130.0.282.000) hpPrintProjects (x32 Version: 130.0.303.000) HPProductAssistant (x32 Version: 130.0.371.000) HPSSupply (x32 Version: 130.0.371.000) hpWLPGInstaller (x32 Version: 130.0.303.000) iCloud (Version: 2.1.2.8) iTunes (Version: 11.0.2.26) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Java(TM) 6 Update 39 (64-bit) (Version: 6.0.390) Java(TM) 6 Update 39 (x32 Version: 6.0.390) JDownloader 0.9 (x32 Version: 0.9) Junk Mail filter update (x32 Version: 15.4.3502.0922) Kaspersky PURE 3.0 (x32 Version: 13.0.2.558) LameXP (x32) Langenscheidt Vokabeltrainer 5.0 Englisch (OEM) (x32 Version: 5.0.6) Living Waterfalls 3 (x32 Version: 1.0.2) Lumion Free 3.1.2 (Version: Free 3.1.2) MarketResearch (x32 Version: 130.0.374.000) Mesh Runtime (x32 Version: 15.4.5722.2) Messenger Companion (x32 Version: 15.4.3502.0922) Metro: Last Light (c) Deep Silver version 1 (x32 Version: 1) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319) Microsoft .NET Framework 4 Extended (Version: 4.0.30319) Microsoft Access MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft DCF MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Excel MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0) Microsoft Groove MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Lync MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017) Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003) Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4420.1017) Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Office Outlook Connector (x32 Version: 14.0.6123.5001) Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017) Microsoft Office Proofing (German) 2013 (Version: 15.0.4420.1017) Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017) Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4420.1017) Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft OneNote MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Outlook MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Publisher MUI (German) 2013 (Version: 15.0.4420.1017) Microsoft Silverlight (Version: 5.1.20125.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161) Microsoft Visual C++ 2008 x64 ATL Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x64 CRT Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x64 MFC Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x64 OpenMP Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729 (x32 Version: 9.0.30729) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106) Microsoft Word MUI (German) 2013 (Version: 15.0.4420.1017) Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0) Mozilla Maintenance Service (x32 Version: 22.0) MSVCRT (x32 Version: 15.4.2862.0708) MSVCRT_amd64 (x32 Version: 15.4.2862.0708) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) NC Launcher (GameForge) (x32) NVIDIA 3D Vision Controller-Treiber 314.22 (Version: 314.22) NVIDIA 3D Vision Treiber 314.22 (Version: 314.22) NVIDIA GeForce Experience 1.1 (Version: 1.1) NVIDIA Grafiktreiber 314.22 (Version: 314.22) NVIDIA HD-Audiotreiber 1.3.23.1 (Version: 1.3.23.1) NVIDIA Install Application (Version: 2.1002.115.744) NVIDIA PhysX (x32 Version: 9.12.1031) NVIDIA PhysX-Systemsoftware 9.12.1031 (Version: 9.12.1031) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.1422) NVIDIA Systemsteuerung 314.22 (Version: 314.22) NVIDIA Update 3.10.8 (Version: 3.10.8) NVIDIA Update Components (Version: 3.10.8) OpenOffice.org 3.4.1 (x32 Version: 3.41.9593) Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4420.1017) Pando Media Booster (x32 Version: 2.6.0.8) PDF24 Creator 5.4.0 (x32) PhotoFiltre 7 (HKCU) PunkBuster Services (x32 Version: 0.993) QuickTime (x32 Version: 7.73.80.64) Revit 2013 COLLADA exporter for Lumion users (ver. 2.11) (x32 Version: 2.11) Revit 2013 Language Pack - Deutsch (Version: 12.02.21203) SAMSUNG Mobile Modem Driver Set Samsung Mobile phone USB driver Drive Software SAMSUNG Mobile USB Modem 1.0 Software SAMSUNG Mobile USB Modem Software Scan (x32 Version: 13.0.0.0) Search Protect by conduit (x32 Version: 1.5.0.71) Shop for HP Supplies (Version: 13.0) Skype Click to Call (x32 Version: 6.3.11079) Skype™ 6.5 (x32 Version: 6.5.158) SmartWebPrinting (x32 Version: 130.0.373.000) SolutionCenter (x32 Version: 130.0.373.000) Status (x32 Version: 130.0.373.000) swMSM (x32 Version: 12.0.0.1) Themen aktuell 1 (x32) Thunder Master v1.3 (x32 Version: 1.3.0.1) Tomb Raider (x32) Toolbox (x32 Version: 130.0.648.000) TrayApp (x32 Version: 130.0.376.000) Ubisoft Game Launcher (x32 Version: 1.0.0.0) upc cablecom Installer (x32 Version: 6.0.0.53) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1) Update for Microsoft Access 2013 (KB2760350) 64-Bit Edition Update for Microsoft Excel 2013 (KB2760339) 64-Bit Edition Update for Microsoft Lync 2013 (KB2768004) 64-Bit Edition Update for Microsoft Office 2013 (KB2726954) 64-Bit Edition Update for Microsoft Office 2013 (KB2726961) 64-Bit Edition Update for Microsoft Office 2013 (KB2726996) 64-Bit Edition Update for Microsoft Office 2013 (KB2737954) 64-Bit Edition Update for Microsoft Office 2013 (KB2752025) 64-Bit Edition Update for Microsoft Office 2013 (KB2752094) 64-Bit Edition Update for Microsoft Office 2013 (KB2752101) 64-Bit Edition Update for Microsoft Office 2013 (KB2760224) 64-Bit Edition Update for Microsoft Office 2013 (KB2760538) 64-Bit Edition Update for Microsoft Office 2013 (KB2760610) 64-Bit Edition Update for Microsoft Office 2013 (KB2767845) 64-Bit Edition Update for Microsoft Office 2013 (KB2767860) 64-Bit Edition Update for Microsoft Office 2013 (KB2768016) 64-Bit Edition Update for Microsoft Office 2013 (KB2810010) 64-Bit Edition Update for Microsoft Office 2013 (KB2810014) 64-Bit Edition Update for Microsoft Office 2013 (KB2810017) 64-Bit Edition Update for Microsoft Office 2013 (KB2810018) 64-Bit Edition Update for Microsoft Office 2013 (KB2817320) 64-Bit Edition Update for Microsoft OneNote 2013 (KB2760334) 64-Bit Edition Update for Microsoft OneNote 2013 (KB2768011) 64-Bit Edition Update for Microsoft Outlook 2013 (KB2810015) 64-Bit Edition Update for Microsoft PowerPoint 2013 (KB2726947) 64-Bit Edition Update for Microsoft PowerPoint 2013 (KB2727013) 64-Bit Edition Update for Microsoft SkyDrive Pro (KB2767865) 64-Bit Edition Update for Microsoft SkyDrive Pro (KB2810019) 64-Bit Edition Update for Microsoft Visio 2013 (KB2810008) 64-Bit Edition Update for Microsoft Visio Viewer 2013 (KB2768338) 64-Bit Edition Update for Microsoft Word 2013 (KB2752073) 64-Bit Edition Update for Microsoft Word 2013 (KB2768007) 64-Bit Edition Update for Microsoft Word 2013 (KB2768337) 64-Bit Edition Uplay (x32 Version: 2.0) VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0) Veetle TV 0.9.18 (x32 Version: 0.9.18) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (x32 Version: 9.0.30729.177) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (x32 Version: 9.0.30729.177) VoipStunt (x32 Version: 4.07 build 629) WebReg (x32 Version: 130.0.132.017) Windows Live Communications Platform (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3502.0922) Windows Live Essentials (x32 Version: 15.4.3538.0513) Windows Live Family Safety (Version: 15.4.3538.0513) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922) Windows Live ID Sign-in Assistant (Version: 7.250.4232.0) Windows Live Installer (x32 Version: 15.4.3502.0922) Windows Live Language Selector (Version: 15.4.3538.0513) Windows Live Mail (x32 Version: 15.4.3502.0922) Windows Live Mesh (x32 Version: 15.4.3502.0922) Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2) Windows Live Messenger (x32 Version: 15.4.3538.0513) Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922) Windows Live MIME IFilter (Version: 15.4.3502.0922) Windows Live Movie Maker (x32 Version: 15.4.3502.0922) Windows Live Photo Common (x32 Version: 15.4.3502.0922) Windows Live Photo Gallery (x32 Version: 15.4.3502.0922) Windows Live PIMT Platform (x32 Version: 15.4.3508.1109) Windows Live Remote Client (Version: 15.4.5722.2) Windows Live Remote Client Resources (Version: 15.4.5722.2) Windows Live Remote Service (Version: 15.4.5722.2) Windows Live Remote Service Resources (Version: 15.4.5722.2) Windows Live SOXE (x32 Version: 15.4.3502.0922) Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922) Windows Live UX Platform (x32 Version: 15.4.3502.0922) Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109) Windows Live Writer (x32 Version: 15.4.3502.0922) Windows Live Writer Resources (x32 Version: 15.4.3502.0922) Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8) WinRAR 4.00 (64-Bit) (Version: 4.00.0) Yontoo 1.10.03 (Version: 1.10.03) ZTE Handset USB Driver ZTE Handset USB Driver (Version: 5.2066.1.A11B02) Zylom Games Player Plugin (x32) ==================== Restore Points ========================= 02-07-2013 08:56:17 Windows Update 05-07-2013 09:57:22 Windows Update 05-07-2013 20:24:40 Windows Update 06-07-2013 08:41:29 Windows Update ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {00A55536-95B6-4C3D-BD05-3717E94624A4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {07C28415-0CF7-43B8-843F-43B5AC4E2B68} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task Task: {0BBDA094-4FED-4452-86CC-0DD1DE714603} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated) Task: {136DEF13-9C35-4331-B723-60F32007C852} - System32\Tasks\Software Updater Ui => C:\Program Files (x86)\SoftwareUpdater\SoftwareUpdater.Ui.exe [2013-06-08] () Task: {22665BA0-DA12-46A4-8865-5448C0F0D44F} - System32\Tasks\GoforFilesUpdate => C:\Program Files (x86)\GoforFiles\GFFUpdater.exe No File Task: {22A9037D-2DEF-49E0-8FC4-81DA45363FAD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation) Task: {2DB786D1-0656-4B75-AE3C-7BEE9EA9143D} - \DealPlyUpdate No Task File Task: {300C042D-5E8E-44F7-9EA9-DC8A34001E76} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation) Task: {316F4665-3FA8-4A92-8109-01CB618D889F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-23] (Google Inc.) Task: {33173E03-719F-4804-B140-2D36AC653934} - \Software Updater No Task File Task: {37939D51-0529-425E-9CAB-2E58BBF34B77} - System32\Tasks\Microsoft Office 15 Sync Maintenance for Admin-PC-Admin Admin-PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2012-10-01] (Microsoft Corporation) Task: {47D35A65-567F-4583-9F7B-434EF69B532B} - System32\Tasks\EPUpdater => C:\Users\Admin\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-05-09] () Task: {4EDABD4E-E8BF-467F-B1E4-571A2F882CBA} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation) Task: {660B50D7-9D49-4A81-B9D7-30175BCC82B2} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {9683A9E4-8824-44DA-A4FA-E90AD82F4303} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation) Task: {9BAAF8E6-FC15-4CE7-A3A7-5B2601F0F898} - System32\Tasks\Microsoft\Windows\WindowsBackup\Windows Backup Monitor => C:\Windows\system32\sdclt.exe [2010-11-20] (Microsoft Corporation) Task: {A617C0BB-F148-4CF2-9EEC-8B47521B70EA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-01-23] (Piriform Ltd) Task: {C138C7C1-2757-40BB-9C02-D7C0DF84276F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation) Task: {D4EB5ABC-643C-4DDF-A9B0-F7DA30056C94} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000UA => C:\Users\Admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-29] (Facebook Inc.) Task: {DCC1C618-7064-4DF1-B8D9-15F88110F07F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-23] (Google Inc.) Task: {E6A37DDE-67CF-4A4E-AF44-B6638D434DD9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000Core => C:\Users\Admin\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-29] (Facebook Inc.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000Core.job => C:\Users\Admin\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000UA.job => C:\Users\Admin\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (07/06/2013 10:45:52 AM) (Source: Office 2013 Licensing Service) (User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/06/2013 10:38:21 AM) (Source: MsiInstaller) (User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können. Error: (07/06/2013 10:37:58 AM) (Source: MsiInstaller) (User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können. Error: (07/06/2013 02:07:22 AM) (Source: MsiInstaller) (User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/06/2013 01:49:04 AM) (Source: Wininit) (User: ) Description: Der Windows-Startprozess konnte Systemprozesse nicht beenden. Error: (07/06/2013 01:49:02 AM) (Source: Winlogon) (User: ) Description: Fehler beim Beenden der Prozesse des aktuell angemeldeten Benutzers durch den Windows-Anmeldeprozess. Error: (07/06/2013 01:48:37 AM) (Source: Winlogon) (User: ) Description: Fehler beim Beenden der Prozesse des aktuell angemeldeten Benutzers durch den Windows-Anmeldeprozess. Error: (07/06/2013 01:45:55 AM) (Source: Office 2013 Licensing Service) (User: ) Description: Subscription licensing service failed: -2147024891 Error: (07/06/2013 00:18:11 AM) (Source: MsiInstaller) (User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können. Error: (07/06/2013 00:17:51 AM) (Source: MsiInstaller) (User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können. System errors: ============= Error: (07/06/2013 11:19:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet: %%1069 Error: (07/06/2013 11:19:43 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC). Error: (07/06/2013 11:18:31 AM) (Source: DCOM) (User: ) Description: 1084CSObjectsSrv{D7B356D0-0DA4-11DB-8993-005056C00008} Error: (07/06/2013 10:55:56 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/06/2013 10:55:55 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/06/2013 10:55:55 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/06/2013 10:55:55 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (07/06/2013 10:55:55 AM) (Source: DCOM) (User: ) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} Error: (07/06/2013 10:55:55 AM) (Source: DCOM) (User: ) Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} Error: (07/06/2013 10:55:54 AM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Microsoft Office Sessions: ========================= Error: (07/06/2013 10:45:52 AM) (Source: Office 2013 Licensing Service)(User: ) Description: Subscription licensing service failed: -1073418154 Error: (07/06/2013 10:38:21 AM) (Source: MsiInstaller)(User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/06/2013 10:37:58 AM) (Source: MsiInstaller)(User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/06/2013 02:07:22 AM) (Source: MsiInstaller)(User: NT-AUTORITÄT) Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/06/2013 01:49:04 AM) (Source: Wininit)(User: ) Description: Error: (07/06/2013 01:49:02 AM) (Source: Winlogon)(User: ) Description: Error: (07/06/2013 01:48:37 AM) (Source: Winlogon)(User: ) Description: Error: (07/06/2013 01:45:55 AM) (Source: Office 2013 Licensing Service)(User: ) Description: Subscription licensing service failed: -2147024891 Error: (07/06/2013 00:18:11 AM) (Source: MsiInstaller)(User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL) Error: (07/06/2013 00:17:51 AM) (Source: MsiInstaller)(User: Admin-PC) Description: Produkt: Akamai NetSession Interface -- Fehler 1310. Fehler beim Schreiben in die Datei: C:\Users\Admin\AppData\Local\Akamai\admintool.exe. Systemfehler 0. Stellen Sie sicher, dass Sie auf das Verzeichnis zugreifen können.(NULL)(NULL)(NULL)(NULL)(NULL) CodeIntegrity Errors: =================================== Date: 2012-12-28 21:35:43.700 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:35:43.690 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:32:59.604 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:32:59.594 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:29:12.656 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:29:12.646 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:26:19.411 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:26:19.391 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:25:12.916 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-12-28 21:25:12.906 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\USBSTOR.SYS" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 40% Total physical RAM: 6007.12 MB Available physical RAM: 3556.18 MB Total Pagefile: 12012.42 MB Available Pagefile: 9050.59 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (SYSTEM) (Fixed) (Total:1397.17 GB) (Free:1118.54 GB) NTFS (Disk=0 Partition=2) ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 62FA4EFE) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=-698828718080) - (Type=07 NTFS) ==================== End Of Log ============================ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013 Ran by Admin (administrator) on 06-07-2013 12:31:56 Running from C:\Users\Admin\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Conduit) C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Palit Microsystems Ltd.) C:\Program Files (x86)\Thunder Master\THPanel.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Conduit) C:\Users\Admin\AppData\Roaming\SearchProtect\bin\cltmng.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" -f "C:\ProgramData\NVIDIA\Updatus\NvTmru\nvtmru.dat" [172032 2013-07-06] () HKCU\...\Run: [THPanel] "C:\Program Files (x86)\Thunder Master\THPanel.exe" /A [2047344 2012-05-24] (Palit Microsystems Ltd.) HKCU\...\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe" [4441920 2012-10-09] (Akamai Technologies, Inc.) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Run: [SearchProtect] C:\Users\Admin\AppData\Roaming\SearchProtect\bin\cltmng.exe [2852640 2013-05-08] (Conduit) MountPoints2: F - F:\LaunchU3.exe -a MountPoints2: {3281d59c-315b-11e1-b422-d02788154f60} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {afe50000-5ba7-11e1-9bd5-d02788154f60} - F:\LaunchU3.exe -a MountPoints2: {bd7605d9-391f-11e0-8aa3-d02788154f60} - F:\Setup.exe MountPoints2: {e7520efe-51b1-11e2-bb8f-d02788154f60} - G:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {f78ea9ba-50a3-11e0-8284-d02788154f60} - E:\Setup.exe HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] () HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [SearchProtectAll] C:\Program Files (x86)\SearchProtect\bin\cltmng.exe [2852640 2013-05-08] (Conduit) HKLM-x32\...