|
Plagegeister aller Art und deren Bekämpfung: SponsorshipplagegeistWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
03.09.2013, 10:02 | #1 |
| Sponsorshipplagegeist Einen wunderschönen guten Tag! Seit einiger Zeit ärgere ich mich mit einem aufpoppendem Sponsorship-Tab (der Browser, den ich benutze ist Mozilla, meine Windowsversion 7) rum und schaffe es immer nur ihn temporär los zu werden. Dieses Thema gibt es bereits als Forumseintrag, jedoch eröffne ich einen neuen Thread, da dort hierzu ausdrücklich aufgefordert wird, anstatt die Anweisungen für einen anderen Nutzer auf den eigenen Fall zu übertragen.....Ich hoffe, dass mir jemand helfen kann diesen Plagegeist endlich los zu werden, damit ich meinen Rechner wieder ohne Sicherheitsrisiko verwenden kann. Mit besten Grüßen |
03.09.2013, 10:54 | #2 |
/// the machine /// TB-Ausbilder | Sponsorshipplagegeist hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
03.09.2013, 11:56 | #3 |
| Sponsorshipplagegeist vielen dank für deine sehr flotte reaktion und die hilfestellung!
__________________hier der/die/das FRST.txt: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 01 Ran by Regina (administrator) on FRANZISKARRR on 03-09-2013 12:08:55 Running from C:\Users\Regina\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (Microsoft Corporation) C:\Windows\system32\UI0Detect.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2010-09-29] (Dell) HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2010-05-21] (Softthinks) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3883840 2009-07-26] (Microsoft Corporation) HKCU\...\Run: [AutoStartNPSAgent] - C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [96160 2011-05-20] (Samsung Electronics Co., Ltd.) MountPoints2: {dc10aa27-e0ef-11e0-aa6e-b8ac6fb4e26e} - "I:\WD SmartWare.exe" autoplay=true HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807680 2010-02-09] () HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-10-15] () HKLM-x32\...\Run: [DellSupportCenter] - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-26] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH) HKLM-x32\...\Run: [NPSStartup] - [x] HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=7250944452866D3C&affID=119357&tsp=4967 HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 SearchScopes: HKLM - DefaultScope {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - DefaultScope {737C9E2A-1879-4053-ACC6-938343206C71} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7250944452866D3C&affID=119357&tsp=4967 SearchScopes: HKCU - {737C9E2A-1879-4053-ACC6-938343206C71} URL = SearchScopes: HKCU - {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = SearchScopes: HKCU - {D3645F6C-2C83-4F58-9625-EA0AC50119AF} URL = hxxp://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000 BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default FF user.js: detected! => C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\searchplugins\babylon.xml FF SearchPlugin: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\searchplugins\znout-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-26] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-26] (Avira Operations GmbH & Co. KG) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-31] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-31] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-31] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2012-07-18] (Mobile Connector) R3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 11:42 - 2013-09-03 12:03 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:09 - 2013-09-02 17:29 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-14 15:12 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 15:12 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 15:12 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 15:12 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 15:12 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 15:12 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 08:44 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 08:44 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 08:44 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 08:44 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 08:44 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 08:44 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 08:44 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 08:44 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 08:44 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-07 13:20 - 2013-09-03 10:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-08-07 13:20 - 2013-09-03 10:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-08-07 12:20 - 2013-09-03 10:20 - 00000290 _____ C:\Windows\Tasks\DSite.job 2013-08-07 12:20 - 2013-08-08 03:09 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-08-07 12:20 - 2013-08-07 12:20 - 00003240 _____ C:\Windows\System32\Tasks\DSite 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Users\Regina\AppData\Roaming\DSite 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Babylon 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\ProgramData\Babylon 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter ==================== One Month Modified Files and Folders ======= 2013-09-03 12:08 - 2013-09-03 12:08 - 01950474 _____ (Farbar) C:\Users\Regina\Downloads\FRST64.exe 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 12:08 - 2011-10-16 16:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-03 12:07 - 2012-04-13 04:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-03 12:03 - 2013-09-03 11:42 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-03 11:17 - 2009-07-14 07:10 - 01885951 _____ C:\Windows\WindowsUpdate.log 2013-09-03 10:30 - 2010-09-02 14:07 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-09-03 10:20 - 2013-08-07 13:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-09-03 10:20 - 2013-08-07 13:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-09-03 10:20 - 2013-08-07 12:20 - 00000290 _____ C:\Windows\Tasks\DSite.job 2013-09-03 09:38 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-03 09:38 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-03 09:31 - 2012-06-02 12:03 - 00000000 ____D C:\Users\Regina\Tracing 2013-09-03 09:31 - 2010-09-07 21:48 - 00000000 ____D C:\Users\Regina\AppData\Local\SoftThinks 2013-09-03 09:30 - 2011-10-16 16:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-03 09:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-03 09:30 - 2009-07-14 06:51 - 00138505 _____ C:\Windows\setupact.log 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:29 - 2013-09-02 17:09 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-21 20:07 - 2012-04-13 04:04 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 20:07 - 2012-04-13 04:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 20:07 - 2011-05-31 08:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-21 19:33 - 2009-07-14 19:58 - 00654594 _____ C:\Windows\system32\perfh007.dat 2013-08-21 19:33 - 2009-07-14 19:58 - 00130208 _____ C:\Windows\system32\perfc007.dat 2013-08-21 19:33 - 2009-07-14 07:13 - 01500254 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-19 14:01 - 2010-09-02 14:19 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup 2013-08-19 11:47 - 2012-05-06 02:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-15 15:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-14 23:56 - 2010-09-02 14:04 - 00039356 _____ C:\Windows\PFRO.log 2013-08-14 15:08 - 2013-07-13 10:26 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 15:07 - 2010-09-15 14:29 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-14 11:12 - 2010-09-08 09:21 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-09 11:29 - 2011-04-16 16:59 - 00000000 ____D C:\Users\Regina\AppData\Roaming\vlc 2013-08-09 09:56 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-09 00:28 - 2012-05-17 19:49 - 00000000 ____D C:\Users\Regina\AppData\Roaming\dvdcss 2013-08-08 03:09 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Optimizer Pro 2013-08-07 12:20 - 2013-08-07 12:20 - 00003240 _____ C:\Windows\System32\Tasks\DSite 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Users\Regina\AppData\Roaming\DSite 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Babylon 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\ProgramData\Babylon 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter 2013-08-05 11:16 - 2010-09-14 12:14 - 00000000 ____D C:\Users\Regina\AppData\Local\Adobe 2013-08-04 23:08 - 2011-10-16 16:28 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-04 19:12 - 2012-10-26 21:01 - 00000000 ____D C:\Users\Regina\Desktop\Reza_ist_der_allerbeste_der_Welt Files to move or delete: ==================== C:\Users\Regina\AppData\Local\Temp\APNStub.exe C:\Users\Regina\AppData\Local\Temp\AskSLib.dll C:\Users\Regina\AppData\Local\Temp\InstallerMessageBox.exe C:\Users\Regina\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\Lifecam3.20.240.0.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxy.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll C:\Users\Regina\AppData\Local\Temp\SkypeSetup.exe C:\Users\Regina\AppData\Local\Temp\uninst1.exe C:\Users\Regina\AppData\Local\Temp\Uninstaller.exe C:\Users\Regina\AppData\Local\Temp\UninstallerGer.dll C:\Users\Regina\AppData\Local\Temp\UninstallerIta.dll C:\Users\Regina\AppData\Local\Temp\vlc-2.0.4-win32.exe C:\Users\Regina\AppData\Local\Temp\WtgDriverInstallX.dll C:\Users\Regina\AppData\Local\Temp\~nsu.tmp\Au_.exe C:\Users\Regina\AppData\Local\Temp\{E72A8C10-EE49-45F7-B698-6D5D6AE4C1EE}\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\{90089038-34F2-4559-916E-67D313D74314}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\{0A3D96D5-E1E1-476D-98F6-42674858D10C}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\TeamViewer\Version6\TeamViewer_.exe C:\Users\Regina\AppData\Local\Temp\OCS\ICSharpCode.SharpZipLib.dll C:\Users\Regina\AppData\Local\Temp\OCS\ocs_v7a.exe C:\Users\Regina\AppData\Local\Temp\OCS\Downloads\705f49176579a643660bff5ff6ae3956\02aa5d1035be2d3a0d4a703226305db0\7z920-uni.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setupstb.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\alignmentdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\auchecker.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\backcutterdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal2.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal264.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cinvpu.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\denoiser.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\dieffect.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\downsampler.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\facedetectordll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\icepick.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcdecoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcfilter.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifecam.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2ps.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeexp.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifetray.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.application.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.camera.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.controllers.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.framework.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.fxmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interfaces.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interop.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.core.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.pubmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.streamer.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.views.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.webcam.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mmins.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mminsdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams32.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams64.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\msrcfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\posetrackerdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\requester.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\transcoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\verend.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\viperrt.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\visualfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\vpugraph.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_alien.