|
Plagegeister aller Art und deren Bekämpfung: Überprüfung des SystemsWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
02.02.2014, 15:27 | #1 |
| Überprüfung des Systems Hey, ich habe das Problem das mein Laptop seit einer Woche ziemlich langsam ist, sowie der Internet Explorer (Firefox) ebenfalls. Bei der letzten überprüfung wurde eine Spyware entdeckt. Da ich nicht sicher bin ob der komplette Pc sauber ist, möchte ich gerne euch um hilfe bitten. Bin kurz davor zu sagen ich formatiere alles und installiere das Betriebssystem neu, aber ich gib dem Notebook nochmal eine Chance Könnt Ihr mir helfen eine sichere Überprüfung durchzuführen, die Ihr mir auswerten könntet? Heute hatte ich nach einem Download aufeinmal komische Dateien drauf wie lollipop, dr privacy und ähnliches, daher komme ich heute dazu mal was zu unternehmen. Lg |
02.02.2014, 15:29 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
02.02.2014, 19:50 | #3 |
| Überprüfung des Systems Hey, die alten Logs weiss ich leider nicht wo diese sind.
__________________Aber ich poste dir die neuen : FRST: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04 Ran by Basti (administrator) on BASTI-PC on 02-02-2014 15:31:40 Running from C:\Users\Basti\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\SysWOW64\PnkBstrB.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Akamai Technologies, Inc.) C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe (Dropbox, Inc.) C:\Users\Basti\AppData\Roaming\Dropbox\bin\Dropbox.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Akamai Technologies, Inc.) C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10151968 2010-04-20] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [908320 2010-04-20] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323072 2010-03-11] (AlcorMicro Co., Ltd.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-03-11] (Synaptics Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-21] (AVAST Software) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\Run: [Google Update] - C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-22] (Google Inc.) HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\Run: [Akamai NetSession Interface] - C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {065b1a5a-7457-11e1-94d9-7071bcf3e0bb} - G:\setup\rsrc\Autorun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {0d933a27-672a-11e3-898b-7071bcf3e0bb} - F:\Installer.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {1e4538ed-892f-11e0-bacc-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {26a72bde-9106-11e0-b7e6-7071bcf3e0bb} - F:\Startme.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {2fd99cf4-8466-11e0-b92e-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {2fd99d03-8466-11e0-b92e-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {38eb9809-62fd-11e2-b60c-7071bcf3e0bb} - F:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {3b17d905-a035-11e2-87cf-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {afa558b6-42cc-11e1-b624-7071bcf3e0bb} - F:\Startme.exe IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe Startup: C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Basti\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=DE&userid=4bb29cb6-ce74-45b1-8dbe-87f1d306c7f0&searchtype=ds&q={searchTerms}&installDate=01/01/1970 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC81C3DAE89A8CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=DE&userid=4bb29cb6-ce74-45b1-8dbe-87f1d306c7f0&searchtype=ds&q={searchTerms}&installDate=01/01/1970 SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms} SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms} SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms} SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms} SearchScopes: HKCU - DefaultScope {AE64E4CA-A961-4AFD-865A-87B52CF4BF83} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=48c511d90000000000001c4bd66c5a26&r=704 SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=DE&userid=4bb29cb6-ce74-45b1-8dbe-87f1d306c7f0&searchtype=ds&q={searchTerms}&installDate=01/01/1970 SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www.searchgol.com/?q={searchTerms}&babsrc=SP_ss&mntrId=48C51C4BD66C5A26&affID=121565&tt=250913_cpn2&tsp=5019 SearchScopes: HKCU - {45057E3E-EDD7-40E1-896B-FBE3B1A40CDC} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=CDS4&o=41648340&src=crm&q={searchTerms}&locale=en_US&apn_ptnrs=9L&apn_dtid=YYYYYYYYDE&apn_uid=051AF9A6-C2AD-477E-B8E9-29B3940274FF&apn_sauid=9E2A8637-B88E-4E1B-B2BA-FB3074120330 SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms} SearchScopes: HKCU - {AE64E4CA-A961-4AFD-865A-87B52CF4BF83} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=48c511d90000000000001c4bd66c5a26&r=704 BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: [verify-U]_Add-on - {F4552A56-119C-478E-AB3F-2C850F78B72E} - C:\Program Files\[verify-U]_AVS_IE_Add-on\[verify-U]_AVS.dll (Cybits AG) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: [verify-U]_Add-on - {F4552A56-119C-478E-AB3F-2C850F78B72E} - C:\Program Files (x86)\[verify-U]_AVS_IE_Add-on\[verify-U]_AVS.dll (Cybits AG) BHO-x32: Yontoo - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files (x86)\Yontoo\YontooIEClient.dll (Yontoo LLC) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default FF user.js: detected! => C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\user.js FF Homepage: hxxp://facebook.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0-git-20130309-0405 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Google.com/GoogleEarthPlugin - C:\Users\Basti\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Basti\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Basti\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Basti\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\foxsearch.src FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\battlefieldheroespatcher@ea.com [2013-12-19] FF Extension: [verify-U]-AVS - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\verify-u@cybits.de.xpi [2013-04-16] FF Extension: Password Exporter - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2013-02-17] FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-28] FF HKCU\...\Firefox\Extensions: [specialsavings@vshsolutions.com] - C:\Users\Basti\AppData\Roaming\Mozilla\Extensions\specialsavings@vshsolutions.com ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-21] (AVAST Software) S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [116776 2013-12-03] (AVAST Software) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-19] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2013-12-19] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-03] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-21] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-21] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-17] (Disc Soft Ltd) S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [113792 2009-06-22] (Huawei Technologies Co., Ltd.) S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-01-11] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-01-11] () S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S1 aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [x] S1 aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [x] S3 clwvd; system32\DRIVERS\clwvd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-02 15:31 - 2014-02-02 15:31 - 00019403 _____ () C:\Users\Basti\Downloads\FRST.txt 2014-02-02 15:31 - 2014-02-02 15:31 - 00000000 ____D () C:\FRST 2014-02-02 15:30 - 2014-02-02 15:30 - 02080256 _____ (Farbar) C:\Users\Basti\Downloads\FRST64.exe 2014-02-02 15:09 - 2014-02-02 15:09 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-02-02 14:46 - 2014-02-02 14:58 - 00000000 ____D () C:\AdwCleaner 2014-02-02 14:04 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\AppData\Local\RegistryDR 2014-02-02 14:01 - 2014-02-02 15:04 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\newnext.me 2014-02-02 14:01 - 2014-02-02 14:25 - 00000000 ____D () C:\Users\Basti\AppData\Local\Mobogenie 2014-02-02 14:01 - 2014-02-02 14:10 - 00000000 ____D () C:\Users\Basti\AppData\Local\cache 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\.android 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 _____ () C:\Users\Basti\daemonprocess.txt 2014-02-02 14:00 - 2014-02-02 14:08 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-02 14:00 - 2014-02-02 14:06 - 00000000 ____D () C:\ProgramData\WPM 2014-02-02 13:59 - 2014-02-02 14:39 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-02-02 13:59 - 2014-02-02 14:08 - 00000000 ____D () C:\Program Files (x86)\Registry Dr 2014-02-02 13:59 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\Documents\RegistryDr 2014-01-27 09:48 - 2014-01-27 13:28 - 00000043 _____ () C:\Users\Basti\Desktop\augenarzt 4.2. - 08.15.txt 2014-01-22 20:55 - 2013-11-06 23:10 - 1845596160 _____ () C:\Users\Basti\Desktop\2 Guns 2013.avi 2014-01-21 19:15 - 2014-01-21 19:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-01-21 19:14 - 2014-01-21 19:19 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-01-21 19:14 - 2014-01-21 19:15 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-01-21 19:14 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2014-01-21 19:13 - 2014-01-21 19:13 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\Basti\Downloads\spybot-2.2.25.exe 2014-01-15 17:52 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 17:51 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 17:51 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-15 07:22 - 2014-02-02 15:06 - 00004347 _____ () C:\Windows\setupact.log 2014-01-15 07:22 - 2014-01-15 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-14 19:36 - 2014-01-14 19:36 - 03571656 _____ (Piriform Ltd) C:\Users\Basti\Downloads\ccleaner.exe 2014-01-14 18:47 - 2014-01-14 19:19 - 00000000 ____D () C:\Users\Basti\Desktop\Trackmania 2014-01-14 16:42 - 2014-01-14 16:42 - 16952720 _____ (Electronic Arts, Inc.) C:\Users\Basti\Downloads\OriginThin9311Setup.exe 2014-01-13 21:33 - 2014-01-24 12:01 - 00000000 ____D () C:\Users\Basti\Documents\TmForever 2014-01-13 21:33 - 2014-01-13 21:35 - 00000000 ____D () C:\ProgramData\TmForever 2014-01-13 21:29 - 2014-01-13 21:31 - 00000000 ____D () C:\Program Files (x86)\TmNationsForever 2014-01-13 21:11 - 2014-01-13 21:13 - 529246504 _____ () C:\Users\Basti\Downloads\tmnationsforever_setup.exe 2014-01-13 21:04 - 2014-01-13 21:04 - 00401768 _____ (Softonic ) C:\Users\Basti\Downloads\SoftonicDownloader_fuer_trackmania-nations.exe 2014-01-08 15:54 - 2014-01-08 15:54 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr ==================== One Month Modified Files and Folders ======= 2014-02-02 15:31 - 2014-02-02 15:31 - 00019403 _____ () C:\Users\Basti\Downloads\FRST.txt 2014-02-02 15:31 - 2014-02-02 15:31 - 00000000 ____D () C:\FRST 2014-02-02 15:30 - 2014-02-02 15:30 - 02080256 _____ (Farbar) C:\Users\Basti\Downloads\FRST64.exe 2014-02-02 15:30 - 2012-07-31 16:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-02 15:17 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-02 15:17 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-02 15:16 - 2011-10-18 16:10 - 01492995 _____ () C:\Windows\WindowsUpdate.log 2014-02-02 15:09 - 2014-02-02 15:09 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-02-02 15:09 - 2013-03-21 21:04 - 00000000 ___RD () C:\Users\Basti\Dropbox 2014-02-02 15:09 - 2013-03-21 21:01 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Dropbox 2014-02-02 15:08 - 2013-04-28 08:17 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-02 15:06 - 2014-01-15 07:22 - 00004347 _____ () C:\Windows\setupact.log 2014-02-02 15:06 - 2011-05-20 19:37 - 00000000 ____D () C:\Users\Basti 2014-02-02 15:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-02 15:05 - 2013-10-21 17:56 - 00000000 ____D () C:\Users\Basti\AppData\Local\Minibar 2014-02-02 15:05 - 2013-10-18 20:27 - 00000000 ____D () C:\Users\Basti\AppData\Local\Akamai 2014-02-02 15:05 - 2013-09-28 16:22 - 00000000 ____D () C:\ProgramData\DSearchLink 2014-02-02 15:05 - 2013-06-01 21:04 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\File Scout 2014-02-02 15:05 - 2013-01-12 09:59 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\OpenCandy 2014-02-02 15:05 - 2012-12-02 15:01 - 00000000 ____D () C:\Program Files (x86)\Yontoo 2014-02-02 15:05 - 2012-12-02 15:01 - 00000000 ____D () C:\Program Files (x86)\VideoPerformer 2014-02-02 15:05 - 2012-12-02 15:00 - 00000000 ____D () C:\Program Files (x86)\File Scout 2014-02-02 15:05 - 2011-07-28 12:45 - 00000000 ____D () C:\ProgramData\Trymedia 2014-02-02 15:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-02-02 15:04 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\newnext.me 2014-02-02 15:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-02-02 14:58 - 2014-02-02 14:46 - 00000000 ____D () C:\AdwCleaner 2014-02-02 14:39 - 2014-02-02 13:59 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-02-02 14:25 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Local\Mobogenie 2014-02-02 14:10 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Local\cache 2014-02-02 14:08 - 2014-02-02 14:00 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-02 14:08 - 2014-02-02 13:59 - 00000000 ____D () C:\Program Files (x86)\Registry Dr 2014-02-02 14:08 - 2012-03-05 22:14 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2014-02-02 14:06 - 2014-02-02 14:00 - 00000000 ____D () C:\ProgramData\WPM 2014-02-02 14:04 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\AppData\Local\RegistryDR 2014-02-02 14:04 - 2014-02-02 13:59 - 00000000 ____D () C:\Users\Basti\Documents\RegistryDr 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\.android 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 _____ () C:\Users\Basti\daemonprocess.txt 2014-01-27 23:40 - 2011-07-22 18:29 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA.job 2014-01-27 22:31 - 2011-07-22 18:29 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core.job 2014-01-27 13:28 - 2014-01-27 09:48 - 00000043 _____ () C:\Users\Basti\Desktop\augenarzt 4.2. - 08.15.txt 2014-01-24 15:15 - 2013-11-16 07:57 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\vlc 2014-01-24 12:01 - 2014-01-13 21:33 - 00000000 ____D () C:\Users\Basti\Documents\TmForever 2014-01-23 19:39 - 2013-11-15 16:58 - 00001561 _____ () C:\Users\Basti\Desktop\musik.txt 2014-01-22 11:57 - 2009-07-14 18:58 - 00707566 _____ () C:\Windows\system32\perfh007.dat 2014-01-22 11:57 - 2009-07-14 18:58 - 00153126 _____ () C:\Windows\system32\perfc007.dat 2014-01-22 11:57 - 2009-07-14 06:13 - 01642220 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-21 19:19 - 2014-01-21 19:14 