\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_gin2g&mntrId=069AD02788154F60 HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.google.at/ https://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com HKCU SearchScopes: DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119994&tt=gc_&babsrc=SP_ss_gin2g&mntrId=069AD02788154F60 SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=AT&userid=c5f46395-6d86-4ec4-b7d1-5af60b98e048&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=119994&tt=gc_&babsrc=SP_ss_gin2g&mntrId=069AD02788154F60 SearchScopes: HKCU - {A7BF7625-C2D3-4743-99F8-4AE81D1B8C20} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=OVO2&o=2167&src=kw&q={searchTerms}&locale=&apn_ptnrs=^A2I&apn_dtid=^YYYYYY^YY^AT&apn_uid=029a7df7-555d-4e2d-a32a-6a896fd91d22&apn_sauid=F1BC6DE8-886B-4322-A5CC-9CD61BB1785F BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.35.10\bh\BabylonToolbar.dll No File BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: CescrtHlpr Object - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.9\bh\facemoods.dll (facemoods.com BHO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.9\facemoodsTlbr.dll (facemoods.com) Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {9EBE5796-5B84-4BFB-A1FB-914E68D02032} - No File Toolbar: HKCU - No Name - {751F595B-0E15-4FD2-B324-724B71AAE55E} - No File Toolbar: HKCU - No Name - {A2D8F477-F908-478D-A77A-5D934A922BC0} - No File DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.186.211.21 195.34.133.21 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default FF user.js: detected! => C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\user.js FF NetworkProxy: "no_proxies_on", "*.local" FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=1.6.0_39 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\askcom.xml FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\delta.xml FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\funloadia-entertainment-customized-web-search.xml FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\mixidj.xml FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\Web Search.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrch.xml FF Extension: DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: DivXWebPlayer - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\DivXWebPlayer@divx.com.xpi FF Extension: gophoto - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\gophoto@gophoto.it.xpi FF Extension: nasanightlaunch - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\nasanightlaunch@example.com.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\WTB_GLOBAL.sqlite FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [ocr@babylon.com] C:\Users\Admin\Desktop\Babylon\Utils\ocr@babylon.com FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_gin2g&mntrId=069AD02788154F60 CHR RestoreOnStartup: "hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_gin2g&mntrId=069AD02788154F60", "hxxp://www2.delta-search.com/?affID=119994&tt=gc_&babsrc=HP_ss&mntrId=069AD02788154F60" CHR DefaultSearchURL: (Babylon) - hxxp://search.babylon.com/?q={searchTerms}&affID=119994&tt=gc_&babsrc=SP_ss_gin2g&mntrId=069AD02788154F60 CHR DefaultSuggestURL: (Babylon) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll () CHR Plugin: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\npSkypeChromePlugin.dll (Skype Technologies S.A.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Zylom Plugin) - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0 CHR Extension: (Google Search) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (DealPly) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.5.3.0_0 CHR Extension: (Safe Money) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Virtual Keyboard) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0 CHR Extension: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (Top Eleven) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljphpjlafmmdmegmfbkacafhbegjfkkn\2.0.0.4_0 CHR Extension: (Privacy Palette) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjkcflkplhgpebknipkekjggglimnone\0.3_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 CHR Extension: (Socksharedownloader) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlfohjgijhjlpidbbnmcdooegafnnnm\1.0_0 CHR Extension: (GoPhoto.it) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0 CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR Extension: (Anti-Banner) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 ==================== Services (Whitelisted) ================= S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 CltMngSvc; C:\Program Files (x86)\SearchProtect\bin\CltMngSvc.exe [97056 2013-05-08] (Conduit) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 mi-raysat_3dsmax2013_64; C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-15] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-01-26] () S2 SystemStoreService; C:\Program Files (x86)\SoftwareUpdater\SystemStore.exe [296448 2013-05-02] () ==================== Drivers (Whitelisted) ==================== S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [38424 2011-07-07] (Google Inc) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22664 2013-02-28] (AVAST Software) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-02-10] (DT Soft Ltd) S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62368 2013-02-09] (G Data Software AG) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2012-11-02] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-10-18] (Kaspersky Lab) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab) S3 massfilter_hs; C:\Windows\System32\DRIVERS\massfilter_hs.sys [18456 2011-07-07] (HandSet Incorporated) S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsnmea; C:\Windows\System32\DRIVERS\zghsnmea.sys [129432 2011-09-13] (ZTE Incorporated) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 FXDrv32; \??\D:\FXDrv64.sys [x] U3 gzflt; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-06 11:34 - 2013-07-06 11:34 - 01934636 ____A (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2013-07-01 23:41 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-06-30 15:02 - 2013-07-06 02:03 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-06-30 15:02 - 2013-06-30 15:02 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers 2013-06-28 21:44 - 2013-07-06 01:56 - 00000000 ____D C:\PROGRAMME 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 22:16 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:38 - 2013-06-23 18:40 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-15 11:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-15 11:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-15 11:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-15 11:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-15 11:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-12 15:25 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-12 15:25 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-12 15:25 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-12 15:25 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-12 15:10 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-12 15:10 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 15:10 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-12 15:10 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-12 15:10 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-12 15:10 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-12 15:10 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-12 15:10 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-09 00:08 - 2013-06-09 00:11 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf 2013-06-07 23:28 - 2013-06-08 12:36 - 00000000 ____D C:\Users\Admin\AppData\Local\WebPlayer 2013-06-07 23:28 - 2013-06-07 23:28 - 00000000 ____D C:\Program Files (x86)\FilesFrog Update Checker 2013-06-07 23:20 - 2013-06-07 23:20 - 00000000 ____D C:\Users\Admin\AppData\Local\PhotoGenie 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Babylon 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\Users\Admin\AppData\Local\Babylon 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\ProgramData\Babylon 2013-06-06 19:19 - 2013-07-04 13:02 - 00000000 ____D C:\Users\Admin\Desktop\top eleven ==================== One Month Modified Files and Folders ======= 2013-07-06 12:24 - 2011-02-10 09:07 - 02030236 ____A C:\Windows\WindowsUpdate.log 2013-07-06 12:17 - 2013-05-02 14:11 - 00000000 ____D C:\Program Files (x86)\SoftwareUpdater 2013-07-06 12:10 - 2011-05-23 18:12 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-06 11:51 - 2012-04-08 16:09 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-06 11:36 - 2013-03-26 00:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-06 11:34 - 2013-07-06 11:34 - 01934636 ____A (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2013-07-06 11:27 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-06 11:27 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-06 11:19 - 2013-03-28 12:54 - 00027202 ____A C:\Windows\setupact.log 2013-07-06 11:19 - 2011-05-23 18:12 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-06 11:19 - 2011-02-14 09:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-07-06 11:19 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-06 10:38 - 2013-01-30 14:51 - 00000000 ____D C:\Users\Admin\AppData\Local\Akamai 2013-07-06 02:05 - 2011-02-10 09:24 - 00000000 ____D C:\users\Admin 2013-07-06 02:03 - 2013-06-30 15:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-07-06 02:03 - 2013-04-12 11:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-06 02:03 - 2012-07-27 20:34 - 00000000 ____D C:\Users\Admin\AppData\Roaming\PhotoFiltre 7 2013-07-06 02:03 - 2012-05-25 15:45 - 00000000 ____D C:\Windows\Minidump 2013-07-06 02:03 - 2012-04-25 12:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-06 02:03 - 2011-07-14 18:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DVDVideoSoft 2013-07-06 02:03 - 2011-02-18 15:21 - 00000000 ____D C:\Users\Admin\Desktop\Rewi 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-07-06 01:56 - 2013-06-28 21:44 - 00000000 ____D C:\PROGRAMME 2013-07-06 01:55 - 2013-04-23 19:49 - 00000000 __RHD C:\MSOCache 2013-07-06 01:34 - 2013-05-19 16:28 - 00000000 ____D C:\Users\Admin\Desktop\MUSIK RUNTERL 2013-07-05 22:19 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-07-05 22:19 - 2013-06-24 22:16 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-07-04 13:02 - 2013-06-06 19:19 - 00000000 ____D C:\Users\Admin\Desktop\top eleven 2013-07-01 21:51 - 2012-09-29 21:46 - 00000928 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000UA.job 2013-07-01 21:51 - 2012-09-29 21:46 - 00000906 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000Core.job 2013-06-30 22:11 - 2013-03-29 19:43 - 00013068 ____A C:\Windows\PFRO.log 2013-06-30 15:02 - 2013-06-30 15:02 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers 2013-06-30 02:31 - 2011-03-15 18:54 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps 2013-06-29 18:48 - 2011-05-21 23:09 - 00000000 ____D C:\Users\Admin\Desktop\suna 2013-06-29 18:12 - 2009-07-14 19:58 - 00700396 ____A C:\Windows\System32\perfh007.dat 2013-06-29 18:12 - 2009-07-14 19:58 - 00149192 ____A C:\Windows\System32\perfc007.dat 2013-06-29 18:12 - 2009-07-14 07:13 - 01622172 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-28 11:39 - 2011-08-03 17:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 14:59 - 2011-06-07 21:27 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DivX 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:40 - 2013-06-23 18:38 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-23 18:40 - 2012-09-11 17:57 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-23 18:40 - 2011-02-15 18:42 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-21 19:11 - 2013-02-14 21:07 - 00002189 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-06-20 23:23 - 2011-02-10 09:24 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-20 22:41 - 2013-05-11 16:06 - 00000000 ____D C:\BS4 2013-06-16 20:28 - 2009-07-14 06:45 - 00549408 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-16 18:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-16 15:01 - 2011-02-15 19:56 - 00151992 ____A C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-06-16 14:03 - 2011-06-07 21:25 - 00000000 ____D C:\Program Files (x86)\DivX 2013-06-16 14:03 - 2011-06-07 21:23 - 00000000 ____D C:\ProgramData\DivX 2013-06-16 14:01 - 2013-05-23 22:12 - 00000000 ____A C:\END 2013-06-15 11:04 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-12 15:26 - 2011-02-15 21:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-12 14:51 - 2012-04-08 16:09 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 14:51 - 2012-01-09 20:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-12 13:24 - 2012-11-04 21:05 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-12 13:24 - 2011-08-03 17:36 - 00000000 ____D C:\ProgramData\Skype 2013-06-09 00:11 - 2013-06-09 00:08 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 16:08 - 2013-06-15 11:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-08 16:07 - 2013-06-15 11:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-08 14:28 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-08 13:42 - 2013-06-15 11:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf 2013-06-08 13:13 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-08 12:36 - 2013-06-07 23:28 - 00000000 ____D C:\Users\Admin\AppData\Local\WebPlayer 2013-06-07 23:28 - 2013-06-07 23:28 - 00000000 ____D C:\Program Files (x86)\FilesFrog Update Checker 2013-06-07 23:20 - 2013-06-07 23:20 - 00000000 ____D C:\Users\Admin\AppData\Local\PhotoGenie 2013-06-07 23:20 - 2013-03-28 22:23 - 00073793 ____A C:\Windows\DirectX.log 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Babylon 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\Users\Admin\AppData\Local\Babylon 2013-06-07 23:10 - 2013-06-07 23:10 - 00000000 ____D C:\ProgramData\Babylon 2013-06-07 23:10 - 2011-10-09 12:15 - 00000000 ____D C:\Program Files\Babylon 2013-06-06 09:25 - 2011-02-21 14:04 - 00000000 ____D C:\Users\Admin\Desktop\zuhat 2013-06-06 00:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-26 08:12 ==================== End Of Log ============================ --- --- --- hier bitte |
06.07.2013, 11:40 | #4 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST Log bitte
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.07.2013, 12:20 | #5 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exeCode:
ATTFilter # AdwCleaner v2.304 - Datei am 06/07/2013 um 13:06:53 erstellt # Aktualisiert am 03/07/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzer : Admin - ADMIN-PC # Bootmodus : Normal # Ausgeführt unter : C:\Users\Admin\Desktop\adwcleaner.exe # Option [Löschen] **** [Dienste] **** Gestoppt & Gelöscht : CltMngSvc Gestoppt & Gelöscht : SystemStoreService ***** [Dateien / Ordner] ***** Datei Gelöscht : C:\END Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\fcmdSrch.xml Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\extensions\gophoto@gophoto.it.xpi Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\Askcom.xml Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\Babylon.xml Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\delta.xml Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\mixidj.xml Datei Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\Web Search.xml Ordner Gelöscht : C:\Program Files (x86)\Conduit Ordner Gelöscht : C:\Program Files (x86)\DealPly Ordner Gelöscht : C:\Program Files (x86)\facemoods.com Ordner Gelöscht : C:\Program Files (x86)\FilesFrog Update Checker Ordner Gelöscht : C:\Program Files (x86)\Free Offers from Freeze.com Ordner Gelöscht : C:\Program Files (x86)\Gophoto.it Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com Ordner Gelöscht : C:\Program Files (x86)\Movie2KDownloader.com Ordner Gelöscht : C:\Program Files (x86)\SearchProtect Ordner Gelöscht : C:\Program Files (x86)\SoftwareUpdater Ordner Gelöscht : C:\Program Files (x86)\Windows iLivid Toolbar Ordner Gelöscht : C:\Program Files (x86)\Yontoo Ordner Gelöscht : C:\Program Files\Babylon Ordner Gelöscht : C:\ProgramData\Babylon Ordner Gelöscht : C:\ProgramData\InstallMate Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly Ordner Gelöscht : C:\ProgramData\Tarma Installer Ordner Gelöscht : C:\Users\Admin\AppData\Local\Babylon Ordner Gelöscht : C:\Users\Admin\AppData\Local\Conduit Ordner Gelöscht : C:\Users\Admin\AppData\Local\Deals Plugin Extension Ordner Gelöscht : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje Ordner Gelöscht : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Ordner Gelöscht : C:\Users\Admin\AppData\Local\Ilivid Player Ordner Gelöscht : C:\Users\Admin\AppData\Local\PackageAware Ordner Gelöscht : C:\Users\Admin\AppData\Local\PutLockerDownloader Ordner Gelöscht : C:\Users\Admin\AppData\Local\Temp\OCS Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\BabylonToolbar Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\boost_interprocess Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\Conduit Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\facemoods.com Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\searchquband Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\Searchqutoolbar Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\SimplyTech Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\BabSolution Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Babylon Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\dvdvideosoftiehelpers Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\jetpack Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\OpenCandy Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\SearchProtect ***** [Registrierungsdatenbank] ***** Schlüssel Gelöscht : HKCU\Software\1ClickDownload Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Toolbar Schlüssel Gelöscht : HKCU\Software\BabSolution Schlüssel Gelöscht : HKCU\Software\BabylonToolbar Schlüssel Gelöscht : HKCU\Software\BI Schlüssel Gelöscht : HKCU\Software\Conduit Schlüssel Gelöscht : HKCU\Software\Cr_Installer Schlüssel Gelöscht : HKCU\Software\DataMngr Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar Schlüssel Gelöscht : HKCU\Software\delta LTD Schlüssel Gelöscht : HKCU\Software\facemoods.com Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Schlüssel Gelöscht : HKCU\Software\InstallCore Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{64182481-4F71-486B-A045-B233BD0DA8FC} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64182481-4F71-486B-A045-B233BD0DA8FC} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\SearchProtect Schlüssel Gelöscht : HKCU\Software\SmartBar Schlüssel Gelöscht : HKCU\Software\Softonic Schlüssel Gelöscht : HKCU\Software\Somoto Schlüssel Gelöscht : HKCU\Software\StartSearch Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKCU\Software\5b0d788b43bec48 Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Schlüssel Gelöscht : HKLM\Software\BabylonToolbar Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\b Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escrtBtn.