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeeyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largemouth.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largenose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smalleyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smallnose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_squarehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_tallhead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_thinface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_pinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punchandpinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twins.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twirl.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\05backgroundblur_medium.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_afro.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_clown.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cowboyhat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_dog.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_expletive.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_glitterstars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_lightbulb.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_marie.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_mask.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monstergreen.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monsterorange.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_pinkwig.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_questions.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_rabbit.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_stars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_sunglasses.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_tiara.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_edges.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_gray.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_negative.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_poster.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_sepia.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_watercolor.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_woodblock.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\cvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vx6ktui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\cvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\cvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.application.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.fxmgr.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.views.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\iceres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\setupres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dxsetup.exe C:\Users\Regina\AppData\Local\Temp\is357113909\12323842_Setup.EXE C:\Users\Regina\AppData\Local\Temp\is357113909\12324091_Setup.EXE C:\Users\Regina\AppData\Local\Temp\is357113909\DeltaTB.exe C:\Users\Regina\AppData\Local\Temp\is357113909\ImageEditor.exe C:\Users\Regina\AppData\Local\Temp\is357113909\OptimizerPro.exe C:\Users\Regina\AppData\Local\Temp\is357113909\Setup-D502DD2B71B5.exe C:\Users\Regina\AppData\Local\Temp\is357113909\wajam_validate.exe C:\Users\Regina\AppData\Local\Temp\FBEB.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\F8B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\EEE1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CD6C.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CCB1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C745.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C1F8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\BE50.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B912.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B683.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B338.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B0F7.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AE97.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AC65.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AAFE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\A0E1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\97EC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\958B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\8DBE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\84E8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BabMaint.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BExternal.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BUSolForMontiera.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BUSolution.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\ccp.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\ChromeToolbarSetup.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\CrxInstaller.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\GUninstaller.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\IEHelper.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\MntrDLLInstall.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\MyDeltaTB.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\NTRedirect.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\Setup.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\sqlite3.dll C:\Users\Regina\AppData\Local\Temp\6825.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\22CC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\1DDD.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 21:19 ==================== End Of Log ============================ und hier addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2013 01 Ran by Regina at 2013-09-03 12:09:32 Running from C:\Users\Regina\Downloads Boot Mode: Normal ========================================================== ==================== Installed Programs ======================= 7-Zip 9.20 (x32) Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94) Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94) Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03) Amazon MP3-Downloader 1.0.17 (x32 Version: 1.0.17) Avira Free Antivirus (x32 Version: 13.0.0.3885) Belkin Connect Wireless USB Adapter (x32 Version: 1.0.0.3) Dell DataSafe Local Backup - Support Software (x32) Dell DataSafe Local Backup (x32 Version: 9.4.40) Dell DataSafe Online (x32 Version: 1.2.0011) Dell Dock (Version: 2.0) Dell Dock (x32) Dell Edoc Viewer (Version: 1.0.0) Dell Getting Started Guide (x32 Version: 1.00.0000) Dell Support Center (Support Software) (x32 Version: 2.5.09100) Free YouTube to MP3 Converter version 3.10.15.1228 (x32) GIMP 2.6.10 (x32 Version: 2.6.10) Google Earth Plug-in (x32 Version: 7.1.1.1888) Google Update Helper (x32 Version: 1.3.21.153) Java 7 Update 25 (x32 Version: 7.0.250) Java Auto Updater (x32 Version: 2.1.9.5) Junk Mail filter update (x32 Version: 14.0.8089.726) Microsoft Application Error Reporting (Version: 12.0.6015.5000) Microsoft Choice Guard (x32 Version: 2.0.48.0) Microsoft Corporation (Version: 9.1.0.0) Microsoft Corporation (x32 Version: 9.1.0.0) Microsoft LifeCam (Version: 3.22.270.0) Microsoft Office 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000) Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000) Microsoft Search Enhancement Pack (x32 Version: 1.2.123.0) Microsoft Silverlight (x32 Version: 3.0.40624.0) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000) Microsoft Sync Framework Runtime Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Sync Framework Services Native v1.0 (x86) (x32 Version: 1.0.1215.0) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.58299) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219) Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1) Mozilla Maintenance Service (x32 Version: 23.0.1) MSVCRT (x32 Version: 14.0.1468.721) MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0) NVIDIA Drivers (Version: 1.10.56.34) OpenOffice.org 3.2 (x32 Version: 3.2.9502) PDF24 Creator 5.2.0 (x32) rosoft .NET Framework 4 Client Profile (Version: 4.0.30319) Roxio Burn (x32 Version: 1.01) Samsung New PC Studio (x32 Version: 1.00.0000) SAMSUNG USB Driver for Mobile Phones (Version: 1.3.2250.0) Skype Click to Call (x32 Version: 5.9.9216) Skype™ 6.3 (x32 Version: 6.3.105) SleepTimer Ultimate 1.11 (x32) Speedport W 100 Stick (x32 Version: 1.00.0000) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1) VLC media player 2.0.1 (x32 Version: 2.0.1) Windows Live Anmelde-Assistent (x32 Version: 5.000.818.5) Windows Live Call (x32 Version: 14.0.8064.0206) Windows Live Communications Platform (x32 Version: 14.0.8064.206) Windows Live Essentials (x32 Version: 14.0.8089.0726) Windows Live Essentials (x32 Version: 14.0.8089.726) Windows Live Fotogalerie (x32 Version: 14.0.8081.709) Windows Live Mail (x32 Version: 14.0.8089.0726) Windows Live Messenger (x32 Version: 14.0.8089.0726) Windows Live Movie Maker (x32 Version: 14.0.8091.0730) Windows Live Sync (x32 Version: 14.0.8089.726) Windows Live Toolbar (x32 Version: 14.0.8064.206) Windows Live Writer (x32 Version: 14.0.8089.0726) Windows Live-Uploadtool (x32 Version: 14.0.8014.1029) XMedia Recode Version 3.1.4.8 (x32 Version: 3.1.4.8) ==================== Restore Points ========================= 13-08-2013 09:36:22 Windows Update 14-08-2013 13:06:35 Windows Update 20-08-2013 12:22:13 Windows Update 27-08-2013 10:04:03 Windows Update 03-09-2013 08:00:07 Windows Update 03-09-2013 08:28:22 Removed Java(TM) 6 Update 20 (64-bit) ==================== Hosts content: ========================== 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {044A6734-E90E-4F8F-B357-B2DC8AB3B5EC} - System32\Tasks\Microsoft\Windows\Time Synchronization\SynchronizeTime => start w32time task_started Task: {581C0DED-F18F-40D5-8A2B-6A439DECE04B} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => start osppsvc Task: {5927D999-B0C0-4EF4-9D40-FF34764A9D18} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation) Task: {756FF141-AF74-450E-B36B-D17920C97D6A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16] (Google Inc.) Task: {9434AA3F-9410-4573-BA6E-BD103C604E57} - System32\Tasks\DSite => C:\Users\Regina\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE No File Task: {9B1608E7-59C4-496C-876F-C2FDA647F0FB} - System32\Tasks\{1C73E53A-8CA6-4FFE-AB71-CFCC98C6ECB0} => C:\Program Files (x86)\Internet Explorer\iexplore.exe [2013-07-26] (Microsoft Corporation) Task: {B49A0455-F4D4-4F92-8A00-566464D3A11E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-16] (Google Inc.) Task: {D330C6F3-A44E-4A06-A7FB-D6FFB4ACF0BE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-21] (Adobe Systems Incorporated) Task: {E4347062-A5BE-4FA1-8C2C-98BF0C301F84} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2087769268-375158142-2670045850-1000 Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DSite.job => C:\Users\Regina\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2010-09-02 23:47 - 2010-01-14 02:37 - 04599912 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2009-07-14 02:22 - 2009-07-14 03:38 - 00081408 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\System32\l3codeca.acm 2011-06-02 01:01 - 2010-11-20 15:26 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\fdproxy.dll 2011-06-02 01:01 - 2010-11-20 15:27 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\SPPC.DLL 2013-08-14 15:12 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll 2013-02-27 14:47 - 2013-01-13 21:51 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\D3D10Warp.dll 2010-09-02 23:47 - 2010-01-14 02:37 - 09441384 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2013-07-09 19:39 - 2013-04-24 00:56 - 09991832 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorwks.dll 2013-07-10 16:51 - 2013-07-10 16:51 - 15577088 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\88744044294787b99dd4a8704ab75a79\mscorlib.ni.dll 2009-07-13 22:37 - 2009-06-10 22:39 - 00085312 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsec.dll 2013-08-15 00:02 - 2013-08-15 00:02 - 10655744 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System\af0a0b96a02f9925eb84392ee65a5cfa\System.ni.dll 2013-08-15 01:09 - 2013-08-15 01:09 - 00408064 _____ (Stardock) C:\Windows\assembly\NativeImages_v2.0.50727_64\MyDock.Util\158b7453a5630b9f335841c1aabf3b45\MyDock.Util.ni.dll 2013-08-15 01:09 - 2013-08-15 01:09 - 03434496 _____ (Stardock Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\DellDock\ab10aec70431346424611377248bc6f0\DellDock.ni.exe 2013-08-15 01:09 - 2013-08-15 01:09 - 00472576 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\eb84d003744ea2a3a4e0c0babb5d5874\VistaBridgeLibrary.ni.dll 2013-08-15 01:09 - 2013-08-15 01:09 - 22171136 _____ (DevComponents.com) C:\Windows\assembly\NativeImages_v2.0.50727_64\MenuSkinning\38463da4ed42f197f27f8ea35bfdfe48\MenuSkinning.ni.dll 2013-08-15 00:03 - 2013-08-15 00:03 - 02320384 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\868d117286ad259249f31d3fe813d39a\System.Drawing.ni.dll 2013-08-15 00:03 - 2013-08-15 00:03 - 17383424 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\95674cb72317e3a5380ea450b913786f\System.Windows.Forms.ni.dll 2011-06-06 20:14 - 2010-11-13 02:08 - 00315392 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll 2013-08-15 00:02 - 2013-08-15 00:02 - 01320448 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\1031b311ee568364d4ca1c4db634eaf0\System.Configuration.ni.dll 2013-08-15 00:02 - 2013-08-15 00:02 - 06964736 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\3975acf49313ceea1280da91f0383480\System.Xml.ni.dll 2013-08-15 01:09 - 2013-08-15 01:09 - 01472000 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\7e1a0f53a8580321c5902b6867c3f7da\System.Management.ni.dll 2011-06-02 01:02 - 2010-11-05 03:57 - 00042328 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\wminet_utils.dll 2013-01-09 23:00 - 2012-10-05 12:52 - 01574496 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorjit.dll 2009-12-16 01:03 - 2009-12-16 01:03 - 00483696 _____ (Stardock) C:\Program Files\Dell\DellDock\MyDockLib.dll 2013-07-10 16:52 - 2013-07-10 16:52 - 00078848 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_64\Accessibility\ac8fcb25480f6a106783ce1c3fe92e3e\Accessibility.ni.dll 2009-07-30 18:25 - 2009-07-30 18:25 - 00382464 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BROHLA4B.DLL 2009-07-30 18:25 - 2009-07-30 18:25 - 00995328 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BRUHLA4B.DLL 2009-07-14 02:39 - 2009-07-14 03:41 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\SPOOLSS.DLL 2009-07-30 18:25 - 2009-07-30 18:25 - 00068096 _____ (Brother Industries Ltd.) C:\Windows\system32\spool\DRIVERS\x64\3\BRLHLA4B.DLL 2010-09-02 14:19 - 2010-05-21 11:59 - 00124224 ____N (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\STString.dll 2010-09-02 14:19 - 2010-05-21 11:59 - 00124224 ____N (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\STXml.dll 2010-09-02 14:19 - 2010-05-21 11:59 - 00083264 ____N (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\STStringArray.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00062784 ____N (SOFTTHINKS) C:\Program Files (x86)\Dell DataSafe Local Backup\CSTError.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00128320 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STLog.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 01123648 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\LibXml2.dll 2010-09-02 14:19 - 2010-05-21 11:59 - 00079168 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\zlib1.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00234816 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STFiles.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00075072 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STRegistry.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00111936 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STPE.dll 2010-09-02 14:19 - 2010-05-21 11:58 - 00121152 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\STNLS.dll 2010-09-02 14:19 - 2010-05-21 11:59 - 00116032 ____N (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\STSystems.dll 2012-11-28 22:59 - 2012-10-16 09:39 - 00561664 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcLayers.DLL 2010-09-02 14:19 - 2010-05-21 12:00 - 00333120 ____N (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STSCheduler.dll 2013-02-21 16:33 - 2013-02-21 16:33 - 00065536 _____ (Microsoft Corporation) C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_none_03ca5532205cb096\MFC80DEU.DLL 2007-05-31 17:21 - 2007-05-31 17:21 - 00105352 _____ (Microsoft Corporation) C:\Program Files (x86)\Samsung\Samsung New PC Studio\rapi.dll 2007-05-31 17:21 - 2007-05-31 17:21 - 00075144 _____ (Microsoft Corporation) C:\Program Files (x86)\Samsung\Samsung New PC Studio\CEUTIL.dll 2010-03-24 21:55 - 2010-09-08 21:01 - 01739264 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll 2010-03-24 21:51 - 2010-09-08 21:01 - 00086016 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll 2010-05-04 23:57 - 2010-09-08 21:01 - 00348672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll 2010-03-25 11:02 - 2010-03-25 11:02 - 01010688 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\comphelp4MSC.dll 2010-05-04 16:13 - 2010-09-08 21:01 - 00431616 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll 2010-03-24 21:59 - 2010-09-08 21:01 - 00013312 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll 2010-03-25 09:58 - 2010-09-08 21:01 - 00142848 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll 2010-05-04 15:25 - 2010-09-08 21:01 - 00597504 _____ (STLport Consulting, Inc.) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll 2010-03-25 10:30 - 2010-09-08 21:01 - 00357888 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll 2010-03-24 22:04 - 2010-09-08 21:01 - 00094208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll 2010-04-22 13:50 - 2010-09-08 21:01 - 00025088 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll 2010-04-22 15:31 - 2010-04-22 15:31 - 03163136 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sfxmi.dll 2010-04-14 16:26 - 2010-09-08 21:01 - 00852992 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwemi.dll 2010-03-25 18:28 - 2010-03-25 18:28 - 00352256 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwimi.dll 2010-03-25 12:54 - 2010-09-08 21:01 - 00463872 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\utlmi.dll 2010-04-14 15:07 - 2010-09-08 21:01 - 00493568 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tlmi.dll 2010-03-25 10:21 - 2010-03-25 10:21 - 00588288 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\basegfxmi.dll 2010-05-04 17:29 - 2010-05-04 17:29 - 03104768 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\vclmi.dll 2010-03-25 13:18 - 2010-09-08 21:01 - 00256512 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sotmi.dll 2010-03-25 11:19 - 2010-09-08 21:01 - 00029184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npapermi.dll 2010-03-25 10:02 - 2010-09-08 21:01 - 00066560 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll 2010-05-04 15:42 - 2010-09-08 21:01 - 00951296 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll 2010-05-04 15:42 - 2010-09-08 21:01 - 13914112 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll 2010-03-25 16:06 - 2010-03-25 16:06 - 02038784 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\tkmi.dll 2010-03-25 16:57 - 2010-09-08 21:01 - 00734208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svlmi.dll 2010-05-04 19:08 - 2010-05-04 19:08 - 02912768 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svtmi.dll 2010-03-25 10:12 - 2010-09-08 21:01 - 00092160 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll 2010-05-04 15:36 - 2010-05-04 15:36 - 00970752 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2010-05-20 12:24 - 2010-09-08 21:01 - 01329152 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sbmi.dll 2010-03-25 12:33 - 2010-09-08 21:01 - 00530944 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xcrmi.dll 2010-03-25 11:06 - 2010-03-25 11:06 - 00082432 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\saxmi.dll 2010-04-14 14:46 - 2010-09-08 21:01 - 00051712 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll 2010-05-04 16:34 - 2010-09-08 21:01 - 00453120 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll 2010-03-24 22:06 - 2010-09-08 21:01 - 00093184 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll 2010-03-24 22:01 - 2010-09-08 21:01 - 00055296 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll 2010-03-25 13:05 - 2010-09-08 21:01 - 01421312 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\configmgr2.uno.dll 2010-05-04 16:34 - 2010-09-08 21:01 - 00092672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll 2010-03-25 12:44 - 2010-09-08 21:01 - 00037376 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sysmgr1.uno.dll 2010-03-25 11:06 - 2010-09-08 21:01 - 00156672 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sax.uno.dll 2010-05-04 18:32 - 2010-09-08 21:01 - 00029696 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll 2010-03-25 12:43 - 2010-09-08 21:01 - 00030720 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\behelper.uno.dll 2010-04-22 15:51 - 2010-09-08 21:01 - 00197632 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll 2010-05-04 20:29 - 2010-09-08 21:01 - 01612800 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwkmi.dll 2010-04-22 15:57 - 2010-04-22 15:57 - 00256000 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll 2010-04-23 00:30 - 2010-09-08 21:01 - 00083968 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oooimprovementmi.dll 2010-04-23 01:09 - 2010-09-08 21:01 - 00280576 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll 2010-03-25 11:38 - 2010-09-08 21:01 - 00148992 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\emsermi.dll 2010-03-25 13:53 - 2010-09-08 21:01 - 00115200 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\dnd.dll 2010-03-25 11:28 - 2010-09-08 21:01 - 00281600 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\package2.dll 2010-03-25 16:32 - 2010-09-08 21:01 - 00093696 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fsstorage.uno.dll 2010-04-22 13:57 - 2010-04-22 13:57 - 01299456 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll 2010-05-04 15:42 - 2010-09-08 21:01 - 01071616 _____ (IBM Corporation and others) C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll 2010-04-23 00:32 - 2010-09-08 21:01 - 00168448 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchk.uno.dll 2010-05-04 15:36 - 2010-09-08 21:01 - 00121344 _____ (The cURL library, hxxp://curl.haxx.se/) C:\Program Files (x86)\OpenOffice.org 3\program\LIBCURL.dll 2010-05-04 16:56 - 2010-09-08 21:01 - 00052224 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fileacc.dll 2010-03-25 23:39 - 2010-09-08 21:01 - 00986112 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\lngmi.dll 2010-04-22 15:34 - 2010-04-22 15:34 - 02970624 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xomi.dll 2010-03-25 17:42 - 2010-03-25 17:42 - 00212480 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\uuimi.dll 2010-04-23 00:07 - 2010-09-08 21:01 - 00187904 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\filterconfig1.dll 2010-04-23 04:52 - 2010-09-08 21:01 - 07599104 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swmi.dll 2010-05-20 12:55 - 2010-05-20 12:55 - 06604288 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxcoremi.dll 2010-03-25 23:17 - 2010-09-08 21:01 - 00200192 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\avmediami.dll 2010-03-25 17:42 - 2010-09-08 21:01 - 00293376 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\gomi.dll 2010-03-25 23:40 - 2010-09-08 21:01 - 00845824 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\drawinglayermi.dll 2010-03-25 18:09 - 2010-09-08 21:01 - 00498688 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\canvastoolsmi.dll 2010-03-24 22:06 - 2010-09-08 21:01 - 00129024 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\aggmi.dll 2010-03-25 20:46 - 2010-09-08 21:01 - 00279040 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\cppcanvasmi.dll 2010-05-20 12:58 - 2010-09-08 21:01 - 02728448 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svxmi.dll 2010-03-25 11:58 - 2010-03-25 11:58 - 00664064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_euro.dll 2010-03-25 11:57 - 2010-09-08 21:01 - 00103936 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\localedata_en.dll 2010-05-04 17:04 - 2010-09-08 21:01 - 00106496 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\sysdtrans.dll 2010-04-23 00:28 - 2010-09-08 21:01 - 00084480 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ldapbe2.uno.dll 2010-03-25 11:27 - 2010-03-25 11:27 - 00345600 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\xstor.dll 2010-05-04 16:27 - 2010-09-08 21:01 - 00099328 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reflection.uno.dll 2010-04-23 00:39 - 2010-09-08 21:01 - 00428032 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmi.uno.dll 2010-04-23 00:23 - 2010-09-08 21:01 - 00105472 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmiscmi.dll 2010-03-24 23:27 - 2010-03-24 23:27 - 00832000 _____ (Oracle) C:\Program Files (x86)\OpenOffice.org 3\program\libdb47.dll 2010-03-25 12:29 - 2010-09-08 21:01 - 00153088 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\helplinkermi.dll 2010-03-24 21:51 - 2010-09-08 21:01 - 00166400 