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-01-21 19:18 - 2013-04-27 07:30 - 00000000 ___RD () C:\Users\Basti\Desktop\Ordner 2014-01-21 19:15 - 2014-01-21 19:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-01-21 19:15 - 2014-01-21 19:14 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-01-21 19:13 - 2014-01-21 19:13 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\Basti\Downloads\spybot-2.2.25.exe 2014-01-19 14:43 - 2013-12-19 19:53 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-01-16 13:22 - 2012-09-09 19:30 - 00000000 ____D () C:\Users\Basti\Documents\Youcam 2014-01-16 13:04 - 2009-07-14 05:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-16 11:46 - 2013-07-15 06:38 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 11:43 - 2011-05-20 21:11 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 11:41 - 2013-03-21 21:02 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-16 11:41 - 2011-05-20 19:37 - 00000000 ___RD () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-15 07:22 - 2014-01-15 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-14 19:40 - 2013-12-18 19:06 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-14 19:36 - 2014-01-14 19:36 - 03571656 _____ (Piriform Ltd) C:\Users\Basti\Downloads\ccleaner.exe 2014-01-14 19:19 - 2014-01-14 18:47 - 00000000 ____D () C:\Users\Basti\Desktop\Trackmania 2014-01-14 17:57 - 2013-12-17 17:21 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2014-01-14 16:50 - 2013-12-17 17:18 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Origin 2014-01-14 16:50 - 2013-12-17 17:17 - 00000000 ____D () C:\ProgramData\Origin 2014-01-14 16:42 - 2014-01-14 16:42 - 16952720 _____ (Electronic Arts, Inc.) C:\Users\Basti\Downloads\OriginThin9311Setup.exe 2014-01-14 13:36 - 2013-05-08 06:50 - 00000000 ____D () C:\Users\Basti\Desktop\Neuer Ordner 2014-01-14 13:17 - 2011-11-19 10:43 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Apple Computer 2014-01-13 21:35 - 2014-01-13 21:33 - 00000000 ____D () C:\ProgramData\TmForever 2014-01-13 21:31 - 2014-01-13 21:29 - 00000000 ____D () C:\Program Files (x86)\TmNationsForever 2014-01-13 21:13 - 2014-01-13 21:11 - 529246504 _____ () C:\Users\Basti\Downloads\tmnationsforever_setup.exe 2014-01-13 21:04 - 2014-01-13 21:04 - 00401768 _____ (Softonic ) C:\Users\Basti\Downloads\SoftonicDownloader_fuer_trackmania-nations.exe 2014-01-08 21:45 - 2011-09-26 21:04 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-01-08 15:54 - 2014-01-08 15:54 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-01-19 20:56 ==================== End Of Log ============================ [/CODE] Addition: FRST Additions Logfile: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04 Ran by Basti at 2014-02-02 15:32:24 Running from C:\Users\Basti\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== [verify-U]_AVS_IE_Add-on (x32 Version: 1.0.0.3 - cybits AG) Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144 - Adobe Systems, Inc.) Akamai NetSession Interface (HKCU Version: - Akamai Technologies, Inc) Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Hidden Allzeit Atomzeit 2.00 (x32 Version: 2.00 - Philipp Winterberg) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) AppsHat Mobile Apps (HKCU Version: 1.0.0.0 - Somoto Ltd.) <==== ATTENTION Ashampoo Burning Studio 2013 v.11.0.6 (x32 Version: 11.0.6 - Ashampoo GmbH & Co. KG) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.26 - Atheros Communications Inc.) ATI Catalyst Install Manager (Version: 3.0.758.0 - ATI Technologies, Inc.) Avanquest update (x32 Version: 1.31 - Avanquest Software) avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts) Battlefield Heroes (Basti) (HKCU Version: - EA Digital illusions) Bonjour (Version: 3.0.0.10 - Apple Inc.) Bundled software uninstaller (x32 Version: - ) <==== ATTENTION CCleaner (Version: 3.21 - Piriform) Cheat Engine 6.2 (x32 Version: - Dark Byte) Counter-Strike (x32 Version: - Valve) Counter-Strike: Condition Zero (x32 Version: - Valve) Counter-Strike: Condition Zero Deleted Scenes (x32 Version: - Valve) Counter-Strike: Source (x32 Version: - Valve) CyberLink YouCam (x32 Version: 3.0.1811.7429 - CyberLink Corp.) CyberLink YouCam (x32 Version: 3.0.1811.7429 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (x32 Version: 4.48.1.0347 - Disc Soft Ltd) Day of Defeat (x32 Version: - Valve) Deathmatch Classic (x32 Version: - Valve) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) EVEREST Home Edition v2.20 (x32 Version: 2.20 - Lavalys Inc) Firebird 2.5.0.26074 (Win32) (x32 Version: 2.5.0.26074 - Firebird Project) Free M4a to MP3 Converter 7.2 (x32 Version: - ManiacTools.com) Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0 - Koyote Soft) Free YouTube to MP3 Converter version 3.12.13.925 (x32 Version: 3.12.13.925 - DVDVideoSoft Ltd.) Freemake Video Converter Version 4.1.1 (x32 Version: 4.1.1 - Ellora Assets Corporation) GameSpy Arcade (x32 Version: - ) Google Earth (x32 Version: 7.1.2.2041 - Google) Google+ Auto Backup (x32 Version: 1.0.21.81 - Google) Grand Theft Auto(TM): San Andreas (x32 Version: - Rockstar) HyperCam 2 (Version: 2.27.00 - Hyperionics Technology LLC) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2086 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Loksim3D (Version: 2.8.1 - Loksim3D) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation) Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mobile Partner (x32 Version: 11.302.09.02.511 - Huawei Technologies Co.,Ltd) MorphVOX Pro (x32 Version: 4.3.13 - Screaming Bee) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (x32 Version: 8.0.50727.42 - The Firebird Project) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation) Need For Speed™ World (x32 Version: 1.0.0.0 - Electronic Arts) Origin (x32 Version: 9.3.11.2762 - Electronic Arts, Inc.) Packardbell_EcoBtn (x32 Version: 2.00.01.0 - Packardbell) Picasa 3 (x32 Version: 3.9 - Google, Inc.) PlayStation(R)Network Downloader (x32 Version: 2.02.00076 - Sony Computer Entertainment Inc.) PlayStation(R)Store (x32 Version: 3.1.8.07881 - Sony Computer Entertainment Inc.) PunkBuster Services (x32 Version: 0.990 - Even Balance, Inc.) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6093 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (x32 Version: 1.00.0145 - REALTEK Semiconductor Corp.) Ricochet (x32 Version: - Valve) RollerCoaster Tycoon 2 (x32 Version: - ) Secure Eraser v4.0 (x32 Version: - ASCOMP Software GmbH) Sony Ericsson Update Engine (x32 Version: 2.13.8.201307151333 - Sony Ericsson Communications AB) Sony PC Companion 2.10.165 (x32 Version: 2.10.165 - Sony) SpeedFan (remove only) (x32 Version: - ) Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.) Steam (x32 Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden SYMplus Drehen deu (x32 Version: - ) SYMplus Fräsen deu (x32 Version: - ) Synaptics Pointing Device Driver (Version: 15.0.4.0 - Synaptics Incorporated) System Requirements Lab CYRI (x32 Version: 4.5.1.0 - Husdawg, LLC) TmNationsForever (x32 Version: - Nadeo) TomTom HOME (x32 Version: 2.9.5 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.) Unity Web Player (HKCU Version: - Unity Technologies ApS) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp) WinRAR 5.01 (64-Bit) (Version: 5.01.0 - win.rar GmbH) Yontoo 1.10.03 (Version: 1.10.03 - Yontoo LLC) <==== ATTENTION ==================== Restore Points ========================= 05-01-2014 19:48:41 Windows-Sicherung 07-01-2014 19:35:06 Windows Update 11-01-2014 10:13:19 Windows Update 13-01-2014 20:31:19 DirectX wurde installiert 14-01-2014 15:42:28 Windows Update 14-01-2014 18:38:33 Removed iTunes 16-01-2014 10:43:10 Windows Update 21-01-2014 18:02:35 Windows Update 25-01-2014 18:50:38 Windows Update 28-01-2014 21:30:29 Windows Update 02-02-2014 14:01:53 Wiederherstellungsvorgang 02-02-2014 14:07:01 avast! antivirus system restore point ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0C1A4037-3102-4E10-92CA-BA38AEA420BF} - System32\Tasks\Games\UpdateCheck_S-1-5-21-760683073-2288428105-1553054817-1000 Task: {5056B3F3-AF45-478B-A9F4-50EF763C61A4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {5747795E-D3FD-4FBF-8CC0-4D15FF0A529D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {5F763B5B-D0C5-42FD-8144-DF4731BFFB7D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {72C2CEDE-2462-4E4E-82BD-C7BC0A2299BA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {A91534E7-4B59-4B7E-8AE8-104AF2BC5AEF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {AE70A51A-6F2F-4D14-9FA8-CDD0B64CCFCE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12] (Adobe Systems Incorporated) Task: {C1958198-2E6D-480D-9BDC-9B316A3EC776} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-07-24] (Piriform Ltd) Task: {CDA09FDA-103A-43E1-97E4-223C63E2A8B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22] (Google Inc.) Task: {D020603A-8437-4E54-98F0-A74F8FF70D5C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {D587DEF6-C37B-4955-B738-28E9062A92B9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22] (Google Inc.) Task: {D694BF14-6C50-44E4-B572-FDE0373B11C3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-21] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core.job => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA.job => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2011-08-31 19:13 - 2011-08-31 19:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-01-28 22:09 - 2014-01-28 17:44 - 02166272 _____ () C:\Program Files\AVAST Software\Avast\defs\14012801\algo.dll 2014-02-02 15:10 - 2014-02-02 10:38 - 02168320 _____ () C:\Program Files\AVAST Software\Avast\defs\14020200\algo.dll 2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-21 19:14 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2014-01-21 19:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-01-21 19:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-01-21 19:14 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2014-01-21 19:14 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Basti\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-03 11:36 - 2013-12-03 11:36 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-12-21 10:42 - 2013-12-21 10:42 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Basti\Desktop\2013-11-02 15.01.59.jpg:com.dropbox.attributes ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: avast! Network Shield Support Description: avast! Network Shield Support Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswTdi Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Event log errors: ========================= Application errors: ================== Error: (02/02/2014 03:06:59 PM) (Source: System Restore) (User: ) Description: Unbekannter Fehler bei der Systemwiederherstellung: (Windows Update). Zusätzliche Informationen: 0xc0000022. Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second System errors: ============= Error: (02/02/2014 03:06:47 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:50:12 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:37:18 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:03:18 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (02/02/2014 02:02:53 PM) (Source: Service Control Manager) (User: ) Description: Dienst "MgAssist Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (02/02/2014 02:01:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (01/31/2014 03:54:16 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/30/2014 10:17:32 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/29/2014 10:09:49 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/28/2014 09:59:31 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Microsoft Office Sessions: ========================= Error: (02/02/2014 03:06:59 PM) (Source: System Restore)(User: ) Description: Windows Update0xc0000022 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second CodeIntegrity Errors: =================================== Date: 2013-08-28 21:15:53.961 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.734 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.395 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.135 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.402 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.312 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.062 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:41.962 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-05-24 18:51:58.319 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\anf0100.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-05-24 18:51:58.287 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\anf0100.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 41% Total physical RAM: 3893.15 MB Available physical RAM: 2263.71 MB Total Pagefile: 7784.48 MB Available Pagefile: 5982.23 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:555.07 GB) (Free:432.08 GB) NTFS Drive d: () (Fixed) (Total:40 GB) (Free:32.24 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=555 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ==================== End Of Log ============================ das sind die Logs von mittags, also aktuell |
02.02.2014, 23:32 | #4 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers
__________________ Logfiles bitte immer in CODE-Tags posten |
03.02.2014, 12:32 | #5 |
| Überprüfung des Systems dort hat das Programm nichts entdeckt: Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.07.0.1009 www.malwarebytes.org Database version: v2014.02.03.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.16476 Basti :: BASTI-PC [administrator] 03.02.2014 11:24:59 mbar-log-2014-02-03 (11-24-59).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 251292 Time elapsed: 45 minute(s), 44 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) |
03.02.2014, 12:33 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Adware/Junkware/Toolbars entfernen 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> Überprüfung des Systems |
03.02.2014, 13:29 | #7 |
| Überprüfung des Systems Alles erledigt Geändert von antivir17 (03.02.2014 um 14:23 Uhr) |
03.02.2014, 14:09 | #8 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Logs bitte nicht in den Anhang sondern in CODE-Tags posten
__________________ Logfiles bitte immer in CODE-Tags posten |
03.02.2014, 14:18 | #9 |
| Überprüfung des Systems aha Ok. Das System zeigte mir nämlich an da es 5 Logs sind das es zuviele Zeichen sind und ich es mit Winrar hochladen soll |
03.02.2014, 14:25 | #10 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Sowas nur im Notfall bitte Logs hier separat posten, notfalls ein Log splitten und über mehrere Postings verteilen
__________________ Logfiles bitte immer in CODE-Tags posten |
03.02.2014, 14:31 | #11 |