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.escrtSrvc.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.dskBnd Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.dskBnd.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoods.xtrnl.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\facemoodsApp.appCore.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\LinkurySmartBar.BHO Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\LinkurySmartBar.DockingPanel Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\LinkurySmartBar.LinkuryMenuForm Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\LinkurySmartBar.LinkurySmartBar Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\LinkurySmartBar.LinkurySmartBarBandObject Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2422857 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2436288 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2896183 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3223702 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{12A5F606-B1EC-474C-83ED-95E99FD8058E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF} Schlüssel Gelöscht : HKLM\Software\Conduit Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\DealPly Schlüssel Gelöscht : HKLM\Software\Default Tab Schlüssel Gelöscht : HKLM\Software\facemoods.com Schlüssel Gelöscht : HKLM\Software\Freeze.com Schlüssel Gelöscht : HKLM\Software\Iminent Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Schlüssel Gelöscht : HKLM\Software\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5b0d788b43bec48 Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{64182481-4F71-486B-A045-B233BD0DA8FC} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A5B99E41-E157-4209-8AAC-DB003A816079} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AD20D01C-C939-4DD2-8C55-56935A48987E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DB4E9724-F518-4DFD-9C7C-78B52103CAB9} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DDE2C74F-58CC-4D71-8CE1-09DEBB8CFB78} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E95EAD3F-18C6-4304-9DC6-BD6FD8E11D37} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\blaofbhgbmeikidhlkmjhbkbfohpgekf Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FFDF9EF3-3C3A-4F05-9A6E-5D3B778EC567} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{64182481-4F71-486B-A045-B233BD0DA8FC} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4BD8E034-E0F4-4509-A753-467A8E854CD8} Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\facemoods Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{63E471BB-23F1-3A92-8D43-4079E7B7FA8E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B397BC55-576C-39E6-BF64-9E2A96317447} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{B973AB12-952F-31C4-A321-E8FA6FE4421E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EC5983DF-8DE2-31B5-989F-850F265E7F3C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{542FA950-C57A-4E17-B3E1-D935DFE15DEE} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5B035F86-41B5-40F1-AAAD-3D219F30244E} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6365AC7B-9920-4D8B-AF5D-3BDFEAC340A8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6A934270-717F-4BC3-BA59-BC9BED47A8D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{74C012C4-00FB-4F04-9AFB-4AD5449D2018} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{79B13431-CCAC-4097-8889-D0289E5E924F} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C8D5C57-3CAD-4CF9-BCAD-F873678DA883} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{981334CB-7B8B-431F-B86D-67B7426B125B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C1C2FC43-F042-4F17-AEDB-C5ABF3B42E4B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F7EC6286-297C-4981-9DCC-FD7F57BC24C9} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4BD8E034-E0F4-4509-A753-467A8E854CD8} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [searchprotect] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SearchProtectAll] Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{DB4E9724-F518-4DFD-9C7C-78B52103CAB9}] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}] ***** [Internet Browser] ***** -\\ Internet Explorer v10.0.9200.16611 Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_gin2g&mntrId=069AD02788154F60 --> hxxp://www.google.com Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=AT&userid=c5f46395-6d86-4ec4-b7d1-5af60b98e048&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://feed.helperbar.com/?publisher=OC&dpid=OC&co=AT&userid=c5f46395-6d86-4ec4-b7d1-5af60b98e048&affid=111583&searchtype=ds&babsrc=lnkry&q={searchTerms} --> hxxp://www.google.com Ersetzt : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com --> hxxp://www.google.com -\\ Mozilla Firefox v22.0 (de) Datei : C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\prefs.js C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\user.js ... Gelöscht ! Gelöscht : user_pref("CT2682599_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...] Gelöscht : user_pref("CT3223702_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...] Gelöscht : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3223702&octid=CT322370[...] Gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "Funloadia Entertainment Customized Web Search"); Gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3223702[...] Gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", ""); Gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT3223702"); Gelöscht : user_pref("browser.search.defaultengine", "Ask.com"); Gelöscht : user_pref("browser.search.defaultthis.engineName", "RunescapeDE Customized Web Search"); Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2896183&Sea[...] Gelöscht : user_pref("extensions.delta.admin", false); Gelöscht : user_pref("extensions.delta.aflt", "babsst"); Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Gelöscht : user_pref("extensions.delta.autoRvrt", "false"); Gelöscht : user_pref("extensions.delta.dfltLng", "en"); Gelöscht : user_pref("extensions.delta.excTlbr", false); Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true); Gelöscht : user_pref("extensions.delta.id", "069a0709000000000000d02788154f60"); Gelöscht : user_pref("extensions.delta.instlDay", "15836"); Gelöscht : user_pref("extensions.delta.instlRef", "sst"); Gelöscht : user_pref("extensions.delta.newTab", false); Gelöscht : user_pref("extensions.delta.prdct", "delta"); Gelöscht : user_pref("extensions.delta.prtnrId", "delta"); Gelöscht : user_pref("extensions.delta.rvrt", "false"); Gelöscht : user_pref("extensions.delta.smplGrp", "none"); Gelöscht : user_pref("extensions.delta.tlbrId", "base"); Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", ""); Gelöscht : user_pref("extensions.delta.vrsn", "1.8.16.16"); Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.16.1614:02:37"); Gelöscht : user_pref("extensions.delta.vrsni", "1.8.16.16"); Gelöscht : user_pref("extensions.enabledAddons", "DivXWebPlayer%40divx.com:2.0.2.039,anti_banner%40kaspersky.co[...] Gelöscht : user_pref("extensions.mixidj.tlbrId", "mdelta"); Gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers"); Gelöscht : user_pref("extentions.y2layers.installId", "84245131-e7d6-4202-be70-326843385fe5"); Gelöscht : user_pref("smartbar.machineId", "6Y9YPNZ53YG19YDO7/2B25U7OCTMPI9JWVPPSNBHGNUKOOOCZCLYSA8LKYQVR/M7OVY[...] -\\ Google Chrome v27.0.1453.116 Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences Gelöscht [l.30] : icon_url = "hxxp://www.babylon.com/favicon.ico", Gelöscht [l.33] : keyword = "babylon.com", Gelöscht [l.37] : search_url = "hxxp://search.babylon.com/?q={searchTerms}&affID=119994&tt=gc_&babsrc=SP_ss_gin[...] Gelöscht [l.2878] : homepage = "hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_gin2g&mntrId=069AD027881[...] Gelöscht [l.3526] : urls_to_restore_on_startup = [ "hxxp://search.babylon.com/?affID=119994&tt=gc_&babsrc=HP_ss_g[...] ************************* AdwCleaner[S1].txt - [37919 octets] - [06/07/2013 13:06:53] ########## EOF - C:\AdwCleaner[S1].txt - [37980 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 4.9.4 (05.06.2013:1) OS: Windows 7 Home Premium x64 Ran by Admin on 06.07.2013 at 13:12:14,05 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\linkurysmartbar.bandobjectattribute Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A7BF7625-C2D3-4743-99F8-4AE81D1B8C20} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Admin\AppData\Roaming\goforfiles" Successfully deleted: [Folder] "C:\Users\Admin\appdata\locallow\datamngr" Successfully deleted: [Folder] "C:\Program Files (x86)\w3i, llc" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{000CA70F-DFD2-4779-8513-64522A383EDE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{00B7C151-F0A2-494C-9053-17A6F9E5D146} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{00EE609C-ED15-46D8-920A-CFEB3922443D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0321DDB9-C1BA-4733-A8ED-0A74A83A0E68} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{03481861-68EF-47F7-8482-872FA06B8601} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{04A7E006-F335-4D8E-A637-B1EC0DDBA880} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0603E882-F562-4731-A8F3-CD138553A75C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{064636BA-3313-4E58-AFD0-DB43E0AB3F4B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{064E87AF-2C0D-4BEF-A698-78735DF21EE9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{06D19176-0E8F-4070-8302-C272636B977F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{072D3C53-2196-4D79-BC2B-A1C8EBA4E653} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0787DF8A-F42B-4F3B-B217-BFDC802A3B24} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{08C1AB02-5B38-472B-B591-CE924EF85360} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{09413E70-D482-4D01-A21D-9A52D1F6B4EF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0946A1AD-8DAF-4537-8D51-12A293FF6C84} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0A2E5DD6-8D09-4F3C-A9AC-C05C175FEB7F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0A3AA158-CD52-424F-9954-74F72189DF2B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0A83B971-2CAE-4257-B261-199088E1109D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0B010536-8180-4F89-A565-D7A21DE2EA3D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0B1DD76C-7856-45D9-B742-F9E4142CF06F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0B6172C3-B456-4126-9F2B-BB65876AB62A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0B686EA9-9D50-4E36-87EE-99227564B49E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0BD7B481-50F5-49B0-B86D-06BEB1BE9A80} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0C057742-C42F-44F1-92DC-1336A67F3790} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0C1D8C87-0783-40B8-9AA3-9316F1A5A23F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0CBD9E81-7393-40C1-AED8-03262B294027} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0CC5BC73-8819-4C32-9FC2-F4E083ED0864} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0D0694BA-14D2-436B-8530-12DC45E87BD4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0DE80FCB-8CC0-4800-8AAA-7C1CB96DE670} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0E832068-D507-4D97-B00F-4C363FC39A25} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0ED895D0-74CF-4642-B5D5-00CDE00CAF40} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0F0B5BF1-3D96-43A9-8E9B-7BE27C7E7914} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0FB4E434-6A1E-40D3-A622-AEF0DEA5F780} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{0FCAB598-288F-4CFB-A6BC-EC3628288982} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{105F4BFC-3843-4FFD-BCED-EE5607AD3F00} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{106B87A3-42B1-4BE4-9BCB-5B8FE4A98983} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1087DBF6-8334-4595-BEE6-085AAFE5C5B6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10B54EE0-E7C7-48FA-9917-0CF372AC48F2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10BA56FE-602F-4484-9A13-6B207B921E10} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10DB6174-6E90-4A83-B40C-75FC59F50F50} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10E70707-83DC-4746-92FB-9C4BE2CA2945} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{10FDFD70-2185-4905-AA23-7AB465047F71} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{112CCDDE-6C71-45ED-8106-015DDA14EB58} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{117BBC72-0E86-455D-9BED-6330A8FBFD19} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{11861A9C-F28C-49A7-9279-FE5A3A000203} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{11D0CB86-6AC4-4272-80D2-5543D11A3AD4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{13194B13-FA26-45CD-805B-51A5AC24B6DF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{137E8878-43A1-45AE-8DEC-B4A37F7F363E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{13E17992-1FD1-4E58-AB42-E26E97BCB8F4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{14286AA0-A463-41F1-AF12-02BF765FB8E9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{143373B5-D97F-433A-B17B-5DDE13BF61EC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1482CF2C-8613-4DF5-AAF0-A0136304578B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{15288C2E-FA6B-4BD7-A4E7-5CF1F49AB4D6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{170F6867-6536-4756-B393-D69286BE5E17} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{17517BF1-F6AD-471C-8EE0-94C6424746C2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{17D70930-3C41-42C1-BEA8-5498906E1AF6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{183562F5-AB1B-4A52-95AD-820F66F3D390} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{18377508-0CC8-4AEA-B8A1-033B1FCF60BF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{18E77B95-FA10-4BC9-BF3A-4566661F5AC2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1A3B5089-E2ED-44A0-848F-0B2E6512A26E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1B3D95EF-4F4C-47A8-872D-1A9A023DE35D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1B627A2D-1907-4EAC-B175-1F9AD7443A16} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1BE1882B-7967-4AF1-8651-E071E684935D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1C3CDE79-D5EF-49E8-946B-751425CBF207} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1D138E03-582E-4395-814C-3CC75AD1D6B1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1DE52064-96B8-4684-85DB-E5435C63788A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1E424560-F580-484E-9065-BADFD8E2F7F5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1E59115E-14AF-4861-BC01-E1342E6EA9CE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1E8C4F58-FC68-486F-9863-A6B00ACC634B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1EA078D1-786D-46CB-9D4D-9439AE9C31CC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{1F429163-9A9B-42A5-BE6B-9BF951C53549} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{205CD527-B8BE-4D98-AF06-476AD8D1CE11} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{20688D1F-5E8B-4DA2-94B5-EF020DF122FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2079F1C4-672A-4D0D-A4EE-32E9EE72A264} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{20FDB7FC-C435-4005-B838-4EDE57C45AC3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{213F9156-1717-4D9F-B843-8D0DE57E9987} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{214F9465-908A-43D3-9CD6-FE3EEE3EC3BC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{215CE71A-96C9-4F9E-BED2-B8C6A8EB48D2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2172A966-54D1-4AAD-A657-2EDBF803D0E5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{219D3335-C15C-49A9-BCDF-D80418C4E352} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{21A39533-F728-42FC-BB34-4D29B704BCBE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{21F975D2-E3B2-4047-A84D-3A63B63D8D3C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{225409FC-91BB-4535-91FE-AB6DDFECB06C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{257D3E63-CFA3-4FF9-88EE-9C69AF43FC62} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2583EA0A-6DE9-4505-8137-A622F9887189} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{25EDDFB3-3B35-4929-8F9A-DE6258EFB030} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{26518672-D724-42EF-A378-067A25F8966B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{27ADA6D0-5F85-4BC5-AE83-28757512996A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{28A3C654-72F4-4CA6-B7E7-AA564F4388D8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{28FDC248-35D7-46B9-A05C-9F66DDF39167} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{294DB255-78A1-43C4-871A-CCEC79F6F6C3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2A115C64-48C6-4E0C-885F-983E381C0711} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2AE8D482-A3F6-4CDD-A970-555E851849BA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2B36E76E-4482-4B49-A35F-201A58C53893} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2B48CEF3-7448-4680-8E26-9C0D6F3717B7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2BCB9563-E0EB-4A2E-8A29-D65353BBBDCD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2C67407C-ADCE-456E-AB06-A1058C9FA8FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2CA6BEAF-704F-4375-BBAE-6C949CDC9B7E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2CBD4474-F1B3-4FF7-ADBE-8FA3435052BE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2CDA6810-888F-45BE-840A-49753037BFF9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2CDF791D-AAEE-46EB-8641-83B6B6D14982} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2D0FDEC5-594F-4F4B-AD93-CBAD62C5F2E3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2DE65AD6-B5CF-4A5B-8C5E-7C3D2447285A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2F16746E-0055-45EE-85CF-F114D96BF43D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{2FAA3985-98B3-465E-A834-F336BDED7C2B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{307FD050-A1C6-43A1-9E0D-43884B6D04D6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{30A8E268-D9E8-48A5-84E9-907290427F81} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{30B30725-F015-4EC1-A63A-190187F0B054} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3118BAEA-32AA-429C-BFA9-FE435A02E2BC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{31927791-CD3C-47DA-99C0-89AC9597363A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{31B007D0-092B-4FA2-A93F-9DC1BB2DBDBE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{320210C6-D608-4159-8327-DF3FAB96FCCF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{33AB4E3C-E9EB-4B5D-804D-178F152B9824} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{33B8A510-F1EA-41F6-8562-72EAF258CCBC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{33EA2DDC-00CF-4EC2-AFBA-3222F7B63680} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{349F519F-CB9A-4D4F-8B96-E4F24A4E2387} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{34E9DE46-F79A-46AA-A6AA-4D28417AF667} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{35F8F50D-CF66-414D-BFEF-98E01F4AFCBB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{35FBA23D-EED5-411E-BD64-F13C9A112DB3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3689CD8E-4B55-4B3E-B197-3E5AF78B0976} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{36ED93AD-0FC1-4C44-95D5-E9B52A4652BD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{375A4DEA-3099-43B1-BCD1-87F26CCEDF81} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{37A4FB07-C385-42AE-9D35-132E48A5E61E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{390F9CC1-91A8-48CF-AC23-2FC6F71B5CB7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{396B5503-A797-44A2-9F2E-FB7448579C5A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{39C0F572-3366-49FF-8286-C0E164285C84} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3A307257-77B7-44CF-A77D-BDB0513C7D64} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3A472DA9-1E87-406A-81B4-6D0F8C3C406C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3AC77295-A79A-4815-8B36-580879A0E019} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3B6EE3B0-E317-4C78-B26E-A3680082DF82} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3B972BA5-71AC-469D-9AD0-0B4E1D009704} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C17FF7C-F4D6-45F9-8EAA-BA332B93CD4F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C1B9C93-04E0-49E2-972F-92CC59EE2377} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C3446B6-1DF1-4C03-9818-EE88228FCB56} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C554B7E-FFF8-4F3A-A576-A8BD84B565B5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C62F6E0-8806-473D-A0DD-F569D9542EB8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3C6581B2-189F-4205-BEC9-2BC76698336E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3D44D191-6394-4E47-8A5B-9773304A4E31} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3D86C97F-32D4-4915-8879-AB48876A976B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3D9C8AC7-AE72-4B04-B40E-93E262FEB11B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3DE97CC4-754E-4371-8017-923FA0D7E145} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3E4DE94F-75C3-45E6-B828-52175FD62F35} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3E609D4C-D93D-494F-B004-5E652B20466C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3ECDBAB3-D617-4EC2-84F3-E909ADE39A9B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3F356713-05A5-4C26-AB0C-4C14426A4FDD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3F608C36-9587-45CE-936C-4F8A8D95D9B1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3FA486AD-6F59-4636-9EC7-0357C7A02635} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3FB13073-D67C-4361-8071-77C28F9248DC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3FBB036B-9D12-4D5A-9820-604F22EE058C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{3FF2BF4A-A583-45A3-8CB3-993430E4EF38} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{401B3554-ABD6-46A5-B2E5-66E479198878} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{406FBE55-E1FC-428E-A4C4-80D39350383D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{408D0087-DCF8-44FC-BFD2-32811920003B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4126249C-EF95-48FF-9999-884E5018B01A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4147962C-C70D-4907-8575-8543BF5D21A0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{41736CA3-8763-4D16-966D-01F359441EE8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{41D1431A-E20A-40C7-9F8E-0B4D981D2CA0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{422F6D9A-5884-4498-B500-17970085B781} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4246509F-FF9B-460F-8522-34F0CC4D933A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{430BD731-A7B3-493F-B832-125D10563E8E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{430D30BA-BDC3-4938-946C-4A3E1AA3AF43} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{444B0D03-2E7C-4480-8BD5-0A6FF59B2733} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4454DD5C-BC97-4B54-AE48-4574C3FE8B7E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4509E440-2ED2-4FC8-85BD-2D51BE814E3B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{45800DA9-17C7-4BDD-81C6-03D4865629AA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{460108CE-C165-472B-A04E-3306F1152329} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{46715EE1-4D4A-47C1-ACB0-0E1BEA16593A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{46A3876D-0A0B-4EC0-BCD8-A37999B3B1B7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{46D7F169-EE31-4349-A47B-DA074D5F4DDF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{47114BBD-4B02-4339-9B31-87F319E37E00} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{471B3145-4EE0-46B2-96C6-9FD96073666B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{472FE993-470B-49E5-8079-6CDC9C732100} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{489EEB90-5216-4123-89CD-73E7924D5A42} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{48F37CE6-988C-439D-A727-08028EA8AADA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{490A82E7-3D49-4C0A-B745-AB829C95B921} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4955CDE1-4407-4758-BF57-ABA754773BAE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{498BD593-77C0-4E43-A079-FFBE65DE1C03} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{499F2539-9136-4CB0-BC30-FA44AE9B44C0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4A8FBF45-1B01-4A56-8A61-0F8FC8D28EB8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4B10C9BF-2A54-45D9-9EE5-F5B0B2B63383} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4B1A19F7-F162-4783-8B71-34C4E792FBA9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4B976C07-561C-43D6-B3EC-1225D1D56F36} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4C3DD39C-EE68-4018-AAB0-006EF4726049} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4C452BBD-0AA8-41F1-953E-9D21378B08B7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4CDD219A-C7C3-4721-92B6-C1CF1FDDBBB8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4D200FE4-466A-4810-A506-D22C91A4ED8C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4D81BB23-5C96-46C3-B3C7-319044C31A59} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4E4DD1DC-2554-4B19-BCE7-9214411C4B96} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4E954ABC-3633-4602-ABCB-2001E94BBAB1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4EAE16E1-EC8F-41F1-B8E5-6E80CEB53293} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4F1376AE-299F-4617-AD59-482206D06B66} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4F1B9A78-3046-4833-B150-263FCEE04BB5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4F41CA4A-1662-4438-B309-FC69FBA9336D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4F4289C1-DA75-4DFA-AA1F-208F3762865C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{4FD52EEE-207D-4254-941F-4C32F5CC7100} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{501D6180-6C54-4E73-B86C-A29951AE9245} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{50897A10-824D-433C-B91A-1444DE9EFC9C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5120B1BF-26E7-4CD1-8D9A-C10D9547A98F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{516C82CA-0583-423E-9345-8959DB196032} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{51B9B2A7-7A94-4DF5-9BB5-0CCA917E13D7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{51E86911-5D31-46E8-9AC8-89A397E0D5F2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5206A71E-126A-4E41-A3BF-7B74902A53FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{523B20AA-EAC6-4F9D-8F3E-FA1077E936C4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52BCFDD4-1FE0-4820-B9C8-F19152A4E095} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52E18A3B-E64F-4C30-B857-785EF6E2A468} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{52FBBF71-960B-40F7-89B8-343553ABB7B2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{539C663D-6A49-4375-9C1A-64649ACFC231} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{53AD5FCD-294C-4FFA-8B00-F1C349A561C1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{53F5E05D-C4DE-45B3-958E-3EF8EB93A342} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5417F2E4-54C0-4068-9949-6C21A9B2C5BE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{541CD027-A4BF-4E0E-9168-5DC2145FC060} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{541F77FD-58A5-4807-BB7D-6242B4BBC5EE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{55356EB2-348F-41D3-BBA5-70AC22EF8C28} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{557A6783-DB23-44AB-A697-A11551A3871D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{55AA0EBF-56B3-4AFB-B066-CA721167E887} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5616FC78-49C2-4FEE-93B9-847AC58970C5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{566BB6D1-03D4-4244-A31B-146D6B416FBC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{579BF2F3-1447-4EB5-AAAE-BF4772C8725E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{57A042A1-25F7-41FE-ACA5-6FBF4EF04318} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{57A27608-9714-4ABE-B504-527A13B807CE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{57B9CE26-F049-495F-8452-D98543F4804E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{57C5CC3B-B60D-4FE5-99D1-D0E79AE28CD2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{57E63D28-2A1E-4C77-B49D-2C525137E5BF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{580E1E8D-C582-4B40-BF8C-12E365A3BEDB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{582014C3-1EAA-4ED4-879A-4867FAE31FF9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{585926B8-E8C2-40C9-9449-92C9808D5EA3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5896303F-22A5-484B-B1F1-EB2C8A24E611} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{58A13AA8-07B9-4EB1-996C-D25C2D9C7B0A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{58A938F7-3573-4861-90EA-28CDE8CD5213} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{58DBDDEB-252B-40F4-91C4-19E2ED439EB4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{590BCC98-2D9C-4CAC-B27F-FED250B537E1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{59B576E9-B6E7-483D-8B43-D472BF02FF34} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5A38587D-A772-43A3-9400-B0284A9CC526} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B70ADB1-63D2-4D80-8D99-324CBABC00FE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B7C8975-6730-490C-AC26-50F71B76EC97} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B803B30-313C-42EC-B269-1ABFA22BB9C0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5B8CE038-2063-45BF-B3DD-CFCDAA8AE21C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5C5B7A4C-A5DA-401A-88A0-DEE893F52322} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5CBE7F87-94F2-4771-8D8C-784ED3478868} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5CD7E632-2EE0-40C5-9789-CFC6A3056B1F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5D7CC0BB-7454-4C92-8BB6-286602EEDA3B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5DDC638F-D3F4-4568-98A7-DACFE2842D86} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5E6FF7D8-2BD7-4942-A919-BCD25CBCBE93} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5EA62FD2-A4C8-47A6-B05D-3B8E53D14165} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5EBC0B9E-55AC-4FA0-9568-14588DBE3435} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5EDDAE52-344D-483F-9D6C-147EC334FB49} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5F38D709-ACC5-41A0-AC67-379377BD3289} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{5FDC3A8B-73A6-4DB8-9AE3-03AC8C607A01} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{60500138-F93D-4D7D-9A00-DC4A56273DE6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6078FD8C-AB56-4E36-90EF-D268E5C49618} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6091ED4F-E5EC-47E0-B02D-468FDD532C3F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{609A8583-43B3-42F9-AF43-6EACA285460B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{60C20458-C3B6-48B6-8F12-6FEBF5541474} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{614142F3-E56D-42A4-AD6F-37F214A90F3B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{614258A1-3D78-403E-8CE6-C953468A465A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{61EBC318-A72A-4356-B980-D99E2596E29B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{629BE9A8-1D19-4878-ABFD-F962A1B47C1D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62A15561-1275-48AD-9099-BA653438B5BE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62A39958-C45B-4151-AB2B-65C55C72293C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{62AACDE5-88B9-4958-AAB0-1B0CF918801F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{64046AFC-3A3F-4262-A3D5-20CA723179C3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{64E194E5-C3A1-4E4E-A793-766807D7CB12} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{64E5B25B-D5B7-406F-8C8F-BF36083F2A09} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{656FCCD3-F65F-4165-A58C-D3F1C98E1689} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{65C2F698-9101-4339-87BF-FB1544DB1A4A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6667F242-EDA9-450E-AD5B-A9C55D65BA88} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{67065BB5-F625-4562-97D5-F698D32C0061} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{670C0B2B-C0BD-414C-A9FC-F375E04FCA5A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{67223417-C19B-47AF-A684-95E3A2ECC11D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6756AE06-A672-414C-B1C3-507B336FCCCA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{67DB6D37-BE91-42B5-BB25-A584CB2B6826} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6842C550-C405-43CE-BC73-64AFC69E433D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{684CEAB5-5039-482C-AB8A-008C8B38A933} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{685A7B8F-EB25-440A-BF9E-8DF8B7B76727} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69086C6E-AFAD-4ED5-8BAA-E3662ED1160D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{695E046B-644D-49AB-B077-6DE4BD3D7BB6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{695E4D13-22B0-45EC-B7A3-3A6588B0AD11} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69ACF8DD-AAA8-4328-8299-D103D4754C01} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69BF7F53-57D7-4394-9851-7F41B93EB411} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{69DD0B6F-64AF-4B8D-B708-B0A89074E3F5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6A476623-09AE-43E4-9A33-4579CD20E83B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6A9C1E73-3B48-44C7-8B78-566DAC241A02} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6A9E59E5-AE9B-4EC9-8B6F-F0AB9C5228DC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6AF121AA-F486-446E-82D7-CB0373C4FE30} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6B0003E2-AA4F-4534-B4E8-A6DBC181CA59} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6B17E028-EB84-4B9B-B8F4-77A3FE95F1DB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6B45BC43-53B0-4D4D-AF33-1C71450DADA8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6B50AFEB-4D4C-459D-80DE-8F2F013CDFA9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6BC33E0D-457C-4A38-AAC3-F2DE0EF930FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6BDEA0B5-C457-4CB4-A159-78536AA1B797} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6BEA4D10-6262-479E-92FE-CAFD5065A5CD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6C8643DB-4A5E-4DCC-81C5-8B38C484DA1B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6CAA9108-93D5-4A4A-A461-3D6631FC9367} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6CB2C051-EF3F-405A-AB20-5B073F67E3EE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6D3BC16C-B60D-4E50-883E-0A1963CF7244} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6D4C0300-70B8-409B-BE8B-C2B69E569EE7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6D5CA7F2-BDD9-4AE3-845A-03E8F9970B58} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6DBA9500-3C4D-49B6-897F-9E40FB05A09B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6DD55D52-3E07-43C9-A6DC-D749D00BCF74} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6E0472D5-4CB6-462B-BD2B-734F2F3B3D1E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6E655883-AD8E-43DA-BAE1-1117B4B9474B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6E99A3A8-D352-4FE4-8E15-8A000E27BB19} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6F2AF39F-4A5B-40A6-BF15-4FB8C0402D43} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6F4C090D-9C38-42D7-A39F-D6C276756F7C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6FAA3E71-AB07-4B14-BD1F-2D4588991301} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6FBDA68C-424C-49AA-B738-D41D25769241} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{6FDD17D4-52D1-432E-91C1-ABFBBB513C7A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{70D8B90A-000A-4EBE-B8E4-F28AC56419DE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{70F005A6-F7DB-4BC3-B56E-F7297DFFDD5D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{71B20487-ECA5-46EA-ADB9-9B7419F8A3D4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{71CF7100-54ED-41D4-8AC4-5FBFE28829B2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{72057AEA-D2E2-43B9-ADA3-8B1C3A484D21} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{720A1B3F-52DC-49E8-8200-CA2CE16DFCF3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{723077EB-3800-43D6-A9C8-25E373C113C8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{72707185-00CF-46C7-A40D-81079B4DBA28} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{727B1339-29A6-47E6-831C-2E82C304CB40} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{72A0C9F6-E81D-4A5F-B49F-2C60A37BBA80} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{730C4B43-1655-41A6-8391-312A91E2A5CD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{731449E6-67BC-4F68-92F5-0871E2B79CA5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{73D53C51-A971-48BC-8AC6-E4DF87D214B6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7418D369-6540-4574-AA3E-D62CD153D4AC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{74DAC848-365F-49DA-BC95-6ECBDCF5C972} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{74DD7C18-AF75-4E28-80DE-D2334A9525BA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{74E8C2F5-85D9-4B8B-8740-F5E285FDCD46} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{75592B3C-F1AA-427D-98BA-97E8CBB1F33F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7573D0CC-5A6A-432C-B37D-87EA95604F02} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{75AFB0DD-8BAD-45C4-BCE8-D5D8F78C487E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{75F8DA72-D1F1-4F07-B78D-425A147F4EEB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{76AE8AE0-28A4-48D4-B1CF-94396994D25B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{77CC152F-B924-4327-9C34-9D9BE692E1FB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{78CCDD68-507C-4273-B3E7-E31726794FF9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{790A77D9-5253-447C-B22B-D98B33766027} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{793BB3A1-127F-4D69-9122-8210914BC340} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{79767CC1-5C37-43E2-B32C-4A20D93F2AF5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7AF62A42-6FA9-4B73-83F9-00A1AA9DE7E5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7B040742-328D-49C3-86E6-FDB35A5E701E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7B480173-3C1E-4306-B9CE-F488EF616133} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7BB42B77-9C72-4145-81A9-1F16A7DDB0CA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7BB46695-5200-47E3-B467-7FC81B81858A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7BE2206C-3408-4B88-88DA-4E28722F9668} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7C31607C-DF56-4EA4-8ED5-79B9CBE3E8C3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7C32040E-7E79-4840-9908-17F5DD71DBDB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7C94C618-1719-4F9A-96A8-02E0068632E2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7CF8E0A2-CB83-42CD-9C7E-D44E1DA7D99A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7D7514FC-43A2-4170-A573-46E18AE17E2E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7DB78F8B-C7AF-49FD-9A39-0915CB0AD521} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7E07D380-0882-42A2-ABF9-D5605126A16C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7E281B72-8786-450F-B6D5-737DA94C6647} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7EA1083E-9593-4F87-A55E-4E155F731A95} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7F06C604-5936-47B7-8031-D176995B0A0E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7F3E707B-3387-4605-A8C6-5B80AB913514} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7F551AC7-40F5-4B61-A89E-02EE0725508F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{7F5AAAE5-F920-455D-8FAA-7D4C645EBBB5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{80D89834-312F-42A2-8E9A-6122287E9400} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{81582D6A-9CB6-4F38-8E0D-590C138CE307} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{817C5EBF-1AE9-4205-8B39-D2851A7AFD8B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{81E5DA48-0676-4C10-AAB7-1E7356791AD3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{821CF9A9-E73A-4634-8A39-FC65D57EC2D3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{82228BB1-ACB3-4A42-9819-C9290F2AAAE6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{82369673-61B7-4F2E-9883-ACF18BB9C4A2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8247E1F9-8E8A-4C7A-B535-22509CF77CB7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{828BF770-75BB-4FFC-A917-2C74AF3E434D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{82EE8863-8C3E-483A-95E0-EC7D1ACB9B14} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8381F600-FA77-4218-86DA-C7C2767AA038} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{83A63447-97FC-4007-9183-6A8D094D3224} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{83AF62FB-F751-4595-9FE9-C58B9279F05E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{84009B01-6EBB-4356-9275-A96CCB9F3A3B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{84158D91-0F1B-4AFB-BEDC-128394F92665} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{841B136E-8FE9-413D-91B5-8CDD254A9277} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8469C460-783E-4412-A000-E48D129C7ED4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{84EC4618-BC0F-4027-BD22-385B099A2D0B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{853FACCA-AE15-4551-A4BE-0C8264557137} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{854E5084-2A2F-4A03-9CDF-ECAF998CA620} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{859A6958-1D49-4CF1-99D7-443D587AF5E6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8691985B-D5F4-481B-BB03-7CABF5AD6382} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{86D7C7B1-F24B-449B-A56C-588A8FADA286} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8794E706-D7F1-41CC-B9B9-949C9C8D8EB4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{87A6BB58-80C7-4E1A-A971-DB88F7F02491} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{88702631-A99A-40F0-9C5D-E56FF7D64A9E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{88775D1B-ED11-4139-9E44-CD5D5ED8BA6F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{889190B2-AFD6-4E1E-AE46-8541BE05850C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{88B44DA3-E3FF-4076-B5D6-4E6FFF4B8D23} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{88FA855D-6900-44E7-98DA-20D932ABC3D9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{89298997-DE6E-4A9F-9CAF-F63426905177} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{893BF6E8-4439-4556-9BB4-DB7CCF4C3734} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{89591A6A-C141-472F-8278-913CC20E05A2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8A359043-58D3-4EB6-AB72-72D5AF1052E9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C24D25A-83D0-48E4-BCA3-C5F0C3CF2FA5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8C9E2828-4DB4-4E0F-9065-89C2CF7BF9DA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8D4D01DB-B721-430A-BAF8-265E5A88FFF7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8DCE17A4-3910-474D-AB07-7F067D43EEF5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8E2960D4-E33C-4702-87BA-194CBBCDFEBA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8E81BCD3-7E4F-453E-B9B4-147C2413FC62} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8EF2C89C-9301-4243-9EB6-CCF671034853} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{8F05EEB9-D899-45CA-A6F2-24315209539C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{91BBF438-8B38-4373-A9E0-23227AAA4C30} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{91EAFE14-5A86-4229-A3B4-3F4619AF819F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{91FC8548-B55F-4BC5-BA44-61D333DD4CAF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{91FD6623-C615-4D92-AD3D-1CEB7DC39AB9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9219F964-5340-4E31-8FE3-D2C35ACDF732} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{92B47F4E-3BCF-4992-AD5B-F4597897E1B3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{932BE895-6DFC-41E1-88AE-AE6521A7CA2F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{935EB23B-FB90-4661-8577-767A70BE9163} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{93C80A56-4CB3-4DA0-B397-A643E300E0FD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{93DD715A-6899-4F76-8731-870BDBE23333} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{941B982A-BAC8-4D39-951C-5644D9ED4A8E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{94929D63-3B7D-4679-A62E-D863CD2D5B9A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{94B40298-1612-4A74-9EC4-5FA26E47D4BF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{953ED762-394D-435C-8176-D6EAE5C533C9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{957AD7FB-B13D-4709-BE9A-5C7F105860F2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9580E592-4CBA-431F-B5AA-E6F974A7CB48} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96155375-0A7E-4E04-8D82-E7FC9929C34F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{963942E6-19C6-45CB-8921-86BDB047ED90} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96406E2D-930B-47AC-99D2-B4A12280B787} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{965095F4-57F3-4E51-AECD-F9C3FAD5CDF9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96B1C138-4AD5-48C4-9EBF-42C6FEA04AD4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{96D95C3A-96C5-45AA-8F33-77DCDE1666D9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{972DA074-23AC-4CC5-940E-AE5DCAE133CA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{976569EE-E94D-42CE-AF73-C2A32B550902} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{976E6E0E-B8EA-44D3-BAB2-7577F4FA64FF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{97B4038F-CCFC-4023-B142-FC3E54D636D9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{97DD6861-9E09-4331-84CE-51AB161D7F24} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{97EB3ACD-45BA-4E43-853B-6667A41BC124} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{97EE78BB-31E9-4B1C-80A4-255A408D2643} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{98222B29-545D-4A84-AE01-E7F503F666AE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{98D66856-B9FF-4103-84BB-10BDD7AC0CFA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{99437AC5-CD80-4119-8B52-7E243B0F8C7E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{99D3E01C-7C41-42D2-8430-4178FAB93880} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9A5FAB9B-E664-47CF-B50F-5F54035B974F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9AEB2B6E-9E15-42AB-8C68-BE5FD3C7AA35} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9CF03638-1E92-4C51-BA5F-FC1300C6636D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9D9C175B-24B6-4EED-B7B3-5945C33E765D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9D9FC4DC-2C37-4FDD-AB27-94D39ECA5C13} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9DD69189-77A4-43EC-B03B-52FF2C698B91} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9DEE30EF-DA52-4F80-8746-E14C168BF714} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9E214AB2-52A3-47EC-B0CE-D94C56C325BF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9EFB03F4-5A57-45E0-9BA8-E920B65EA381} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9F27FCF4-AB54-4E0E-8C6B-F70577018062} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9FC9C9A7-D791-429A-A895-E889E116FBE7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{9FF0BE0A-B9A9-4EB8-8C64-66F516E70767} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A014BB5D-27A0-4734-84CC-EC74F4CA3F43} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A04213A4-438F-4FDC-8F80-DC9B63042835} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A069975B-696C-493A-A091-E9077B41D5B4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A0A2D35E-6E03-49F5-871F-268CBB2778B5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A0AC6BDD-15D6-4010-BC15-02B950E5EF3D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A0C59DA1-4DAD-497E-8793-C0C8F46CBCE3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A19D6769-20A8-48A8-BFEB-6346A3F16F56} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A2906E08-63FA-4560-97B6-CFC3A4D98149} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A2BF0D2E-AD91-4B84-A3F0-FEBBEAA902E5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A3017988-54E0-434B-B342-EAE1449155AA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A35C6156-07CE-40D2-AE57-1978F99AFF16} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A3DE370E-8C3F-46AB-8DE9-EE3DE9768AE3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A49FDEE2-46D8-425A-B939-376557E4B171} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A4BBD227-B306-417E-A89F-DCB1C2874780} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A56B2E2E-8D1F-430D-A778-3CE8FDAE74EC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A59EB17F-C1C5-4658-AF68-F138FD5E8EFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A5A3077B-2064-4444-AB78-0AA727BDCB8A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A5B322A5-0243-4E8F-8E86-6653651EAAA4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A60D24E1-BBCF-4E60-9D4D-13C569BEAB28} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A6B9F72D-B0B0-4F8F-8542-8442CAFAA905} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A6D26B35-34A9-4C84-B530-D5442B3991C3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A72B7E22-06F8-4F67-9C8D-654887087400} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A876CFF3-6A88-4EF5-990F-22EA50757412} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A916AFFE-0253-414A-A6B0-BF3C29EEC3FF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A986F85F-606B-4D07-950A-E1A861DA1B5D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{A9CAFF87-D2E6-4915-AB4B-9C5B6165B129} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA049163-2ACC-4DB1-B557-D6CAFDC6CAED} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA206AF5-6166-4BB6-A9B2-00E9075B5322} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AA35A4F5-8F5D-459D-9992-048D07AEF531} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AB4AB54F-F987-4BDB-95E6-8211A1B3F820} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ABB2B7EE-A50F-4900-9BF9-D881CBA083B7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ABD51535-D05B-4973-B541-B09493BEBCB4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AC23D472-9F89-4FFD-82CB-EF08D7F423AD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AC33183E-0B76-4DDD-ADA8-7D8CD692E4B0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AD33662E-5921-4445-9385-FB1DBC42ECDC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AD6BB2D0-F310-454B-BF2B-EE157EAAD561} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ADC79A76-E08C-47CE-B34C-C5FBB55E4B7B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ADD182AD-EEE7-445E-B98D-235EC038A2B0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AE283679-4CEE-437D-A7C5-33FB26B8CF5A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AF3BE2D1-4B9C-4773-8C6E-E110EAB00BF5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AF4F119D-2190-470D-9CAC-E6B975235FDB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AFB5FD0D-07EB-4144-BA85-47B460515F7E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{AFED15BD-9FC6-4549-8B7F-4954ACB5056C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B0CDCC0D-DAA6-499B-AD59-C4A418229AA3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B1744503-9A9C-44EC-BA30-924BA5F9443B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B1915DF9-C672-4F2F-B93F-2BEE87CE8D1C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B19969AF-6CC2-4FF4-A329-156B6A6E8745} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B2401169-1FA1-4450-9EED-F77C193984E1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B29A24B5-7D31-4DA8-A9A0-FD87B126425F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B3035AE0-1585-45AD-98EB-6A05EDFCFF1F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B31AC439-050A-42A7-B074-F7ADBA419C31} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B332A525-6E0A-49BB-8A0D-98AFE32D3B6D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B3402F5B-11DA-49BD-A437-B9148FEA7B50} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B355B938-0441-43A2-A700-4271D5AB46C4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4673BA5-7246-4DDC-AEEB-C7BF894C8380} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4991152-BCFC-4537-8395-F3AD94B539D6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B49F3E24-A5B5-4F78-9A2D-8597ED8E7580} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4A01A90-0B51-4BB5-86EB-032A344576ED} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4AD6D2E-4E58-40CB-BEF8-BFC8947DC5C7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B4CCB1B3-AAAF-4AF8-AC8D-26441A130005} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B563AAE8-82A1-448C-B296-170A677884E2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B616EB04-BF17-4687-82C8-B7ADF0DAC700} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B6C5DFBC-4CEC-4115-A1D0-DE61981433F9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B72D39E7-6497-4772-9669-40537A30A051} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B79089DE-8291-4385-8CA3-5628DF036296} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B7BE7BCA-7DB3-457D-AF61-4153D7EA247D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B7D49A8F-CB5D-40E3-B4CD-6839DF46157A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B8633D5C-E960-4151-91CA-2AFFCE860892} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B8DBD61A-79D9-464E-878B-1DC89A852A27} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B8EE341E-5F37-467F-873B-277FE213A123} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B8F4CE92-B579-4D49-A106-8038CD4A7E0D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B8F979F0-4C46-4880-BE5E-A17CA174F215} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B9433B91-82DC-4926-89E1-8538B355A43A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B96B8252-6F1C-4E12-915A-662EAF4F3850} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{B97EEB7D-82E1-4502-B60E-6DE5BF80F013} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BA30247B-F146-4E28-A764-6447140EB6C5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BA5C5C1E-717B-41D9-84FD-3A9315BF71F6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BA7FC117-4DE4-432F-9C8F-AD6B3FF55185} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BAD4549E-1E22-491D-9570-F676F05BBDFF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BB076656-F67F-4412-BA93-194651B1E107} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BB90B184-8D65-4241-81CF-6526CE5BF40E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BBD78F07-4FE7-477B-980F-ED1E191E9E8D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BC105888-ACDD-4147-85C9-F0174A62695F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BC58562B-D867-4C83-8B5A-CF9C87B17DDB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BC7796D5-75D9-41DD-B92E-2FA0C08E18B3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BC968D9B-39BB-4C4C-A85B-3456A26A3C28} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BCCB0ACB-4893-4B4D-B387-A54BEEEF5BB4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BD3B4722-D963-465B-B62A-954C0674EA3C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BD624ED2-7F91-4147-84A0-0662FB651CF3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BDF98B38-EA68-495F-84F8-3C7B6D8768D4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BE79656D-DB84-451A-91E0-6DA2F1AE1A7D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BE98B247-692C-405E-8CA8-2E1EEF3B5F42} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BEC41A7F-AC7E-4673-9781-CF943ECEC0EF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BED7A1E4-B239-4F55-8E5F-16DFDA4E2CA7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BFD145B3-2417-47A5-A415-F3954E7AFB32} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{BFFA07D5-6E07-481D-A124-19FF2CD5A81F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C041C3C9-0C92-4496-A211-472EC4DB67D1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C0B8CD91-777E-4389-B75A-4B20BAC0315D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C133CCEE-6383-491E-B443-292F45AC8C0A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C17EE284-DFAD-4AD0-98DF-ED4891B63E5A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C1AF58E8-4EE7-4658-9EC8-367954E28824} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C1CFE3BB-1329-44B0-8291-415F2B4D2686} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C1E7CC94-152F-473B-B3C4-3F5C5FABFCEB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C237B273-D3B4-482C-A947-35777B17C2A2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C257E180-A24C-48F0-B41C-CB50725A5C76} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C2ABCED4-C080-44B9-B87B-11EDE9F42A24} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C3D4BD4A-6E4C-4714-A536-2564F43D1E6D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C4FA2894-E248-4566-A855-A2D829236BB6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C50BCE4D-95A9-4067-9CA3-7CEFEC47D31B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C53F6B60-A382-4156-B754-BF530E68EA87} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C546F357-DC46-4B5D-8BE9-4BAEDF7083AC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C56AD2AE-A540-4BB5-A5FE-95C1139C0D24} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C5B7DD86-7F00-4E1B-A3B0-35C4781BEA36} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C5BE0B71-3326-437E-BDBE-C9D970568414} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C5CCF37F-B285-4AF6-8D32-5EFA57653B50} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C6DF279A-9F95-45F0-B7A2-B2B09B66E73D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C7009189-6056-482A-982B-7565BA0D267E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C79F4CF0-299E-4401-BB46-55E5480719FC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8274627-AAD5-4EC2-B653-79508CC77B78} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C84F2C57-F5E5-4A5E-8F07-0D8A9D19076A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C856483A-E808-46C6-B4D3-732889F9AD6D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C85FD261-F5C4-4E56-993E-61A2E94EF602} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8A77B58-CA4B-4E15-9DAF-EF73951F2968} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C8CD7D16-2CFB-4D9A-9622-082BF6D2D2E4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9719E17-DA04-406D-9B48-E238F81098BA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9915A6F-1B52-4BED-AA5F-13FC8D628D76} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9924285-7266-47AE-B5AE-5035DAA29FC8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9935F94-E4F4-4F2A-B831-A04C4FC49C67} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{C9B8A46C-FD19-458C-8775-19473BF6448D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CA1FDB75-6E98-4422-8DCD-F1E5135C88D9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CA28D7AC-312D-4E44-A436-3BC51394D947} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CAD7FCC3-5FFB-4D1A-BFD8-15CCC2E1D59E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB0E81F5-1458-41A8-80A4-837B0245DC2B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB1B03E7-EBF7-4E91-A081-B0580D7BCDBD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CB5775BA-F092-4136-87D0-1A4AECBA3025} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CBDFB5E5-95AA-4AB9-8160-74FE8574712D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CC42E21B-78DE-4DCD-8EAC-1C660165681F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CD32683D-435F-414D-B272-5917EBF5EDF5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CD79AA06-146C-43B8-8DF4-C353C28CD97C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CE196AF5-5598-4115-9E68-1FE9E82FC318} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CE493B46-AE3E-4952-BE13-0A6DC19EEF99} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CECBD781-2A78-4496-AEC2-E40CA2769E29} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CF27ECFC-405F-4446-B33B-18E9F648B98E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CF4BBFF7-DEF6-414A-9295-0C026FB0E5EA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{CFCFC206-2D02-4171-AADB-AE3BC9633CDE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D080AF1B-4261-4157-9903-BA6D6A685596} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D0CACF2C-81E3-47C0-9190-B5864107CE33} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D181C86C-72FB-4AC5-B256-3A0B11333883} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D20254D4-510F-4856-B07D-C5D0164EAD05} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D28C130D-43EA-4D8E-A7A8-4F2EA22852FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D315B6AB-CB3A-45B4-888B-A769914812FA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D35F89E1-64A9-4A91-BE1B-D47CB1BD1335} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D362C780-70D2-4758-9E3B-AFBC1157B910} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D3C38C3D-77CB-490E-930D-3064F39FD127} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D3D43F8A-0413-46C7-BE36-1C925E6692D0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D3E242ED-1BE6-4FE5-B605-D405BA5D2C21} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D4228BEF-F516-4269-AB4F-C2786D5E00D5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D4F63B45-B7E8-4F8A-8AD5-B340C49ADF35} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D4FA1E4E-5B2B-4A1B-93F6-C6998406EE18} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D59B4D7A-45C7-4F24-8F93-BC5472C12DDF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D5D64308-2B41-4A51-BA01-AA8E2BBD8B45} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D67A3866-429B-46B5-827C-156749276760} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D6D236F5-DA6A-427F-94F9-8207614D2334} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D7D0C380-FF8C-485A-B86A-9A678F31B4D0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D7E6E731-CBC8-4808-9BD8-EA6598D37704} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D807BA15-C3BA-48E7-9FB8-B086D7E7048A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D82A8477-3B13-4BE9-A875-E9AD96586FFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D82D5881-6FBD-4555-8951-FA9E22B49146} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D867563E-D982-4591-9800-93F31CFAAB3B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D904CAD5-4BB5-48BA-86F3-BBDFAAEB2726} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D94BD048-F4BB-4635-8586-A32B522BD0C1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D94FD9B6-E532-49E9-9972-25EDC862276A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{D9E63502-A557-4985-B99D-B308D8CB8DF0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DA7FC898-79EA-4EF4-8932-3A3F2D15BEF9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DAB2B0B1-4931-44C9-A95F-5C9594F42AA9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DABF6BE4-61C5-4898-9EAE-51C02FD5A067} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DAFC415C-2796-42F8-AC74-4294DBA08ADA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DB2B1BBF-9911-4558-B2DF-B89535A36527} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DB36C2C2-66BE-4AD9-ACF6-2A64024B73DD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DB3C3149-DE1D-4644-9E01-35046F28FBE9} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DBAA3A75-D323-4327-9566-4D01C11E746D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DBEFCCC4-84D4-4D4B-8FD1-6C566CD0B791} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DC985410-DDD6-4F0E-B34F-A6C0DD58BB23} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DD5A2E8F-0C1B-4CEB-9D81-6A9979B58F3E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DD8EE3DB-9B7B-4A6B-A4D3-4ABCBAD7F8EC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DDADB90E-4F30-4CDA-B895-DC72BD1F60B2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DE2CEF0C-B91E-4B83-A9A6-5CDD4EA1940F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DE702636-1803-4B35-9378-C66FA975754E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DECBAC32-814D-460D-9A1A-5E70F26CE74F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DEEE4D0A-2A41-4189-8617-384D568F0CFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DFBD6759-2C5A-488C-BF94-C59D488B315C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{DFFB1159-BFF8-4D74-9CD5-390B6F61E230} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E043BE8D-1CB2-496B-992B-326225C96DFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E0DAF438-818B-4EA7-9E26-A7CD133494BE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E15002E9-A197-4226-BB2B-5E9DBDF13520} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E168E810-61EE-4655-8CD9-5AC20A3DFA33} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1801E29-F1F5-4B7B-8992-5F0D98EE87A3} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1CBF6FA-F864-4B76-ABAB-7D7FA7A3AA8A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1D0CF62-F330-4B28-87EF-C0DD92EDE382} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E1F4AB4E-736A-480B-915F-80451890AAAD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E2DE2E31-1421-4A5F-ABF6-A03991BA6954} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E30A3683-617B-472D-9B13-86B395430133} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E3726261-8B99-4972-BE76-568B2C30C04A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E3C726C4-0505-463D-A9C7-A099CA0BACCF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E3E37A8E-FF5C-48E4-B7DA-AD4B288723A2} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E413F34E-FBB3-4B85-8B06-2D2D36EFC483} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E425853D-F32A-4D91-BC42-639BE6A3445A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E4C87162-DF9B-4A28-83B5-ECD2CEA50535} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E540AD4B-AC89-4DB7-911A-06B36AA9C1E6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E57CDC8E-21F7-4001-BDAD-78F526ADD49F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E5C6EFDE-8DB2-4A87-A867-D974F5528ECD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E5E3A430-16C7-4DF6-B17C-54FFCFDF6F3E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E6016B09-7CC5-4B71-A4E6-CE0246734044} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E6615F92-F992-4D16-AEA4-53F6FC8FE3F4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E70251DC-909F-4AF2-AEC3-944C7B49702F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E7606F9A-E430-4822-A422-86851264062E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E764AC10-1886-4F30-B715-E7496825DB01} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E764F092-EC9B-4674-968B-5809C8B23893} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E7657A4B-C829-41B3-B90A-3C65A3080237} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E79132A4-9536-41D0-8F66-429C95365E09} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E80625B8-F85D-461D-9B9E-959163427BDB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E84BCB6E-1182-4EC6-A9F7-2E902303AF96} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8896A42-C059-4098-A0EF-EF71F0720A17} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8A9CDDD-2B1A-451D-8B01-8C5853D557CC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E8D43E9F-97FB-419B-BEC4-2FE88B51C44D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E98F28E6-1741-4A8E-AD11-08B503B7BEF0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E9F13E8C-40EF-4AE5-A8E5-82FEE7AB45DD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{E9F7AF80-AAA8-4B97-8B02-07A01AC289DF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EA56356E-815A-4E90-BA8F-8F526CC3C6CA} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EA597682-B103-41F0-9E43-168F467AD331} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EA7B7ABB-556B-42C8-B590-A0EE55058C0B} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EAD1F292-EFF6-49BE-9AC7-3C3C2E2F18F5} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EAEB3A16-AE81-41F9-8191-DE2862B6F10D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EB614032-1E7C-4576-AA25-29BF7046995D} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EBD43B4A-A94C-42F2-8B9F-8764B2391BFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EC351209-8208-40CE-AAEF-FE129F2216D7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ECAEB2E4-BCFB-489F-AF75-FAEA3FBED710} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ECB06255-80C3-44FA-BA0E-F5D1012E25CC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{ECF0D76B-933E-40CD-8916-EE81B21F0A8F} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EDAF56A7-9D02-45CD-8552-AE43678EB0CF} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EDB4BE74-B396-47A8-858D-D2438F4B4134} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EE303C48-748E-4519-B0D0-3100CD5BCD4E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EE9D23F8-5894-4E7C-99E0-ECD61C43E876} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EEA11247-3AC3-4486-BB4F-2685A7EB1850} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EF2731BD-A90D-47B0-89B8-548F74F5A5BB} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EFD46C6A-ABF2-4C43-BC73-1BE39158F399} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EFEB9268-772F-4CF6-B5B4-4C05BB1F6FC7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{EFECC51C-28D5-4399-9155-7CC92912C8EC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F04EFAF0-ACD6-4C71-AF4C-103B31DEA801} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F053EF86-67AE-4999-AFFA-71FF19A8E831} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F07AB664-0738-4F68-854E-2B6E07CA8BDD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F08990E4-6D0B-4183-9830-FFADEE419C91} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F1BD2838-896D-4025-A269-B04A09E467D7} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F22A3DF4-9186-44AA-9E06-E19B07C49BB8} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F23A551C-6868-4B62-B2CD-18E8986F8FF4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F26D4368-0C29-4688-91EE-E7213BFE0643} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F2CB07DB-A112-4505-AD3F-719CDEB7280A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F317A5B2-9740-4FD9-83EA-5D28817A1398} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F40240E4-CA8F-4BFA-9F2E-87DDF3BA9723} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F4060C09-884E-4494-9059-8E257FE2A5CE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F571AB32-2EAF-4FA1-BE28-2D9CD03C15AD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F5B8D8DD-9968-4F1C-B7C2-5DCD6DD3DF51} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F5C57C61-8DF4-4254-9E97-53A688971BC6} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F61A963D-6CC2-434C-AC11-C247FAEF921C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F643AA88-09D4-471E-91E1-69F2AD02B33C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F6614DDA-A9E2-4ED4-98D0-891039808069} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F6F5B31A-FB01-4B54-9B9D-986276467612} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F6F6ED5D-7114-4C3A-9AB0-721D0DB75B93} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F708D38E-6F0E-4BC0-B314-4B9171FBDBFC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F75D90C2-C884-4B08-AAAF-8F13A09A5337} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F796DB66-A1DB-4B71-9C4A-A9F333A96670} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F7CE2016-F27A-46BA-B487-AC86DE130005} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{F9350334-E4FD-485B-AD37-BA1AEB12B500} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FA1364FE-EEE6-4E7C-887D-1C50F6D64682} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FA171DAD-8894-4B38-AEAC-EE224F592721} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FAAEA377-4F0B-4F13-BAA4-55941CCEFCB4} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FAC9F661-7B44-465F-8E70-066B97E8AA78} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FB213AE2-712E-4729-8809-C24376F0E98A} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FB49D2B4-266A-4689-991F-2A1686748EC0} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FC7A02D8-6DDC-4D18-A2A6-431FCA334815} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FCA53617-00DC-45D1-97BE-7D24CBB1EA5E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FCFDF505-1BE1-4B32-A0CB-8745A8F32D18} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FDABE88E-92E8-4FC2-B7D3-18F7714967FC} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FED2B158-4DBC-46C3-ACDF-73AFDA430FC1} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FEFB22A8-F1CA-4071-B561-1F58D4A1D9CD} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FF96F730-E970-42FE-A02A-2E8563B5A0EE} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FFA0B71B-EE23-48E3-8AC2-EBD4A5F2ED64} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FFA9C8A3-2346-42D8-A771-BED2592A3A26} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FFBC7E6C-F4A4-47F8-BB75-5925D44A873C} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FFE3D58B-7C7A-427F-B423-446AB57CCD3E} Successfully deleted: [Empty Folder] C:\Users\Admin\appdata\local\{FFFEE67D-AFB9-4DAC-90E0-B6795B084176} ~~~ FireFox Successfully deleted: [File] C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\gfc46l5x.default\invalidprefs.js Successfully deleted: [File] "C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\gfc46l5x.default\extensions\DivXWebPlayer@divx.com.xpi" Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\ocr@babylon.com Successfully deleted the following from C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\gfc46l5x.default\prefs.js user_pref("extensions.crossrider.bic", "13cc54158ae361c939710b76ad63a66b"); Emptied folder: C:\Users\Admin\AppData\Roaming\mozilla\firefox\profiles\gfc46l5x.default\minidumps [626 files] ~~~ Chrome Successfully deleted: [Folder] C:\Users\Admin\appdata\local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 06.07.2013 at 13:16:17,91 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
06.07.2013, 12:21 | #6 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013 Ran by Admin (administrator) on 06-07-2013 13:17:00 Running from C:\Users\Admin\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Palit Microsystems Ltd.) C:\Program Files (x86)\Thunder Master\THPanel.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MsoSync.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" -f "C:\ProgramData\NVIDIA\Updatus\NvTmru\nvtmru.dat" [172032 2013-07-06] () HKCU\...\Run: [THPanel] "C:\Program Files (x86)\Thunder Master\THPanel.exe" /A [2047344 2012-05-24] (Palit Microsystems Ltd.) HKCU\...\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe" [4441920 2012-10-09] (Akamai Technologies, Inc.) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 MountPoints2: F - F:\LaunchU3.exe -a MountPoints2: {3281d59c-315b-11e1-b422-d02788154f60} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {afe50000-5ba7-11e1-9bd5-d02788154f60} - F:\LaunchU3.exe -a MountPoints2: {bd7605d9-391f-11e0-8aa3-d02788154f60} - F:\Setup.exe MountPoints2: {e7520efe-51b1-11e2-bb8f-d02788154f60} - G:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {f78ea9ba-50a3-11e0-8284-d02788154f60} - E:\Setup.exe HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] () HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.google.at/ https://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {9EBE5796-5B84-4BFB-A1FB-914E68D02032} - No File Toolbar: HKCU - No Name - {751F595B-0E15-4FD2-B324-724B71AAE55E} - No File Toolbar: HKCU - No Name - {A2D8F477-F908-478D-A77A-5D934A922BC0} - No File DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.186.211.21 195.34.133.21 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default FF NetworkProxy: "no_proxies_on", "*.local" FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=1.6.0_39 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\funloadia-entertainment-customized-web-search.xml FF Extension: DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: nasanightlaunch - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\nasanightlaunch@example.com.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\WTB_GLOBAL.sqlite FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR HomePage: hxxp://www.google.com/ CHR DefaultSearchURL: (Babylon) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding} CHR DefaultSuggestURL: (Babylon) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll No File CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll () CHR Plugin: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0\npSkypeChromePlugin.dll (Skype Technologies S.A.) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPAUTHZ.DLL No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL No File CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U11) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Zylom Plugin) - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_149.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File CHR Extension: (Google Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0 CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0 CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0 CHR Extension: (Adblock Plus) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.4.1_0 CHR Extension: (Google Search) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (Safe Money) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Virtual Keyboard) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0 CHR Extension: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (Top Eleven) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljphpjlafmmdmegmfbkacafhbegjfkkn\2.0.0.4_0 CHR Extension: (Privacy Palette) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjkcflkplhgpebknipkekjggglimnone\0.3_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 CHR Extension: (Socksharedownloader) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlfohjgijhjlpidbbnmcdooegafnnnm\1.0_0 CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0 CHR Extension: (Anti-Banner) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 ==================== Services (Whitelisted) ================= S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) S2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 mi-raysat_3dsmax2013_64; C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-15] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-01-26] () ==================== Drivers (Whitelisted) ==================== S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [38424 2011-07-07] (Google Inc) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22664 2013-02-28] (AVAST Software) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-02-10] (DT Soft Ltd) S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62368 2013-02-09] (G Data Software AG) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2012-11-02] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-10-18] (Kaspersky Lab) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab) S3 massfilter_hs; C:\Windows\System32\DRIVERS\massfilter_hs.sys [18456 2011-07-07] (HandSet Incorporated) S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsnmea; C:\Windows\System32\DRIVERS\zghsnmea.sys [129432 2011-09-13] (ZTE Incorporated) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 FXDrv32; \??\D:\FXDrv64.sys [x] U3 gzflt; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-06 13:16 - 2013-07-06 13:16 - 00079670 ____A C:\Users\Admin\Desktop\JRT.txt 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\Windows\ERUNT 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\JRT 2013-07-06 13:11 - 2013-07-06 13:11 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Admin\Desktop\JRT.exe 2013-07-06 13:10 - 2013-07-06 13:10 - 00037896 ____A C:\Users\Admin\Desktop\AdwCleaner[S1].txt 2013-07-06 13:06 - 2013-07-06 13:07 - 00037896 ____A C:\AdwCleaner[S1].txt 2013-07-06 13:05 - 2013-07-06 13:05 - 00650027 ____A C:\Users\Admin\Desktop\adwcleaner.exe 2013-07-06 12:32 - 2013-07-06 12:32 - 00034471 ____A C:\Users\Admin\Desktop\Addition.txt 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-06 11:34 - 2013-07-06 11:34 - 01934636 ____A (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2013-07-01 23:41 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-06-30 15:02 - 2013-07-06 02:03 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-06-28 21:44 - 2013-07-06 01:56 - 00000000 ____D C:\PROGRAMME 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 22:16 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:38 - 2013-06-23 18:40 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-15 11:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-15 11:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-15 11:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-15 11:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-15 11:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-12 15:25 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-12 15:25 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-12 15:25 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-12 15:25 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-12 15:10 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-12 15:10 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 15:10 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-12 15:10 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-12 15:10 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-12 15:10 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-12 15:10 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-12 15:10 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-09 00:08 - 2013-06-09 00:11 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf 2013-06-07 23:28 - 2013-06-08 12:36 - 00000000 ____D C:\Users\Admin\AppData\Local\WebPlayer 2013-06-07 23:20 - 2013-06-07 23:20 - 00000000 ____D C:\Users\Admin\AppData\Local\PhotoGenie 2013-06-06 19:19 - 2013-07-04 13:02 - 00000000 ____D C:\Users\Admin\Desktop\top eleven ==================== One Month Modified Files and Folders ======= 2013-07-06 13:16 - 2013-07-06 13:16 - 00079670 ____A C:\Users\Admin\Desktop\JRT.txt 2013-07-06 13:16 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-06 13:16 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\Windows\ERUNT 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\JRT 2013-07-06 13:11 - 2013-07-06 13:11 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Admin\Desktop\JRT.exe 2013-07-06 13:11 - 2013-03-26 00:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-07-06 13:10 - 2013-07-06 13:10 - 00037896 ____A C:\Users\Admin\Desktop\AdwCleaner[S1].txt 2013-07-06 13:10 - 2011-05-23 18:12 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-06 13:09 - 2013-03-28 12:54 - 00027258 ____A C:\Windows\setupact.log 2013-07-06 13:09 - 2011-05-23 18:12 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-06 13:09 - 2011-02-14 09:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-07-06 13:09 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-06 13:08 - 2011-02-10 09:07 - 02042783 ____A C:\Windows\WindowsUpdate.log 2013-07-06 13:07 - 2013-07-06 13:06 - 00037896 ____A C:\AdwCleaner[S1].txt 2013-07-06 13:05 - 2013-07-06 13:05 - 00650027 ____A C:\Users\Admin\Desktop\adwcleaner.exe 2013-07-06 12:51 - 2012-09-29 21:46 - 00000928 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000UA.job 2013-07-06 12:51 - 2012-04-08 16:09 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-06 12:32 - 2013-07-06 12:32 - 00034471 ____A C:\Users\Admin\Desktop\Addition.txt 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-06 11:34 - 2013-07-06 11:34 - 01934636 ____A (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2013-07-06 10:38 - 2013-01-30 14:51 - 00000000 ____D C:\Users\Admin\AppData\Local\Akamai 2013-07-06 02:05 - 2011-02-10 09:24 - 00000000 ____D C:\users\Admin 2013-07-06 02:03 - 2013-06-30 15:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-07-06 02:03 - 2013-04-12 11:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-06 02:03 - 2012-07-27 20:34 - 00000000 ____D C:\Users\Admin\AppData\Roaming\PhotoFiltre 7 2013-07-06 02:03 - 2012-05-25 15:45 - 00000000 ____D C:\Windows\Minidump 2013-07-06 02:03 - 2012-04-25 12:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-06 02:03 - 2011-07-14 18:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DVDVideoSoft 2013-07-06 02:03 - 2011-02-18 15:21 - 00000000 ____D C:\Users\Admin\Desktop\Rewi 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-07-06 01:56 - 2013-06-28 21:44 - 00000000 ____D C:\PROGRAMME 2013-07-06 01:55 - 2013-04-23 19:49 - 00000000 __RHD C:\MSOCache 2013-07-06 01:34 - 2013-05-19 16:28 - 00000000 ____D C:\Users\Admin\Desktop\MUSIK RUNTERL 2013-07-05 22:19 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-07-05 22:19 - 2013-06-24 22:16 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-07-04 13:02 - 2013-06-06 19:19 - 00000000 ____D C:\Users\Admin\Desktop\top eleven 2013-07-01 21:51 - 2012-09-29 21:46 - 00000906 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000Core.job 2013-06-30 22:11 - 2013-03-29 19:43 - 00013068 ____A C:\Windows\PFRO.log 2013-06-30 02:31 - 2011-03-15 18:54 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps 2013-06-29 18:48 - 2011-05-21 23:09 - 00000000 ____D C:\Users\Admin\Desktop\suna 2013-06-29 18:12 - 2009-07-14 19:58 - 00700396 ____A C:\Windows\System32\perfh007.dat 2013-06-29 18:12 - 2009-07-14 19:58 - 00149192 ____A C:\Windows\System32\perfc007.dat 2013-06-29 18:12 - 2009-07-14 07:13 - 01622172 ____A C:\Windows\System32\PerfStringBackup.INI 2013-06-28 11:39 - 2011-08-03 17:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 14:59 - 2011-06-07 21:27 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DivX 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:40 - 2013-06-23 18:38 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-23 18:40 - 2012-09-11 17:57 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-23 18:40 - 2011-02-15 18:42 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-21 19:11 - 2013-02-14 21:07 - 00002189 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-06-20 23:23 - 2011-02-10 09:24 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-20 22:41 - 2013-05-11 16:06 - 00000000 ____D C:\BS4 2013-06-16 20:28 - 2009-07-14 06:45 - 00549408 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-16 18:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-16 15:01 - 2011-02-15 19:56 - 00151992 ____A C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-06-16 14:03 - 2011-06-07 21:25 - 00000000 ____D C:\Program Files (x86)\DivX 2013-06-16 14:03 - 2011-06-07 21:23 - 00000000 ____D C:\ProgramData\DivX 2013-06-15 11:04 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-12 15:26 - 2011-02-15 21:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-12 14:51 - 2012-04-08 16:09 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 14:51 - 2012-01-09 20:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-12 13:24 - 2012-11-04 21:05 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-12 13:24 - 2011-08-03 17:36 - 00000000 ____D C:\ProgramData\Skype 2013-06-09 00:11 - 2013-06-09 00:08 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 16:08 - 2013-06-15 11:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-08 16:07 - 2013-06-15 11:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-08 14:28 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-08 13:42 - 2013-06-15 11:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf 2013-06-08 13:13 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-08 12:36 - 2013-06-07 23:28 - 00000000 ____D C:\Users\Admin\AppData\Local\WebPlayer 2013-06-07 23:20 - 2013-06-07 23:20 - 00000000 ____D C:\Users\Admin\AppData\Local\PhotoGenie 2013-06-07 23:20 - 2013-03-28 22:23 - 00073793 ____A C:\Windows\DirectX.log 2013-06-06 09:25 - 2011-02-21 14:04 - 00000000 ____D C:\Users\Admin\Desktop\zuhat 2013-06-06 00:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\System32\NDF ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-06-26 08:12 ==================== End Of Log ============================ --- --- --- |
06.07.2013, 17:11 | #7 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exeESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST Log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.07.2013, 23:04 | #8 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Sicher das das noch nötig ist? ich find den Ordner nähmlich nichtmehr und eine meldung von antivirus kommt auch nichtmehr. und wofür der schritt?? Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an. |
07.07.2013, 06:50 | #9 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Kontrollscans sind immer nötig. Und DU kannst nit 100% wissen dass alle externen Medien sauber sind, da würde es sich anbieten die grad mitzuscannen, kannst aber auch weg lassen. Ich mach schon wirklich nur das nötigste
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.07.2013, 10:12 | #10 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exeCode:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=6d061172763134439ce58d9ef6e999e0 # engine=14307 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-07-07 07:00:06 # local_time=2013-07-07 09:00:06 (+0100, Mitteleuropäische Sommerzeit) # country="Austria" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=771 16777214 16 1 8976225 8976225 0 0 # compatibility_mode=5893 16776573 100 94 113897 124853456 0 0 # scanned=395125 # found=1 # cleaned=0 # scan_time=8342 sh=AA640F73FD175447B641E4729733DF80EB27B7D7 ft=1 fh=8a6151c622aaf596 vn="a variant of Win32/SpeedingUpMyPC.B application" ac=I fn="C:\Users\Admin\AppData\Local\Temp\OptimizerPro.exe" Code:
ATTFilter Results of screen317's Security Check version 0.99.68 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Kaspersky PURE 3.0 Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Java(TM) 6 Update 39 Java 7 Update 25 Adobe Flash Player 11.7.700.224 Adobe Reader XI Mozilla Firefox (22.0) Google Chrome 27.0.1453.110 Google Chrome 27.0.1453.116 ````````Process Check: objlist.exe by Laurent```````` Kaspersky Lab Kaspersky PURE 3.0 avp.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-07-2013 Ran by Admin (administrator) on 08-07-2013 11:12:18 Running from C:\Users\Admin\Desktop\Neuer Ordner (3) Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe () C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Palit Microsystems Ltd.) C:\Program Files (x86)\Thunder Master\THPanel.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Windows\System32\StikyNot.exe (Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe (Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [Nvtmru] "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" -f "C:\ProgramData\NVIDIA\Updatus\NvTmru\nvtmru.dat" [174080 2013-07-08] () HKCU\...\Run: [THPanel] "C:\Program Files (x86)\Thunder Master\THPanel.exe" /A [2047344 2012-05-24] (Palit Microsystems Ltd.) HKCU\...\Run: [Akamai NetSession Interface] "C:\Users\Admin\AppData\Local\Akamai\netsession_win.exe" [4441920 2012-10-09] (Akamai Technologies, Inc.) HKCU\...\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [1475584 2010-11-20] (Microsoft Corporation) HKCU\...\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKCU\...\Policies\system: [DisableRegistryTools] 0 HKCU\...\Policies\system: [DisableTaskMgr] 0 MountPoints2: F - F:\LaunchU3.exe -a MountPoints2: {3281d59c-315b-11e1-b422-d02788154f60} - E:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {afe50000-5ba7-11e1-9bd5-d02788154f60} - F:\LaunchU3.exe -a MountPoints2: {bd7605d9-391f-11e0-8aa3-d02788154f60} - F:\Setup.exe MountPoints2: {e7520efe-51b1-11e2-bb8f-d02788154f60} - G:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 MountPoints2: {f78ea9ba-50a3-11e0-8284-d02788154f60} - E:\Setup.exe HKLM-x32\...\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard) HKLM-x32\...\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-05-20] (DivX, LLC) HKLM-x32\...\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [1263952 2013-02-13] () HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe" [356968 2012-12-20] (Kaspersky Lab ZAO) HKLM-x32\...\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-03-20] (Geek Software GmbH) HKLM-x32\...\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [253816 2013-03-12] (Oracle Corporation) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = https://www.google.at/ https://www.google.at/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.) BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO) BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation) BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MIF5BA~1\Office15\URLREDIR.DLL (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MIF5BA~1\Office15\GROOVEEX.DLL (Microsoft Corporation) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) Toolbar: HKCU - No Name - {9EBE5796-5B84-4BFB-A1FB-914E68D02032} - No File Toolbar: HKCU - No Name - {751F595B-0E15-4FD2-B324-724B71AAE55E} - No File Toolbar: HKCU - No Name - {A2D8F477-F908-478D-A77A-5D934A922BC0} - No File DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 212.186.211.21 195.34.133.21 FireFox: ======== FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default FF NetworkProxy: "no_proxies_on", "*.local" FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll () FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin: @java.com/DTPlugin,version=1.6.0_39 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) FF Plugin-x32: @zylom.com/ZylomGamesPlayer - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF SearchPlugin: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\searchplugins\funloadia-entertainment-customized-web-search.xml FF Extension: DownloadHelper - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} FF Extension: nasanightlaunch - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\nasanightlaunch@example.com.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\WTB_GLOBAL.sqlite FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi FF Extension: No Name - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\gfc46l5x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKLM-x32\...\Firefox\Extensions: C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 Chrome: ======= CHR DefaultSearchURL: (Babylon) - hxxp://search.babylon.com/?q={searchTerms}&affID=119994&tt=gc_&babsrc=SP_ss_gin2g&mntrId=069AD02788154F60 CHR DefaultSuggestURL: (Babylon) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter} CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\27.0.1453.116\pdf.dll () CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (Microsoft Office 2013) - C:\Program Files (x86)\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll (Apple Inc.) CHR Plugin: (Microsoft Office 2013) - C:\PROGRA~2\MIF5BA~1\Office15\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) CHR Plugin: (Pando Web Plugin) - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks) CHR Plugin: (Uplay PC) - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc) CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc) CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Zylom Plugin) - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll (Zylom) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\Admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll () CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation) CHR Extension: (Funloadia Entertainment) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aekjbnlbnhnjhgmpfcdnigifiookfadm\10.15.2.23_0 CHR Extension: (Kaspersky URL Advisor) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0 CHR Extension: (Safe Money) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0 CHR Extension: (Virtual Keyboard) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0 CHR Extension: (Skype Click to Call) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.3.0.11079_0 CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 CHR Extension: (Socksharedownloader) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohlfohjgijhjlpidbbnmcdooegafnnnm\1.0_0 CHR Extension: (Anti-Banner) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0 ==================== Services (Whitelisted) ================= S4 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.) R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO) R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch) R2 mi-raysat_3dsmax2013_64; C:\Program Files\Autodesk\3ds Max Design 2013\NVIDIA\raysat_3dsmax2013_64server.exe [86016 2011-09-15] () R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-01-26] () ==================== Drivers (Whitelisted) ==================== S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [38424 2011-07-07] (Google Inc) R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22664 2013-02-28] (AVAST Software) R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch) R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-02-10] (DT Soft Ltd) S3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [62368 2013-02-09] (G Data Software AG) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO) R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [613720 2012-11-02] (Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO) R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab) R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54104 2012-10-18] (Kaspersky Lab) R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178008 2012-08-13] (Kaspersky Lab) S3 massfilter_hs; C:\Windows\System32\DRIVERS\massfilter_hs.sys [18456 2011-07-07] (HandSet Incorporated) S3 zghsdiag; C:\Windows\System32\DRIVERS\zghsdiag.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [129432 2011-09-13] (ZTE Incorporated) S3 zghsnmea; C:\Windows\System32\DRIVERS\zghsnmea.sys [129432 2011-09-13] (ZTE Incorporated) S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x] S3 FXDrv32; \??\D:\FXDrv64.sys [x] U3 gzflt; ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-07-08 11:02 - 2013-07-08 11:02 - 00890988 ____A C:\Users\Admin\Desktop\SecurityCheck.exe 2013-07-07 18:38 - 2013-07-07 18:38 - 02347384 ____A (ESET) C:\Users\Admin\Desktop\esetsmartinstaller_enu.exe 2013-07-07 13:06 - 2013-07-07 19:19 - 00012418 ____A C:\Users\Admin\Desktop\Stämmme liste.xlsx 2013-07-06 15:23 - 2013-07-08 11:12 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (3) 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\Windows\ERUNT 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\JRT 2013-07-06 13:06 - 2013-07-06 13:07 - 00037896 ____A C:\AdwCleaner[S1].txt 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-01 23:41 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-06-30 15:02 - 2013-07-06 02:03 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-06-28 21:44 - 2013-07-06 01:56 - 00000000 ____D C:\PROGRAMME 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 22:16 - 2013-07-05 22:19 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:38 - 2013-06-23 18:40 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-15 11:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-15 11:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-15 11:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-15 11:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-15 11:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-15 11:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-15 11:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-12 15:25 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll 2013-06-12 15:25 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe 2013-06-12 15:25 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll 2013-06-12 15:25 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll 2013-06-12 15:25 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe 2013-06-12 15:25 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-06-12 15:10 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-06-12 15:10 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-06-12 15:10 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe 2013-06-12 15:10 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll 2013-06-12 15:10 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll 2013-06-12 15:10 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll 2013-06-12 15:10 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys 2013-06-12 15:10 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll 2013-06-12 15:10 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2013-06-12 15:10 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll 2013-06-12 15:10 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll 2013-06-12 15:10 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll 2013-06-09 00:08 - 2013-06-09 00:11 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf ==================== One Month Modified Files and Folders ======= 2013-07-08 11:12 - 2013-07-06 15:23 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (3) 2013-07-08 11:10 - 2011-05-23 18:12 - 00001108 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-07-08 11:02 - 2013-07-08 11:02 - 00890988 ____A C:\Users\Admin\Desktop\SecurityCheck.exe 2013-07-08 10:51 - 2012-04-08 16:09 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-07-08 10:43 - 2013-03-26 00:30 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2013-07-08 10:40 - 2011-02-10 09:07 - 01089816 ____A C:\Windows\WindowsUpdate.log 2013-07-08 10:32 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-07-08 10:32 - 2009-07-14 06:45 - 00015136 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-07-08 10:25 - 2013-01-30 14:51 - 00000000 ____D C:\Users\Admin\AppData\Local\Akamai 2013-07-08 10:24 - 2013-03-28 12:54 - 00027482 ____A C:\Windows\setupact.log 2013-07-08 10:24 - 2011-05-23 18:12 - 00001104 ____A C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-07-08 10:24 - 2011-02-14 09:15 - 00000000 ____D C:\ProgramData\NVIDIA 2013-07-08 10:24 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT 2013-07-07 19:19 - 2013-07-07 13:06 - 00012418 ____A C:\Users\Admin\Desktop\Stämmme liste.xlsx 2013-07-07 18:51 - 2012-09-29 21:46 - 00000928 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000UA.job 2013-07-07 18:38 - 2013-07-07 18:38 - 02347384 ____A (ESET) C:\Users\Admin\Desktop\esetsmartinstaller_enu.exe 2013-07-07 18:13 - 2009-07-14 19:58 - 00700396 ____A C:\Windows\System32\perfh007.dat 2013-07-07 18:13 - 2009-07-14 19:58 - 00149192 ____A C:\Windows\System32\perfc007.dat 2013-07-07 18:13 - 2009-07-14 07:13 - 01622172 ____A C:\Windows\System32\PerfStringBackup.INI 2013-07-06 22:01 - 2012-09-29 21:46 - 00000906 ____A C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3153479991-3856281820-4082005401-1000Core.job 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\Windows\ERUNT 2013-07-06 13:12 - 2013-07-06 13:12 - 00000000 ____D C:\JRT 2013-07-06 13:07 - 2013-07-06 13:06 - 00037896 ____A C:\AdwCleaner[S1].txt 2013-07-06 11:35 - 2013-07-06 11:35 - 00000000 ____D C:\FRST 2013-07-06 02:05 - 2011-02-10 09:24 - 00000000 ____D C:\users\Admin 2013-07-06 02:03 - 2013-06-30 15:02 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft 2013-07-06 02:03 - 2013-04-12 11:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-07-06 02:03 - 2012-07-27 20:34 - 00000000 ____D C:\Users\Admin\AppData\Roaming\PhotoFiltre 7 2013-07-06 02:03 - 2012-05-25 15:45 - 00000000 ____D C:\Windows\Minidump 2013-07-06 02:03 - 2012-04-25 12:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-07-06 02:03 - 2011-07-14 18:48 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DVDVideoSoft 2013-07-06 02:03 - 2011-02-18 15:21 - 00000000 ____D C:\Users\Admin\Desktop\Rewi 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2013-07-06 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat 2013-07-06 01:56 - 2013-06-28 21:44 - 00000000 ____D C:\PROGRAMME 2013-07-06 01:55 - 2013-04-23 19:49 - 00000000 __RHD C:\MSOCache 2013-07-06 01:34 - 2013-05-19 16:28 - 00000000 ____D C:\Users\Admin\Desktop\MUSIK RUNTERL 2013-07-05 22:19 - 2013-07-01 23:41 - 00000000 ____D C:\Users\Admin\Desktop\wallpaper 2013-07-05 22:19 - 2013-06-24 22:16 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner (2) 2013-07-04 13:02 - 2013-06-06 19:19 - 00000000 ____D C:\Users\Admin\Desktop\top eleven 2013-06-30 22:11 - 2013-03-29 19:43 - 00013068 ____A C:\Windows\PFRO.log 2013-06-30 02:31 - 2011-03-15 18:54 - 00000000 ____D C:\Users\Admin\AppData\Local\CrashDumps 2013-06-29 18:48 - 2011-05-21 23:09 - 00000000 ____D C:\Users\Admin\Desktop\suna 2013-06-28 11:39 - 2011-08-03 17:36 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Skype 2013-06-27 15:38 - 2013-06-27 15:38 - 1032624906 ____A C:\Windows\MEMORY.DMP 2013-06-27 15:38 - 2013-06-27 15:38 - 00307824 ____A C:\Windows\Minidump\062713-32354-01.dmp 2013-06-24 14:59 - 2011-06-07 21:27 - 00000000 ____D C:\Users\Admin\AppData\Roaming\DivX 2013-06-23 18:40 - 2013-06-23 18:40 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2013-06-23 18:40 - 2013-06-23 18:38 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2013-06-23 18:40 - 2013-04-23 23:30 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2013-06-23 18:40 - 2012-09-11 17:57 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll 2013-06-23 18:40 - 2011-02-15 18:42 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll 2013-06-21 19:11 - 2013-02-14 21:07 - 00002189 ____A C:\Users\Public\Desktop\Google Chrome.lnk 2013-06-20 23:23 - 2011-02-10 09:24 - 00000000 ____D C:\Users\Admin\AppData\Local\VirtualStore 2013-06-20 22:41 - 2013-06-20 22:41 - 00000000 ____D C:\Users\Admin\AppData\Local\Auer - Die Bausoftware GmbH 2013-06-20 22:41 - 2013-05-11 16:06 - 00000000 ____D C:\BS4 2013-06-16 20:28 - 2009-07-14 06:45 - 00549408 ____A C:\Windows\System32\FNTCACHE.DAT 2013-06-16 18:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-06-16 15:01 - 2011-02-15 19:56 - 00151992 ____A C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT 2013-06-16 14:03 - 2011-06-07 21:25 - 00000000 ____D C:\Program Files (x86)\DivX 2013-06-16 14:03 - 2011-06-07 21:23 - 00000000 ____D C:\ProgramData\DivX 2013-06-15 11:04 - 2009-07-14 07:08 - 00032632 ____A C:\Windows\Tasks\SCHEDLGU.TXT 2013-06-12 15:26 - 2011-02-15 21:10 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe 2013-06-12 14:51 - 2012-04-08 16:09 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-06-12 14:51 - 2012-01-09 20:13 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-06-12 13:24 - 2012-11-04 21:05 - 00000000 ___RD C:\Program Files (x86)\Skype 2013-06-12 13:24 - 2011-08-03 17:36 - 00000000 ____D C:\ProgramData\Skype 2013-06-09 00:11 - 2013-06-09 00:08 - 00000000 ____D C:\Users\Admin\Desktop\Neuer Ordner 2013-06-08 16:08 - 2013-06-15 11:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll 2013-06-08 16:07 - 2013-06-15 11:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll 2013-06-08 16:06 - 2013-06-15 11:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll 2013-06-08 14:28 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb 2013-06-08 13:42 - 2013-06-15 11:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-06-08 13:40 - 2013-06-15 11:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-06-08 13:36 - 2013-06-08 13:36 - 00000000 ___AH C:\Windows\System32\Drivers\Msft_Kernel_ssadadb_01005.Wdf 2013-06-08 13:13 - 2013-06-15 11:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-06-08 12:36 - 2013-06-07 23:28 - 00000000 ____D C:\Users\Admin\AppData\Local\WebPlayer ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-07-06 16:28 ==================== End Of Log ============================ --- --- --- Hier bitte,sry hat bisschen gedauert...hatte nicht viel Zeit. |
08.07.2013, 11:22 | #11 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
08.07.2013, 11:38 | #12 |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Okey hab ich gemacht. Danke für alles,schaut jtz besser aus. Falls wieder etwas auftritt,werde ich mich melden. danke mfg Rewi |
08.07.2013, 17:43 | #13 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.07.2013, 18:31 | #14 | |
| c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe sry hab das ende nicht gesehn. Zitat:
|
12.07.2013, 20:48 | #15 |
/// the machine /// TB-Ausbilder | c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu c:\program files (x86)\softwareupdater\softwareupdater.bootstrapper.exe |
bereinigt, conduit, dealply, funktioniert, gepostet, hdvidcodec.com, ilivid player, kaspersky, maleware, manual, movie2kdownloader.com, packageaware, problem, program, programme, putlockerdownloader, rojaner gefunden, schonmal, searchqutoolbar, simplytech, softwareupdater.bootstrapper.exe, trojaner, windows ilivid toolbar, yontoo, öffnen |