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxslt.dll 2010-04-22 15:46 - 2010-09-08 21:01 - 00024064 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpexpand1.uno.dll 2010-05-04 16:29 - 2010-09-08 21:01 - 00098816 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\introspection.uno.dll 2010-03-25 13:50 - 2010-09-08 21:01 - 00050688 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ftransl.dll 2010-03-25 13:49 - 2010-09-08 21:01 - 00033280 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\mcnttype.dll 2010-03-25 13:33 - 2010-09-08 21:01 - 00293376 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\unoxmlmi.dll 2010-03-25 17:48 - 2010-03-25 17:48 - 00256512 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucpchelp1.dll 2010-03-25 17:02 - 2010-09-08 21:01 - 00086528 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\svtmisc.uno.dll 2010-03-25 23:45 - 2010-09-08 21:01 - 00161792 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\spellmi.dll 2010-03-25 23:45 - 2010-09-08 21:01 - 00057344 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\hyphenmi.dll 2010-03-25 23:45 - 2010-09-08 21:01 - 00056320 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\lnthmi.dll 2010-04-23 00:27 - 2010-09-08 21:01 - 00077312 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updatefeed.uno.dll 2010-03-24 21:54 - 2010-09-08 21:01 - 00008192 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\onlinecheck.DLL 2010-04-23 00:32 - 2010-09-08 21:01 - 00048128 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\updchkmi.dll 2010-04-23 00:26 - 2010-09-08 21:01 - 00063488 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\resmi.dll 2010-03-25 13:06 - 2010-09-08 21:01 - 00040960 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\dtrans.dll 2010-03-25 23:44 - 2010-09-08 21:01 - 00036352 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\guesslangmi.dll 2010-05-04 15:43 - 2010-09-08 21:01 - 00014336 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\libtextcat.dll 2010-04-23 04:53 - 2010-09-08 21:01 - 01208832 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\swuimi.dll 2010-05-20 13:01 - 2010-05-20 13:01 - 02301952 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\cuimi.dll 2010-05-04 20:22 - 2010-05-04 20:22 - 00330240 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fwlmi.dll 2010-03-25 17:15 - 2010-09-08 21:01 - 00015872 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fpicker.uno.dll 2010-04-14 17:51 - 2010-09-08 21:01 - 00179200 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\fps.dll 2010-04-22 15:49 - 2010-09-08 21:01 - 00146432 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucppkg1.dll 2010-04-22 15:55 - 2010-09-08 21:01 - 00212992 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\ucptdoc1.uno.dll 2010-05-04 16:21 - 2010-09-08 21:01 - 00027648 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\URE\bin\proxyfac.uno.dll 2010-03-25 12:33 - 2010-09-08 21:01 - 00151040 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\unordfmi.dll 2010-03-24 23:54 - 2010-09-08 21:01 - 00099840 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\librdf.dll 2010-05-04 15:40 - 2010-09-08 21:01 - 01013760 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Program Files (x86)\OpenOffice.org 3\program\LIBEAY32.dll 2010-05-04 15:51 - 2010-09-08 21:01 - 00286208 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\raptor.dll 2010-05-04 15:57 - 2010-09-08 21:01 - 00155648 _____ (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\rasqal.dll 2013-07-09 19:39 - 2013-04-24 00:57 - 05932696 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorwks.dll 2013-07-10 16:49 - 2013-07-10 16:49 - 11499520 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll 2009-07-13 22:46 - 2009-06-10 23:23 - 00074064 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsec.dll 2013-01-09 23:00 - 2012-10-05 12:53 - 00364656 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorjit.dll 2013-08-15 00:00 - 2013-08-15 00:00 - 07989760 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00275776 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll 2013-08-15 00:01 - 2013-08-15 00:01 - 01593344 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll 2013-08-15 00:01 - 2013-08-15 00:01 - 12436480 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00058688 _____ () C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00095552 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00046400 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00365888 _____ () C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll 2013-08-15 00:01 - 2013-08-15 00:01 - 01840640 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\d23f99753f2703d5b8f68e558ca3e85c\System.Web.Services.ni.dll 2013-08-15 00:00 - 2013-08-15 00:00 - 05464064 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll 2013-08-15 00:00 - 2013-08-15 00:00 - 00978432 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00152896 _____ () C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00338240 _____ (TODO: <Company name>) C:\Program Files (x86)\Dell DataSafe Online\OlbEng.dll 2010-04-06 15:12 - 2010-04-06 15:12 - 01441792 _____ (SwapDrive, Inc.) C:\Program Files (x86)\Dell DataSafe Online\BuEng.dll 2011-06-02 01:01 - 2010-11-05 03:58 - 00212992 _____ (Microsoft Corporation) C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll 2009-07-14 01:50 - 2009-07-14 03:32 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\security.dll 2013-08-15 01:21 - 2013-08-15 01:21 - 01051136 _____ (Microsoft Corporation) C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\9a1bc983c28c695729b3e46acdc6933e\System.Management.ni.dll 2011-06-02 01:02 - 2010-11-05 03:58 - 00032088 _____ (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v2.0.50727\wminet_utils.dll 2010-02-09 13:34 - 2010-02-09 13:34 - 00017728 _____ () C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll 2009-06-23 12:46 - 2009-06-23 12:46 - 04233712 _____ (Sonic Solutions) C:\Program Files (x86)\Roxio\Roxio Burn\AS_Storage_w32.dll 2009-03-24 01:01 - 2009-03-24 01:01 - 00100848 _____ (Sonic Solutions) C:\Program Files (x86)\Common Files\PX Storage Engine\vxblock.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00073728 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtmessage.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00881960 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsched.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00382248 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtevent.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00402728 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtfod.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 01069056 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\LIBEAY32.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00881960 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsync.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00386344 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtui.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00040848 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\SupportSoft.Agent.Sprocket.SupportMessage.dll 2009-05-21 08:59 - 2009-05-21 08:59 - 00024464 _____ (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\SupportSoft.Agent.Sprocket.dll 2009-07-14 01:29 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qmgrprxy.dll 2013-01-13 19:46 - 2012-12-12 11:28 - 00057528 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Settings.dll 2013-01-13 19:46 - 2012-12-12 11:28 - 00394936 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\NotifyIcon.dll 2013-01-13 19:46 - 2012-12-12 11:28 - 00047288 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\Language.dll 2013-01-13 19:46 - 2012-12-12 11:28 - 00382648 _____ (Geek Software GmbH) C:\Program Files (x86)\PDF24\About.dll 2013-08-17 13:02 - 2013-08-17 13:02 - 03551640 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-08-05 11:11 - 2013-08-05 11:11 - 16166280 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ==================== Alternate Data Streams (whitelisted) ========== AlternateDataStreams: C:\Users\Regina\Thumbs.db:encryptable AlternateDataStreams: C:\Users\Regina\Desktop\MVI_0774.AVI:TOC.WMV ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (08/31/2013 02:57:03 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/31/2013 02:56:26 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (08/30/2013 05:07:06 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/30/2013 05:06:37 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (08/29/2013 01:41:12 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/29/2013 01:40:41 PM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (08/28/2013 10:06:23 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/28/2013 10:05:52 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. Error: (08/27/2013 08:30:26 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3. Ungültige XML-Syntax. Error: (08/27/2013 08:29:57 AM) (Source: SideBySide) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1". Fehler in Manifest- oder Richtliniendatei "WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2" in Zeile WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3. Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein. Verweis: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1". Definition: WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1". Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose. System errors: ============= Error: (09/03/2013 09:38:58 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:36:22 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:36:22 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:36:22 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:36:22 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:30:15 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/03/2013 09:30:15 AM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/02/2013 06:04:38 PM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/02/2013 06:03:55 PM) (Source: atapi) (User: ) Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort0 gefunden. Error: (09/01/2013 06:10:32 PM) (Source: DCOM) (User: ) Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69} Microsoft Office Sessions: ========================= Error: (08/31/2013 02:57:03 PM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (08/31/2013 02:56:26 PM) (Source: SideBySide)(User: ) Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8 Error: (08/30/2013 05:07:06 PM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (08/30/2013 05:06:37 PM) (Source: SideBySide)(User: ) Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8 Error: (08/29/2013 01:41:12 PM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (08/29/2013 01:40:41 PM) (Source: SideBySide)(User: ) Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8 Error: (08/28/2013 10:06:23 AM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (08/28/2013 10:05:52 AM) (Source: SideBySide)(User: ) Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8 Error: (08/27/2013 08:30:26 AM) (Source: SideBySide)(User: ) Description: c:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dllc:\program files (x86)\microsoft\search enhancement pack\search helper\searchhelper.dll2 Error: (08/27/2013 08:29:57 AM) (Source: SideBySide)(User: ) Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"c:\program files (x86)\windows live\photo gallery\MovieMaker.Exec:\program files (x86)\windows live\photo gallery\WLMFDS.DLL8 ==================== Memory info =========================== Percentage of memory in use: 37% Total physical RAM: 4094.98 MB Available physical RAM: 2572.72 MB Total Pagefile: 8188.14 MB Available Pagefile: 6453.18 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:454.24 GB) (Free:267.57 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 18000000) Partition 1: (Not Active) - (Size=78 MB) - (Type=DE) Partition 2: (Active) - (Size=11 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=454 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
03.09.2013, 12:19 | #4 |
/// the machine /// TB-Ausbilder | Sponsorshipplagegeist Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
03.09.2013, 14:15 | #5 |
| Sponsorshipplagegeist da ich den rechner nue starten muss, hier erstmal zu punkt 1: Code:
ATTFilter Malwarebytes Anti-Malware (Test) 1.75.0.1300 www.malwarebytes.org Datenbank Version: v2013.09.03.04 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16660 Regina :: FRANZISKARRR [Administrator] Schutz: Aktiviert 03.09.2013 14:30:51 mbam-log-2013-09-03 (14-30-51).txt Art des Suchlaufs: Quick-Scan Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 236882 Laufzeit: 4 Minute(n), 57 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 5 HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\DataMngr (PUP.Optional.DataMngr) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 1 HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateiobjekte der Registrierung: 1 HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.StartPage) -> Bösartig: (hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=7250944452866D3C&affID=119357&tsp=4967) Gut: (hxxp://www.google.com) -> Erfolgreich ersetzt und in Quarantäne gestellt. Infizierte Verzeichnisse: 4 C:\Users\Regina\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\mt_ffx\Delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\mt_ffx\Delta\delta (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\mt_ffx\Delta\delta\1.8.22.0 (PUP.Optional.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Dateien: 13 C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BabMaint.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BUSolution.dll (PUP.Optional.BabSolution.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\ccp.exe (PUP.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\MyDeltaTB.exe (PUP.Delta.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\NTRedirect.dll (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\Setup.exe (PUP.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\12323842_Setup.EXE (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\12324091_Setup.EXE (Adware.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\DeltaTB.exe (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\OptimizerPro.exe (PUP.Optional.OptimizePro.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\Setup-D502DD2B71B5.exe (PUP.Optional.Yontoo) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Local\Temp\is357113909\wajam_validate.exe (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\Users\Regina\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt. (Ende) Code:
ATTFilter # AdwCleaner v3.002 - Bericht erstellt am 03/09/2013 um 14:51:42 # Updated 01/09/2013 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Regina - FRANZISKARRR # Gestartet von : C:\Users\Regina\Downloads\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\Ask Ordner Gelöscht : C:\ProgramData\Babylon Ordner Gelöscht : C:\Program Files (x86)\optimizer pro Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB Ordner Gelöscht : C:\Users\Regina\AppData\Local\Temp\OCS Ordner Gelöscht : C:\Users\Regina\AppData\Roaming\DSite Ordner Gelöscht : C:\Users\Regina\AppData\Roaming\dvdvideosoftiehelpers Datei Gelöscht : C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\\invalidprefs.js Datei Gelöscht : C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\bProtector_extensions.rdf Datei Gelöscht : C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\searchplugins\Babylon.xml Datei Gelöscht : C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\user.js Datei Gelöscht : C:\Windows\Tasks\DSite.job Datei Gelöscht : C:\Windows\System32\Tasks\DSite ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\5c4dbd9b268be10 Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5} Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Schlüssel Gelöscht : HKCU\Software\BabSolution Schlüssel Gelöscht : HKCU\Software\Delta Schlüssel Gelöscht : HKCU\Software\dsiteproducts Schlüssel Gelöscht : HKCU\Software\OCS Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar Schlüssel Gelöscht : HKLM\Software\DataMngr Schlüssel Gelöscht : HKLM\Software\Delta ***** [ Browser ] ***** -\\ Internet Explorer v10.0.9200.16660 -\\ Mozilla Firefox v23.0.1 (de) [ Datei : C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\prefs.js ] Zeile gelöscht : user_pref("extensions.delta.admin", false); Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst"); Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}"); Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de"); Zeile gelöscht : user_pref("extensions.delta.excTlbr", false); Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true); Zeile gelöscht : user_pref("extensions.delta.id", "72506dba000000000000944452866d3c"); Zeile gelöscht : user_pref("extensions.delta.instlDay", "15924"); Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst"); Zeile gelöscht : user_pref("extensions.delta.newTab", false); Zeile gelöscht : user_pref("extensions.delta.prdct", "delta"); Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta"); Zeile gelöscht : user_pref("extensions.delta.rvrt", "false"); Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none"); Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base"); Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", ""); Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.22.0"); Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.22.012:20:52"); Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.22.0"); Zeile gelöscht : user_pref("extensions.delta_i.babExt", ""); Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4967"); Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss"); ************************* AdwCleaner[R0].txt - [5564 octets] - [03/09/2013 14:49:40] AdwCleaner[S0].txt - [5111 octets] - [03/09/2013 14:51:42] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5171 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 5.5.7 (09.01.2013:1) OS: Windows 7 Home Premium x64 Ran by Regina on 03.09.2013 at 15:03:04,83 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2087769268-375158142-2670045850-1000\Software\SweetIM Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ApnStub_RASDLG Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D3645F6C-2C83-4F58-9625-EA0AC50119AF} ~~~ Files ~~~ Folders ~~~ FireFox Successfully deleted: [File] C:\Users\Regina\AppData\Roaming\mozilla\firefox\profiles\7zl6uipy.default\invalidprefs.js Emptied folder: C:\Users\Regina\AppData\Roaming\mozilla\firefox\profiles\7zl6uipy.default\minidumps [412 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 03.09.2013 at 15:09:04,91 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2013 01 Ran by Regina (administrator) on FRANZISKARRR on 03-09-2013 15:12:54 Running from C:\Users\Regina\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2010-09-29] (Dell) HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2010-05-21] (Softthinks) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3883840 2009-07-26] (Microsoft Corporation) HKCU\...\Run: [AutoStartNPSAgent] - C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [96160 2011-05-20] (Samsung Electronics Co., Ltd.) MountPoints2: {dc10aa27-e0ef-11e0-aa6e-b8ac6fb4e26e} - "I:\WD SmartWare.exe" autoplay=true HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807680 2010-02-09] () HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-10-15] () HKLM-x32\...\Run: [DellSupportCenter] - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [345144 2013-06-26] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH) HKLM-x32\...\Run: [NPSStartup] - [x] HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 SearchScopes: HKLM - DefaultScope {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {737C9E2A-1879-4053-ACC6-938343206C71} URL = SearchScopes: HKCU - {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\searchplugins\znout-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-26] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-26] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-03-31] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130016 2013-03-31] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-31] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2012-07-18] (Mobile Connector) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-03 15:03 - 2013-09-03 15:03 - 00000000 ____D C:\Windows\ERUNT 2013-09-03 15:02 - 2013-09-03 15:02 - 01028757 _____ (Thisisu) C:\Users\Regina\Downloads\JRT.exe 2013-09-03 14:48 - 2013-09-03 14:51 - 00000000 ____D C:\AdwCleaner 2013-09-03 14:48 - 2013-09-03 14:48 - 01037134 _____ C:\Users\Regina\Downloads\adwcleaner.exe 2013-09-03 14:26 - 2013-09-03 14:26 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 14:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-03 14:25 - 2013-09-03 14:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Regina\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 12:09 - 2013-09-03 12:47 - 00054484 _____ C:\Users\Regina\Desktop\FRST.txt 2013-09-03 12:09 - 2013-09-03 12:09 - 00044394 _____ C:\Users\Regina\Downloads\Addition.txt 2013-09-03 12:08 - 2013-09-03 12:08 - 01950474 _____ (Farbar) C:\Users\Regina\Downloads\FRST64.exe 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 11:42 - 2013-09-03 12:03 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:09 - 2013-09-02 17:29 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-14 15:12 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 15:12 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 15:12 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 15:12 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 15:12 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 15:12 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 08:44 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 08:44 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 08:44 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 08:44 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 08:44 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 08:44 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 08:44 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 08:44 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 08:44 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-07 13:20 - 2013-09-03 10:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-08-07 13:20 - 2013-09-03 10:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter ==================== One Month Modified Files and Folders ======= 2013-09-03 15:09 - 2013-09-03 15:09 - 00001325 _____ C:\Users\Regina\Desktop\JRT.txt 2013-09-03 15:08 - 2011-10-16 16:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-03 15:07 - 2012-04-13 04:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-03 15:03 - 2013-09-03 15:03 - 00000000 ____D C:\Windows\ERUNT 2013-09-03 15:02 - 2013-09-03 15:02 - 01028757 _____ (Thisisu) C:\Users\Regina\Downloads\JRT.exe 2013-09-03 15:00 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-03 15:00 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-03 14:53 - 2012-06-02 12:03 - 00000000 ____D C:\Users\Regina\Tracing 2013-09-03 14:53 - 2011-10-16 16:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-03 14:53 - 2010-09-07 21:48 - 00000000 ____D C:\Users\Regina\AppData\Local\SoftThinks 2013-09-03 14:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-03 14:52 - 2009-07-14 07:10 - 01903446 _____ C:\Windows\WindowsUpdate.log 2013-09-03 14:52 - 2009-07-14 06:51 - 00139112 _____ C:\Windows\setupact.log 2013-09-03 14:51 - 2013-09-03 14:48 - 00000000 ____D C:\AdwCleaner 2013-09-03 14:48 - 2013-09-03 14:48 - 01037134 _____ C:\Users\Regina\Downloads\adwcleaner.exe 2013-09-03 14:41 - 2010-09-02 14:04 - 00044896 _____ C:\Windows\PFRO.log 2013-09-03 14:26 - 2013-09-03 14:26 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 14:25 - 2013-09-03 14:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Regina\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 12:47 - 2013-09-03 12:09 - 00054484 _____ C:\Users\Regina\Desktop\FRST.txt 2013-09-03 12:09 - 2013-09-03 12:09 - 00044394 _____ C:\Users\Regina\Downloads\Addition.txt 2013-09-03 12:08 - 2013-09-03 12:08 - 01950474 _____ (Farbar) C:\Users\Regina\Downloads\FRST64.exe 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 12:03 - 2013-09-03 11:42 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-03 10:30 - 2010-09-02 14:07 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-09-03 10:20 - 2013-08-07 13:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-09-03 10:20 - 2013-08-07 13:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:29 - 2013-09-02 17:09 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-21 20:07 - 2012-04-13 04:04 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 20:07 - 2012-04-13 04:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 20:07 - 2011-05-31 08:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-21 19:33 - 2009-07-14 19:58 - 00654594 _____ C:\Windows\system32\perfh007.dat 2013-08-21 19:33 - 2009-07-14 19:58 - 00130208 _____ C:\Windows\system32\perfc007.dat 2013-08-21 19:33 - 2009-07-14 07:13 - 01500254 _____ C:\Windows\system32\PerfStringBackup.INI 2013-08-19 14:01 - 2010-09-02 14:19 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup 2013-08-19 11:47 - 2012-05-06 02:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-15 15:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-14 15:08 - 2013-07-13 10:26 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 15:07 - 2010-09-15 14:29 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-14 11:12 - 2010-09-08 09:21 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-09 11:29 - 2011-04-16 16:59 - 00000000 ____D C:\Users\Regina\AppData\Roaming\vlc 2013-08-09 09:56 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-09 00:28 - 2012-05-17 19:49 - 00000000 ____D C:\Users\Regina\AppData\Roaming\dvdcss 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter 2013-08-05 11:16 - 2010-09-14 12:14 - 00000000 ____D C:\Users\Regina\AppData\Local\Adobe 2013-08-04 23:08 - 2011-10-16 16:28 - 00000000 ____D C:\Program Files (x86)\Google 2013-08-04 19:12 - 2012-10-26 21:01 - 00000000 ____D C:\Users\Regina\Desktop\Reza_ist_der_allerbeste_der_Welt Files to move or delete: ==================== C:\Users\Regina\AppData\Local\Temp\APNStub.exe C:\Users\Regina\AppData\Local\Temp\AskSLib.dll C:\Users\Regina\AppData\Local\Temp\InstallerMessageBox.exe C:\Users\Regina\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\Lifecam3.20.240.0.