| Überprüfung des Systems Ok, dann nochmal so Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 03/02/2014 um 13:08:05 # Updated 28/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Basti - BASTI-PC # Gestartet von : C:\Users\Basti\Desktop\adwcleaner.exe # Option : Suchen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\prefs.js ] ************************* AdwCleaner[R1].txt - [660 octets] - [03/02/2014 13:08:05] AdwCleaner[S0].txt - [52718 octets] - [02/02/2014 14:48:36] ########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [780 octets] ########## Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 03/02/2014 um 14:20:15 # Updated 28/01/2014 von Xplode # Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits) # Benutzername : Basti - BASTI-PC # Gestartet von : C:\Users\Basti\Desktop\adwcleaner.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** ***** [ Browser ] ***** -\\ Internet Explorer v11.0.9600.16428 -\\ Mozilla Firefox v26.0 (de) [ Datei : C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\prefs.js ] ************************* AdwCleaner[R1].txt - [859 octets] - [03/02/2014 13:08:05] AdwCleaner[R2].txt - [857 octets] - [03/02/2014 14:19:50] AdwCleaner[S1].txt - [779 octets] - [03/02/2014 14:20:15] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [838 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.0 (01.07.2014:1) OS: Windows 7 Home Premium x64 Ran by Basti on 03.02.2014 at 13:11:47,15 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-760683073-2288428105-1553054817-1000\Software\sweetim Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{45057E3E-EDD7-40E1-896B-FBE3B1A40CDC} Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{AE64E4CA-A961-4AFD-865A-87B52CF4BF83} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\Users\Basti\appdata\local\appshat mobile apps" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{00E9284A-DBD3-42DD-B01F-081A42B571D9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{018636B8-FAF3-4BCC-A89B-90377FD41580} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{01AC3576-34D5-4B33-B468-44717EEE9B4A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0377A35F-C2E6-47C5-91B5-48969A04707F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{038DAD84-6808-46B8-8CEC-B0B259511A08} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{03C774E9-C1EB-4659-83E4-371DA3458878} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{04100304-8778-4F8F-B248-0ECB16C9C6D1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{045B8BDA-41D2-4827-8C18-1EF46D664F66} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0460D331-E8A2-4D53-B784-78DE1FA80F6B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{049AA13D-1B08-4A87-99AF-10FF8411F9B3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{052023F1-459B-456C-9417-18F3DD0F060E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0669C382-1135-4446-BBE3-F18725DD504E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{06D6046A-2EF1-4415-AB6F-C0A93CD592C6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{07581BD6-E676-43CB-9153-C39E5B0523FC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{078AD134-DAC6-4667-B4E0-B5718588884B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{07E3409B-25BE-43C4-B838-4A07215907B9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{094B8061-1272-49E7-AB6A-5FEE2A2E6703} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{099D9E79-4336-4066-84BC-FEE4946F2BC0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0A9D46CB-6A4B-4FF3-89E1-9E44DBA80427} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0AC6E307-A96C-45EA-A62C-1E0511FA5A91} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0C8C1A42-35FE-4F4E-9F57-844E6EB5CD04} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0C96FDAA-3D62-4623-9746-23A044ECB3B2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0C9F791C-E559-48F8-9621-D95D2DCC5E73} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0D3F7B49-484B-441E-85D1-7D7C2E20E86A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0DA36F8D-8946-4F81-9137-6C1EBA5FC2C9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0E15B3DE-7A70-48B5-A409-4D5243CE0A02} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0E3D3D4C-BEF9-4E31-8319-B98F0E0AF1AB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{0F6692F4-7F06-4F64-9643-A5FA49633707} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1015606D-5F30-4710-94C9-AE8BF9DDE8C3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{104BBDAE-C9DB-4A9E-A0C3-51F5C7E89E08} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1061487A-ABB0-448B-AD7E-71DAF017041B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{10808CEA-0800-4F51-9841-AFFF4B2B6A07} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{10BD8604-5190-49B4-9A54-C25589ACB5C5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{11498032-E4D2-4466-9522-ABC1D79FEDE0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{114E269B-1096-460C-BACE-4883FD272E20} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{11AEC245-3306-4F1A-BCA3-539A3B846956} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{12BADCE2-6378-4D93-8D96-07DFEB43A035} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{13F9F076-D2B4-498A-ADF7-9A201CD490D5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{142A36ED-D91B-40E0-92E4-7458B09C2DB9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{150CFC0D-540A-4D17-883A-354D32ABFA63} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{152D6249-ED31-4CDE-9D82-1E813192576D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{15D93AFA-B961-4200-B225-05CBAA91C2F7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{15FE82B3-192D-4852-BD3A-C1058A996AAA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{160B19A8-34E1-4F46-932C-3A002B425EDA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{163447E3-3EDA-4A53-8122-E3485C18FEC3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1641458D-67E5-48C4-BA0E-D3470AF87B04} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{16B7E1EA-0FC2-4E4C-A831-8D194B671B85} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{16DD6A71-1034-4776-BBDC-2826AA23DE2D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{174B3918-1256-4ECF-B2AA-898CA1D2A4CF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{188E3501-6714-41FD-BED7-2A6C47AC5E01} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{19D4B0A7-41AD-41E3-A7BC-720139D35601} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{19E3D245-09B5-4DC4-9C49-D195FA0C0832} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{19E450CF-F881-4732-9FD3-8AE414E0B20C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1AA40DA8-5EEC-4BE6-932C-FCEC3039FFDA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1B50D68A-E702-45C7-AB7B-393C7EB4BC77} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1B6FC893-422C-42C8-907E-DC8A68123D47} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1BF87FBD-74D2-4D47-9A71-928416C39298} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1C51BE93-5B7C-4A07-9E02-01638BA09DBA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1CA95B1F-592A-4AEE-98F8-2E66037DD501} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1CB0F8AC-6B91-4D30-80A5-04B4D13A2451} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1D023E05-FAD2-4737-99F7-E118330593B6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1D7AD209-DB46-480F-BFB5-74E29E807202} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1ED1BB4C-8CF2-43C5-9058-CAC5129D1F3B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1ED257A0-F680-4D80-9482-9E1149CEFB21} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1F8A563E-4E5D-414C-BBCA-9FE9642A9E11} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{1FCC0741-14FE-46C4-8E0C-F0EE6D908A57} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{21A7E864-1CC3-4BBD-9D4B-E7388D70318D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2249F784-922C-4B8B-9E96-54AD7B02F5BA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{22715E0F-3527-4457-A21B-37A1C37AF4DB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{22863DD7-7191-4F5A-9B01-7FD02591C5DB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{23BAEBAB-BCDD-49F6-87A2-25E1730469F8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{252564FB-8E3B-473B-8483-3D4898E5EB24} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{260AB1FC-2AE7-499B-9FA9-775D43625720} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{26CD11F6-837B-43FF-AC73-CD712A33D35D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{26E5AF3E-0E6D-4739-9F34-4F2EF1E1FD30} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2743179C-30A5-4905-920D-E382E1C3E90D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2762C250-F9DA-49E9-B190-EDF5DA0CB413} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{27AD903F-09D3-419B-8793-6AAF0707FFC6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{28020C65-F890-44E0-82E7-B33746A975EF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2818BD42-761A-4509-ACB3-D90F90609F25} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{283FCEB0-C6A2-4847-914B-AFA2A8B44343} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{28872DF4-E0FC-479D-9D7B-149360D33CDF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{29F84C5D-8444-4BB3-8726-7CD120B38AB9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2A7A3055-AD0A-4395-B7F6-B4CBDB1CE88C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2AC09C4D-30CA-4AEB-BA47-FE7ECA9DF8F0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2AD8B710-CE06-4718-A24C-8D009FFC8C28} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2B23C47C-66DD-4439-92E5-BBB31189CB3F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2B53F09F-5414-43EA-924F-C4D585734498} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2B60CD3E-1698-4216-8CCC-4316905B2DD0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2BF86FCB-585C-4729-9B84-DE64A6F7C6B6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2D0007BB-A23D-46CF-BA7C-0DC0D32B3D73} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2D019DD0-34AE-4730-B908-521BDA895FE9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2D896E3D-630B-44B4-BA0C-16A3DA7E82ED} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2DF81336-DB41-4DD3-975B-569F0E036094} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2E4C2438-2624-4DD6-AC5E-CEC6414E9D31} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2E8F6D2A-AC7D-49A5-A0B4-8B98BD7A224D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2EE5AF3E-97F8-44D5-AF43-0CE978412879} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2EF9F367-4CF9-4BF0-8016-EDFA4FF9C491} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2F176640-3082-4921-AFA2-80695B1A62B1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2F2C6BBD-7518-4234-AAEF-45FE963F1B09} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2F52D757-C71A-4684-98BA-D96D20D3F1C9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2F682DB7-7205-4096-9447-ACF735FEF9F9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{2F6E05BF-61D5-4698-B97E-B1C980A1FEB6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{301226A0-6395-4FD3-B432-943188704833} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{303D96EF-B50C-42A6-B9C0-EA91AA37A1B4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3051512F-B3CC-4F99-A8DE-33A3968BE86D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{30E2B29B-B193-4EB3-B3D9-18B487482BFD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3146F09D-101B-4500-A9F1-690FF51B5938} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{32197456-E7C0-4ADE-977A-566699D9A5AD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{321D7E7E-05A9-4FFF-B0A4-170C2FB5EC93} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3286442A-7247-4E7C-97D8-54B76826B0BB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{32E62E34-2581-42FD-8B61-02F849E24D44} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{332B3E67-F8BF-4066-8629-98682E1587AF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{340E9666-E283-46A2-BF15-7390BBE3E2BE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{34262F4A-3CDA-46BD-80CB-E70260ABBE73} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{342B230B-E6B2-4050-923F-DCF539ACF1E0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3461BB68-E540-4596-88EE-B83F1B7DBB0B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{35B82E20-391F-4344-8743-F5941747D565} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{361C02B0-F026-4389-BA53-15C614CDD6B8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{37DFC362-771C-44EB-AA45-E5C6A0E40E21} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3856DA32-F985-48AB-A2E0-9217B5E3F2E9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{38B244C9-45C8-41CB-9C3E-60CD28F1B8D9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3958E2B7-B676-4228-9965-DA5B7B00AAB5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3A5782E0-74C1-40C6-84F6-FD87889ADCFD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3B05D076-2C3D-4828-A372-6F4DD08F0667} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3B1AD28B-C125-4F32-B30F-CDEF838547A2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3B9ADC7E-6FCA-4858-A57A-DAC1895F42AD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3BFCD181-160A-4019-81FF-6AF4921AB2FC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3CDC5B49-E004-4E41-A4B9-370E32FD39B9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3D6362B7-3431-4E6F-BE6F-89B350EA9F07} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3E94F280-1C06-46D4-9728-5BDBE1E38109} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3EC5A8D3-5A63-4EA2-BAAD-E50D3582916F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3EFE3436-9C2A-476E-ACAF-C52D4DFB43CE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3F6FBAA4-F829-431D-8E73-5D4E33B5FC6E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{3F9DEC9E-896B-4E88-A591-F482F5211E07} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{410C1335-C6D9-4039-8711-5012F139F7D3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{41C2FCE1-029F-44FB-8D5A-4B5791FDE565} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{42144D4D-21C2-40F8-8381-F26EF41FCF1D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{42153209-C8CA-407F-BAD7-8F5A1572467F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{42E9E3D4-A649-453A-ADE5-F8A54C49E953} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4342F700-FEF1-43A2-B803-3BD6C8A5810F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{43FFB947-D0DB-4EE5-9A7D-5F04AAC6FF95} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{448B8A64-DC66-491C-82DD-73C4C73D34A6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{44EBE16E-239A-4661-B60A-01A960DD47A0