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxy.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll C:\Users\Regina\AppData\Local\Temp\Quarantine.exe C:\Users\Regina\AppData\Local\Temp\SkypeSetup.exe C:\Users\Regina\AppData\Local\Temp\uninst1.exe C:\Users\Regina\AppData\Local\Temp\Uninstaller.exe C:\Users\Regina\AppData\Local\Temp\UninstallerGer.dll C:\Users\Regina\AppData\Local\Temp\UninstallerIta.dll C:\Users\Regina\AppData\Local\Temp\vlc-2.0.4-win32.exe C:\Users\Regina\AppData\Local\Temp\WtgDriverInstallX.dll C:\Users\Regina\AppData\Local\Temp\{E72A8C10-EE49-45F7-B698-6D5D6AE4C1EE}\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\{90089038-34F2-4559-916E-67D313D74314}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\{0A3D96D5-E1E1-476D-98F6-42674858D10C}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\TeamViewer\Version6\TeamViewer_.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setupstb.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\alignmentdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\auchecker.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\backcutterdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal2.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal264.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cinvpu.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\denoiser.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\dieffect.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\downsampler.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\facedetectordll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\icepick.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcdecoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcfilter.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifecam.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2ps.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeexp.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifetray.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.application.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.camera.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.controllers.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.framework.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.fxmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interfaces.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interop.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.core.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.pubmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.streamer.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.views.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.webcam.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mmins.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mminsdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams32.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams64.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\msrcfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\posetrackerdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\requester.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\transcoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\verend.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\viperrt.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\visualfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\vpugraph.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_alien.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeeyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largemouth.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largenose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smalleyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smallnose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_squarehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_tallhead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_thinface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_pinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punchandpinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twins.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twirl.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\05backgroundblur_medium.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_afro.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_clown.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cowboyhat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_dog.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_expletive.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_glitterstars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_lightbulb.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_marie.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_mask.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monstergreen.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monsterorange.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_pinkwig.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_questions.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_rabbit.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_stars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_sunglasses.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_tiara.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_edges.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_gray.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_negative.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_poster.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_sepia.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_watercolor.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_woodblock.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\cvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vx6ktui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\cvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\cvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.application.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.fxmgr.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.views.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\iceres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\setupres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dxsetup.exe C:\Users\Regina\AppData\Local\Temp\jrt\erunt\ERUNT.EXE C:\Users\Regina\AppData\Local\Temp\is357113909\ImageEditor.exe C:\Users\Regina\AppData\Local\Temp\FBEB.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\F8B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\EEE1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CD6C.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CCB1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C745.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C1F8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\BE50.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B912.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B683.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B338.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B0F7.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AE97.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AC65.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AAFE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\A0E1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\97EC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\958B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\8DBE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\84E8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BExternal.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BUSolForMontiera.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\ChromeToolbarSetup.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\CrxInstaller.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\GUninstaller.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\IEHelper.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\MntrDLLInstall.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\sqlite3.dll C:\Users\Regina\AppData\Local\Temp\6825.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\22CC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\1DDD.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 21:19 ==================== End Of Log ============================ --- --- --- fertig..... |
03.09.2013, 20:19 | #6 |
/// the machine /// TB-Ausbilder | SponsorshipplagegeistESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ --> Sponsorshipplagegeist |
05.09.2013, 20:16 | #7 |
| Sponsorshipplagegeist entschuldige die lange verzögerung....ich hatte zuviel um die ohren. jetzt aber endlich: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=e799f9d5ae4d1547b94ff791bc8a74e9 # engine=15019 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2013-09-05 04:17:29 # local_time=2013-09-05 06:17:29 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=1799 16775165 100 96 17543 243817539 10320 0 # compatibility_mode=5893 16776573 100 94 179056 130027699 0 0 # scanned=215463 # found=2 # cleaned=2 # scan_time=8560 sh=FFBA480E08FB305D5F5F2A5F8BC3E213CB7F4D5B ft=1 fh=84b291719c35e073 vn="Win32/Adware.1ClickDownload.AE application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Regina\AppData\Local\Temp\Ndot5aOD.exe.part" sh=3DB12A783ABA9818D7104DF79E29815EF4F0054D ft=1 fh=6bd76e10495f61be vn="Win32/Adware.1ClickDownload.AE application (cleaned by deleting - quarantined)" ac=C fn="C:\Users\Regina\AppData\Local\Temp\RAzxtOch.exe.part" Code:
ATTFilter Results of screen317's Security Check version 0.99.72 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 ``````````````Antivirus/Firewall Check:`````````````` Avira Desktop Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java 7 Update 25 Adobe Flash Player 11.8.800.94 Adobe Reader XI Mozilla Firefox (23.0.1) ````````Process Check: objlist.exe by Laurent```````` Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamgui.exe Avira Antivir avgnt.exe Avira Antivir avguard.exe Malwarebytes' Anti-Malware mbamscheduler.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-09-2013 Ran by Regina (administrator) on FRANZISKARRR on 05-09-2013 21:12:56 Running from C:\Users\Regina\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corp.) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe (Stardock Corporation) C:\Program Files\Dell\DellDock\DellDock.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin () C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe () C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (SupportSoft, Inc.) C:\Program Files (x86)\Dell Support Center\bin\sprtsvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe ==================== Registry (Whitelisted) ================== HKLM-x32\...\RunOnce: ["C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe"] - "C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe" [560128 2010-09-29] (Dell) HKLM-x32\...\RunOnce: [Launcher] - C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe [165184 2010-05-21] (Softthinks) HKLM\...\Policies\Explorer: [NoActiveDesktop] 1 HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1 HKCU\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [3883840 2009-07-26] (Microsoft Corporation) HKCU\...\Run: [AutoStartNPSAgent] - C:\Program Files (x86)\Samsung\Samsung New PC Studio\NPSAgent.exe [96160 2011-05-20] (Samsung Electronics Co., Ltd.) MountPoints2: {dc10aa27-e0ef-11e0-aa6e-b8ac6fb4e26e} - "I:\WD SmartWare.exe" autoplay=true HKLM-x32\...\Run: [Dell DataSafe Online] - C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807680 2010-02-09] () HKLM-x32\...\Run: [Desktop Disc Tool] - c:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe [498160 2009-10-15] () HKLM-x32\...\Run: [DellSupportCenter] - C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe [206064 2009-05-21] (SupportSoft, Inc.) HKLM-x32\...\Run: [LifeCam] - C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation) HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [347192 2013-09-04] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [163000 2012-12-12] (Geek Software GmbH) HKLM-x32\...\Run: [NPSStartup] - [x] HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation) Startup: C:\Users\Regina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USCON/8 SearchScopes: HKLM - DefaultScope {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - DefaultScope {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = SearchScopes: HKCU - {737C9E2A-1879-4053-ACC6-938343206C71} URL = SearchScopes: HKCU - {8759D536-5073-4318-81F6-D8B6902F0A2B} URL = BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File BHO-x32: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKLM-x32 - &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation) Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - No File Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation) Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\3.0.40624.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files (x86)\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101799.dll (Amazon.com, Inc.) FF SearchPlugin: C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\searchplugins\znout-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: No Name - C:\Users\Regina\AppData\Roaming\Mozilla\Firefox\Profiles\7zl6uipy.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} ==================== Services (Whitelisted) ================= R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-09-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-09-04] (Avira Operations GmbH & Co. KG) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) ==================== Drivers (Whitelisted) ==================== R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [105344 2013-09-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [132088 2013-09-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-03-31] (Avira Operations GmbH & Co. KG) S3 cmnsusbser; C:\Windows\System32\DRIVERS\cmnsusbser.sys [117888 2012-07-18] (Mobile Connector) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 IntcAzAudAddService; system32\drivers\RTKVHD64.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2013-09-05 21:07 - 2013-09-05 21:07 - 00891115 _____ C:\Users\Regina\Downloads\SecurityCheck.exe 2013-09-05 15:53 - 2013-09-05 15:53 - 02347384 _____ (ESET) C:\Users\Regina\Downloads\esetsmartinstaller_enu.exe 2013-09-05 13:25 - 2013-09-05 19:25 - 96185213 _____ C:\Windows\SysWOW64\渕璄´ 2013-09-03 15:09 - 2013-09-03 15:09 - 00001325 _____ C:\Users\Regina\Desktop\JRT.txt 2013-09-03 15:03 - 2013-09-03 15:03 - 00000000 ____D C:\Windows\ERUNT 2013-09-03 15:02 - 2013-09-03 15:02 - 01028757 _____ (Thisisu) C:\Users\Regina\Downloads\JRT.exe 2013-09-03 14:48 - 2013-09-03 14:51 - 00000000 ____D C:\AdwCleaner 2013-09-03 14:48 - 2013-09-03 14:48 - 01037134 _____ C:\Users\Regina\Downloads\adwcleaner.exe 2013-09-03 14:26 - 2013-09-03 14:26 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 14:26 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2013-09-03 14:25 - 2013-09-03 14:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Regina\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 12:09 - 2013-09-03 12:47 - 00054484 _____ C:\Users\Regina\Desktop\FRST.txt 2013-09-03 12:09 - 2013-09-03 12:09 - 00044394 _____ C:\Users\Regina\Downloads\Addition.txt 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 11:42 - 2013-09-03 12:03 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:09 - 2013-09-02 17:29 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-14 15:12 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2013-08-14 15:12 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2013-08-14 15:12 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2013-08-14 15:12 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2013-08-14 15:12 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2013-08-14 15:12 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2013-08-14 15:12 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2013-08-14 15:12 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2013-08-14 15:12 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2013-08-14 15:12 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2013-08-14 08:44 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL 2013-08-14 08:44 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2013-08-14 08:44 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2013-08-14 08:44 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2013-08-14 08:44 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2013-08-14 08:44 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2013-08-14 08:44 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2013-08-14 08:44 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2013-08-14 08:44 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll 2013-08-14 08:44 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll 2013-08-14 08:44 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2013-08-14 08:44 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2013-08-14 08:44 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2013-08-14 08:44 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2013-08-14 08:44 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-07 13:20 - 2013-09-03 10:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-08-07 13:20 - 2013-09-03 10:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter ==================== One Month Modified Files and Folders ======= 2013-09-05 21:12 - 2013-09-05 21:12 - 01947160 _____ (Farbar) C:\Users\Regina\Downloads\FRST64.exe 2013-09-05 21:08 - 2011-10-16 16:28 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-09-05 21:07 - 2013-09-05 21:07 - 00891115 _____ C:\Users\Regina\Downloads\SecurityCheck.exe 2013-09-05 21:07 - 2012-04-13 04:04 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2013-09-05 19:25 - 2013-09-05 13:25 - 96185213 _____ C:\Windows\SysWOW64\渕璄´ 2013-09-05 15:53 - 2013-09-05 15:53 - 02347384 _____ (ESET) C:\Users\Regina\Downloads\esetsmartinstaller_enu.exe 2013-09-05 15:48 - 2009-07-14 19:58 - 00654594 _____ C:\Windows\system32\perfh007.dat 2013-09-05 15:48 - 2009-07-14 19:58 - 00130208 _____ C:\Windows\system32\perfc007.dat 2013-09-05 15:48 - 2009-07-14 07:13 - 01500254 _____ C:\Windows\system32\PerfStringBackup.INI 2013-09-05 15:45 - 2010-09-02 14:19 - 00000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup 2013-09-05 13:32 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2013-09-05 13:32 - 2009-07-14 06:45 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2013-09-05 13:28 - 2009-07-14 07:10 - 01939227 _____ C:\Windows\WindowsUpdate.log 2013-09-05 13:26 - 2012-06-02 12:03 - 00000000 ____D C:\Users\Regina\Tracing 2013-09-05 13:25 - 2010-09-07 21:48 - 00000000 ____D C:\Users\Regina\AppData\Local\SoftThinks 2013-09-05 13:24 - 2011-10-16 16:28 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2013-09-05 13:23 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2013-09-05 13:23 - 2009-07-14 06:51 - 00139336 _____ C:\Windows\setupact.log 2013-09-04 13:24 - 2013-05-02 10:14 - 00081112 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2013-09-04 13:24 - 2013-03-31 19:35 - 00132088 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2013-09-04 13:24 - 2013-03-31 19:35 - 00105344 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2013-09-03 15:09 - 2013-09-03 15:09 - 00001325 _____ C:\Users\Regina\Desktop\JRT.txt 2013-09-03 15:03 - 2013-09-03 15:03 - 00000000 ____D C:\Windows\ERUNT 2013-09-03 15:02 - 2013-09-03 15:02 - 01028757 _____ (Thisisu) C:\Users\Regina\Downloads\JRT.exe 2013-09-03 14:51 - 2013-09-03 14:48 - 00000000 ____D C:\AdwCleaner 2013-09-03 14:48 - 2013-09-03 14:48 - 01037134 _____ C:\Users\Regina\Downloads\adwcleaner.exe 2013-09-03 14:41 - 2010-09-02 14:04 - 00044896 _____ C:\Windows\PFRO.log 2013-09-03 14:26 - 2013-09-03 14:26 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Users\Regina\AppData\Roaming\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2013-09-03 14:26 - 2013-09-03 14:26 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2013-09-03 14:25 - 2013-09-03 14:25 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Regina\Downloads\mbam-setup-1.75.0.1300.exe 2013-09-03 12:47 - 2013-09-03 12:09 - 00054484 _____ C:\Users\Regina\Desktop\FRST.txt 2013-09-03 12:09 - 2013-09-03 12:09 - 00044394 _____ C:\Users\Regina\Downloads\Addition.txt 2013-09-03 12:08 - 2013-09-03 12:08 - 00000000 ____D C:\FRST 2013-09-03 12:03 - 2013-09-03 11:42 - 00020354 _____ C:\Users\Regina\Desktop\Exposé_Masterarbeit.odt 2013-09-03 10:30 - 2010-09-02 14:07 - 00000000 ____D C:\Windows\SysWOW64\RTCOM 2013-09-03 10:20 - 2013-08-07 13:20 - 00000079 _____ C:\Users\Regina\AppData\Roaming\WB.CFG 2013-09-03 10:20 - 2013-08-07 13:20 - 00000005 _____ C:\Users\Regina\AppData\Roaming\WBPU-TTL.DAT 2013-09-02 21:17 - 2013-09-02 21:17 - 00025729 _____ C:\Users\Regina\Desktop\lulu.odt 2013-09-02 17:29 - 2013-09-02 17:09 - 00018638 _____ C:\Users\Regina\Desktop\herbstferien.odt 2013-08-21 20:07 - 2012-04-13 04:04 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2013-08-21 20:07 - 2012-04-13 04:04 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2013-08-21 20:07 - 2011-05-31 08:02 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2013-08-19 11:47 - 2012-05-06 02:59 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2013-08-17 13:02 - 2013-08-17 13:02 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2013-08-15 15:15 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache 2013-08-14 15:08 - 2013-07-13 10:26 - 00000000 ____D C:\Windows\system32\MRT 2013-08-14 15:07 - 2010-09-15 14:29 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2013-08-14 11:12 - 2010-09-08 09:21 - 00000000 ____D C:\Windows\System32\Tasks\Games 2013-08-09 11:29 - 2011-04-16 16:59 - 00000000 ____D C:\Users\Regina\AppData\Roaming\vlc 2013-08-09 09:56 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\searchplugins 2013-08-09 03:32 - 2013-08-09 03:32 - 00000000 ____D C:\Windows\SysWOW64\Extensions 2013-08-09 00:28 - 2012-05-17 19:49 - 00000000 ____D C:\Users\Regina\AppData\Roaming\dvdcss 2013-08-07 12:20 - 2013-08-07 12:20 - 00000000 ____D C:\Program Files (x86)\Image Converter Files to move or delete: ==================== C:\Users\Regina\AppData\Local\Temp\APNStub.exe C:\Users\Regina\AppData\Local\Temp\AskSLib.dll C:\Users\Regina\AppData\Local\Temp\InstallerMessageBox.exe C:\Users\Regina\AppData\Local\Temp\jre-6u21-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u23-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u29-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe C:\Users\Regina\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe C:\Users\Regina\AppData\Local\Temp\Lifecam3.20.240.0.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxy.exe C:\Users\Regina\AppData\Local\Temp\NPSInstallerProxyMessageBoxHookDll.dll C:\Users\Regina\AppData\Local\Temp\Quarantine.exe C:\Users\Regina\AppData\Local\Temp\SkypeSetup.exe C:\Users\Regina\AppData\Local\Temp\uninst1.exe C:\Users\Regina\AppData\Local\Temp\Uninstaller.exe C:\Users\Regina\AppData\Local\Temp\UninstallerGer.dll C:\Users\Regina\AppData\Local\Temp\UninstallerIta.dll C:\Users\Regina\AppData\Local\Temp\vlc-2.0.4-win32.exe C:\Users\Regina\AppData\Local\Temp\WtgDriverInstallX.dll C:\Users\Regina\AppData\Local\Temp\{E72A8C10-EE49-45F7-B698-6D5D6AE4C1EE}\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\{90089038-34F2-4559-916E-67D313D74314}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\{0A3D96D5-E1E1-476D-98F6-42674858D10C}\ISSetup.dll C:\Users\Regina\AppData\Local\Temp\TeamViewer\Version6\TeamViewer_.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\Objlist.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\runprocesses.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\uninstalllist.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\cmdinfo.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\nircmdc.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\sed.exe C:\Users\Regina\AppData\Local\Temp\RarSFX0\SecurityCheck\Other\swreg.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setupstb.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\alignmentdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\auchecker.