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4576B04D-8861-41F7-9DDE-96F2204C306A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4600B7AC-6582-4274-8F7C-DDFABA32B9C3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{46A341FF-9FA4-424F-A921-25EBD39C6C2F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{46AA40E9-969E-457E-B2DC-2CABBF7BE67C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4762F102-2C29-416C-9369-4E2A8022D548} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4860B82D-DF15-4D68-B83E-2C9235D8A6CD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{48B13E8E-F2A5-428A-AA15-B0735C8FD122} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{48C61BBB-2AA5-4DF6-93BB-FB19D5DEA996} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{49CC5505-0759-4689-8C27-A068EA330DDC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{49D08A03-F613-47CE-BB45-693737B980A1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4A06FF36-2619-4D92-BABC-D71041AA13B4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4A4A84B8-1341-4FE4-AC43-E31C1AD87F7A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4A603BBD-4E38-4B6D-849F-5E3723E4E326} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4A6FC9BC-2B08-4D91-98D6-95CCF4EDBB6B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4A9B669D-4F67-4E26-A7EC-B006D3ABCD1E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4B60BD80-6AE2-43E1-A1A1-68035AD55671} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4BD989BB-4934-4C7B-BA58-D55D1CE410AA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4C201451-7F8B-4EE9-AD78-33A5BE2EFA0E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4C2BF0BF-818C-4238-9CEF-66D0225081BD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4CF7FCF1-121D-4CFB-95A2-177DE0D50A31} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4D3CECE4-7BFC-43D1-8347-62B27E363004} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4D5544CD-B370-4126-AA5D-C64A719608B3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4ECC3450-802C-47BC-9F2A-67E0DA319A96} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4EF48DC2-0EF4-49BA-9591-6586640FADA0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4EF8CCAD-0076-4C97-9516-FED025CA574A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4F5963A6-F7EC-49EC-9B13-7994642A0442} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{4FA0A9AE-F85A-4C98-A97F-A5D5EAF3E714} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5086A753-8BDF-4C0C-939D-CB1DA3A3255E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{508FD4B3-EA30-4DC7-9F2E-5CCFA6A380A2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{50A61522-74C6-4731-A749-A60A10E36386} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{50A6E9A1-1C69-4345-A16A-6B4764E48E9C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5127AC19-0B0D-4616-B0C2-8843B78931C7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{515461F3-8C82-434D-8CA2-68B071E141FA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5183986F-ECE5-4E5E-B1E6-4974F8143037} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5265F2B9-861D-43F5-A571-193EB88CD23E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{527FB295-BFD0-441E-8DB0-14616D710FEC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{52A4215F-AAE9-43BC-9A42-D17F56182A40} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{52C8B4CA-7E8B-4432-9C6F-6B4EB77F1C14} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{532AC534-C934-4C97-9339-5BB8A3F9ECFF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{53DD6A1F-F15B-4ADB-A0C7-2048C4AE076E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{53E190FB-D6EE-4C71-B24E-B92BFD8BA08C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{53EAA79F-DF36-4F1E-A8ED-9AB8A8DC7FD5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{54039670-BCCD-425D-B10D-591808AF36E0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{541D875A-41B2-4818-9200-1777A341D407} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{55DBD9FF-63C4-43DD-9184-85CFBB0B3F8C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5604D95C-5125-4ACB-9AF0-8A785972CA26} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5630A77C-10DE-455C-A975-0EF1B8348486} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{56B1558D-B83D-4CDC-8DEB-70ED53443E16} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{57869EDF-D8CD-4BE9-B5FF-6C145B7898E8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{57D0A383-2C84-4449-980D-6E6CD2B81253} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{587235B4-5B30-4D0E-9EB7-7399BCE8719C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{58D4D7E7-E7A6-49A0-8359-C8F6E5DDED2F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{58E62E42-85FD-444A-9783-D981243C4E6B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5931DAC9-EA7B-4324-9149-D2583650E482} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5940DF7F-5BBB-402A-A3B1-2842C8CB7FDA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5941A9C2-8C8C-4986-BFEF-B7FADAEAB667} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5A1FF661-718B-4AE2-B054-3F197F30852D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5A3B56ED-A596-40AA-A066-1C5EEA761483} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5AFF31E1-CB3E-4D4A-99F3-4CB732C9C5D3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5BA47FEB-CADE-4163-B69E-539118D06F58} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5BB35B08-767A-4DA9-9647-00F88F29FDF2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5C723DDD-CF35-4C9F-84A0-63060AB4CA53} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5C77EF2B-E1FE-46C7-A80C-3CB08595C5A1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5CEAFE3E-0117-4139-BE87-06F483A5A800} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5CF5E417-90A9-460A-84FD-94DB49F75977} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5D7E84AD-0FB1-4C2F-A179-6F618C392F05} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5E36E2AE-7FB6-4014-A33F-7411B6D2E97D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5EA92725-0DD9-4E13-9A10-EA31D0561DD4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5F2D08BE-001B-450F-A259-A9F41F48F1AF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5F647C26-A99F-4FCB-9E0B-5B6AF46E96DB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5FB163D6-9CB6-40DF-A2E7-F1ABCDBB3039} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{5FF2039D-A112-40DA-B973-A9AE3719A448} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{606C4EE9-A240-4ADA-B308-D874556941AE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{608A03D8-94C8-48C0-A3DF-205ECC47DEFE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{609C9171-1197-4029-87A7-4B2AD09C733C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{648D4730-CC72-439A-85FB-753D10877E22} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6586A824-565E-4E74-BA7A-3E02CD055810} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{65C0EB29-5C6E-4FFC-B517-6D72176E3606} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6654DBAC-9BB0-4B67-B019-A6FB1D163E01} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6656EB81-3AB8-4C8F-9D1A-CB1166E86123} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{66841534-85D7-4D5D-BC31-831DE90606D4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{675D38CE-01AB-408C-8608-32EEDC03395D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{67852439-C9C0-41ED-8F36-4AAE0CE50C98} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{680D2A36-A116-497D-BCD0-ACDA8B23F298} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6833D174-1D89-4315-BB5F-7808732C1829} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{684EE208-D9D7-4593-B5BF-23F2ED493C2A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{689A5DDF-6F91-4300-A5A3-6E957BF1E082} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{68F8E688-215B-4D7C-B0E3-2FA6D1A947C9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{69407157-84F0-45E6-A925-0F5DE397E72E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{69814F41-7387-4877-B1C1-11202B1C0132} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{69B7137F-2E53-4424-BB14-85F4C7433971} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{69C48416-6062-441F-A300-4D0E09356125} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{69D1A4DF-409E-42F6-800C-6D63526AA205} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6A58EE1C-9683-4069-958B-6FDE191E8548} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6AA0F293-4FE5-485B-8FA7-BF8839F24724} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6B02730F-0108-43D8-A2F7-A63CF3B4A6AA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6B44AA4D-22EC-4F08-949D-DA73BDAC07E0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6B7BEBB6-F90F-46D9-AC5F-6BD2C6E7A5EA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6B8A4DFD-FC45-44B9-85BE-8C87DF17E862} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6C2A16CF-FE53-480D-8B82-C15724AB31EA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6D187A20-AE57-48AC-B4D8-F9717F8F0719} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6D26FF50-6E88-4434-83ED-B50AFBE3B0BD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6D952876-6126-4A41-90C4-65B3545F4EA8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6D9F9B18-7754-46DB-A82A-7346F08B8AD9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6DA7F9EA-C7F5-488A-8C5F-445B9F0B3955} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6E27EF56-E845-47E9-BB9E-9B1DA4F2E661} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6F1A1A93-BB9E-4F0B-A6AB-5043FBFB64C5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6FE4A2A5-ED29-4D26-A4C9-99115624079A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{6FF0163B-E4DA-4C13-9160-2FA7F58ACB03} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{700A0A1C-25D7-4648-A7A8-967069F36726} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7051BAC4-FB70-4523-B260-FD365B13294B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{70634E72-54A9-4012-A469-EBE6DB6372ED} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7082F839-C29C-4617-B42C-9F31D01E00EC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{70F06E89-C01F-487B-8BC0-BB1B28EAF70E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7130922C-1181-441C-ABC6-C56B9E7E6E57} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7140E36B-C240-47D0-A3FB-1738D0A2DED9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7169BB06-0F3E-48C0-80D6-1DA732CD8998} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{71718902-FFE6-4B56-8E3E-EFF344D68A9F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{71B36EBF-AC0D-4174-B710-E9DE6B3E6C9B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{71F43E72-92F4-46B9-9CD3-61665FC83545} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{72857B24-70B5-42CF-B196-987300C17F6A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7293D5A2-5749-4345-99B6-EC93ADDC8D1D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{72BC5CC3-5FCC-4AA1-BCFC-4B004974DBBF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{733AC3FB-B819-40E6-96C0-B90F79801669} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{73D8AA15-E508-4D7A-ACF9-7BAA1B200A5E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{740E6F17-E444-420C-9B4C-58EDFC16359C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{75232EAD-5395-44EA-B58D-3BF4F383BE43} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{77D83181-FEEF-49F0-B5E5-F55DA02BF07E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7890CE5F-9ABB-4B67-8ECC-D6688DF869AB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{78E2DE05-E5D6-4FB1-9429-EB33B2BA7A0A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7974F31C-7FDC-42F1-BB03-038C4805A373} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{798EA91C-D38B-4460-A9FE-3A25C54CC231} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{79CDFC3A-A008-4469-98C6-C71697369B62} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A23344F-1BE4-4700-B7FE-CD444DDDCE6D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A24D755-68C7-470E-B146-21AEA9CAB870} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A3DDC7A-B7A1-4208-9CDB-3919632163FD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A63FB47-8D3D-4A68-8542-0EC5DABD567D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A904226-8B8F-46AC-A032-EC0E94255F94} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7A9569E3-6E3A-4C2B-98EF-253A01D40FB3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7B8A2491-5380-4BF1-9E4E-9224565DB0DE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7C12A770-7A53-439E-9464-80A3B06740BC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7C218DE3-770F-4939-8C62-8ED364447C4B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7C386662-EB64-4A2F-9F0F-967146ACA504} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7C898CD1-0B28-4F6D-B6B0-7F00F0E391F3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7CE870FF-10FD-42EF-BFE9-A284D6C63A60} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7E7765F3-79E1-4001-8EF4-24ECC484F30C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7E8752C3-4EF2-45F8-9FE0-3B87950C8A79} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7F302C6A-53B9-4D52-AFCD-3D425A65AE5F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{7FABCE3A-0220-4215-8281-EA003D633FAB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{80292309-3839-4844-B5B4-9E162DD10CF7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8106FAF4-8849-441B-9720-E4BEDFBDDDEB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{81B504BC-92A7-4086-8E05-A88704947A0B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8235387C-FA31-462D-A69C-5D09F4651053} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{824DF6D0-8643-460E-940E-F1E6AB46C048} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{82D9733F-CE07-46F5-A97B-1DA843FC8BAB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8302D6FB-13E4-4FD4-BFF3-A887DB2E8317} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8419B066-DB2D-492D-9DFF-63C7930C79EE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{848C4A33-C071-47FF-9E4A-C8061C97C6F4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{84E9851C-7AC6-4F14-AC43-6BADFC893ECC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{85464B59-423F-4A5E-81FD-76E70BE4C035} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8554C112-6932-4416-B5D5-6CCF50344940} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8568F29C-1887-4AFB-9769-CDF5CB2AC38C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{856D7B27-5A12-478D-A2C9-C64A06C358FD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8594197C-F757-43EA-B3D8-104FB35A8EAE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{85FA085C-6272-4124-BD49-CABBC237C2B5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8616F3DD-D916-45BB-9E15-31265FA57CD7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{87465CDC-FC65-4B65-B612-D18DAD28792B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{87E64BFB-A308-4B62-BC0A-B951A9290292} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{88E42A0C-3F5C-4433-9F79-3296A9548752} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8903DBFC-6343-402F-B358-05F7BB9C4743} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8944D108-C840-4783-BE00-5FFF0796B6A3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{897909F8-78A3-4984-8B74-A192A05B9128} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{89D6E8B5-2CE4-48A2-95F6-97C310F14EE3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8A116198-D1B9-4C37-AB1C-9FF88DDC56F1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8A80BF2B-B85B-4FB9-BF5C-C48098C63AE5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8B5FD5D4-9C59-415B-B57B-D05829A11272} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8B9C8CDC-195D-4B56-8EFA-31786CDAD1A3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8BDCAA2A-D951-415A-9313-BDC920FE34F5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8C92FB30-2E50-496E-9BE7-611618A6425B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8D7219EC-E2D5-4929-BB5F-5285F8E80579} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8DA4AC1D-C1F8-4E31-A182-EDC203575AE7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8E0202B7-31C3-4DF2-8D50-CC58292FD828} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8E3074C3-6710-46FE-93E3-4698174F04CE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8F5301D4-2228-411F-9886-E11F8F080DD9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{8F8F1557-B7E0-415A-88FE-2474CE414A65} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9154B49D-0635-477C-AF96-8E6261254103} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{916A975A-063F-48F4-BE2E-287B8A8525AB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{92169C04-1320-4558-A356-0C084F1834C2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{92532E11-3168-44EC-BABC-1B63439E1CA7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{927DED2F-FC4C-4F07-96E3-7B4115A8087A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9291E244-274C-49EF-8BDE-5BCC3E202B15} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9321971E-A2F4-469E-894E-B8A8B61A3365} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9330A19A-5113-432B-A446-BE6E26A60E24} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{94A22E72-4D49-4A94-8F0E-800BA7A7C785} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{94AF564D-CB01-4A7B-99A7-EB835728E31E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{94E2C781-36B8-4368-B864-629961506BB5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9574850F-F57E-4C9F-B847-12F76E964A9A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{963A02A6-2917-467D-A4B1-F4860E1E2DF6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{966FA68C-C1E5-4021-BB47-A74584E39799} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{96AE2608-07BB-435D-9937-1472ACA59841} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{97B05BEA-FA22-42A6-8BCD-ECF28F54177F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{97D4115F-90D1-49E5-B7EB-D3399D2CC50F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{97F978BB-8298-4D3D-8D51-B68ACF2FBFF8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9931439B-7302-43E0-9686-F6A7535D8FC0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9A362615-F920-4C52-BCA7-90BA171B6BD1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9A94C7CA-2816-41CA-9D6B-698F18BC41A8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9AC9E345-CF3A-4962-B0B2-7737CF91BB6C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9BC5B298-6A3F-4591-B5DB-8813BAE8471E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9C4924F2-12C3-466A-9220-9358257DB9EB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9CCF9BD1-5BD6-4BA0-9552-69E484CC9D96} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9D4FEB82-0E24-44B0-9DA9-0C3E5CF87FB5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9DDA8D2F-A0A4-4808-90ED-34A60798015D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{9EBB1DC2-E4BB-4DB4-B3B0-30214FD26C20} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A0667BE5-BAD5-488B-90C1-2488EEB8AD22} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A068C3A1-DEFD-4A1A-B11F-6D5A36CC7914} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A1AD38A2-DCDA-461B-AF0A-CCA51F742002} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A1C9E30D-1FCB-4C04-90FE-B594799A0F2F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A20DB59A-5F49-49B8-8FC5-DC75372EDC48} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A23DB59F-3D11-4DF0-B45A-559069F757C7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A2D657D4-6150-4E95-9B43-8DE88CB4943E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A3067377-BE10-40D9-BF39-8953D0FF98A7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A32BD0C3-CB92-4389-9C26-DF03008B7308} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A36AB4F3-2797-4200-949F-0D5CB3343E36} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A37454FB-60C2-4ABA-A3AD-24B7F3A5419A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A3C3B3C0-B753-480A-AEC8-8D427B2364C7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A44B5CFC-5976-4A8B-B38F-47FC80B87832} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A4CC2453-71A6-45F8-B886-D8666986D63D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A4FF0354-6415-4E12-B68D-8EB5BF510959} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A52B3E27-621F-4BC2-8CD8-D3F92E6CC5D2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A57B78E2-0341-4FF9-83A8-5A315680A80E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A64719F1-E3EB-4A14-A815-F78D518280B0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A6AC4F75-2C77-43DA-A0D6-82188C4A6C9E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A6DB857C-A2F3-4700-96F3-931C74DD9F49} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A71AC5B1-7EEE-4C52-906F-5963EEBE3667} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A71BAC12-7BE0-4CE0-AC41-94935817C482} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A71DA0DC-46D0-4422-8A42-1262D0178C80} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A7E972FC-1E03-4ECE-B21A-EE79FB294A43} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A8024717-C082-41C9-AEC1-8ECB98B245D2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A839A979-9387-4476-A101-11102FA11C02} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A8449371-F8D8-4606-A6F0-B901D1F01B06} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A84E14EE-0F41-4342-AFB7-AF2645D845BC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A8560B54-29B9-451B-893D-5D4E48C6C95E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A8BA1057-42A7-4321-B9DA-0A349E187D6C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A93A5960-2BE0-43B7-9862-CABC26F87CB5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{A9BF0C50-D11D-4BAE-89C6-A82B27540927} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AA2834DB-63A5-45FB-97AC-EDF28B86317F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AA331DEA-3E02-46A1-B57B-625B7C8A9667} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AAC37616-BE8A-4B98-9770-11633CFC99DD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AAD6AD5C-9CC8-4178-A07D-9C414171EFDF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AB93D038-9308-4ED0-8513-708F56D009C8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ABC319F3-A585-481F-88BC-5ACC6A9B114A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ABE74A2E-9280-45C4-A82D-CCAB6AF8C6E0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AC01D32E-3252-4EFD-98E4-1CFA9FCD76DB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AC0AFC21-9F56-436A-9E93-A25BC0BD1575} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AC841668-5798-4939-A753-5A135C35AE15} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AC9809F7-2C00-4815-BA8F-CA3115E79D31} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ACAEB25D-598F-41B9-84B4-59B3CCF5819D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ACEAC471-85F6-4894-A2D4-E0319210A254} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AD07301C-EE6E-45A9-A3F5-45A456AB1FCB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AD838111-BD2F-4564-A56C-F31996B995EC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ADCEF587-2F94-4BE4-A548-177A55E70C02} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AE154DE5-AC61-4513-8CFC-EBC44F702AF6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AE29A2AF-85C5-41C2-8D39-58CEDBE97716} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AE750732-AA24-4451-B028-9B2F8E874054} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AF532D08-4B2C-484B-8BC2-748F83059A4B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{AFEB0E85-81CB-484C-B615-A8F3BB2BD653} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B0389977-9CA8-44C0-9B77-B697E083ECFA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B0CFE2D5-4638-4419-B860-3B111E2ED5AF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B0E4253B-26B7-4971-836F-62F4A0630B0A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B176300C-A2A5-405D-8114-457E7D32F6E4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B247A2B2-F871-4683-BC3F-222270D98E2F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B3A550A5-7835-4A54-9D10-377B0AF6912D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B3D9EB6C-0841-44EA-99AF-A3E70E143AB8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B41300F4-CD0E-4D63-854E-5AD56CE94FAA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B450D276-DCE4-4ADC-9E4C-8A25EFF95490} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B4BDA60B-B4B6-4CCE-B5E9-3D3F53D4FE11} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B4D95A3C-4619-4087-B6F1-2E476F344722} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B4DD1404-C3D1-4EDC-884E-14E70ECB7540} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B4F2FF4E-1674-41B6-9204-A0845C80176B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B53291B1-52F3-43A1-A768-BD6961CD3F61} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B61F2C5C-4CE3-4F84-9758-B9AAE32DEC95} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B635E5F0-BC06-4ED9-BA7D-42E3D088CF6C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B753AC55-D24E-4A70-89C6-476626F651D7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B76DE0D2-B471-41B4-B342-149C7896C277} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B7D0AB3F-D38D-4649-AC15-3C8099FAF724} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B7F207B5-30D9-4B97-8F15-BE8ED8D5E484} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B85551B7-6AAE-49A9-BC39-4334C33BA60E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B89D5890-8484-414B-9555-125D7CFDE038} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B8A403BF-72DC-4873-892B-0C13B5AE95E3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B9126B21-706B-4010-8A5E-18A000A0A3A0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B9659BF6-0818-4C78-8A68-FF286F609E6E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B96DA0BB-469B-4707-A708-633C2CA73658} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B9A48863-2F08-40FC-A291-690CAC33AC7A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B9FA51C1-6C9C-497F-B0D3-C1CE0533964A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{B9FB4234-F902-4B8A-9E0E-4784EFFA0533} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BBE0E406-55C4-4D23-993C-0D057C24600A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BC3AD932-4510-4A95-ABE8-BE4A1F27B192} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BC6D2C6E-58D7-45D7-98A5-18959C4F275A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BCF9B6B3-887D-495E-AA54-942333CAD1AA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BD10C99C-A158-4571-9375-330953DD1EC3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BD6B6A91-777A-481B-BEF8-770EE6DEEF14} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BDB115F4-4E1E-4B10-813F-93E0CBBE31E5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BEB70DB1-066C-4462-8DD7-B7CF77FEC231} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BFA9E971-D498-4817-B404-01EC36F2ADDF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{BFD9ABAD-7735-45C0-902D-E72D9AF3FC3B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C0742D8E-A452-4BA2-88E3-EF3339596B1C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C126C295-3259-4896-9E17-E73101559C1D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C209A029-B202-4958-A7FE-A04C6BA6CA8E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C246072B-78AB-4262-932A-C64379776076} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C284245A-9223-42E0-80D4-84DDE2D7B2E8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C28F77A3-6103-4D73-8181-37345B0CA94A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C2E6BB21-5D02-4C92-8C17-C869960918F8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C32B6394-17FC-4804-AED8-7A0DD66E235B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C38C602F-3C26-432F-BBEE-0B5F8D6D231F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C3EF26A4-03AD-4D70-96E4-A41CB87A4065} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C4896D88-E3DA-40A0-B2B8-66FDD1DE40BF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C4E88BE4-7E14-4665-B152-A823FCF3E161} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C50608B7-AAD7-471D-8F82-C1A2361531C5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C5899779-62CB-4055-85C9-3AB115070458} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C6409133-AD95-429E-860E-2250A6D9B8B8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C654096A-9A6D-4892-89A1-3D58FA5FDEAE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C6EE2E9F-9CA8-40A4-8376-6689283163EE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C70EB392-AA58-43A9-A735-6CC778BBD74B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C71B0729-42D9-4A56-A4F2-0E3D31C694A2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C71F18C2-F05F-417C-9D32-194FF4133705} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C7D0A727-B29F-4D05-AAF2-9360F457CE4A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{C8686ED1-B263-463D-825D-3B949966546A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CA16E5FC-63A6-47A8-BD68-FD920AA380C4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CA49F72B-64CE-4102-B0B1-0F830B4A86E6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CAA9851C-C563-43D8-870B-DC910C04DC25} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CC1F9FEE-EE99-475C-A5B6-3EB827B1F519} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CC411210-0A93-4D3B-AC73-C9CC6B713392} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CC7C455C-6913-43D0-ACD1-320A360BAE67} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CDC92E8D-830E-4A07-8C01-2B1D7CEC448E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CDD0BF62-37A0-48AB-9747-76C05FCC3B1A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CE5B772F-07A4-41DD-9603-3F9665DDF2E5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CE620E91-D5DB-4B0E-80FD-D0850EAD54C0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CEC61723-BD1F-48D1-AE33-0CD2756717DD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CF59B88D-593D-4BEF-809E-4269CF632170} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CF76908F-6459-4B76-AEB5-CAC64694E4FB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{CF7F3E5E-F827-42BA-A66A-ED9E2377992E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D05E12CB-80AD-4448-B8EC-96B6978C9B12} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D1FA408C-0337-4A72-8B0F-60814A7056BE} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D1FB8AFF-6116-42F8-B931-B6EF1B561D2A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D22A9F93-7F70-429F-ABA6-5FBEAAF90A97} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D2365C79-5E02-4FF7-BD5D-2B6CB6AE81B4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D2C44262-19E0-4D98-B8DF-3F1D64AA8740} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D34B44B6-C8DF-4643-AC76-8287FA2E1A9F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D3BCFE12-5138-4CB1-8AB9-FFF3691C92F9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D435E0E8-93E5-48A8-8C2E-DFB07E442335} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D43E9052-4F3A-4108-8CB0-4FAD6FEA5179} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D513A9CD-3559-4177-85E5-296783DC857B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D564417C-3298-4BDC-A877-2D46DE3206B1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D5F98A10-AF48-453B-8ACE-EC6B7BAFA797} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D61AC02A-AB1E-4C25-A391-86F33CE3FEE7} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D68A2665-1D41-497C-98E0-4825C406D0DD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D7968BAD-AEBC-43B4-90D1-12EC650500B6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D7ADA9EF-F741-4DC0-B4A6-6808CB7E0669} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D818F5FE-E0C0-4E11-BA24-2B5A51A56A35} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D82404D4-097E-4785-B7D2-1167869CBF8E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D9476CAB-0DC1-4EC7-B242-E2A2B2D6B39D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D974E16C-0861-442E-AE03-FD1D8C98D8A9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D979858F-887F-4AA9-BFC6-AB834F4AE3DB} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{D97A905F-4A9F-47A2-97C3-ACBF767AB6F3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DA640E93-559E-4B20-8B2A-70C9AA4C34C5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DA6963DC-5356-4905-9F74-E79EB18C4EAC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DA80A363-73C0-4DDE-AE63-4E188329CAEF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DB39A170-84AF-4B4B-B72D-51D60F7D010B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DB70621A-72FA-43ED-BDE8-66DA5F2467E9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DBA55987-6847-4BBF-B24A-9B40AD2EA301} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DC561A6A-F281-43C0-AFAA-6A1DA51A8342} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DC5BB494-EA0E-4C8E-B9EF-9EB348A16FFC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DCAB6C8D-0D1B-404D-B502-A3169B3268AF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DCFDFA1A-EFC9-467C-9A7B-462DC4619772} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DD47C7B3-BF24-40E1-8670-5A815A390A4A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DD8A6122-8801-4185-898E-2A6EC24861B5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DD972B3F-C74C-46C0-A696-DC5E9EA69467} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DDB49F37-8366-4A55-B517-5EAE7EA20FE0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DDC6702F-2357-42EF-A607-26ECCA6DB374} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DE2534B3-D36E-47D5-BB4A-CD76CFB79E6C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DE674742-0F69-4618-8E96-5360BAC58F00} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DE7069FF-D385-40FC-8ECF-C9BCDE6E5D2E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DEFEECBF-F776-4897-AF0C-BA7324E15D59} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DF543D42-1303-42A5-8167-3FC45170EA74} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{DF90E706-FC49-4B51-946C-F11D3C0155B8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E00B03A1-F0CD-4609-B830-99BED5D51700} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E0107190-644E-4AA7-B9B0-C920E590F372} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E114AB70-5C55-4FBC-BC68-A47BB4213F3B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E12377ED-2C15-4573-9A67-30A953A80814} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E185E753-A20F-4187-8E66-CC892BC75E74} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E2954240-37BA-4CC5-A809-5D73E1716B5C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E29CD755-DBA7-4971-8384-FAA78E2499D4} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E2DA087F-F230-4805-BF64-F0EC5CDCC122} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E2DBB7AC-32B8-4B5E-B886-34FB8B922853} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E3CC04D1-48FF-4AD7-BBC6-2356576F41CA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E422D286-8904-41F7-B2FF-323CF8864EBD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E436CA59-E86F-4DF2-B2D0-08057FB9E250} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E4B26E91-F72F-439B-A0E4-A5DBADB7F089} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E4EAD86A-F241-4E19-AB34-0B0297E46C41} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E5435D3D-C662-4E2A-913B-5656D65C2CB3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E5A0DDD0-36B5-46AA-B43C-C0AA27E8AA86} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E5ABEDB9-11BA-4CE4-9A6A-9D0449ED767D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E6365C47-FA75-480D-BE95-682DC2559A75} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E6CBBE45-D014-4E77-928C-236783FD43CF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E736F7F1-9A3C-4E7E-8621-008F58B3EC43} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E773F984-8234-4E3A-80DC-35BC7190B42B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E77DAD04-D0AF-4A94-B0D3-FED580F78E38} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E80FC17B-DCB4-459E-BB4F-A77B9444DF4D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E83A8AE3-3F9F-44B8-98EB-F8780F7989CD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E84822AC-DD72-42C1-AA26-3474533B3875} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E862B435-12DE-48D9-8AA2-30C5B7A49696} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E86AA163-A35A-499C-88D6-E3A98AC1C8D0} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E88B1F0E-39A8-4F16-9058-A0F913410EFF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E9559D44-A49A-4B9C-842B-254987FAAAA8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E96BE50E-7D5F-4BC7-B28E-A25E642A8F67} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E97834F6-189A-4C77-B5FB-04DCAB52D6D8} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{E99762B3-F4BC-4845-9FAD-E39B786CA4FD} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EB74BBDB-B7C8-4CCC-9988-3CF12C05E558} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EC0D7324-EA65-4E28-A836-F13DAB4EC2A1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{ECE7C5DE-24A1-4B3E-91C5-5C1BA9CCDF77} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EE31D110-F9E5-4C6B-8BA7-5171AB64A9C2} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EE48E103-F0A9-40BD-BB53-E32CFB6FD8E6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EEA803F2-0ABF-492D-821D-5ABFB4875CDA} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{EF79AFBD-23F1-4212-AB20-886BBB92103D} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F0CCB399-CB20-4787-B465-47624F736947} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F0FFC55F-34C0-4950-B579-2675A2F9472C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F16D2875-F8C0-4F4F-92BD-2D0FBA63CD5C} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F22FE071-EC01-4020-ABDB-9045B4E095CF} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F26F1BB7-01EE-4A56-B8B1-97B1CF113465} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F2E00E90-F57C-418A-ACDB-303A5056123A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F327423D-7857-4D3D-AAFF-B28D073A1ACC} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F4901087-6D81-4ECA-8F89-FCCA5B7BA617} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F556F615-0973-4DF6-9E7F-3DC7620BB22F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F5B9E855-4427-49C3-B01A-CA464CE8794F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F5FFA000-2DA2-4D95-8D04-27F307A0C05B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F612DDC2-68A6-49FF-9942-FF75468F4BC9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F6611EE0-0657-42DA-8C48-F01576FD7264} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F727BFD9-D32A-46D6-9666-47D1E2A304C9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F77A628B-C6AB-48AA-983F-3E5BBCD40088} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F83B38BE-A0FD-4C13-8EC2-09622F73EB88} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F8B00BE3-663C-42A2-AD43-338AFB62F97A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F916B24D-71A8-4BC8-B21E-B6F2E479AB0B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F9350DE9-4A0A-48DF-B887-C0791D0C19E9} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{F97D18E9-531D-4591-BBB0-55B87B741EF5} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FA8F48E6-F99C-4857-8454-F164AEF59185} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FA912A1C-F5FC-4E45-A138-52F2B1801279} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FAA9AF51-DD85-4906-A041-AC4845F51F0A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FB24A5BD-8B64-47EF-AF6A-F87FA95F1201} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FB3E650D-B21C-44CF-97B4-D4A545AD62F1} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FBF86B95-ECB7-4F0F-BBE7-D013E405E72A} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FC166731-15BD-4021-B700-FB72421A2E39} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FC24859D-F9F5-40C5-B6DD-83F3D3D30B3F} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FC693252-A797-4E75-997C-B731F06FE91B} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FCA177FC-7D8B-450A-839F-AF86546329B3} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FCEBC034-4FF8-4FEB-8070-11358B7CDF73} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FDE179EF-8FD0-47D5-87C0-F567548CC402} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FDFD179F-318D-440E-A913-004F74286B0E} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FE678635-8AD9-4CD0-8EB5-95119EB627A6} Successfully deleted: [Empty Folder] C:\Users\Basti\appdata\local\{FEEE0EEB-7DCA-43BA-859F-650BA2DF7611} ~~~ FireFox Emptied folder: C:\Users\Basti\AppData\Roaming\mozilla\firefox\profiles\fd6mzrgl.default\minidumps [156 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 03.02.2014 at 13:20:15,03 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
03.02.2014, 14:32 | #12 |
| Überprüfung des SystemsFRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04 Ran by Basti (administrator) on BASTI-PC on 03-02-2014 13:22:34 Running from C:\Users\Basti\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Akamai Technologies, Inc.) C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe () C:\Windows\SysWOW64\PnkBstrB.exe (Dropbox, Inc.) C:\Users\Basti\AppData\Roaming\Dropbox\bin\Dropbox.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Firebird Project) C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10151968 2010-04-20] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [908320 2010-04-20] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323072 2010-03-11] (AlcorMicro Co., Ltd.) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2028328 2010-03-11] (Synaptics Incorporated) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-21] (AVAST Software) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\Run: [Google Update] - C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-22] (Google Inc.) HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\Run: [Akamai NetSession Interface] - C:\Users\Basti\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.) HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {065b1a5a-7457-11e1-94d9-7071bcf3e0bb} - G:\setup\rsrc\Autorun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {0d933a27-672a-11e3-898b-7071bcf3e0bb} - F:\Installer.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {1e4538ed-892f-11e0-bacc-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {26a72bde-9106-11e0-b7e6-7071bcf3e0bb} - F:\Startme.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {2fd99cf4-8466-11e0-b92e-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {2fd99d03-8466-11e0-b92e-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {38eb9809-62fd-11e2-b60c-7071bcf3e0bb} - F:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083 HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {3b17d905-a035-11e2-87cf-7071bcf3e0bb} - F:\AutoRun.exe HKU\S-1-5-21-760683073-2288428105-1553054817-1000\...\MountPoints2: {afa558b6-42cc-11e1-b624-7071bcf3e0bb} - F:\Startme.exe IFEO\bitguard.exe: [Debugger] tasklist.exe IFEO\bprotect.exe: [Debugger] tasklist.exe IFEO\browserdefender.exe: [Debugger] tasklist.exe IFEO\browserprotect.exe: [Debugger] tasklist.exe Startup: C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Basti\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xC81C3DAE89A8CC01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: [verify-U]_Add-on - {F4552A56-119C-478E-AB3F-2C850F78B72E} - C:\Program Files\[verify-U]_AVS_IE_Add-on\[verify-U]_AVS.dll (Cybits AG) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: [verify-U]_Add-on - {F4552A56-119C-478E-AB3F-2C850F78B72E} - C:\Program Files (x86)\[verify-U]_AVS_IE_Add-on\[verify-U]_AVS.dll (Cybits AG) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM-x32 - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No File DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default FF Homepage: hxxp://facebook.de/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0-git-20130309-0405 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @Google.com/GoogleEarthPlugin - C:\Users\Basti\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Basti\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Basti\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Basti\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\awesomehp.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\foxsearch.src FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\Ask.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Battlefield Heroes Updater - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\battlefieldheroespatcher@ea.com [2013-12-19] FF Extension: [verify-U]-AVS - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\verify-u@cybits.de.xpi [2013-04-16] FF Extension: Password Exporter - C:\Users\Basti\AppData\Roaming\Mozilla\Firefox\Profiles\fd6mzrgl.default\Extensions\{B17C1C5A-04B1-11DB-9804-B622A1EF5492}.xpi [2013-02-17] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-04-28] ==================== Services (Whitelisted) ================= R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-21] (AVAST Software) S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [116776 2013-12-03] (AVAST Software) R2 FirebirdGuardianDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbguard.exe [98304 2010-09-17] (Firebird Project) R3 FirebirdServerDefaultInstance; C:\Program Files (x86)\Firebird\Firebird_2_5\bin\fbserver.exe [3735552 2010-09-17] (Firebird Project) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2013-12-19] () R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [189248 2013-12-19] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.) ==================== Drivers (Whitelisted) ==================== R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-21] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-03] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-03] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-21] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-21] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-21] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-21] () R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-17] (Disc Soft Ltd) S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [113792 2009-06-22] (Huawei Technologies Co., Ltd.) S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2013-01-11] () S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2013-01-11] () S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [115240 2008-05-16] (MCCI Corporation) S3 s1018bus; C:\Windows\System32\DRIVERS\s1018bus.sys [113704 2009-03-25] (MCCI Corporation) S3 s1018mdfl; C:\Windows\System32\DRIVERS\s1018mdfl.sys [19496 2009-03-25] (MCCI Corporation) S3 s1018mdm; C:\Windows\System32\DRIVERS\s1018mdm.sys [153128 2009-03-25] (MCCI Corporation) S3 s1018mgmt; C:\Windows\System32\DRIVERS\s1018mgmt.sys [133160 2009-03-25] (MCCI Corporation) S3 s1018nd5; C:\Windows\System32\DRIVERS\s1018nd5.sys [34856 2009-03-25] (MCCI Corporation) S3 s1018obex; C:\Windows\System32\DRIVERS\s1018obex.sys [128552 2009-03-25] (MCCI Corporation) S3 s1018unic; C:\Windows\System32\DRIVERS\s1018unic.sys [146472 2009-03-25] (MCCI Corporation) S1 aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [x] S1 aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [x] S3 clwvd; system32\DRIVERS\clwvd.sys [x] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-03 13:20 - 2014-02-03 13:20 - 00065382 _____ () C:\Users\Basti\Desktop\JRT.txt 2014-02-03 13:11 - 2014-02-03 13:11 - 00000000 ____D () C:\Windows\ERUNT 2014-02-03 13:10 - 2014-02-03 13:10 - 01037068 _____ (Thisisu) C:\Users\Basti\Desktop\JRT.exe 2014-02-03 13:05 - 2014-02-03 13:05 - 00000408 _____ () C:\Windows\PFRO.log 2014-02-03 13:02 - 2014-02-03 13:02 - 01166132 _____ () C:\Users\Basti\Desktop\adwcleaner.exe 2014-02-03 11:49 - 2010-02-25 17:06 - 00000000 ____D () C:\Users\Basti\Desktop\Keyboard Locker 2014-02-03 11:48 - 2014-02-03 11:48 - 00209877 _____ () C:\Users\Basti\Downloads\Keyboard Locker.zip 2014-02-03 11:24 - 2014-02-03 12:31 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-02-03 11:24 - 2014-02-03 11:24 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-02-03 11:23 - 2014-02-03 11:23 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-02-03 11:22 - 2014-02-03 12:31 - 00000000 ____D () C:\Users\Basti\Desktop\mbar 2014-02-03 11:22 - 2014-02-03 11:22 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Basti\Desktop\mbar-1.07.0.1009.exe 2014-02-02 15:34 - 2014-02-03 13:22 - 00016350 _____ () C:\Users\Basti\Desktop\FRST.txt 2014-02-02 15:34 - 2014-02-02 15:34 - 00029844 _____ () C:\Users\Basti\Desktop\Addition.txt 2014-02-02 15:32 - 2014-02-02 15:32 - 00029844 _____ () C:\Users\Basti\Downloads\Addition.txt 2014-02-02 15:31 - 2014-02-03 13:22 - 00000000 ____D () C:\FRST 2014-02-02 15:31 - 2014-02-02 15:33 - 00032314 _____ () C:\Users\Basti\Downloads\FRST.txt 2014-02-02 15:30 - 2014-02-02 15:30 - 02080256 _____ (Farbar) C:\Users\Basti\Desktop\FRST64.exe 2014-02-02 15:09 - 2014-02-02 15:09 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-02-02 14:48 - 2014-02-03 13:04 - 00052718 _____ () C:\Users\Basti\Desktop\AdwCleaner[S0].txt 2014-02-02 14:46 - 2014-02-03 13:09 - 00000000 ____D () C:\AdwCleaner 2014-02-02 14:46 - 2014-02-03 13:03 - 00056504 _____ () C:\Users\Basti\Desktop\AdwCleaner[R0].txt 2014-02-02 14:04 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\AppData\Local\RegistryDR 2014-02-02 14:01 - 2014-02-02 15:04 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\newnext.me 2014-02-02 14:01 - 2014-02-02 14:25 - 00000000 ____D () C:\Users\Basti\AppData\Local\Mobogenie 2014-02-02 14:01 - 2014-02-02 14:10 - 00000000 ____D () C:\Users\Basti\AppData\Local\cache 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\.android 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 _____ () C:\Users\Basti\daemonprocess.txt 2014-02-02 14:00 - 2014-02-02 14:08 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-02 14:00 - 2014-02-02 14:06 - 00000000 ____D () C:\ProgramData\WPM 2014-02-02 13:59 - 2014-02-02 14:39 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-02-02 13:59 - 2014-02-02 14:08 - 00000000 ____D () C:\Program Files (x86)\Registry Dr 2014-02-02 13:59 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\Documents\RegistryDr 2014-01-27 09:48 - 2014-01-27 13:28 - 00000043 _____ () C:\Users\Basti\Desktop\augenarzt 4.2. - 08.15.txt 2014-01-22 20:55 - 2013-11-06 23:10 - 1845596160 _____ () C:\Users\Basti\Desktop\2 Guns 2013.avi 2014-01-21 19:15 - 2014-01-21 19:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-01-21 19:14 - 2014-01-21 19:19 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-01-21 19:14 - 2014-01-21 19:15 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-01-21 19:14 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2014-01-21 19:13 - 2014-01-21 19:13 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\Basti\Downloads\spybot-2.2.25.exe 2014-01-15 17:52 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 17:52 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 17:51 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 17:51 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-15 07:22 - 2014-02-03 13:05 - 00004403 _____ () C:\Windows\setupact.log 2014-01-15 07:22 - 2014-01-15 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-14 19:36 - 2014-01-14 19:36 - 03571656 _____ (Piriform Ltd) C:\Users\Basti\Downloads\ccleaner.exe 2014-01-14 18:47 - 2014-01-14 19:19 - 00000000 ____D () C:\Users\Basti\Desktop\Trackmania 2014-01-14 16:42 - 2014-01-14 16:42 - 16952720 _____ (Electronic Arts, Inc.) C:\Users\Basti\Downloads\OriginThin9311Setup.exe 2014-01-13 21:33 - 2014-01-24 12:01 - 00000000 ____D () C:\Users\Basti\Documents\TmForever 2014-01-13 21:33 - 2014-01-13 21:35 - 00000000 ____D () C:\ProgramData\TmForever 2014-01-13 21:29 - 2014-01-13 21:31 - 00000000 ____D () C:\Program Files (x86)\TmNationsForever 2014-01-13 21:11 - 2014-01-13 21:13 - 529246504 _____ () C:\Users\Basti\Downloads\tmnationsforever_setup.exe 2014-01-13 21:04 - 2014-01-13 21:04 - 00401768 _____ (Softonic ) C:\Users\Basti\Downloads\SoftonicDownloader_fuer_trackmania-nations.exe 2014-01-08 15:54 - 2014-01-08 15:54 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr ==================== One Month Modified Files and Folders ======= 2014-02-03 13:22 - 2014-02-02 15:34 - 00016350 _____ () C:\Users\Basti\Desktop\FRST.txt 2014-02-03 13:22 - 2014-02-02 15:31 - 00000000 ____D () C:\FRST 2014-02-03 13:20 - 2014-02-03 13:20 - 00065382 _____ () C:\Users\Basti\Desktop\JRT.txt 2014-02-03 13:13 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-03 13:13 - 2009-07-14 05:45 - 00009696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-03 13:11 - 2014-02-03 13:11 - 00000000 ____D () C:\Windows\ERUNT 2014-02-03 13:10 - 2014-02-03 13:10 - 01037068 _____ (Thisisu) C:\Users\Basti\Desktop\JRT.exe 2014-02-03 13:09 - 2014-02-02 14:46 - 00000000 ____D () C:\AdwCleaner 2014-02-03 13:05 - 2014-02-03 13:05 - 00000408 _____ () C:\Windows\PFRO.log 2014-02-03 13:05 - 2014-01-15 07:22 - 00004403 _____ () C:\Windows\setupact.log 2014-02-03 13:05 - 2013-03-21 21:01 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Dropbox 2014-02-03 13:05 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-03 13:04 - 2014-02-02 14:48 - 00052718 _____ () C:\Users\Basti\Desktop\AdwCleaner[S0].txt 2014-02-03 13:04 - 2011-10-18 16:10 - 01545281 _____ () C:\Windows\WindowsUpdate.log 2014-02-03 13:03 - 2014-02-02 14:46 - 00056504 _____ () C:\Users\Basti\Desktop\AdwCleaner[R0].txt 2014-02-03 13:02 - 2014-02-03 13:02 - 01166132 _____ () C:\Users\Basti\Desktop\adwcleaner.exe 2014-02-03 12:40 - 2011-07-22 18:29 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA.job 2014-02-03 12:31 - 2014-02-03 11:24 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2014-02-03 12:31 - 2014-02-03 11:22 - 00000000 ____D () C:\Users\Basti\Desktop\mbar 2014-02-03 12:30 - 2012-07-31 16:08 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-03 11:48 - 2014-02-03 11:48 - 00209877 _____ () C:\Users\Basti\Downloads\Keyboard Locker.zip 2014-02-03 11:24 - 2014-02-03 11:24 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-02-03 11:23 - 2014-02-03 11:23 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-02-03 11:22 - 2014-02-03 11:22 - 12589848 _____ (Malwarebytes Corp.) C:\Users\Basti\Desktop\mbar-1.07.0.1009.exe 2014-02-03 11:12 - 2013-04-28 08:17 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-02 21:40 - 2011-07-22 18:29 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core.job 2014-02-02 15:34 - 2014-02-02 15:34 - 00029844 _____ () C:\Users\Basti\Desktop\Addition.txt 2014-02-02 15:33 - 2014-02-02 15:31 - 00032314 _____ () C:\Users\Basti\Downloads\FRST.txt 2014-02-02 15:32 - 2014-02-02 15:32 - 00029844 _____ () C:\Users\Basti\Downloads\Addition.txt 2014-02-02 15:30 - 2014-02-02 15:30 - 02080256 _____ (Farbar) C:\Users\Basti\Desktop\FRST64.exe 2014-02-02 15:09 - 2014-02-02 15:09 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk 2014-02-02 15:09 - 2013-03-21 21:04 - 00000000 ___RD () C:\Users\Basti\Dropbox 2014-02-02 15:06 - 2011-05-20 19:37 - 00000000 ____D () C:\Users\Basti 2014-02-02 15:05 - 2013-10-18 20:27 - 00000000 ____D () C:\Users\Basti\AppData\Local\Akamai 2014-02-02 15:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-02-02 15:04 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\newnext.me 2014-02-02 15:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration 2014-02-02 14:39 - 2014-02-02 13:59 - 00000000 ____D () C:\Program Files (x86)\Bench 2014-02-02 14:25 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Local\Mobogenie 2014-02-02 14:10 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\AppData\Local\cache 2014-02-02 14:08 - 2014-02-02 14:00 - 00000000 ____D () C:\ProgramData\IePluginService 2014-02-02 14:08 - 2014-02-02 13:59 - 00000000 ____D () C:\Program Files (x86)\Registry Dr 2014-02-02 14:06 - 2014-02-02 14:00 - 00000000 ____D () C:\ProgramData\WPM 2014-02-02 14:04 - 2014-02-02 14:04 - 00000000 ____D () C:\Users\Basti\AppData\Local\RegistryDR 2014-02-02 14:04 - 2014-02-02 13:59 - 00000000 ____D () C:\Users\Basti\Documents\RegistryDr 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 ____D () C:\Users\Basti\.android 2014-02-02 14:01 - 2014-02-02 14:01 - 00000000 _____ () C:\Users\Basti\daemonprocess.txt 2014-01-27 13:28 - 2014-01-27 09:48 - 00000043 _____ () C:\Users\Basti\Desktop\augenarzt 4.2. - 08.15.txt 2014-01-24 15:15 - 2013-11-16 07:57 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\vlc 2014-01-24 12:01 - 2014-01-13 21:33 - 00000000 ____D () C:\Users\Basti\Documents\TmForever 2014-01-23 19:39 - 2013-11-15 16:58 - 00001561 _____ () C:\Users\Basti\Desktop\musik.txt 2014-01-22 11:57 - 2009-07-14 18:58 - 00707566 _____ () C:\Windows\system32\perfh007.dat 2014-01-22 11:57 - 2009-07-14 18:58 - 00153126 _____ () C:\Windows\system32\perfc007.dat 2014-01-22 11:57 - 2009-07-14 06:13 - 01642220 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-01-21 19:19 - 2014-01-21 19:14 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy 2014-01-21 19:18 - 2013-04-27 07:30 - 00000000 ___RD () C:\Users\Basti\Desktop\Ordner 2014-01-21 19:15 - 2014-01-21 19:15 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking 2014-01-21 19:15 - 2014-01-21 19:14 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2 2014-01-21 19:13 - 2014-01-21 19:13 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\Basti\Downloads\spybot-2.2.25.exe 2014-01-19 14:43 - 2013-12-19 19:53 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-01-16 13:22 - 2012-09-09 19:30 - 00000000 ____D () C:\Users\Basti\Documents\Youcam 2014-01-16 13:04 - 2009-07-14 05:45 - 00275856 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-16 11:46 - 2013-07-15 06:38 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 11:43 - 2011-05-20 21:11 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 11:41 - 2013-03-21 21:02 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-16 11:41 - 2011-05-20 19:37 - 00000000 ___RD () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-15 07:22 - 2014-01-15 07:22 - 00000000 _____ () C:\Windows\setuperr.log 2014-01-14 19:40 - 2013-12-18 19:06 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-14 19:36 - 2014-01-14 19:36 - 03571656 _____ (Piriform Ltd) C:\Users\Basti\Downloads\ccleaner.exe 2014-01-14 19:19 - 2014-01-14 18:47 - 00000000 ____D () C:\Users\Basti\Desktop\Trackmania 2014-01-14 17:57 - 2013-12-17 17:21 - 00000000 ____D () C:\Program Files (x86)\Origin Games 2014-01-14 16:50 - 2013-12-17 17:18 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Origin 2014-01-14 16:50 - 2013-12-17 17:17 - 00000000 ____D () C:\ProgramData\Origin 2014-01-14 16:42 - 2014-01-14 16:42 - 16952720 _____ (Electronic Arts, Inc.) C:\Users\Basti\Downloads\OriginThin9311Setup.exe 2014-01-14 13:36 - 2013-05-08 06:50 - 00000000 ____D () C:\Users\Basti\Desktop\Neuer Ordner 2014-01-14 13:17 - 2011-11-19 10:43 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Apple Computer 2014-01-13 21:35 - 2014-01-13 21:33 - 00000000 ____D () C:\ProgramData\TmForever 2014-01-13 21:31 - 2014-01-13 21:29 - 00000000 ____D () C:\Program Files (x86)\TmNationsForever 2014-01-13 21:13 - 2014-01-13 21:11 - 529246504 _____ () C:\Users\Basti\Downloads\tmnationsforever_setup.exe 2014-01-13 21:04 - 2014-01-13 21:04 - 00401768 _____ (Softonic ) C:\Users\Basti\Downloads\SoftonicDownloader_fuer_trackmania-nations.exe 2014-01-08 21:45 - 2011-09-26 21:04 - 00000000 ____D () C:\Program Files (x86)\SpeedFan 2014-01-08 15:54 - 2014-01-08 15:54 - 00000000 ____D () C:\Users\Basti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup 2014-01-06 20:23 - 2014-01-06 20:23 - 04558848 _____ (Google Inc.) C:\Windows\SysWOW64\GPhotos.scr ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-02 20:22 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04 Ran by Basti at 2014-02-02 15:32:24 Running from C:\Users\Basti\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Installed Programs ====================== [verify-U]_AVS_IE_Add-on (x32 Version: 1.0.0.3 - cybits AG) Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.9.0.1380 - Adobe Systems Incorporated) Hidden Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated) Adobe Shockwave Player 12.0 (x32 Version: 12.0.4.144 - Adobe Systems, Inc.) Akamai NetSession Interface (HKCU Version: - Akamai Technologies, Inc) Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.4.1217.35202 - Alcor Micro Corp.) Hidden Allzeit Atomzeit 2.00 (x32 Version: 2.00 - Philipp Winterberg) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) AppsHat Mobile Apps (HKCU Version: 1.0.0.0 - Somoto Ltd.) <==== ATTENTION Ashampoo Burning Studio 2013 v.11.0.6 (x32 Version: 11.0.6 - Ashampoo GmbH & Co. KG) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.26 - Atheros Communications Inc.) ATI Catalyst Install Manager (Version: 3.0.758.0 - ATI Technologies, Inc.) Avanquest update (x32 Version: 1.31 - Avanquest Software) avast! Free Antivirus (x32 Version: 9.0.2011 - Avast Software) Battlefield 1942™ (x32 Version: 1.6.20.0 - Electronic Arts) Battlefield Heroes (Basti) (HKCU Version: - EA Digital illusions) Bonjour (Version: 3.0.0.10 - Apple Inc.) Bundled software uninstaller (x32 Version: - ) <==== ATTENTION CCleaner (Version: 3.21 - Piriform) Cheat Engine 6.2 (x32 Version: - Dark Byte) Counter-Strike (x32 Version: - Valve) Counter-Strike: Condition Zero (x32 Version: - Valve) Counter-Strike: Condition Zero Deleted Scenes (x32 Version: - Valve) Counter-Strike: Source (x32 Version: - Valve) CyberLink YouCam (x32 Version: 3.0.1811.7429 - CyberLink Corp.) CyberLink YouCam (x32 Version: 3.0.1811.7429 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (x32 Version: 4.48.1.0347 - Disc Soft Ltd) Day of Defeat (x32 Version: - Valve) Deathmatch Classic (x32 Version: - Valve) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) EVEREST Home Edition v2.20 (x32 Version: 2.20 - Lavalys Inc) Firebird 2.5.0.26074 (Win32) (x32 Version: 2.5.0.26074 - Firebird Project) Free M4a to MP3 Converter 7.2 (x32 Version: - ManiacTools.com) Free Mp3 Wma Converter V 2.2 (x32 Version: 2.2.0.0 - Koyote Soft) Free YouTube to MP3 Converter version 3.12.13.925 (x32 Version: 3.12.13.925 - DVDVideoSoft Ltd.) Freemake Video Converter Version 4.1.1 (x32 Version: 4.1.1 - Ellora Assets Corporation) GameSpy Arcade (x32 Version: - ) Google Earth (x32 Version: 7.1.2.2041 - Google) Google+ Auto Backup (x32 Version: 1.0.21.81 - Google) Grand Theft Auto(TM): San Andreas (x32 Version: - Rockstar) HyperCam 2 (Version: 2.27.00 - Hyperionics Technology LLC) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2086 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation) Java 7 Update 45 (x32 Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Loksim3D (Version: 2.8.1 - Loksim3D) Microsoft .NET Framework 1.1 (x32 Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office Word Viewer 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation) Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) Mobile Partner (x32 Version: 11.302.09.02.511 - Huawei Technologies Co.,Ltd) MorphVOX Pro (x32 Version: 4.3.13 - Screaming Bee) Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (x32 Version: 8.0.50727.42 - The Firebird Project) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation) Need For Speed™ World (x32 Version: 1.0.0.0 - Electronic Arts) Origin (x32 Version: 9.3.11.2762 - Electronic Arts, Inc.) Packardbell_EcoBtn (x32 Version: 2.00.01.0 - Packardbell) Picasa 3 (x32 Version: 3.9 - Google, Inc.) PlayStation(R)Network Downloader (x32 Version: 2.02.00076 - Sony Computer Entertainment Inc.) PlayStation(R)Store (x32 Version: 3.1.8.07881 - Sony Computer Entertainment Inc.) PunkBuster Services (x32 Version: 0.990 - Even Balance, Inc.) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6093 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (x32 Version: 1.00.0145 - REALTEK Semiconductor Corp.) Ricochet (x32 Version: - Valve) RollerCoaster Tycoon 2 (x32 Version: - ) Secure Eraser v4.0 (x32 Version: - ASCOMP Software GmbH) Sony Ericsson Update Engine (x32 Version: 2.13.8.201307151333 - Sony Ericsson Communications AB) Sony PC Companion 2.10.165 (x32 Version: 2.10.165 - Sony) SpeedFan (remove only) (x32 Version: - ) Spybot - Search & Destroy (x32 Version: 2.2.25 - Safer-Networking Ltd.) Steam (x32 Version: 1.0.0.0 - Valve Corporation) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden SYMplus Drehen deu (x32 Version: - ) SYMplus Fräsen deu (x32 Version: - ) Synaptics Pointing Device Driver (Version: 15.0.4.0 - Synaptics Incorporated) System Requirements Lab CYRI (x32 Version: 4.5.1.0 - Husdawg, LLC) TmNationsForever (x32 Version: - Nadeo) TomTom HOME (x32 Version: 2.9.5 - Ihr Firmenname) TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2 - TomTom International B.V.) Unity Web Player (HKCU Version: - Unity Technologies ApS) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) VLC media player 2.1.1 (Version: 2.1.1 - VideoLAN) Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation) Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp) WinRAR 5.01 (64-Bit) (Version: 5.01.0 - win.rar GmbH) Yontoo 1.10.03 (Version: 1.10.03 - Yontoo LLC) <==== ATTENTION ==================== Restore Points ========================= 05-01-2014 19:48:41 Windows-Sicherung 07-01-2014 19:35:06 Windows Update 11-01-2014 10:13:19 Windows Update 13-01-2014 20:31:19 DirectX wurde installiert 14-01-2014 15:42:28 Windows Update 14-01-2014 18:38:33 Removed iTunes 16-01-2014 10:43:10 Windows Update 21-01-2014 18:02:35 Windows Update 25-01-2014 18:50:38 Windows Update 28-01-2014 21:30:29 Windows Update 02-02-2014 14:01:53 Wiederherstellungsvorgang 02-02-2014 14:07:01 avast! antivirus system restore point ==================== Hosts content: ========================== 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= Task: {0C1A4037-3102-4E10-92CA-BA38AEA420BF} - System32\Tasks\Games\UpdateCheck_S-1-5-21-760683073-2288428105-1553054817-1000 Task: {5056B3F3-AF45-478B-A9F4-50EF763C61A4} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated) Task: {5747795E-D3FD-4FBF-8CC0-4D15FF0A529D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe Task: {5F763B5B-D0C5-42FD-8144-DF4731BFFB7D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {72C2CEDE-2462-4E4E-82BD-C7BC0A2299BA} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {A91534E7-4B59-4B7E-8AE8-104AF2BC5AEF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: {AE70A51A-6F2F-4D14-9FA8-CDD0B64CCFCE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12] (Adobe Systems Incorporated) Task: {C1958198-2E6D-480D-9BDC-9B316A3EC776} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-07-24] (Piriform Ltd) Task: {CDA09FDA-103A-43E1-97E4-223C63E2A8B2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22] (Google Inc.) Task: {D020603A-8437-4E54-98F0-A74F8FF70D5C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: {D587DEF6-C37B-4955-B738-28E9062A92B9} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-22] (Google Inc.) Task: {D694BF14-6C50-44E4-B572-FDE0373B11C3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-21] (AVAST Software) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000Core.job => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-760683073-2288428105-1553054817-1000UA.job => C:\Users\Basti\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2011-08-31 19:13 - 2011-08-31 19:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2014-01-28 22:09 - 2014-01-28 17:44 - 02166272 _____ () C:\Program Files\AVAST Software\Avast\defs\14012801\algo.dll 2014-02-02 15:10 - 2014-02-02 10:38 - 02168320 _____ () C:\Program Files\AVAST Software\Avast\defs\14020200\algo.dll 2011-09-27 07:23 - 2011-09-27 07:23 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-09-27 07:22 - 2011-09-27 07:22 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2014-01-21 19:14 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2014-01-21 19:14 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2014-01-21 19:14 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2014-01-21 19:14 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2014-01-21 19:14 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\Basti\AppData\Roaming\Dropbox\bin\libcef.dll 2013-12-03 11:36 - 2013-12-03 11:36 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2013-12-21 10:42 - 2013-12-21 10:42 - 03559024 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\Users\Basti\Desktop\2013-11-02 15.01.59.jpg:com.dropbox.attributes ==================== Safe Mode (whitelisted) =================== ==================== Faulty Device Manager Devices ============= Name: avast! Network Shield Support Description: avast! Network Shield Support Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: aswTdi Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: avast! Firewall NDIS Filter Miniport Description: avast! Firewall NDIS Filter Miniport Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: ALWIL Software Service: aswNdis Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. ==================== Event log errors: ========================= Application errors: ================== Error: (02/02/2014 03:06:59 PM) (Source: System Restore) (User: ) Description: Unbekannter Fehler bei der Systemwiederherstellung: (Windows Update). Zusätzliche Informationen: 0xc0000022. Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second System errors: ============= Error: (02/02/2014 03:06:47 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:50:12 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:37:18 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (02/02/2014 02:03:18 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (02/02/2014 02:02:53 PM) (Source: Service Control Manager) (User: ) Description: Dienst "MgAssist Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (02/02/2014 02:01:23 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "MgAssist Service" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (01/31/2014 03:54:16 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/30/2014 10:17:32 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/29/2014 10:09:49 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Error: (01/28/2014 09:59:31 PM) (Source: Service Control Manager) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: aswKbd aswTdi Microsoft Office Sessions: ========================= Error: (02/02/2014 03:06:59 PM) (Source: System Restore)(User: ) Description: Windows Update0xc0000022 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1108 Error: (02/01/2014 00:44:23 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 41611379 Error: (02/01/2014 11:48:42 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4041 Error: (02/01/2014 00:15:15 AM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second CodeIntegrity Errors: =================================== Date: 2013-08-28 21:15:53.961 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.734 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.395 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-08-28 21:15:53.135 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.402 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.312 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\Basti\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:42.062 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2012-09-29 21:08:41.962 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-05-24 18:51:58.319 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\anf0100.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2011-05-24 18:51:58.287 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\anf0100.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 41% Total physical RAM: 3893.15 MB Available physical RAM: 2263.71 MB Total Pagefile: 7784.48 MB Available Pagefile: 5982.23 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:555.07 GB) (Free:432.08 GB) NTFS Drive d: () (Fixed) (Total:40 GB) (Free:32.24 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=555 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=40 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1 GB) - (Type=12) ==================== End Of Log ============================ |
03.02.2014, 14:34 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM) Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren! Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt: ESET Online Scanner
__________________ Logfiles bitte immer in CODE-Tags posten |
03.02.2014, 14:52 | #14 |
| Überprüfung des Systems Zeigt an das alles ok ist. Gibt es eine Möglichkeit für "nicht wissende" herauszufinden was alle im Autostart reingehört und was die ganzen Programme im Manager bei "Prozesse" heißen? |
03.02.2014, 15:00 | #15 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Überprüfung des Systems Beide Logs bitte posten
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu Überprüfung des Systems |
auswerten, betriebssystem, dateien, download, entdeck, explorer, firefox, interne, internet, internet explorer, komische, komplette, langsam, laptop, neu, notebook, problem, sauber, sichere, spyware, system, systems, woche, überprüfung, ähnliches |