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\backcutterdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal2.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cal264.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\cinvpu.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\denoiser.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\dieffect.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\downsampler.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\facedetectordll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\icepick.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcdecoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lcfilter.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifecam.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeenc2ps.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifeexp.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\lifetray.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.application.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.camera.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.controllers.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.framework.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.fxmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interfaces.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.interop.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.core.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.logging.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.pubmgr.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.streamer.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.views.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\microsoft.lifecam.webcam.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mmins.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mminsdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams32.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\mscams64.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\msrcfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\posetrackerdll.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\requester.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\transcoder.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\verend.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\viperrt.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\visualfx.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\vpugraph.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_alien.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeeyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largeface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largemouth.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_largenose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smalleyes.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_smallnose.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_squarehead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_tallhead.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\02funnyfaces_thinface.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_pinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_punchandpinch.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twins.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\04geometric_twirl.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\05backgroundblur_medium.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_afro.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_clown.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_cowboyhat.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_dog.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_expletive.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_glitterstars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_lightbulb.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_marie.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_mask.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monstergreen.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_monsterorange.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_pinkwig.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_questions.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_rabbit.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_stars.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_sunglasses.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\06accessories_tiara.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_edges.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_gray.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_negative.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_poster.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_sepia.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_watercolor.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\Effects\Visual\08colors_woodblock.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\cvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vvx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\vx6ktui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2070\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\2052\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1049\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1046\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1042\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1041\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1040\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1036\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1034\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1033\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1032\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1031\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx6000\1028\vx6kx64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\cvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\vvx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2070\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\2052\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1049\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1046\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1042\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1041\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1040\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1036\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1034\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1033\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1032\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1031\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx3000\1028\vx3x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\cvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\twainui.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1000.exe C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\vvx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2070\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\2052\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1049\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1046\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1042\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1041\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1040\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1036\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1034\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1033\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1032\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1031\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1000.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\vx1000\1028\vx1x64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\lccoin32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2070\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\2052\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1049\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1046\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1042\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1041\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1040\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1036\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1034\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1033\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1031\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\driver64\nx6000\1028\nx6000r64.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.application.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.fxmgr.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\de-de\microsoft.lifecam.views.resources.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\iceres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\setup\microsoft lifecam\1031\setupres.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dsetup32.dll C:\Users\Regina\AppData\Local\Temp\LifeCamSetup\dx90c\dxsetup.exe C:\Users\Regina\AppData\Local\Temp\jrt\erunt\ERUNT.EXE C:\Users\Regina\AppData\Local\Temp\is357113909\ImageEditor.exe C:\Users\Regina\AppData\Local\Temp\FBEB.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\F8B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\EEE1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CD6C.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\CCB1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C745.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\C1F8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\BE50.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B912.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B683.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B338.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\B0F7.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AE97.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AC65.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\AAFE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\A0E1.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\97EC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\958B.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\8DBE.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\84E8.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BExternal.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\BUSolForMontiera.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\ChromeToolbarSetup.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\CrxInstaller.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\GUninstaller.exe C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\IEHelper.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\MntrDLLInstall.dll C:\Users\Regina\AppData\Local\Temp\6D82096E-BAB0-7891-A7A8-AFA78857E2E5\Latest\sqlite3.dll C:\Users\Regina\AppData\Local\Temp\6825.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\22CC.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\1DDD.dir\InstallFlashPlayer.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\GoogleEarth.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\earthps.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\geplugin.exe C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\ge_expat.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\googleearth_free.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcp100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\msvcr100.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\npgeplugin.dll C:\Users\Regina\AppData\Local\Temp\._msigeplugin61\program files\Google\Google Earth\plugin\plugin_ax.dll ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2013-09-01 21:19 ==================== End Of Log ============================ --- --- --- --- --- --- vielen, vielen lieben dank für deine hilfe! ich hoffe jetzt, dass soweit alles erledigt ist, aber in der zeit, seit ich mit deiner hilfestellung angefangen habe, ist nichts mehr aufgepoppt und ich bin dann auch guter dinge, dass so so läuft....toll! nochmals herzlichen dank! |
06.09.2013, 08:28 | #8 |
/// the machine /// TB-Ausbilder | Sponsorshipplagegeist Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop. Schließe nun alle offenen Programme und trenne Dich von dem Internet. Doppelklick auf die TFC.exe und drücke auf Start. Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen. Fertig Die Reihenfolge ist hier entscheidend.
Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
06.09.2013, 13:48 | #9 |
| Sponsorshipplagegeist vielen, vielen lieben dank! |
06.09.2013, 17:40 | #10 |
/// the machine /// TB-Ausbilder | Sponsorshipplagegeist Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |