Interpol Virus - FRST.exe

VonDrecken · 18.03.2014, 12:16

Hallo!

Hab mir den Interpol Virus eingefangen.
Hab mich durch das Forum geklickt und nach euren Anweisungen den FRST Scan durchgeführt.
Anbei die FRST.txt Datei. Bitte um Unterstützung.

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by SYSTEM on MININT-5F0G2E1 on 18-03-2014 12:02:50
Running from I:\
Windows 7 Home Premium (X64) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Recovery

The current controlset is ControlSet002
ATTENTION!:=====> If the system is bootable FRST could be run from normal or Safe mode to create a complete log.


The only official download link for FRST:
Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-16] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-04-01] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-01-25] (cyberlink)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Photo Downloader] - C:\Program Files (x86)\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe [61440 2007-06-26] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2539544 2014-03-02] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1564872 2012-06-06] (Ask)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\tele.ring Internet Manager\UIExec.exe [132608 2009-07-27] ()
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-20] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-11] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
Startup: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8zwlvwlmqa.lnk
ShortcutTarget: 8zwlvwlmqa.lnk -> C:\ProgramData\aqmlwvlwz8.cpp ()
Startup: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Messenger.lnk
ShortcutTarget: Facebook Messenger.lnk ->  (No File)
Startup: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 3520 series (Netzwerk).lnk -> C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Services (Whitelisted) =================

S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-04-01] (Advanced Micro Devices, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-01-25] (CyberLink)
S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-15] (McAfee, Inc.)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [218624 2012-01-01] ()
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-16] (Symantec Corporation)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)
S2 UI Assistant Service; C:\Program Files (x86)\tele.ring Internet Manager\AssistantServices.exe [241664 2009-07-27] ()
S2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-02] (AVG Secure Search)
S3 Winmgmt; C:\ProgramData\8zwlvwlmqa.zvv [332536 2014-03-17] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [1384608 2012-10-23] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-09] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-09] (Symantec Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2012-01-01] (Huawei Technologies Co., Ltd.)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20121221.001\IDSvia64.sys [513184 2012-11-02] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121222.025\ENG64.SYS [126112 2012-11-06] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121222.025\EX64.SYS [2084000 2012-11-06] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS [744568 2011-03-30] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS [40568 2011-03-30] (Symantec Corporation)
S0 SymDS; C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS [450680 2011-01-26] (Symantec Corporation)
S0 SymEFA; C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS [912504 2011-03-14] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-12-25] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [171128 2011-01-26] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [386168 2011-04-20] (Symantec Corporation)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-18 12:02 - 2014-03-18 12:02 - 00000000 ____D () C:\FRST
2014-03-17 08:50 - 2014-03-17 08:50 - 00332536 ____T (Microsoft Corporation) C:\ProgramData\8zwlvwlmqa.zvv
2014-03-17 08:49 - 2014-03-17 13:57 - 95027928 ____T () C:\ProgramData\8zwlvwlmqa.fee
2014-03-17 08:49 - 2014-03-17 08:49 - 00114688 _____ () C:\ProgramData\aqmlwvlwz8.cpp
2014-03-16 06:05 - 2014-03-16 06:06 - 00000145 _____ () C:\Users\Raphael\Desktop\To-Do-Liste.txt
2014-03-16 05:09 - 2014-03-16 09:05 - 00000000 ____D () C:\Users\Raphael\Desktop\Personalentwicklung
2014-03-12 11:56 - 2014-03-12 11:56 - 00001745 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-12 11:54 - 2014-03-12 11:56 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 11:54 - 2014-03-12 11:54 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 11:48 - 2014-03-12 11:48 - 00001807 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-12 11:47 - 2014-03-12 11:48 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-12 10:09 - 2014-02-28 22:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-03-12 10:09 - 2014-02-28 21:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-03-12 10:09 - 2014-02-28 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-03-12 10:09 - 2014-02-28 20:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-03-12 10:09 - 2014-02-28 20:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-03-12 10:09 - 2014-02-28 20:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-03-12 10:09 - 2014-02-28 20:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-03-12 10:09 - 2014-02-28 20:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-03-12 10:09 - 2014-02-28 20:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-03-12 10:09 - 2014-02-28 20:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-03-12 10:09 - 2014-02-28 20:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-03-12 10:09 - 2014-02-28 20:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-03-12 10:09 - 2014-02-28 20:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 10:09 - 2014-02-28 20:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-12 10:09 - 2014-02-28 20:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-03-12 10:09 - 2014-02-28 20:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 10:09 - 2014-02-28 20:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-03-12 10:09 - 2014-02-28 19:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-03-12 10:09 - 2014-02-28 19:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 10:09 - 2014-02-28 19:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 10:09 - 2014-02-28 19:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 10:09 - 2014-02-28 19:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 10:09 - 2014-02-28 19:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 10:09 - 2014-02-28 19:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-03-12 10:09 - 2014-02-28 19:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 10:09 - 2014-02-28 19:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 10:09 - 2014-02-28 19:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 10:09 - 2014-02-28 19:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-03-12 10:09 - 2014-02-28 19:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-03-12 10:09 - 2014-02-28 19:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 10:09 - 2014-02-28 19:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 10:09 - 2014-02-28 19:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-03-12 10:09 - 2014-02-28 19:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 10:09 - 2014-02-28 19:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 10:09 - 2014-02-28 18:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 10:09 - 2014-02-28 18:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-03-12 10:09 - 2014-02-28 18:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 10:09 - 2014-02-28 18:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 10:09 - 2014-02-28 18:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-03-12 10:09 - 2014-02-28 18:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 10:09 - 2014-02-06 17:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
2014-03-12 10:09 - 2014-02-03 18:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2014-03-12 10:09 - 2014-02-03 18:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
2014-03-12 10:09 - 2014-02-03 18:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 10:09 - 2014-02-03 18:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 10:09 - 2014-01-28 18:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\System32\wer.dll
2014-03-12 10:09 - 2014-01-28 18:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 10:09 - 2014-01-27 18:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\System32\wwansvc.dll
2014-03-11 03:09 - 2014-03-11 03:11 - 00018190 ____H () C:\Users\Raphael\Desktop\~WRL0005.tmp
2014-03-09 03:49 - 2014-03-10 02:40 - 00000000 ____D () C:\Users\Raphael\Desktop\Abbildungen Persm
2014-03-08 10:45 - 2014-03-17 10:07 - 00000000 ___RD () C:\ONEDRIVE
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ___RD () C:\Users\Raphael\OneDrive
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-03-08 10:44 - 2014-03-08 10:43 - 06072008 _____ (Microsoft Corporation) C:\Users\Raphael\Downloads\OneDriveSetup.exe
2014-03-04 13:14 - 2014-03-04 13:14 - 00000000 ____D () C:\Users\Raphael\Desktop\ipod
2014-03-03 04:14 - 2014-03-03 04:14 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{E128DEC8-FAAD-499C-8E96-8396A770E06D}
2014-03-03 04:12 - 2014-03-03 04:12 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{6024E33D-4F77-4B44-AA0B-1460E1F0B957}
2014-03-02 12:47 - 2014-03-02 12:47 - 00000000 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-03-02 12:46 - 2014-03-02 12:47 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-03-02 12:45 - 2014-03-02 12:45 - 00001933 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-02 12:44 - 2014-03-02 12:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-28 12:06 - 2014-02-28 12:06 - 00000000 ____D () C:\Users\Raphael\Documents\Command & Conquer 3 Tiberium Wars
2014-02-28 11:44 - 2014-02-28 11:44 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-28 10:33 - 2014-02-28 12:04 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2014-02-28 10:33 - 2014-02-28 10:33 - 00000000 __RHD () C:\Users\Raphael\AppData\Roaming\SecuROM
2014-02-28 09:08 - 2014-02-28 09:08 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-02-28 02:05 - 2014-03-06 11:28 - 00013743 _____ () C:\Users\Raphael\Desktop\März 2013.xlsx
2014-02-28 01:08 - 2014-02-28 01:08 - 02150984 _____ () C:\Users\Raphael\Downloads\VideoPerformerSetup.exe
2014-02-28 00:37 - 2014-02-28 00:37 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{7D4CD2D3-7FFA-4B30-845D-52B060E772AA}
2014-02-27 12:10 - 2014-02-27 12:10 - 00001982 _____ () C:\Users\Raphael\Desktop\Windows Phone-Desktopanwendung.lnk
2014-02-27 12:09 - 2014-02-27 12:10 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2014-02-27 12:09 - 2014-02-27 12:09 - 00000000 ____D () C:\ProgramData\Applications
2014-02-27 12:02 - 2014-02-27 12:03 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{5BB5F4E2-340C-4E57-8675-D963C81660E5}
2014-02-27 05:25 - 2014-02-27 05:25 - 00000221 _____ () C:\Users\Raphael\Desktop\R.U.S.E.url
2014-02-27 04:21 - 2014-03-17 13:58 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-27 04:21 - 2014-02-27 05:07 - 00000879 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-27 04:19 - 2009-09-04 08:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_5.dll
2014-02-27 04:19 - 2009-09-04 08:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-27 04:19 - 2009-09-04 08:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-27 04:19 - 2009-09-04 08:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_5.dll
2014-02-27 04:19 - 2009-09-04 08:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_3.dll
2014-02-27 04:19 - 2009-09-04 08:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\System32\d3dcsx_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\System32\d3dx11_42.dll
2014-02-27 04:19 - 2009-09-04 08:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_4.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_4.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_6.dll
2014-02-27 04:19 - 2009-03-16 05:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-27 04:19 - 2009-03-09 06:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_41.dll
2014-02-27 04:19 - 2009-03-09 06:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-27 04:19 - 2009-03-09 06:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_41.dll
2014-02-27 04:19 - 2009-03-09 06:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_41.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_3.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_3.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_2.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_5.dll
2014-02-27 04:19 - 2008-10-27 01:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_40.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_40.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_40.dll
2014-02-27 04:19 - 2008-10-14 21:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-27 04:19 - 2008-07-31 01:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-27 04:19 - 2008-07-31 01:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_2.dll
2014-02-27 04:19 - 2008-07-31 01:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_1.dll
2014-02-27 04:19 - 2008-07-31 01:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-27 04:19 - 2008-07-31 01:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_2.dll
2014-02-27 04:19 - 2008-07-31 01:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-27 04:19 - 2008-07-10 02:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-27 04:19 - 2008-07-10 02:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_39.dll
2014-02-27 04:19 - 2008-07-10 02:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-27 04:19 - 2008-07-10 02:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_39.dll
2014-02-27 04:19 - 2008-07-10 02:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-27 04:19 - 2008-07-10 02:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_39.dll
2014-02-27 04:19 - 2008-05-30 05:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_1.dll
2014-02-27 04:19 - 2008-05-30 05:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-27 04:19 - 2008-05-30 05:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-27 04:19 - 2008-05-30 05:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_1.dll
2014-02-27 04:19 - 2008-05-30 05:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\System32\XAPOFX1_0.dll
2014-02-27 04:19 - 2008-05-30 05:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-27 04:19 - 2008-05-30 05:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-27 04:19 - 2008-05-30 05:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_4.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_38.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_38.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_38.dll
2014-02-27 04:19 - 2008-05-30 05:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-27 04:19 - 2008-03-05 07:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\System32\XAudio2_0.dll
2014-02-27 04:19 - 2008-03-05 07:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-27 04:19 - 2008-03-05 07:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-27 04:19 - 2008-03-05 07:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\System32\xactengine3_0.dll
2014-02-27 04:19 - 2008-03-05 07:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_3.dll
2014-02-27 04:19 - 2008-03-05 07:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-27 04:19 - 2008-03-05 06:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\System32\D3DX9_37.dll
2014-02-27 04:19 - 2008-03-05 06:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-27 04:19 - 2008-03-05 06:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\System32\D3DCompiler_37.dll
2014-02-27 04:19 - 2008-03-05 06:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-27 04:19 - 2008-02-05 14:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\System32\d3dx10_37.dll
2014-02-27 04:19 - 2008-02-05 14:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-27 04:19 - 2007-10-21 18:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\System32\xactengine2_10.dll
2014-02-27 04:19 - 2007-10-21 18:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-27 04:19 - 2007-10-21 18:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\System32\X3DAudio1_2.dll
2014-02-27 03:59 - 2014-02-27 03:59 - 00005120 _____ () C:\Users\Raphael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-27 03:07 - 2014-02-28 02:23 - 00012527 _____ () C:\Users\Raphael\Desktop\Schuldentilgungsplan.xlsx
2014-02-25 04:38 - 2014-02-25 04:38 - 02790572 _____ ( ) C:\Users\Raphael\Downloads\pdftkb36_setup.exe
2014-02-25 04:38 - 2014-02-25 04:38 - 00000000 ____D () C:\Program Files (x86)\PDFTK Builder
2014-02-23 04:32 - 2014-03-17 09:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-23 04:32 - 2014-03-12 10:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-23 04:32 - 2014-02-23 04:32 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-23 04:32 - 2014-02-23 04:32 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-20 00:40 - 2014-02-20 00:40 - 00000000 ____D () C:\Users\Raphael\Desktop\Drucker
2014-02-20 00:38 - 2014-02-27 03:06 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\HpUpdate
2014-02-20 00:38 - 2014-02-20 00:38 - 00003626 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 3520 series
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\ProgramData\Visan
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-20 00:37 - 2012-10-16 19:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\System32\HPDiscoPMB011.dll
2014-02-20 00:36 - 2014-02-20 00:36 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-02-20 00:36 - 2014-02-20 00:36 - 00000000 ____D () C:\ProgramData\HP
2014-02-20 00:36 - 2014-02-20 00:36 - 00000000 ____D () C:\Program Files\HP
2014-02-20 00:32 - 2014-02-20 00:34 - 70107920 _____ () C:\Users\Raphael\Downloads\DJ3520_1315.exe
2014-02-18 04:32 - 2014-02-18 04:45 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2014-02-18 03:24 - 2014-02-18 04:38 - 00000000 ____D () C:\Windows\System32\MRT
2014-02-18 03:24 - 2014-02-04 10:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
2014-02-18 03:01 - 2014-02-18 03:01 - 00001981 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-02-18 02:52 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\Raphael\Desktop\Manuel
2014-02-18 01:41 - 2014-02-18 01:41 - 00000000 __RHD () C:\MSOCache
2014-02-18 01:35 - 2014-03-17 08:50 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\SoftGrid Client
2014-02-18 01:35 - 2014-02-18 01:35 - 00000000 ____D () C:\Users\Raphael\AppData\Local\SoftGrid Client
2014-02-18 01:34 - 2014-02-21 01:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-02-18 01:34 - 2014-02-18 01:34 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-18 01:34 - 2014-02-18 01:34 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-18 01:33 - 2014-02-18 01:35 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\TP
2014-02-18 01:32 - 2014-02-18 01:33 - 00000000 ____D () C:\Users\Raphael\Desktop\Bilder

==================== One Month Modified Files and Folders =======

2014-03-18 12:02 - 2014-03-18 12:02 - 00000000 ____D () C:\FRST
2014-03-18 02:53 - 2011-12-22 10:16 - 00000000 ____D () C:\users\Raphael
2014-03-18 02:53 - 2009-07-13 21:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-18 02:53 - 2009-07-13 20:51 - 00096382 _____ () C:\Windows\setupact.log
2014-03-17 14:00 - 2012-11-11 10:09 - 00000344 _____ () C:\Windows\Tasks\DriverScanner.job
2014-03-17 13:59 - 2013-01-03 23:32 - 00003118 _____ () C:\Windows\System32\Tasks\PC Performer
2014-03-17 13:58 - 2014-02-27 04:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-17 13:57 - 2014-03-17 08:49 - 95027928 ____T () C:\ProgramData\8zwlvwlmqa.fee
2014-03-17 13:57 - 2013-06-12 22:54 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-03-17 13:33 - 2011-09-02 14:00 - 01244167 _____ () C:\Windows\WindowsUpdate.log
2014-03-17 11:46 - 2009-07-13 20:45 - 00032064 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 11:46 - 2009-07-13 20:45 - 00032064 ____H () C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 11:41 - 2010-11-20 19:47 - 00229374 _____ () C:\Windows\PFRO.log
2014-03-17 10:07 - 2014-03-08 10:45 - 00000000 ___RD () C:\ONEDRIVE
2014-03-17 09:55 - 2014-02-23 04:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-17 08:52 - 2014-02-11 12:51 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForRaphael.job
2014-03-17 08:50 - 2014-03-17 08:50 - 00332536 ____T (Microsoft Corporation) C:\ProgramData\8zwlvwlmqa.zvv
2014-03-17 08:50 - 2014-02-18 01:35 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\SoftGrid Client
2014-03-17 08:49 - 2014-03-17 08:49 - 00114688 _____ () C:\ProgramData\aqmlwvlwz8.cpp
2014-03-17 07:14 - 2012-03-02 13:44 - 00001146 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001UA.job
2014-03-17 06:04 - 2012-07-12 11:36 - 00000280 _____ () C:\Windows\Tasks\PC Performer_DEFAULT.job
2014-03-17 06:03 - 2011-12-25 14:20 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\Skype
2014-03-17 05:30 - 2013-07-12 11:46 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{9471D58D-5AC4-41EA-8E98-1A8C0C2D74D1}
2014-03-17 05:04 - 2011-12-30 03:53 - 00000000 ____D () C:\Users\Raphael\AppData\Local\CrashDumps
2014-03-16 09:05 - 2014-03-16 05:09 - 00000000 ____D () C:\Users\Raphael\Desktop\Personalentwicklung
2014-03-16 06:06 - 2014-03-16 06:05 - 00000145 _____ () C:\Users\Raphael\Desktop\To-Do-Liste.txt
2014-03-16 05:21 - 2014-02-11 12:51 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForRaphael
2014-03-16 05:21 - 2012-02-01 12:45 - 00000000 _____ () C:\Windows\System32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-03-16 05:21 - 2011-12-25 13:20 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-15 00:24 - 2012-03-02 13:44 - 00001124 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001Core.job
2014-03-14 13:50 - 2011-08-21 11:22 - 00700118 _____ () C:\Windows\System32\perfh007.dat
2014-03-14 13:50 - 2011-08-21 11:22 - 00149968 _____ () C:\Windows\System32\perfc007.dat
2014-03-14 13:50 - 2009-07-13 21:13 - 01622164 _____ () C:\Windows\System32\PerfStringBackup.INI
2014-03-14 11:53 - 2009-07-13 20:45 - 00276904 _____ () C:\Windows\System32\FNTCACHE.DAT
2014-03-14 11:52 - 2013-03-30 10:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 11:51 - 2013-03-30 10:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 12:36 - 2012-07-12 11:36 - 00000288 _____ () C:\Windows\Tasks\PC Performer_UPDATES.job
2014-03-12 11:56 - 2014-03-12 11:56 - 00001745 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-12 11:56 - 2014-03-12 11:54 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 11:56 - 2012-09-16 10:03 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-12 11:56 - 2012-07-22 03:03 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-12 11:54 - 2014-03-12 11:54 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 11:48 - 2014-03-12 11:48 - 00001807 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-12 11:48 - 2014-03-12 11:47 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-12 10:55 - 2014-02-23 04:32 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 10:55 - 2012-11-11 09:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 10:55 - 2011-12-29 13:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-11 03:11 - 2014-03-11 03:09 - 00018190 ____H () C:\Users\Raphael\Desktop\~WRL0005.tmp
2014-03-10 02:40 - 2014-03-09 03:49 - 00000000 ____D () C:\Users\Raphael\Desktop\Abbildungen Persm
2014-03-09 10:48 - 2011-12-22 10:22 - 00058016 _____ () C:\Users\Raphael\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 10:45 - 2014-02-18 02:52 - 00000000 ____D () C:\Users\Raphael\Desktop\Manuel
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ___RD () C:\Users\Raphael\OneDrive
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-03-08 10:44 - 2014-03-08 10:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-03-08 10:43 - 2014-03-08 10:44 - 06072008 _____ (Microsoft Corporation) C:\Users\Raphael\Downloads\OneDriveSetup.exe
2014-03-06 11:28 - 2014-02-28 02:05 - 00013743 _____ () C:\Users\Raphael\Desktop\März 2013.xlsx
2014-03-04 13:14 - 2014-03-04 13:14 - 00000000 ____D () C:\Users\Raphael\Desktop\ipod
2014-03-03 04:14 - 2014-03-03 04:14 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{E128DEC8-FAAD-499C-8E96-8396A770E06D}
2014-03-03 04:12 - 2014-03-03 04:12 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{6024E33D-4F77-4B44-AA0B-1460E1F0B957}
2014-03-02 12:47 - 2014-03-02 12:47 - 00000000 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-03-02 12:47 - 2014-03-02 12:46 - 00000000 ____D () C:\ProgramData\AVG Secure Search
2014-03-02 12:45 - 2014-03-02 12:45 - 00001933 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-02 12:44 - 2014-03-02 12:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-02 12:43 - 2012-07-03 08:35 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
2014-03-02 12:42 - 2012-08-29 05:17 - 00050976 _____ (AVG Technologies) C:\Windows\System32\Drivers\avgtpx64.sys
2014-02-28 22:05 - 2014-03-12 10:09 - 23133696 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2014-02-28 21:17 - 2014-03-12 10:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2014-02-28 21:16 - 2014-03-12 10:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollectorres.dll
2014-02-28 20:58 - 2014-03-12 10:09 - 02765824 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2014-02-28 20:52 - 2014-03-12 10:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2014-02-28 20:51 - 2014-03-12 10:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\System32\ieetwproxystub.dll
2014-02-28 20:42 - 2014-03-12 10:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2014-02-28 20:40 - 2014-03-12 10:09 - 00033792 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2014-02-28 20:37 - 2014-03-12 10:09 - 00574976 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
2014-02-28 20:33 - 2014-03-12 10:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\System32\ieUnatt.exe
2014-02-28 20:33 - 2014-03-12 10:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\System32\ieetwcollector.exe
2014-02-28 20:32 - 2014-03-12 10:09 - 00708608 _____ (Microsoft Corporation) C:\Windows\System32\jscript9diag.dll
2014-02-28 20:30 - 2014-03-12 10:09 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-28 20:23 - 2014-03-12 10:09 - 00940032 _____ (Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
2014-02-28 20:17 - 2014-03-12 10:09 - 00218624 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2014-02-28 20:11 - 2014-03-12 10:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-28 20:02 - 2014-03-12 10:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\System32\msrating.dll
2014-02-28 19:54 - 2014-03-12 10:09 - 05768704 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2014-02-28 19:52 - 2014-03-12 10:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-28 19:51 - 2014-03-12 10:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-28 19:47 - 2014-03-12 10:09 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-28 19:43 - 2014-03-12 10:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-28 19:43 - 2014-03-12 10:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-28 19:42 - 2014-03-12 10:09 - 00627200 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2014-02-28 19:40 - 2014-03-12 10:09 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-28 19:38 - 2014-03-12 10:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-28 19:37 - 2014-03-12 10:09 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-28 19:35 - 2014-03-12 10:09 - 02041856 _____ (Microsoft Corporation) C:\Windows\System32\inetcpl.cpl
2014-02-28 19:18 - 2014-03-12 10:09 - 13051904 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2014-02-28 19:16 - 2014-03-12 10:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-28 19:14 - 2014-03-12 10:09 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-28 19:10 - 2014-03-12 10:09 - 02334208 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2014-02-28 19:03 - 2014-03-12 10:09 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-28 19:00 - 2014-03-12 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-28 18:57 - 2014-03-12 10:09 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-28 18:38 - 2014-03-12 10:09 - 01393664 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2014-02-28 18:32 - 2014-03-12 10:09 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-28 18:27 - 2014-03-12 10:09 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-28 18:25 - 2014-03-12 10:09 - 00817664 _____ (Microsoft Corporation) C:\Windows\System32\ieapfltr.dll
2014-02-28 18:25 - 2014-03-12 10:09 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-28 12:06 - 2014-02-28 12:06 - 00000000 ____D () C:\Users\Raphael\Documents\Command & Conquer 3 Tiberium Wars
2014-02-28 12:04 - 2014-02-28 10:33 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\Command & Conquer 3 Tiberium Wars
2014-02-28 11:44 - 2014-02-28 11:44 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-28 10:33 - 2014-02-28 10:33 - 00000000 __RHD () C:\Users\Raphael\AppData\Roaming\SecuROM
2014-02-28 09:32 - 2011-08-21 02:01 - 00058392 _____ () C:\Windows\DirectX.log
2014-02-28 09:08 - 2014-02-28 09:08 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-02-28 02:23 - 2014-02-27 03:07 - 00012527 _____ () C:\Users\Raphael\Desktop\Schuldentilgungsplan.xlsx
2014-02-28 01:08 - 2014-02-28 01:08 - 02150984 _____ () C:\Users\Raphael\Downloads\VideoPerformerSetup.exe
2014-02-28 00:37 - 2014-02-28 00:37 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{7D4CD2D3-7FFA-4B30-845D-52B060E772AA}
2014-02-27 18:01 - 2011-09-02 14:12 - 01596444 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 12:10 - 2014-02-27 12:10 - 00001982 _____ () C:\Users\Raphael\Desktop\Windows Phone-Desktopanwendung.lnk
2014-02-27 12:10 - 2014-02-27 12:09 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2014-02-27 12:09 - 2014-02-27 12:09 - 00000000 ____D () C:\ProgramData\Applications
2014-02-27 12:03 - 2014-02-27 12:02 - 00000000 ____D () C:\Users\Raphael\AppData\Local\{5BB5F4E2-340C-4E57-8675-D963C81660E5}
2014-02-27 12:03 - 2011-12-22 14:51 - 00000000 ____D () C:\Users\Raphael\AppData\Local\Windows Live
2014-02-27 05:25 - 2014-02-27 05:25 - 00000221 _____ () C:\Users\Raphael\Desktop\R.U.S.E.url
2014-02-27 05:07 - 2014-02-27 04:21 - 00000879 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-27 03:59 - 2014-02-27 03:59 - 00005120 _____ () C:\Users\Raphael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-27 03:06 - 2014-02-20 00:38 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\HpUpdate
2014-02-25 04:38 - 2014-02-25 04:38 - 02790572 _____ ( ) C:\Users\Raphael\Downloads\pdftkb36_setup.exe
2014-02-25 04:38 - 2014-02-25 04:38 - 00000000 ____D () C:\Program Files (x86)\PDFTK Builder
2014-02-23 04:32 - 2014-02-23 04:32 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-02-23 04:32 - 2014-02-23 04:32 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-23 04:32 - 2012-01-11 12:58 - 00000000 ____D () C:\Users\Raphael\AppData\Local\Adobe
2014-02-21 02:09 - 2012-07-13 11:15 - 00517120 ___SH () C:\Users\Raphael\Desktop\Thumbs.db
2014-02-21 01:05 - 2014-02-18 01:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-02-20 00:40 - 2014-02-20 00:40 - 00000000 ____D () C:\Users\Raphael\Desktop\Drucker
2014-02-20 00:40 - 2011-12-22 10:25 - 00000000 ____D () C:\Users\Raphael\AppData\Local\HP
2014-02-20 00:38 - 2014-02-20 00:38 - 00003626 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 3520 series
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\ProgramData\Visan
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\ProgramData\HP Photo Creations
2014-02-20 00:38 - 2014-02-20 00:38 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-20 00:38 - 2011-09-02 14:16 - 00000000 ____D () C:\Program Files (x86)\HP
2014-02-20 00:38 - 2011-08-21 01:50 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-02-20 00:36 - 2014-02-20 00:36 - 00000057 _____ () C:\ProgramData\Ament.ini
2014-02-20 00:36 - 2014-02-20 00:36 - 00000000 ____D () C:\ProgramData\HP
2014-02-20 00:36 - 2014-02-20 00:36 - 00000000 ____D () C:\Program Files\HP
2014-02-20 00:34 - 2014-02-20 00:32 - 70107920 _____ () C:\Users\Raphael\Downloads\DJ3520_1315.exe
2014-02-18 11:14 - 2009-07-13 19:20 - 00000000 ____D () C:\Windows\rescache
2014-02-18 04:45 - 2014-02-18 04:32 - 00000000 ____D () C:\ProgramData\VirtualizedApplications
2014-02-18 04:38 - 2014-02-18 03:24 - 00000000 ____D () C:\Windows\System32\MRT
2014-02-18 03:01 - 2014-02-18 03:01 - 00001981 _____ () C:\Users\Public\Desktop\Adobe Reader X.lnk
2014-02-18 01:41 - 2014-02-18 01:41 - 00000000 __RHD () C:\MSOCache
2014-02-18 01:35 - 2014-02-18 01:35 - 00000000 ____D () C:\Users\Raphael\AppData\Local\SoftGrid Client
2014-02-18 01:35 - 2014-02-18 01:33 - 00000000 ____D () C:\Users\Raphael\AppData\Roaming\TP
2014-02-18 01:34 - 2014-02-18 01:34 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-18 01:34 - 2014-02-18 01:34 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-18 01:34 - 2011-08-21 02:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-18 01:34 - 2009-07-13 19:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-18 01:33 - 2014-02-18 01:32 - 00000000 ____D () C:\Users\Raphael\Desktop\Bilder
2014-02-17 10:46 - 2011-12-22 13:41 - 00000000 ____D () C:\Users\Raphael\Documents\Youcam

Files to move or delete:
====================
C:\ProgramData\8zwlvwlmqa.fee
C:\ProgramData\8zwlvwlmqa.zvv


Some content of TEMP:
====================
C:\Users\Raphael\AppData\Local\Temp\38388-38389-adobe-photoshop-lightroom.exe
C:\Users\Raphael\AppData\Local\Temp\ApnStub.exe
C:\Users\Raphael\AppData\Local\Temp\avguidx.dll
C:\Users\Raphael\AppData\Local\Temp\AVG_Security_Toolbar.exe
C:\Users\Raphael\AppData\Local\Temp\CommonInstaller.exe
C:\Users\Raphael\AppData\Local\Temp\DataCard_Setup64.exe
C:\Users\Raphael\AppData\Local\Temp\drm_dyndata_7290008.dll
C:\Users\Raphael\AppData\Local\Temp\drm_dyndata_7330017.dll
C:\Users\Raphael\AppData\Local\Temp\Extract.exe
C:\Users\Raphael\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Raphael\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Raphael\AppData\Local\Temp\jre-6u31-windows-i586-iftw-rv.exe
C:\Users\Raphael\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\Raphael\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Raphael\AppData\Local\Temp\mgsqlite3.dll
C:\Users\Raphael\AppData\Local\Temp\oi_{6A2D16C6-566F-4235-95C8-B30C9463D9B9}.exe
C:\Users\Raphael\AppData\Local\Temp\patchw32.dll
C:\Users\Raphael\AppData\Local\Temp\px.dll
C:\Users\Raphael\AppData\Local\Temp\pxafs.dll
C:\Users\Raphael\AppData\Local\Temp\PxCpyA64.exe
C:\Users\Raphael\AppData\Local\Temp\PxCpyI64.exe
C:\Users\Raphael\AppData\Local\Temp\pxdrv.dll
C:\Users\Raphael\AppData\Local\Temp\pxhpinst.exe
C:\Users\Raphael\AppData\Local\Temp\PxInsA64.exe
C:\Users\Raphael\AppData\Local\Temp\PxInsI64.exe
C:\Users\Raphael\AppData\Local\Temp\pxmas.dll
C:\Users\Raphael\AppData\Local\Temp\pxsetup.exe
C:\Users\Raphael\AppData\Local\Temp\pxsfs.dll
C:\Users\Raphael\AppData\Local\Temp\pxwave.dll
C:\Users\Raphael\AppData\Local\Temp\ResetDevice.exe
C:\Users\Raphael\AppData\Local\Temp\Resource.exe
C:\Users\Raphael\AppData\Local\Temp\setup.exe
C:\Users\Raphael\AppData\Local\Temp\setup_fsu_cid.exe
C:\Users\Raphael\AppData\Local\Temp\Shortcut_BundleSweetIMSetup.exe
C:\Users\Raphael\AppData\Local\Temp\SIMEEIInstaller.exe
C:\Users\Raphael\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Raphael\AppData\Local\Temp\SP53462.exe
C:\Users\Raphael\AppData\Local\Temp\SP54127.exe
C:\Users\Raphael\AppData\Local\Temp\sp54373.exe
C:\Users\Raphael\AppData\Local\Temp\sp54620.exe
C:\Users\Raphael\AppData\Local\Temp\SP54714.exe
C:\Users\Raphael\AppData\Local\Temp\SP55151.exe
C:\Users\Raphael\AppData\Local\Temp\SP55152.exe
C:\Users\Raphael\AppData\Local\Temp\sp58915.exe
C:\Users\Raphael\AppData\Local\Temp\sp64126.exe
C:\Users\Raphael\AppData\Local\Temp\toolbar.exe
C:\Users\Raphael\AppData\Local\Temp\ToolbarInstaller.exe
C:\Users\Raphael\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Raphael\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Raphael\AppData\Local\Temp\vxblock.dll
C:\Users\Raphael\AppData\Local\Temp\~+JF7535120033070364367.dll


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== EXE ASSOCIATION =====================

HKLM\...\.exe: exefile => OK
HKLM\...\exefile\DefaultIcon: %1 => OK
HKLM\...\exefile\open\command: "%1" %* => OK

==================== Restore Points  =========================

Restore point made on: 2014-02-27 18:00:18
Restore point made on: 2014-02-28 09:07:58
Restore point made on: 2014-03-08 10:18:07
Restore point made on: 2014-03-13 00:06:53

==================== Memory info =========================== 

Percentage of memory in use: 12%
Total physical RAM: 7658.9 MB
Available physical RAM: 6735.27 MB
Total Pagefile: 7657.05 MB
Available Pagefile: 6734.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.87 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:449.7 GB) (Free:316.37 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:465.66 GB) NTFS
Drive f: (RECOVERY) (Fixed) (Total:15.77 GB) (Free:1.71 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive g: (HP_TOOLS) (Fixed) (Total:0.1 GB) (Free:0.09 GB) FAT32
Drive h: (CNC3) (CDROM) (Total:6.2 GB) (Free:0 GB) UDF
Drive i: () (Removable) (Total:1.87 GB) (Free:1.86 GB) FAT
Drive x: (Boot) (Fixed) (Total:0.25 GB) (Free:0.25 GB) NTFS
Drive y: (SYSTEM) (Fixed) (Total:0.19 GB) (Free:0.16 GB) NTFS ==>[System with boot components (obtained from reading drive)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C843E555)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 11D8B398)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 0055E3F9)
Partition 1: (Active) - (Size=2 GB) - (Type=06)


LastRegBack: 2014-03-10 07:02

==================== End Of Log ============================

Vielen Dank und liebe Grüße

deeprybka · 18.03.2014, 12:22

Mein Name ist Jürgen und ich werde Dir bei Deinem Problem behilflich sein. Zusammen schaffen wir das...

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig durch bevor Du beginnst. Wenn es Probleme gibt oder Du etwas nicht verstehst, dann stoppe mit Deiner Ausführung und beschreibe mir das Problem.
Führe bitte nur Scans durch zu denen Du von mir aufgefordert wirst.
Bitte kein Crossposting (posten in mehreren Foren).
Installiere oder deinstalliere während der Bereinigung keine Software, außer Du wurdest dazu aufgefordert.
Speichere alle unsere Toosl auf dem Desktop ab.
Poste die Logfiles direkt in deinen Thread in Code-Tags.
Bedenke, dass wir hier alle während unserer Freizeit tätig sind, wenn du innerhalb von 2 Tagen nichts von mir hörst, dann schreibe mir bitte eine PM.

Hinweise: Ich kann Dir niemals eine Garantie geben, dass wir alle schädlichen Dateien finden werden. Eine Formatierung ist meist der schnellere und immer der sicherste Weg, aber auch nur bei wirklicher Malware empfehlenswert. Adware & Co können wir sehr gut entfernen.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis Dir jemand vom Team sagt, dass Du clean bist.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Das dauert dann zwar ein paar Stunden länger, garantiert aber, dass Du kompetente Hilfe und geprüfte Antworten bekommst. Siehe hier...

Ich bedanke mich für Deine Geduld!

deeprybka · 18.03.2014, 13:13

Schritt 1

Drücke bitte die

+ R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

S3 Winmgmt; C:\ProgramData\8zwlvwlmqa.zvv [332536 2014-03-17] (Microsoft Corporation) 
Startup: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8zwlvwlmqa.lnk
ShortcutTarget: 8zwlvwlmqa.lnk -> C:\ProgramData\aqmlwvlwz8.cpp ()
C:\ProgramData\8zwlvwlmqa.zvv
C:\ProgramData\8zwlvwlmqa.fee
C:\ProgramData\aqmlwvlwz8.cpp

Speichere diese bitte als Fixlist.txt auf deinem USB Stick.

Starte deinen Rechner erneut in die Reparaturoptionen
Starte nun die FRST.exe erneut und klicke den Entfernen Button.

Das Tool erstellt eine Fixlog.txt auf deinem USB Stick. Poste den Inhalt bitte hier.

Starte nach diesem Fix bitte deinen Rechner im normalen Modus neu. Wenn er wieder funktioniert, mache bitte mit Schritt 2 weiter.

Schritt 2

Verschiebe FRST vom USB-Stick auf den Desktop.

Starte dann FRST.
Setze bei Optional Scan den Haken bei Addition.txt und drücke Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und Addition.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieser beiden Logfiles bitte hier in deinen Thread.

VonDrecken · 18.03.2014, 15:06

Schritt 1 ausgeführt!

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by SYSTEM at 2014-03-18 13:20:26 Run:1
Running from I:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
S3 Winmgmt; C:\ProgramData\8zwlvwlmqa.zvv [332536 2014-03-17] (Microsoft Corporation) 
Startup: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8zwlvwlmqa.lnk
ShortcutTarget: 8zwlvwlmqa.lnk -> C:\ProgramData\aqmlwvlwz8.cpp ()
C:\ProgramData\8zwlvwlmqa.zvv
C:\ProgramData\8zwlvwlmqa.fee
C:\ProgramData\aqmlwvlwz8.cpp
*****************

Winmgmt => Service restored successfully.
C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\8zwlvwlmqa.lnk => Moved successfully.
C:\ProgramData\aqmlwvlwz8.cpp => Moved successfully.
C:\ProgramData\8zwlvwlmqa.zvv => Moved successfully.
C:\ProgramData\8zwlvwlmqa.fee => Moved successfully.
"C:\ProgramData\aqmlwvlwz8.cpp" => File/Directory not found.

==== End of Fixlog ====

Habe den PC neu gestartet und wollte mich anmelden!
Fehlermeldung: Die Anmeldung des Dienstes "Gruppenrichtlinienclient" ist fehlgeschlagen - Zugriff verweigert.

Habe nun den PC im abgesicherten Modus gestartet ... das hat funktioniert!

LG

Soll ich Schritte 2 im abgesicherten Modus durchführen?

deeprybka · 18.03.2014, 19:55

Ja, führe bitte Schritt 2 im abgesicherten Modus durch.

VonDrecken · 18.03.2014, 22:13

Schritt 2 ausgeführt!

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Raphael (administrator) on RAPHAEL-HP on 18-03-2014 22:07:02
Running from C:\Users\Raphael\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Safe Mode (with Networking)



==================== Processes (Whitelisted) =================



==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-03-11] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2480936 2010-12-17] (Synaptics Incorporated)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-04-01] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [HPConnectionManager] - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [94264 2011-02-15] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-02] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] - C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-01-25] (cyberlink)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [586296 2010-11-09] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Easybits Recovery] - C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-03-16] (EasyBits Software AS)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Photo Downloader] - C:\Program Files (x86)\Adobe\Adobe Photoshop Lightroom 1.1\apdproxy.exe [61440 2007-06-26] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2539544 2014-03-02] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [ApnUpdater] - C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1564872 2012-06-06] (Ask)
HKLM-x32\...\Run: [HPOSD] - C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\tele.ring Internet Manager\UIExec.exe [132608 2009-07-27] ()
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-10-28] (Hewlett-Packard)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1

==================== Internet (Whitelisted) ====================

URLSearchHook: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - appbario2 Toolbar - {cdf97ee2-ded0-4369-835e-99dd08225fa5} - C:\Program Files (x86)\appbario2\prxtbappb.dll (Conduit Ltd.)
URLSearchHook: ATTENTION ==> Default URLSearchHook is missing.
SearchScopes: HKLM - {03413C6F-3C72-4E27-86BA-80624A70C0A3} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/5221-111072-7833-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002
SearchScopes: HKLM-x32 - {03413C6F-3C72-4E27-86BA-80624A70C0A3} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/5221-111072-7833-3/4?mpre=hxxp://shop.ebay.com/?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10002
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
BHO-x32: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.0.0.248\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: appbario2 Toolbar - {cdf97ee2-ded0-4369-835e-99dd08225fa5} - C:\Program Files (x86)\appbario2\prxtbappb.dll (Conduit Ltd.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - DVDVideoSoftTB Toolbar - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.0.0.248\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - appbario2 Toolbar - {cdf97ee2-ded0-4369-835e-99dd08225fa5} - C:\Program Files (x86)\appbario2\prxtbappb.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.0.0\ViProtocol.dll (AVG Secure Search)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2011-08-21] (EasyBits Software Corp.)
Tcpip\Parameters: [DhcpNameServer] 195.34.133.21 212.186.211.21
Tcpip\..\Interfaces\{0EDC64A2-48A2-4D4B-A227-D00558200321}: [NameServer]194.24.128.100 81.3.216.100
Tcpip\..\Interfaces\{92C85EB4-0A9B-4E96-B6B2-E53835FF59AA}: [NameServer]194.24.128.100 81.3.216.100

FireFox:
========
FF ProfilePath: C:\Users\Raphael\AppData\Roaming\Mozilla\Firefox\Profiles\8kvmy6nq.default
FF SearchEngineOrder.1: Ask.com
FF Keyword.URL: hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ORJ&o=100000027&locale=de_US&apn_uid=6E5121CC-0199-47A7-A5CF-A03A151E4090&apn_ptnrs=U3&apn_sauid=ED4F52D3-11EB-40C8-805D-DC8113D280B0&apn_dtid=OSJ000YYAT&&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.0.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2014-02-18]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn\
FF Extension: Symantec Intrusion Prevention - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\IPSFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn_2011_7_13_2
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\coFFPlgn_2011_7_13_2 [2014-03-18]
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.0.0.248
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.0.0.248 [2014-03-02]

==================== Services (Whitelisted) =================

S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [365568 2011-04-01] (Advanced Micro Devices, Inc.)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-01-25] (CyberLink)
S2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [339456 2010-11-16] ()
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
S2 Mobile Partner. RunOuc; C:\Program Files (x86)\Mobile Partner\UpdateDog\ouc.exe [218624 2012-01-01] ()
S2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe [130008 2011-04-17] (Symantec Corporation)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2143072 2012-05-29] (TuneUp Software)
S2 UI Assistant Service; C:\Program Files (x86)\tele.ring Internet Manager\AssistantServices.exe [241664 2009-07-27] ()
S2 vToolbarUpdater18.0.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.0.0\ToolbarUpdater.exe [1759768 2014-03-02] (AVG Secure Search)

==================== Drivers (Whitelisted) ====================

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-03-02] (AVG Technologies)
S1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\BASHDefs\20121130.005\BHDrvx64.sys [1384608 2012-10-24] (Symantec Corporation)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2012-08-09] (Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [138912 2012-08-09] (Symantec Corporation)
S3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [256000 2012-01-01] (Huawei Technologies Co., Ltd.)
S1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\IPSDefs\20121221.001\IDSvia64.sys [513184 2012-11-03] (Symantec Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121222.025\ENG64.SYS [126112 2012-11-06] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.5.0.125\Definitions\VirusDefs\20121222.025\EX64.SYS [2084000 2012-11-06] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207020.003\SRTSP64.SYS [744568 2011-03-31] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207020.003\SRTSPX64.SYS [40568 2011-03-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1207020.003\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1207020.003\SYMEFA64.SYS [912504 2011-03-15] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2011-12-25] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NISx64\1207020.003\Ironx64.SYS [171128 2011-01-27] (Symantec Corporation)
S1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207020.003\SYMNETS.SYS [386168 2011-04-21] (Symantec Corporation)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [11856 2012-03-29] (TuneUp Software)
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-18 21:02 - 2014-03-18 22:07 - 00000000 ____D () C:\FRST
2014-03-18 16:13 - 2014-03-18 16:13 - 00000000 ____D () C:\Windows\system32\%LocalAppData%
2014-03-12 20:54 - 2014-03-12 20:56 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 20:54 - 2014-03-12 20:54 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 20:47 - 2014-03-12 20:48 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-12 19:09 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 19:09 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 19:09 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 19:09 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 19:09 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 19:09 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 19:09 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 19:09 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 19:09 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 19:09 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 19:09 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 19:09 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 19:09 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 19:09 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 19:09 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 19:09 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 19:09 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 19:09 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 19:09 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 19:09 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 19:09 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 19:09 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 19:09 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 19:09 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 19:09 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 19:09 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 19:09 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 19:09 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 19:09 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 19:09 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 19:09 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 19:09 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 19:09 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 19:09 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 19:09 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 19:09 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 19:09 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 19:09 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 19:09 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 19:09 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 19:09 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 19:09 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 19:09 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 19:09 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 19:09 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-12 19:09 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 19:09 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 19:09 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-08 19:45 - 2014-03-17 19:07 - 00000000 ___RD () C:\ONEDRIVE
2014-03-08 19:44 - 2014-03-08 19:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-03-02 21:47 - 2014-03-02 21:47 - 00000000 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-03-02 21:44 - 2014-03-02 21:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-02-28 20:44 - 2014-02-28 20:44 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-28 18:08 - 2014-02-28 18:08 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-02-27 21:09 - 2014-02-27 21:10 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2014-02-27 13:21 - 2014-03-17 22:58 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-02-27 13:19 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-02-27 13:19 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-27 13:19 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-27 13:19 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-02-27 13:19 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-02-27 13:19 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-02-27 13:19 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-02-27 13:19 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-27 13:19 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-02-27 13:19 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-27 13:19 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-02-27 13:19 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-02-27 13:19 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-02-27 13:19 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-27 13:19 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-27 13:19 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-02-27 13:19 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-02-27 13:19 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-27 13:19 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-02-27 13:19 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-27 13:19 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-27 13:19 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-02-27 13:19 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-27 13:19 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-02-27 13:19 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-27 13:19 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-02-27 13:19 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-02-27 13:19 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-27 13:19 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-27 13:19 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-02-27 13:19 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-02-27 13:19 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-27 13:19 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-27 13:19 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-02-27 13:19 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-27 13:19 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-02-27 13:19 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-27 13:19 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-27 13:19 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-02-27 13:19 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-02-27 13:19 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-27 13:19 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-02-27 13:19 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-27 13:19 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-02-27 13:19 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-27 13:19 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-02-27 13:19 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-27 13:19 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-02-27 13:19 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-27 13:19 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-02-25 13:38 - 2014-02-25 13:38 - 00000000 ____D () C:\Program Files (x86)\PDFTK Builder
2014-02-23 13:32 - 2014-03-17 18:55 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-23 13:32 - 2014-03-12 19:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-20 09:38 - 2014-02-20 09:38 - 00003626 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 3520 series
2014-02-20 09:38 - 2014-02-20 09:38 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-20 09:37 - 2012-10-17 04:31 - 00741480 ____N (Hewlett-Packard Co.) C:\Windows\system32\HPDiscoPMB011.dll
2014-02-20 09:36 - 2014-02-20 09:36 - 00000000 ____D () C:\Program Files\HP
2014-02-18 12:24 - 2014-02-18 13:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 12:24 - 2014-02-04 19:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-18 10:41 - 2014-02-18 10:41 - 00000000 __RHD () C:\MSOCache
2014-02-18 10:34 - 2014-02-21 10:05 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-02-18 10:34 - 2014-02-18 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-18 10:34 - 2014-02-18 10:34 - 00000000 ____D () C:\Program Files\Microsoft Office

==================== One Month Modified Files and Folders =======

2014-03-18 22:07 - 2014-03-18 21:02 - 00000000 ____D () C:\FRST
2014-03-18 16:13 - 2014-03-18 16:13 - 00000000 ____D () C:\Windows\system32\%LocalAppData%
2014-03-18 16:03 - 2011-08-21 20:22 - 00699868 _____ () C:\Windows\system32\perfh007.dat
2014-03-18 16:03 - 2011-08-21 20:22 - 00149750 _____ () C:\Windows\system32\perfc007.dat
2014-03-18 16:03 - 2009-07-14 06:13 - 01622164 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-18 15:56 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-18 15:56 - 2009-07-14 05:51 - 00096550 _____ () C:\Windows\setupact.log
2014-03-17 23:00 - 2012-11-11 19:09 - 00000344 _____ () C:\Windows\Tasks\DriverScanner.job
2014-03-17 22:59 - 2013-01-04 08:32 - 00003118 _____ () C:\Windows\System32\Tasks\PC Performer
2014-03-17 22:59 - 2011-09-02 23:00 - 01244167 _____ () C:\Windows\WindowsUpdate.log
2014-03-17 22:58 - 2014-02-27 13:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-17 22:57 - 2013-06-13 07:54 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-03-17 20:46 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-17 20:46 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-17 20:41 - 2010-11-21 04:47 - 00229374 _____ () C:\Windows\PFRO.log
2014-03-17 19:07 - 2014-03-08 19:45 - 00000000 ___RD () C:\ONEDRIVE
2014-03-17 18:55 - 2014-02-23 13:32 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-17 17:52 - 2014-02-11 21:51 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForRaphael.job
2014-03-17 16:14 - 2012-03-02 22:44 - 00001146 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001UA.job
2014-03-17 15:04 - 2012-07-12 20:36 - 00000280 _____ () C:\Windows\Tasks\PC Performer_DEFAULT.job
2014-03-17 14:30 - 2013-07-12 20:46 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{9471D58D-5AC4-41EA-8E98-1A8C0C2D74D1}
2014-03-16 14:21 - 2014-02-11 21:51 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForRaphael
2014-03-16 14:21 - 2012-02-01 21:45 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-03-16 14:21 - 2011-12-25 22:20 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-03-15 09:24 - 2012-03-02 22:44 - 00001124 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001Core.job
2014-03-14 20:53 - 2009-07-14 05:45 - 00276904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 20:52 - 2013-03-30 19:26 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 20:51 - 2013-03-30 19:26 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-12 21:36 - 2012-07-12 20:36 - 00000288 _____ () C:\Windows\Tasks\PC Performer_UPDATES.job
2014-03-12 20:56 - 2014-03-12 20:54 - 00000000 ____D () C:\Program Files\iTunes
2014-03-12 20:56 - 2012-07-22 12:03 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-12 20:54 - 2014-03-12 20:54 - 00000000 ____D () C:\Program Files\iPod
2014-03-12 20:48 - 2014-03-12 20:47 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-12 19:55 - 2014-02-23 13:32 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 19:55 - 2012-11-11 18:37 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 19:55 - 2011-12-29 22:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-10 16:03 - 2007-01-02 02:26 - 18644992 _____ () C:\Windows\system32\config\RegBack\SYSTEM
2014-03-10 16:03 - 2007-01-02 02:26 - 00278528 _____ () C:\Windows\system32\config\RegBack\DEFAULT
2014-03-10 16:03 - 2007-01-02 02:26 - 00061440 _____ () C:\Windows\system32\config\RegBack\SAM
2014-03-10 16:02 - 2007-01-02 02:26 - 73842688 _____ () C:\Windows\system32\config\RegBack\SOFTWARE
2014-03-10 16:02 - 2007-01-02 02:26 - 00032768 _____ () C:\Windows\system32\config\RegBack\SECURITY
2014-03-08 19:44 - 2014-03-08 19:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft OneDrive
2014-03-02 21:47 - 2014-03-02 21:47 - 00000000 _____ () C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2014-03-02 21:44 - 2014-03-02 21:44 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-02 21:43 - 2012-07-03 17:35 - 00000000 ____D () C:\Program Files (x86)\AVG Secure Search
2014-03-02 21:42 - 2012-08-29 14:17 - 00050976 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2014-03-01 07:05 - 2014-03-12 19:09 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-12 19:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-12 19:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-12 19:09 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-12 19:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-12 19:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-12 19:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-12 19:09 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-12 19:09 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-12 19:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-12 19:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-12 19:09 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-12 19:09 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-12 19:09 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-12 19:09 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-12 19:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-12 19:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-12 19:09 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-12 19:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-12 19:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-12 19:09 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-12 19:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-12 19:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-12 19:09 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-12 19:09 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-12 19:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-12 19:09 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-12 19:09 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-12 19:09 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-12 19:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-12 19:09 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-12 19:09 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-12 19:09 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-12 19:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-12 19:09 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-12 19:09 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-12 19:09 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-12 19:09 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-12 19:09 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-12 19:09 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-28 20:44 - 2014-02-28 20:44 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-28 18:32 - 2011-08-21 11:01 - 00058392 _____ () C:\Windows\DirectX.log
2014-02-28 18:08 - 2014-02-28 18:08 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-02-28 03:01 - 2011-09-02 23:12 - 01596444 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-27 21:10 - 2014-02-27 21:09 - 00000000 ____D () C:\Program Files (x86)\Windows Phone
2014-02-25 13:38 - 2014-02-25 13:38 - 00000000 ____D () C:\Program Files (x86)\PDFTK Builder
2014-02-21 10:05 - 2014-02-18 10:34 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client
2014-02-20 09:38 - 2014-02-20 09:38 - 00003626 _____ () C:\Windows\System32\Tasks\HPCustParticipation HP Deskjet 3520 series
2014-02-20 09:38 - 2014-02-20 09:38 - 00000000 ____D () C:\Program Files (x86)\HP Photo Creations
2014-02-20 09:38 - 2011-09-02 23:16 - 00000000 ____D () C:\Program Files (x86)\HP
2014-02-20 09:38 - 2011-08-21 10:50 - 00000000 ____D () C:\Program Files (x86)\Hewlett-Packard
2014-02-20 09:36 - 2014-02-20 09:36 - 00000000 ____D () C:\Program Files\HP
2014-02-18 20:14 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-18 13:38 - 2014-02-18 12:24 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 10:41 - 2014-02-18 10:41 - 00000000 __RHD () C:\MSOCache
2014-02-18 10:34 - 2014-02-18 10:34 - 00000000 ____D () C:\Windows\System32\Tasks\OfficeSoftwareProtectionPlatform
2014-02-18 10:34 - 2014-02-18 10:34 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-02-18 10:34 - 2011-08-21 11:00 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-02-18 10:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 16:02

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Raphael at 2014-03-18 22:08:27
Running from C:\Users\Raphael\Desktop
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Disabled - Out of date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Out of date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Disabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

A1 Dashboard (HKLM-x32\...\A1 Dashboard) (Version: 1.15.1.0 - A1 Telekom Austria AG)
A1 Dashboard (x32 Version: 1.15.1.0 - A1 Telekom Austria AG) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.1.0.4880 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.0.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.0.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom (HKLM-x32\...\{EED085D5-A3FA-4FB2-BC93-48C1194E6E26}) (Version: 1.10.0000 - Adobe)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.)
Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden
AMD APP SDK Runtime (Version: 2.4.595.9 - Advanced Micro Devices Inc.) Hidden
AMD Fuel (Version: 2011.0401.2259.39449 - Ihr Firmenname) Hidden
AMD System Monitor (HKLM-x32\...\{C1C82DC9-1547-4038-8F0A-C069F0B7F2ED}) (Version: 1.0.5 - Advanced Micro Devices, Inc.)
AMD VISION Engine Control Center (x32 Version: 2011.0401.2259.39449 - Ihr Firmenname) Hidden
appbario2 Toolbar (HKLM-x32\...\appbario2 Toolbar) (Version: 6.8.10.0 - appbario2)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ask Toolbar (HKLM-x32\...\{86D4B82A-ABED-442A-BE86-96357B70F4FE}) (Version: 1.15.4.0 - Ask.com) <==== ATTENTION
ATI Catalyst Install Manager (HKLM\...\{942836D4-5395-652B-F1E8-A7C5B039910C}) (Version: 3.0.820.0 - ATI Technologies, Inc.)
AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden
AVG Security Toolbar (HKLM-x32\...\AVG Secure Search) (Version: 18.0.0.248 - AVG Technologies)
Babylon toolbar on IE (HKLM-x32\...\BabylonToolbar) (Version:  - ) <==== ATTENTION
Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Big Rig Europe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bing Bar (HKLM-x32\...\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}) (Version: 7.0.610.0 - Microsoft Corporation)
Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden
Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0401.2259.39449 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2011.0401.2259.39449 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2011.0401.2259.39449 - ATI) Hidden
CCC Help Chinese Standard (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Chinese Traditional (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Czech (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Danish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Dutch (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help English (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Finnish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help French (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help German (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Greek (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Italian (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Japanese (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Korean (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Norwegian (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Polish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Russian (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Spanish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Swedish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Thai (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
CCC Help Turkish (x32 Version: 2011.0401.2258.39449 - ATI) Hidden
ccc-utility64 (Version: 2011.0401.2259.39449 - ATI) Hidden
Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Command & Conquer 3 (HKLM-x32\...\{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}) (Version: 1.00.0000 - Ihr Firmenname)
Crazy Chicken Kart 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.3.2714 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.3.2714 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.5.1.3922 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden
DVDVideoSoftTB Toolbar (HKLM-x32\...\DVDVideoSoftTB Toolbar) (Version: 6.8.2.0 - DVDVideoSoftTB)
Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard)
ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)
Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.)
Facebook Messenger 2.1.4814.0 (HKLM-x32\...\{7204BDEE-1A48-4D95-A964-44A9250B439E}) (Version: 2.1.4814.0 - Facebook)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden
FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden
Fishdom (x32 Version: 2.2.0.95 - WildTangent) Hidden
Free YouTube to MP3 Converter version 3.11.35.1031 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.11.35.1031 - DVDVideoSoft Ltd.)
Hewlett-Packard ACLM.NET v1.2.2.3 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM\...\{3623E33A-6E9A-442F-9628-570C28E01EDF}) (Version: 4.1.9.1 - Hewlett-Packard Company)
HP Auto (Version: 1.0.12935.3667 - Hewlett-Packard Company) Hidden
HP Client Services (Version: 1.1.12938.3539 - Hewlett-Packard) Hidden
HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company)
HP Customer Experience Enhancements (x32 Version: 6.0.1.7 - Hewlett-Packard) Hidden
HP Deskjet 3520 series - Grundlegende Software für das Gerät (HKLM\...\{15B2F0E3-3FAC-4495-B0FD-398EECFA4100}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Deskjet 3520 series Hilfe (HKLM-x32\...\{6B953497-169C-4929-9AA9-A9F510347468}) (Version: 27.0.0 - Hewlett Packard)
HP Deskjet 3520 series Setup Guide (HKLM-x32\...\{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E}) (Version: 27.0.0 - Hewlett Packard)
HP Documentation (HKLM-x32\...\{B6946BAC-2169-42CC-8E6D-F6FE2EEDB20F}) (Version: 1.2.0.0 - Hewlett-Packard)
HP DVB-T TV Tuner 8.0.64.43 (HKLM-x32\...\HP DVB-T TV Tuner) (Version: 8.0.64.43 - )
HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent)
HP On Screen Display (HKLM-x32\...\{ED1BD69A-07E3-418C-91F1-D856582581BF}) (Version: 1.3.5 - Hewlett-Packard Company)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Power Manager (HKLM-x32\...\{E44578C7-4667-4124-8BC2-1161BCA54978}) (Version: 1.4.4 - Hewlett-Packard Company)
HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company)
HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company)
HP SimplePass 2011 (HKLM-x32\...\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}) (Version: 5.1.0.495 - Hewlett-Packard)
HP Software Framework (HKLM-x32\...\{AF6EB833-D48A-49AC-9394-4C57489FDFF2}) (Version: 4.1.13.1 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}) (Version: 5.003.003.001 - Hewlett-Packard)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6329.0 - IDT)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java Auto Updater (x32 Version: 2.0.7.1 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Java(TM) 6 Update 33 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216033FF}) (Version: 6.0.330 - Oracle)
Jewel Quest Solitaire (x32 Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
L.A. Noire (HKLM-x32\...\{915726DF-7891-444A-AA03-0DF1D64F561A}) (Version: 1.00.0000 - Rockstar Games)
LG Internet Kit (HKLM-x32\...\LG Internet Kit) (Version: 4.1.13 - LG Electronics)
LG USB Modem Drivers (HKLM-x32\...\{E1640DA5-89B4-4F52-B15D-5DA3D14F29D4}) (Version: 4.9.4 - LG Electronics)
Magic Desktop (HKLM-x32\...\EasyBits Magic Desktop) (Version: 3.0 - EasyBits Software AS)
Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Mobile Partner (HKLM-x32\...\Mobile Partner) (Version: 21.003.28.00.152 - Huawei Technologies Co.,Ltd)
Mozilla Firefox 27.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 de)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
Mystery P.I. - The London Caper (x32 Version: 2.2.0.95 - WildTangent) Hidden
Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden
Norton Internet Security (HKLM-x32\...\NIS) (Version: 18.7.2.3 - Symantec Corporation)
PC Performer (HKLM-x32\...\PC Performer_is1) (Version: 11.10 - PerformerSoft LLC) <==== ATTENTION
PDFTK Builder 3.5.3 (HKLM-x32\...\PDFTK Builder_is1) (Version:  - )
Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden
Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Eugen Systems)
Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.02.02.0 - Ralink)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.80 - Realtek Semiconductor Corp.)
Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.0.0.0 - Rockstar Games)
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.6 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.6.106 - Skype Technologies S.A.)
Slingo Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Studie zur Verbesserung von HP Deskjet 3520 series Produkten (HKLM\...\{A5BB6A58-BC1A-48A7-BB19-1768A80CF9C9}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
Sweet Home 3D version 3.5 (HKLM-x32\...\Sweet Home 3D_is1) (Version:  - eTeks)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.4.4 - Synaptics Incorporated)
tele.ring Internet Manager (HKLM-x32\...\{A9E5EDA7-2E6C-49E7-924B-A32B89C24A04}) (Version: 1.0.0.2 - ZTE)
TuneUp Utilities 2012 (HKLM-x32\...\TuneUp Utilities 2012) (Version: 12.0.3600.73 - TuneUp Software)
TuneUp Utilities 2012 (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
UltraMixer 3.0.2.1 (HKLM-x32\...\{32E2F180-247C-4077-B06A-20F9868568E1}_is1) (Version: 3.0.2.1 - UltraMixer Digital Audio Solutions)
Uniblue DriverScanner (HKLM-x32\...\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1) (Version: 4.0.3.5 - Uniblue Systems Ltd)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Validity WBF DDK (HKLM\...\{7C54D017-21BB-43AE-9746-33E78AF4A425}) (Version: 4.3.118.0 - Validity Sensors, Inc.)
Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden
WavePad Audiobearbeitungs-Software (HKLM-x32\...\WavePad) (Version:  - NCH Software)
Wedding Dash (x32 Version: 2.2.0.95 - WildTangent) Hidden
WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Phone app for desktop (HKLM-x32\...\{9C4D79B6-238E-49D8-AEBC-26384EBDE6B3}) (Version: 1.0.1720.1 - Microsoft Corporation)
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden

==================== Restore Points  =========================

28-02-2014 02:00:10 Windows Update
28-02-2014 17:07:40 Installed Command & Conquer 3.
08-03-2014 18:17:49 Geplanter Prüfpunkt
13-03-2014 08:06:34 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0F800448-108F-41AB-A1B1-FF0074179055} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {107380E9-4AD9-4308-8942-4873DDA369C6} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {246966FD-E3EB-41E0-9DA8-78A6863420B9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-02-10] (Hewlett-Packard)
Task: {315B18F1-653C-42FC-8797-BEDAF7DF9B74} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{F57DA878-70A2-4886-BF8B-9AEC48250234}.exe
Task: {31A38238-9D44-4CDC-B4B7-D714E0F9A4A8} - System32\Tasks\HPCeeScheduleForRaphael => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard)
Task: {32EEE8CA-C4E4-4415-8244-BC4377B949D3} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001Core => C:\Users\Raphael\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {43B07101-59AA-4E39-B4E8-BE660CF7D0FF} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] ()
Task: {5065CBFC-E8F9-41BB-B3FB-91BACFCEBD21} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2012-06-06] () <==== ATTENTION
Task: {51228F50-8202-4B75-9107-036EB4D8F0B3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(Yes) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe
Task: {5676A6D7-08F1-4C8A-878A-D047ED3F987E} - System32\Tasks\DriverScanner => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2012-03-02] (Uniblue Systems Limited)
Task: {5E4FBF08-E4C1-43DC-8189-6C1969FB073B} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001UA => C:\Users\Raphael\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-12] (Facebook Inc.)
Task: {5F441719-A60B-43FE-BA66-9D764D084D5D} - System32\Tasks\HPCustParticipation HP Deskjet 3520 series => C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {6125B521-3B12-4140-8628-B2D51C895523} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2013-12-12] (Hewlett-Packard Company)
Task: {614B3309-EEBE-446A-B449-D8FAC8D8C17B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Warranty Opt-In(No) => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_PostWarrantyAlert.exe
Task: {6A73CD22-9559-4E83-ACF2-EB8844D2C5B7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {85659AB7-30B9-4FEC-9497-B691BF3B8DCC} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {94E4AF1E-707C-49C1-86DF-526FBA5B8921} - \AdobeFlashPlayerUpdate 2 No Task File
Task: {9EF3AC88-A31A-47F2-B034-B270D928312D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2014-02-10] (Hewlett-Packard)
Task: {AD2CCC0C-AFBB-428A-BAAD-9737C0925552} - \AdobeFlashPlayerUpdate No Task File
Task: {B02B7658-8462-4C20-B539-217E7DF4770E} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe [2012-05-29] (TuneUp Software)
Task: {B88CB5FA-2472-430F-98B2-D6C7EEE05723} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe [2012-06-08] (Symantec Corporation)
Task: {C6F2D44D-3D3C-40A8-8329-8A935DFF8E01} - System32\Tasks\PC Performer => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2012-03-14] (PerformerSoft LLC) <==== ATTENTION
Task: {C7E42B1B-D6F1-4294-88D6-7576A505CE79} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2014-03-12] (Microsoft)
Task: {D08847C6-6952-4032-B1B8-A5BABE0539AE} - System32\Tasks\PC Performer_DEFAULT => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2012-03-14] (PerformerSoft LLC) <==== ATTENTION
Task: {E4ADF955-52BD-4530-9A54-4C6AB80B6566} - System32\Tasks\PC Performer_UPDATES => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2012-03-14] (PerformerSoft LLC) <==== ATTENTION
Task: {E6449C0D-EB8D-4002-A791-8723E179432D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {FC409EAA-2339-441D-A5C7-22546C592A1D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12] (Adobe Systems Incorporated)
Task: {FCB75080-9315-43DD-BC42-A5F7D7CB7CBA} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{F57DA878-70A2-4886-BF8B-9AEC48250234}.exe
Task: C:\Windows\Tasks\DriverScanner.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001Core.job => C:\Users\Raphael\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-215696962-2090878713-1119302306-1001UA.job => C:\Users\Raphael\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForRaphael.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\PC Performer_DEFAULT.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe <==== ATTENTION
Task: C:\Windows\Tasks\PC Performer_UPDATES.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe <==== ATTENTION

==================== Loaded Modules (whitelisted) =============


==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Anwenderinfrarotgeräte
Description: Anwenderinfrarotgeräte
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: circlass
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Event log errors: =========================

Application errors:
==================
Error: (03/18/2014 04:01:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 03:59:46 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:57:29 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 03:56:35 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:04:42 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:04:28 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 01:30:01 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 01:28:42 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 01:26:16 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 01:26:00 PM) (Source: Microsoft-Windows-User Profiles Service) (User: NT-AUTORITÄT)
Description: Die Klassenregistrierungsdatei kann nicht geladen werden.
 DETAIL - Das System kann die angegebene Datei nicht finden.


System errors:
=============
Error: (03/18/2014 10:08:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:08:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:08:22 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:05:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:05:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:05:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:03:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:03:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:03:04 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (03/18/2014 10:02:56 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (03/18/2014 04:01:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 03:59:46 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:57:29 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 03:56:35 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:04:42 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 03:04:28 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 01:30:01 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 01:28:42 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.

Error: (03/18/2014 01:26:16 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/18/2014 01:26:00 PM) (Source: Microsoft-Windows-User Profiles Service)(User: NT-AUTORITÄT)
Description: Das System kann die angegebene Datei nicht finden.


==================== Memory info =========================== 

Percentage of memory in use: 10%
Total physical RAM: 7658.9 MB
Available physical RAM: 6873.02 MB
Total Pagefile: 15315.98 MB
Available Pagefile: 14554.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:449.7 GB) (Free:316.35 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: () (Fixed) (Total:465.76 GB) (Free:465.66 GB) NTFS
Drive e: (RECOVERY) (Fixed) (Total:15.77 GB) (Free:1.71 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (CNC3) (CDROM) (Total:6.2 GB) (Free:0 GB) UDF
Drive g: () (Removable) (Total:1.87 GB) (Free:1.86 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C843E555)

Partition: GPT Partition Type.

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 11D8B398)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 2 GB) (Disk ID: 0055E3F9)
Partition 1: (Active) - (Size=2 GB) - (Type=06)

==================== End Of Log ============================

deeprybka · 19.03.2014, 13:32

Melde mich so schnell als möglich mit weiteren Anweisungen!

und da sind sie schon

Im abgesicherten Modus:

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Reg: reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc" /s

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

VonDrecken · 19.03.2014, 15:25

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Raphael at 2014-03-19 15:24:38 Run:2
Running from C:\Users\Raphael\Desktop
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
Reg: reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc" /s
*****************


========= reg query "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc" /s =========


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc
    PreshutdownTimeout    REG_DWORD    0xdbba0
    DisplayName    REG_SZ    @gpapi.dll,-112
    Group    REG_SZ    ProfSvc_Group
    ImagePath    REG_EXPAND_SZ    %systemroot%\system32\svchost.exe -k netsvcs
    Description    REG_SZ    @gpapi.dll,-113
    ObjectName    REG_SZ    LocalSystem
    ErrorControl    REG_DWORD    0x1
    Start    REG_DWORD    0x2
    Type    REG_DWORD    0x20
    DependOnService    REG_MULTI_SZ    RPCSS\0Mup
    RequiredPrivileges    REG_MULTI_SZ    SeImpersonatePrivilege\0SeTcbPrivilege\0SeTakeOwnershipPrivilege\0SeIncreaseQuotaPrivilege\0SeAssignPrimaryTokenPrivilege\0SeSecurityPrivilege\0SeChangeNotifyPrivilege\0SeCreatePermanentPrivilege\0SeShutdownPrivilege\0SeLoadDriverPrivilege\0SeRestorePrivilege\0SeBackupPrivilege
    FailureActions    REG_BINARY    805101000000000000000000030000001400000001000000C0D4010001000000E09304000000000000000000

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc\Parameters
    ServiceDll    REG_EXPAND_SZ    %SystemRoot%\System32\gpsvc.dll
    ServiceMain    REG_SZ    GroupPolicyClientServiceMain
    ServiceDllUnloadOnStop    REG_DWORD    0x1

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc\Security
    Security    REG_BINARY    010014808C00000098000000140000003000000002001C000100000002C0140002000D0001010000000000010000000002005C000400000000001400FF010F00010100000000000512000000000018008D01020001020000000000052000000020020000000014008D010200010100000000000504000000000014008D010200010100000000000506000000010100000000000512000000010100000000000512000000



========= End of Reg: =========


==== End of Fixlog ====

deeprybka · 20.03.2014, 18:56

Hallo, wir machen so weiter....

Im abgesicherten Modus:

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Reg: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2

Starte FRST erneut und schreibe

Code:

ATTFilter

usrclass.dat

in die Suchzeile. Drücke anschließend auf "Search File(s)".

Poste mir bitte den Inhalt der erstellten Fixlog.txt und Search.txt hier in den Thread.

VonDrecken · 21.03.2014, 01:08

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Raphael at 2014-03-21 01:02:07 Run:3
Running from C:\Users\Raphael\Desktop\FRST
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
Reg: reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s
*****************


========= reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s =========


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
    ProfilesDirectory    REG_EXPAND_SZ    %SystemDrive%\Users
    Default    REG_EXPAND_SZ    %SystemDrive%\Users\Default
    Public    REG_EXPAND_SZ    %SystemDrive%\Users\Public
    ProgramData    REG_EXPAND_SZ    %SystemDrive%\ProgramData

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
    Flags    REG_DWORD    0xc
    State    REG_DWORD    0x0
    RefCount    REG_DWORD    0x1
    Sid    REG_BINARY    010100000000000512000000
    ProfileImagePath    REG_EXPAND_SZ    %systemroot%\system32\config\systemprofile

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
    ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\LocalService
    Flags    REG_DWORD    0x0
    State    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
    ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkService
    Flags    REG_DWORD    0x0
    State    REG_DWORD    0x0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-215696962-2090878713-1119302306-1001
    ProfileImagePath    REG_EXPAND_SZ    C:\Users\Raphael
    Flags    REG_DWORD    0x0
    State    REG_DWORD    0x100
    Sid    REG_BINARY    0105000000000005150000004246DB0CF946A07CA232B742E9030000
    ProfileLoadTimeLow    REG_DWORD    0x0
    ProfileLoadTimeHigh    REG_DWORD    0x0
    RefCount    REG_DWORD    0x1
    RunLogonScriptSync    REG_DWORD    0x0



========= End of Reg: =========


==== End of Fixlog ====

Code:

ATTFilter

Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Raphael at 2014-03-21 01:02:50
Running from C:\Users\Raphael\Desktop\FRST
Boot Mode: Safe Mode (with Networking)

================== Search: "usrclass.dat" ===================

C:\Users\Raphael\AppData\Local\Microsoft\Windows\UsrClass.dat
[2011-12-22 19:16] - [2014-03-17 23:00] - 3407872 ___AH () 5B0EA18C701874E276915624D455E480

====== End Of Search ======

deeprybka · 21.03.2014, 13:48

Damit Du möglichst schnell wieder mit dem PC arbeiten kannst, beenden wir die Fehlersuche und probieren es mit der Systemwiederherstellung.

Schritt 1

Starte in den abgesicherten Modus mit Eingabeaufforderung.

Gib in die Kommandozeile:

Code:

ATTFilter

rstrui.exe

ein und bestätige mit ENTER.

Sollte das System den Befehl nicht "finden", gib bitte

Code:

ATTFilter

%systemroot%\system32\restore\rstrui.exe

ein bestätige mit ENTER.

Wähle den Wiederherstellungspunkt vom 13.03.2014.

Anschließend starte im Normalmodus und versuche Dich einzuloggen.

VonDrecken · 22.03.2014, 00:06

Es hat funktioniert - ich konnte mich im normalen Modus einloggen :-D
Vielen vielen Dank!!!!

deeprybka · 22.03.2014, 00:09

Das freut mich!

Wir sind aber noch nicht fertig. Bitte warte auf weitere Anweisungen.

Morgen machen wir weiter. Gute Nacht...

deeprybka · 22.03.2014, 10:52

Da Du Dich nun wieder normal anmelden kannst machen wir so weiter:

Schritt 1

Deinstalliere bitte folgende Programme:
Ask Toolbar
Babylon toolbar on IE
PC Performer

Falls es Probleme gibt, mache es mit Revo.

Schritt 2
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 4

FRST bitte erneut starten. Setze bitte den Haken bei Addition.txt und drücke auf Scan.

Poste mir bitte den Inhalt der Logs von Adwarecleaner, JRT und FRST.

VonDrecken · 22.03.2014, 23:41

Code:

ATTFilter

# AdwCleaner v3.022 - Bericht erstellt am 22/03/2014 um 23:11:57
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Raphael - RAPHAEL-HP
# Gestartet von : C:\Users\Raphael\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\uniblue
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue
Ordner Gelöscht : C:\Program Files (x86)\appbario2
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\DVDVideoSoftTB
Ordner Gelöscht : C:\Program Files (x86)\PC Performer
Ordner Gelöscht : C:\Program Files (x86)\uniblue
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
Ordner Gelöscht : C:\Users\Raphael\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\Raphael\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Raphael\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Raphael\AppData\Local\Temp\BabylonToolbar
Ordner Gelöscht : C:\Users\Raphael\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Raphael\AppData\LocalLow\appbario2
Ordner Gelöscht : C:\Users\Raphael\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Raphael\AppData\LocalLow\DVDVideoSoftTB
Ordner Gelöscht : C:\Users\Raphael\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\uniblue
Ordner Gelöscht : C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Raphael\AppData\Local\Temp\Uninstall.exe
Datei Gelöscht : C:\Windows\Tasks\driverscanner.job
Datei Gelöscht : C:\Windows\System32\Tasks\driverscanner

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{B64982B1-D112-42B5-B1E4-D3867C4533F8}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [DriverScanner]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\driverscanner
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DVDVideoSoftTBAutoUpdateHelper_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DVDVideoSoftTBAutoUpdateHelper_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DVDVideoSoftTBToolbarHelper_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\DVDVideoSoftTBToolbarHelper_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKCU\Software\5b55d7dcbc35ee45
Schlüssel Gelöscht : HKLM\SOFTWARE\5b55d7dcbc35ee45
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3227975
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweet-home-3d_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_sweet-home-3d_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ultramixer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_ultramixer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CDF97EE2-DED0-4369-835E-99DD08225FA5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C66A9958-7BDB-44D5-B091-57834ABBE26C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CDF97EE2-DED0-4369-835E-99DD08225FA5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CDF97EE2-DED0-4369-835E-99DD08225FA5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CDF97EE2-DED0-4369-835E-99DD08225FA5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3F69D07-0AEE-47AF-87D0-1A67D4F70C68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C66A9958-7BDB-44D5-B091-57834ABBE26C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAEA393-10CA-41F1-BBA2-BF02DB1EC149}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A21F331C-8F65-4374-9980-DA32F3C1F56E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DCA63155-5404-4110-B827-DAD1B789D3DD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{10666712-A07E-4071-BBA2-EAD6DB200043}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CDF97EE2-DED0-4369-835E-99DD08225FA5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CDF97EE2-DED0-4369-835E-99DD08225FA5}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{CDF97EE2-DED0-4369-835E-99DD08225FA5}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{CDF97EE2-DED0-4369-835E-99DD08225FA5}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\DataMngr
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\IGearSettings
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\appbario2
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\appbario2
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\appbario2 Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v27.0.1 (de)

[ Datei : C:\Users\Raphael\AppData\Roaming\Mozilla\Firefox\Profiles\8kvmy6nq.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.order.1", "Ask.com");

*************************

AdwCleaner[R0].txt - [18418 octets] - [22/03/2014 23:11:05]
AdwCleaner[S0].txt - [14665 octets] - [22/03/2014 23:11:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14726 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Raphael on 22.03.2014 at 23:22:29,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-215696962-2090878713-1119302306-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{03413C6F-3C72-4E27-86BA-80624A70C0A3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D83155C6-3E53-4DAA-B367-394A513B1569}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{F02452A4-F8F0-4483-9304-E964D60DAE48}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{03413C6F-3C72-4E27-86BA-80624A70C0A3}



~~~ Files

Successfully deleted: [File] "C:\Users\Raphael\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0191E2A0-1E57-4FC0-AD95-0A04C1F41332}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{02104BAF-47E5-49CF-9B96-7E2132D53A28}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{025DAA32-B1DC-462C-B13A-75B4E971A1D8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{027E0A1A-ABAA-418A-86AE-BD7F441B30E1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{02B6859A-BAA8-4CEE-85DC-74C36F73DF23}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{04088D71-A26D-4603-B398-14BE06117597}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0408B5AB-A1DD-41D9-B0F1-EF0CE132433D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{04BB1EE3-2DA1-4EC2-A185-589FF52F6377}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{04F08B8A-D9BB-4715-8BC6-A09C1B074CB4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{04F1117B-F0C4-441F-ADE9-809D4FBEF9A2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{058AFA6B-E0DD-42A2-94F7-9478C93EF865}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{05DFCF63-7144-4EEF-B090-AD451B089DF4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0609E32F-D7B6-464F-AFE4-0F21A845F334}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{068B3CA2-3620-40F6-85C9-7116BD075969}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{076BDCC2-C6EE-44B6-A591-2083868902AD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{080E86A3-C9C3-4D6B-879B-6E7ACF509E2D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{083283C5-677F-4A06-BC59-28DB2E57DAA9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0878FE75-8842-4C33-97C6-C0A03BB39D01}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0882C30E-B7FB-4536-A8F4-5D8FFF9A5B27}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0898A4D3-1339-4116-AEC1-62C198FB9292}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{08B7D633-3F09-4684-A8F4-F8BBEE5CFD5B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{08C82866-51C3-4D8D-8EAF-E53DCDA8184D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0920F37B-3613-49A8-83F5-E637E53AFA80}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{097A1089-A6C5-4E61-803F-A938BFC978C4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{099891C3-1BE3-4FEC-BD54-E27E5ED3E4D4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0A37EED9-98F9-44AB-81F0-D146F2A34E84}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0B3E4788-A72D-4630-A528-1EC495F6C096}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0C60520C-D1FC-4806-BC6C-D921E7A004F5}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0C6736C4-BE35-480A-93E0-3FB6FA680D6B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0C7EA520-0482-494C-99C2-0D395A2F6096}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0C91D1AC-C04E-4D02-8E6A-77B8EB3C81E1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0CB89BDC-1D45-4C82-AC9F-F5ECDE802237}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0E00CA94-BC88-496E-9F2F-6BE74580B8EF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0E751BC1-DD68-4240-B466-10B8126526AA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0F5579E4-DA4D-43B9-99DC-89E52D61A34D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0FCFB773-6936-409E-816E-26C78B41163A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{0FEE4E6E-42F0-408D-872C-D0909A19AD41}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1082A942-77DC-4EFF-95C9-3EEBDE12B66B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1084432B-A85C-4303-BC8F-A392A69B6846}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1149AB9F-CA13-46B5-9834-9E904438A445}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{12312C09-ADC2-407D-B11D-5AAC0636F15F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{124CCCFF-CA54-4E62-AD75-7F91B92F0DC4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1295C9B0-C7EA-411B-B3A6-E328A6A96D6F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{12E02092-31D9-430C-9276-7F49A4D026E7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{13B5AA35-9157-4BDE-88F0-3449D1878E08}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{13C74A27-50B9-4989-B35D-D3F1B3C8184D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{15E28372-9FF9-4AD5-9DE6-F2EFB065368D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1683A2EA-D370-48DA-9911-14F2910CD62B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1757F203-6CC4-476B-9E10-3034A2491DCA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{19D44232-CB3B-4471-B4B8-3FD183F1600B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1A6BC6ED-A939-40A3-8951-B5A9FB46D8E0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1B4A3D1D-5AF9-4049-8CAC-BD6F6EB9D706}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1BD5B968-A595-4A45-82A7-8C64F5686232}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1C12A96A-4BDB-4E1A-AA8B-A14EE7938864}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1C8A3E10-4CF4-4CB7-AC54-983FF2112759}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1D34412B-C9C1-4871-A218-359E143A1754}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{1E60889C-98B9-4C08-A5C4-75BF84232A16}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{202126C6-4E06-4E83-AD66-D7CA6D2003B5}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{203DC456-B3D5-4E15-8641-602165977D6F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{209FA3B8-3E57-4418-A731-BFB3B84753A0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{20E97489-C342-421C-8720-ABC79E779E71}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{21763FBB-34C0-4EAE-A7BD-AACCC04B236A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{21A7F2D0-F3CF-4931-8AA9-B4AD1EA6CC02}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{231774BF-4A7D-42E4-AB42-BB04B889C812}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{235EB010-D120-43C9-954C-307544CBE501}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{236EC823-4C3F-4568-B0A5-B75E2FA83DAC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2406B266-8032-4F77-A3BE-A2246ABA078E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{24985F5B-6330-4136-A841-5EAA7FFF33D9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{254B2E43-B91F-404A-B1FD-8256730DAB37}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{26210847-D2B3-4182-B77E-66568AF4C165}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{267A0CA0-D89D-4DDE-B6CD-71F12B4D593A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{28DE6904-4B99-42C7-AFA8-905D8C33C18F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2A0436EA-A3B4-465C-AF1A-791057C4ADF7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2A9F60F0-7F2B-4EFB-A5D7-4CD81F9B3334}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2AA281C7-C516-463F-810B-006AD2B5944F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2AC4E3FC-F1EF-45ED-8D1C-35131425BAC9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2B3CC98B-1CF6-460F-A0DB-06CDE4002FF2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2CBC061C-90CA-40B3-B231-417D351E92F9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2D0B1F0B-62D0-475F-9295-BDA7D5B39A0B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2E775D44-C355-4AE3-969D-F9FC7D189E4A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2ED53939-E430-43D8-80C5-DEF0D2293538}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{2FC8F623-E422-4763-9339-64FC1B0EA626}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3020C8C9-681E-453E-BB37-8E92A2DFD39A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{30297E71-15FE-4660-B3E1-F3573D7E3D52}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{31532723-4BF0-4B3E-9BA0-9555AA500C0F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{31E64D9C-96F2-4F33-B8C7-5398C140853F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{320A2257-D02A-4CF5-9078-5FA70725F233}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{32D8A396-772C-4B19-A26D-56AE76682156}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{330E8A4C-8DA4-4D77-96D3-E24BAC55011E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3358539D-FBE6-42C1-BAEF-F45056A6AF89}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{33E1B8F8-5186-4684-941D-63930E079230}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{347732E6-94F6-404E-B6C3-88E2D3715E21}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{35F710C4-5503-4E54-A2AC-75AA698121B6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{36996050-B368-4E0B-A1FC-A7B113A33869}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{36E0D18B-3FF3-4F26-8365-7C041EC75A3B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{373058CD-C921-48F1-AD3D-12D375E8CDD4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{37C0E67F-9A95-4E85-921E-CA8044D5FC1D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{38726898-D9F3-41C1-9CA5-6358A58A72FA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{38E877E5-9A46-4442-8E7E-665FE51B02FE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{390A8A2D-2C9E-4D87-9B45-FD414BCCCF0B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{399842FD-E22E-466D-883B-036AA6DE9D15}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{39C61DBC-6B75-4CEC-A9B2-BF52EC1A2931}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{39CE85FC-C51B-476D-9068-33F1F514744A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{39FA5DC4-3C47-42A2-860E-D35C07DFCF72}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3A743A49-9456-407E-8BEC-47A456BCE220}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3B3F2E4E-7814-4A4D-AAEC-27C302C5A69A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3B6CB452-07ED-4F0F-9A13-DE530CC7A448}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3C5F681D-CC32-4674-87CE-C7E3419B8607}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3EAAA0B8-E929-4F8A-AB1E-2AC133A24454}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3FA35A8B-C337-47F4-82CC-E943659C2339}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3FB9FEF3-988C-4B31-839A-6FB2EC902965}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{3FFEF7D3-9901-4FCE-B874-C06FDBC74DCD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{408258E0-441C-4565-8B5E-CBAEFA15E78F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4112A79E-C4D0-496E-9149-699F2135904A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{41154E93-D70C-4CE5-B20F-F4273CC70E8D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{422D3081-7C0C-44D6-9C8B-D0CBC7547397}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{426F0F66-CB02-4F9C-A029-546046BFD369}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{430D9439-EAAD-4CE4-8342-3B54B4667612}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{438BDEEB-9E4E-4481-A2B5-74D1FBCBF775}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{43A01258-B71D-49EB-8035-27EFD7B5D789}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{453D7C15-B542-4D84-9B2F-0C97F531DF81}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{454CB3B2-F620-47BA-91FD-F2BCDABA72EF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{45C072B6-7D8D-4C88-9F38-DB742A20E739}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4626B111-A1EA-451E-BD94-5380A4E5FD9C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{466ADA46-FCC5-430C-9FAB-732C127F700D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{47B3D497-A028-4879-A2B0-DAC954327E11}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{482C3E6B-FD64-4869-A304-54ECDF37E06A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{48E16F1A-831C-4041-87D5-9B8AAF075BC6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{491796E5-D288-4EC7-B9C0-DFF03BC0502D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{49706CC8-5BFD-4F9B-AE7B-49B38747F071}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{49A0819B-B791-4CC3-BB98-654D069332C9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{49BE2F69-E8C0-44FF-9E19-3F4D35EDCEE8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4A0A081D-8FC4-46A3-8685-999BF03ACD0B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4A4A49DA-027A-4DA8-81E9-DD3174F98020}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4A4BE339-EE79-46A0-BDFB-BF8DC61793CB}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4AF244E7-BDDE-4CCA-9F7A-8D3ADD26FCED}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4B5D6D14-3F35-47FD-9740-BAA25AFB78EA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4BE8DD11-32A1-4527-BF6A-712DEC17DE8E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4C11B546-B4A6-41C8-ACBE-9AA3F37305A7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4C19AE98-0618-470C-9EA9-FEFBA707604B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4CBA65FE-895E-4280-B888-25F25F1BBD5F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4CD47FCC-F073-4F53-AF08-82A45B9B7A30}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4CE4E192-36D8-4A85-AB7D-1AA011D9B18F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4D0C7236-B33E-4CB8-A6E7-BDDABAD9E006}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4D100691-52DE-4F96-8302-FCC3951D61F3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4D3DDB73-8703-4AE9-8CF9-1519C3D4C943}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4DE6F299-1A9C-4864-82A4-4717756EA038}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4E384253-BEDE-440C-BC47-0F7720693EE6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4E5DD8A1-578D-4F26-B495-954803E029E3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4EFA3BF7-DF4B-484D-A10F-0C9C31375E1A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4F2F0C58-34CE-423A-A84F-FA315B0D9E00}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4F4169F7-DDE0-48C6-ACC1-1CA3ECBDB788}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4F6D11EF-A328-4010-BDB4-D7D5AEC9E556}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{4F78277F-B945-45FF-ACE6-EC81F2353678}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5056F265-DC0F-466A-8DB2-B49B346FB065}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5147B9C2-4E95-4147-8851-2CCF0AFC677E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{52FD1420-A537-4C8E-A9A1-0F6A886A9587}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{53003F00-4B1B-4973-8B81-52C67D4AF0D0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{532238D1-CC1B-4B7E-8F04-B39BC7184AA2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{532B6E85-464C-4B06-B393-1E98A657D69E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5333DF50-4A71-4D82-B3B4-21621BFBEA60}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{537DF1C1-B036-442D-8B01-1E0B817A60CA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{539694F7-85D5-4831-894B-670057401DC2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{53BE4FC7-3C4D-4CFB-BCB6-7111E40ADD93}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{53E29DEF-BB4B-4619-8F3A-C8F093989F07}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{54209F34-4497-40A4-85E5-0564AD9E6581}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5518DB2E-B538-488E-A03E-1AD5227EB96E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5594509A-9A14-4A24-9B4B-51D1234A9428}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{55C8CC60-A613-4DB1-B9EE-FED8A7A56ABD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{56A3C1CD-9D41-45F0-A1FC-813F4319A4F0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{56CB216E-5F2A-47CD-A7F5-A446B6096E64}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{57083B86-2A8D-4134-B619-1DD5677DFCDE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5719FD93-DA1A-4448-A4B7-BB934145418D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{58C26A53-811C-4ABF-9D9A-23D76719F69A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{590BED1A-8D93-4D4D-8754-551578F8BC29}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{593657ED-3E38-4D9F-8FB5-0BF85B1D45F1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{59FB93CB-0609-454C-AB7F-1FAA3E4126D1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5A0A1726-9905-427B-9BAC-06C453387ADC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5B3E9103-9D06-49D6-8ED4-E05936C54055}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5BB55DDC-5371-4497-8DC6-F02641CC4958}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5BB5F4E2-340C-4E57-8675-D963C81660E5}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5CD5E041-DDB4-4D3E-8C49-A635AC9C0BDA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5DBB37B3-4911-49C0-BD15-1F720382B2ED}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{5F3665CC-EB41-4C5D-A049-FDCACEDBAB85}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6024E33D-4F77-4B44-AA0B-1460E1F0B957}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{60723E50-557C-450D-B570-F1ECD7BA506F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6103991B-8E39-49F6-BF4B-26A9CB3113A1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{61929151-244E-44AE-978C-76D853F73E2C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{62DB9027-8E00-4A1E-B126-3FAE4196164E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6380ABCD-32C7-48EF-9C41-35292386BA27}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{63869EB6-8649-4EBB-BC43-7813A84B0F62}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{63A95851-0720-4582-9817-9A419E8B3306}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{63C40260-B380-4F20-B266-B1F5C1BB376B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6754759E-665C-4E83-AE53-A162AE9E71E9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{689ECD04-2982-4C41-B3B6-4C71258DE205}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{68D66F43-E915-4B55-93F5-9B3E333ED27D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{68E2E8CC-C960-4B19-B80C-CFCB8BD12801}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{692CCAB5-DE09-45C2-9D42-31E0E664A8A8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6977C61E-1A1F-49FF-92B9-F81F249AEE48}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{697DE50F-A6E7-4F5C-A274-EDBE81C8DE80}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{698830F9-8E9E-4290-B08A-C01B54F5DCC3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{698D8F4A-06AE-48D8-86CC-E8010EBE8CFE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{69BB8EF5-959C-48F4-B0A7-68477FF39DBA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6A67C465-0779-4271-9709-0DCD84CC3FF7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6ABD3AC6-212C-4995-85C8-051D04A2E0D9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6B33D6A7-F289-4928-B691-7F83C5EF01B7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6BCC5087-DEFB-414B-A3E2-42F71ED46864}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6C0C301C-F6BF-47C9-A249-6534E3837F44}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6CD669B6-847D-4F76-8609-87F6A209F12D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6CDC4950-6CD9-42C4-BC7A-EF44E362B307}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6D7B943D-BC55-49BC-A4F2-CC1E3871421B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6DC0BEC6-173C-433A-998D-AF43167F22D9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6E1CE170-1A15-4C40-9964-45CDF898E580}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6EDC2E28-AA04-4FFF-AD20-D20B36CF9216}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6F5092CC-269D-440F-ACCF-54DC2C82D655}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6F76BDA4-2B9A-47A2-8635-C9156538A527}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6F85A701-8D06-44FC-B03F-1CCD0F32CA7F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{6F8ED439-E047-4D66-B6BD-6F0B168F350A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{702BCC00-D1B4-49C2-812C-E82C27751229}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{71BA85E9-F21F-4D19-87E3-3E2E5CCEB4FE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{72164A9A-2F49-4839-9640-E744A6E56EC1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{73B1C9FA-69FD-48F5-9B13-A344081BD885}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{74230CA1-EEDA-4F10-8B7B-4BF185D0480D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{742497D1-4591-4E36-B6AA-F93ABA9F0720}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{748BBD18-95FF-4C6D-9D1A-94C8319CD27F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{74C2C566-2FA3-4F4C-8973-66BC282E9BB3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{75F36CD4-7ADE-46D2-9FDB-239378D49C99}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{765F8068-8034-4F69-B9E8-A0B5C9DD9DE4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7745A116-E14C-415C-8D3D-4CB0740A103D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{777D57B8-A51F-41C9-934F-3BB151AD65CE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{77FF6FD5-3E82-41EF-999D-9B3223B4A430}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{788805B7-46B7-4415-AF72-2139766E451A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{78E0BBE1-76D3-4D90-865E-F73F69927AE6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7A306796-AD71-4987-B44B-76E412439236}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7AE77F62-24AD-42AA-B001-708D9162532B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7BCED365-064C-4EB3-9F73-810BAE2DDBB6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7C4A92C2-4F73-42EC-B4AA-A9A81906AFEB}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7C5F81EF-2AE5-4053-98E0-4C34BA1DF42A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7C647B0C-018E-4B1A-9584-85E56D60279A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7CBEF027-7631-4C21-8B07-168B3966D342}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7CE61657-46B5-4B5D-9B26-925D470B9685}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7D4CD2D3-7FFA-4B30-845D-52B060E772AA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7EAA5E9A-07F3-4287-83A5-4C75CF7A5490}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7F67F3F8-2D59-4268-8507-FC65BB70E1DF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{7FA85DB5-8E02-482B-ACDB-7C75E9D0AA1B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8035BEFF-6065-466B-A50E-F0EE9193840B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{80524E99-A51B-4B23-895A-E6E05E2A5AE3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{805FD1ED-CC2C-4E54-A6B4-5B93282A879A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{80D0082F-83AD-4DAF-BC05-B80CC124788E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{80E622D5-D781-4563-9DD0-5BC71252C568}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{81337882-90CB-4FCF-80C3-EA98C2E8B9CE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{81B64515-F579-42ED-98AC-3C64E6807AC1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8328ED6B-8181-4494-BD7E-D9CD0D09F06B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{840EC54E-6C59-49F0-83E2-67BC6BA271FF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{84DE0237-8526-4738-8C6E-96EF61E42B4C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{85E355F5-4B7E-4C45-B6BD-DD47DEBB8CBD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8715D6B9-5CB6-41F7-AC76-D8AA8A74F99D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{874E322A-77E5-438D-A813-682AC2A05E01}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{87E5BC1C-BDD1-42BC-87A5-059789EEB96A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{88101F89-E8EE-4DBB-85A2-F7ABA5566496}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{886FC3ED-7BA0-45B7-8995-CFA353DC711E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{88FE4FA7-3253-45AD-AA51-C05FDA1A3694}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8939F22F-6915-43F7-9BF3-A181C3599393}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8991F18D-5002-4439-9E69-464D2BF19416}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{89B9A007-35AB-4FFB-90D2-F61A4926981A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8A527E57-2F0A-4ECD-8040-1837AEDFA9B9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8A570693-8EF5-43A0-B083-F2768BD5C707}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8AA22590-9BBD-4EA7-9409-AAB86CAF44DF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8B12A63B-EDB1-4335-8438-0D5F75362966}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8B7CD6F9-4076-4972-A1DF-E3DC383E1F3B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8BD97078-898A-45C0-A548-42360D215DD7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8BEABF5D-3D74-4F9A-BF07-2B89EBC5503B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8C542D56-F24F-4F98-93B0-977910072EF0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8C5CA69A-03BD-4390-A9A7-0B34F470AF25}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8CDD0C0F-A375-4457-936B-82FA304D92CA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8D57001B-9501-4312-8875-5DB1B411C9B0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8D7AC678-4982-4BC2-A99C-577AA79ED846}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8DE05122-4134-45F3-B4DB-7712E3BA3EF4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8E6C4F41-3DD3-40E0-A6EA-6A8D7089538D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{8EEBA65B-6E57-4058-9B71-0EE57ACD801F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{90188496-8508-4965-879C-AD81EC920F53}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9020BFA7-2586-4055-92FC-0CD9509B3DC0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9102EAAA-3DE3-4644-89EE-4CAC0BFD5825}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{91400D77-1CA7-4F78-B61F-2E33F574F817}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9153240C-9D5E-4B3B-AA8B-3F42D1781DD0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{91D0DAFC-88B8-4C1F-8222-8B95B8E57498}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9250E6EE-209C-437F-93B5-D1A5342AAB06}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{93A5CB18-FF1B-4648-A1C0-CBB462619B67}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{93F3D9EC-1A06-4595-BBDA-97FE10F32A6B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9617BC85-83D1-4F46-935E-9859785A01F4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{961C7ED5-0399-42DE-BC51-3025B39A9849}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{977B4084-D23B-429E-8AE2-6FC5E330401C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{97F5675F-491F-427E-A0FD-C4FC3213E243}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{985FD211-26F4-45F7-84AE-5BCC3FA12301}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{991C4B90-90CC-41A8-94F7-C6C6C3DA10BD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{99B0AE8E-A420-4A83-9F94-8CBC2BD9C04D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{99BBDA37-4679-4F18-A348-E0CCD8B02635}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{99E9DF26-F430-4302-9AE9-B684F840C0A2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9A0C2323-0581-4669-BF5A-B0B8F1874933}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9A6CE973-4A8E-406E-8C64-2ECA9F2D5B33}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9C6CD7D2-55D7-4F33-BA79-619D4F2ACDAF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9CB2470F-85F5-4374-A9A5-BA08F1A1BF7A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9D58332D-5F2C-43DD-979A-7FB77F55B597}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9D58E578-CD59-409E-A151-97815EFCCE51}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9E189BFB-9F36-4FDD-B6FA-FAE22F888808}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9E7105DA-7BF3-41FE-88C1-B8FA85B16E06}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9EA8CBE0-2A19-4649-A702-0780DA10A87A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{9EE714A6-F565-4CA5-B4D5-26099893933F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A0D01446-835F-4852-A703-D5C5BC91DDC1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A1374CEB-C64D-4201-AACE-400A7BB06573}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A184F12D-15B6-4FC2-9B2E-AAB07EB0E2E1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A2227A8D-C3FD-4159-AF2E-D42FB715EEE0}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A2AA1B32-1733-4D83-A6DE-4BD05474111B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A3A520D8-4063-4471-8CE8-F807671DD3F4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A3C9106E-B783-4027-9D4D-4C5CA67952D9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A3F056CC-EC9B-4A7C-B6AF-40AF73CD6F8B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A4280AC0-F129-44A2-897D-AEC7607E932D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A50027A2-B3C5-427A-9160-0C43402520AD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A56950E4-28F8-4E60-886D-1EFCFBA2A4C8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A605FD70-69A5-4ED0-BB3A-84CB34918EAF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A6604733-D42F-467C-8EC0-603D6A45B8D7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A7213F3F-AA00-4E02-B0B4-CF08EACA4620}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A73AE673-872C-4D66-8BB5-97AAD0E39518}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A7E84CB0-C7C7-4C38-95A3-3F2E89BAFC5D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A94247B2-1D55-4616-B9DB-0A7EF23ABE3B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{A9A50B54-215A-4E14-9A8C-6612111862B4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{AAC45E1D-89DB-4701-AFCF-34DB54044478}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{AAF90065-F9F9-48AF-8125-06B99376AF1D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{ABAE5B4A-4A90-4892-8DDD-119135ED3C53}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{AE52138F-AF0B-4CEA-8F70-24099F62196B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B0F5D139-494D-410B-8FFC-94F07F687570}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B13C72AE-977E-489B-99D4-0DE9158A06EF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B17FD4FA-E3CB-4C63-8A50-685AA5514900}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B2D13D6D-3E21-40F9-9B29-7F52751E0BB1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B3393789-4B7A-4BFA-8214-DC019A2B1D92}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B38EBCC8-C662-44A5-810A-601A3E2CB871}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B3CFE542-0D01-4403-9B3F-6BF7FBEAFE62}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B435E7D7-F333-41EC-B896-A047C45FB817}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B49E12E6-FFC4-4DB3-8738-2F63AE0AC128}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B69CEDB4-DB73-46EB-9C8A-4E35254F8BCD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B6B47213-8260-4DDF-9955-02F070BB331E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B6C64CBB-F1A8-43C7-BDDA-68635E93B7AE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B6FA68B0-C673-41AF-AB33-CA7A04346CBA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B88F2DA2-9422-491F-9C51-3327BCE62AB6}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B8BAEA20-910E-4594-912E-C2639D8E7355}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B8D3A727-A068-4955-B641-539EF2BCF6AD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B90C08F9-9D4F-475B-95EE-08C077BEDDDC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B927AF8B-8984-43EF-BFE0-FCF228073533}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{B95919CE-9469-4280-BA43-227E7D59C25C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BA374472-1E22-4A40-84D9-449311EE0C44}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BB03DED1-099F-4960-BE7D-AD59B4568194}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BBC7C8B2-8363-43D2-B397-1CA7899ED904}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BBF62DD5-661F-44A4-A6FA-9C57C929E3C8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BC08E638-DDC9-4564-A364-A4245AFA0187}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BCEBC046-B46E-4005-B1B0-A30BDE9950AC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BDEA69A4-7871-44CA-9248-AD8183265152}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BEA637D0-E8FE-4FFF-9E4E-5EEB2259FB8C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{BF907E75-239E-44EC-882D-1C171E7B0CEE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C07FA0FA-F5DC-460A-A4EF-F637749B5706}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C1247734-09CE-4E62-BD18-5FB5ECEC29B7}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C17466F6-68AA-464B-BE45-327A93919CD4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C1EB76BE-B5A6-44FC-B318-EA3D961E3B93}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C2453B32-52A3-4B17-860F-DDABC4A32681}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C2759BCC-DF98-489F-AA71-F6FEF8C6A0BA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C2F05DC7-50E1-4646-9B64-98265C9F87B1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C31446B8-C153-46E2-AA6C-0029497D047B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C37CB8D4-B3A0-4281-81C5-61D3426AE3C8}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C3CF7347-D456-4CC2-B090-748E5214C64E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C3EA45D5-6592-4F57-A3BB-615BDE100269}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C4012841-8253-4296-BDAB-BEAA01ACC17C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C591C686-821F-4C90-A508-C25EBFE18B5A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C6CDCD57-CB10-42C2-BC05-B54AEA01BD48}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C70A4B47-A656-445E-855E-DA84FE4BE282}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C7887274-F89C-4AE8-9B4C-2D94BFCB640B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C837312A-5101-4B16-B22D-E919BAFC2C8A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{C839A2CA-B51F-412D-83E9-41B7648EC00A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CA28B685-2DFA-44EC-BAE1-DC7B35BB3D03}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CB5220E2-9BC1-4776-A888-475346BE0A84}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CD635DAE-23B0-4DED-897D-ADB4A9F678B9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CDA77B5B-4AE5-47DC-B390-6BD08B062654}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CE5F613E-26CF-4976-B6B7-2BD997B1EDDD}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CEF0DDCA-374F-4C1A-84C5-993C968BFF68}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CF6FA5EB-41A9-4809-9CF2-525F136BA0A4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CF7E4FEC-18D6-4833-837B-0CF4BD21DE33}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{CFA98C78-3779-48C5-9E3F-E8271C855569}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D0133357-E66E-4834-A76B-FDEA206BDEE3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D0E5747D-3FE0-4286-88FF-846740D08378}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D1673084-092A-4923-B0BA-D91106A25030}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D1D58660-42D1-4136-9895-BBB74C25B234}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D312EA14-54C7-4281-B412-D13F8B167AA3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D38DBCDA-81C3-4FCF-ABF8-3552E402610B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D3C638FE-5B1F-4F93-9742-C3AEC84C5003}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D7347E62-EEC1-44E3-89C4-8FB254CBE4E9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D7852643-5309-4C3D-BE5F-38D20F68A61A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D79B85AE-264D-48AE-9D1D-CB6C705466CF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D83EB1B5-5C45-4E99-A64B-76C5FEE01F0A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D884B21C-B1E1-4AE6-9C73-74306564108E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D8F8FBB5-BD48-420C-9F8D-23A08F98E035}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D93F1B2C-5559-4FAE-BD1E-FC5CBC63A51B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{D9BCC878-0CC9-4522-BC76-31EB449C3C18}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DAB9726E-EB34-4EDF-A274-ECF81E176BD3}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DAEA0B6D-26F7-4644-B199-2F9808586C17}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DB271B9C-F26F-42B0-8EBF-2FF2E2D3356D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DB35538B-AD95-4F15-B668-A987D4B63198}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DC574352-027F-49FA-AA8B-3D894150C261}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DD5F98BD-547A-4593-B3E8-83209C3EEC87}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DE079E15-17A1-45E7-9EFA-105293E1A393}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DE0FC272-4567-42B5-8D73-A10A3F176AA5}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DF2CB8CD-6B88-4B84-B6DD-E5D70B091270}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DF9C8016-B73E-4A6A-89A3-5A5EC25EDEAA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{DFFA4540-43E8-4E67-8DD4-B6DFBD6C7A2A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E00C3D8B-816C-44AA-8A30-CCEC13A3B1DA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E0134ABC-B683-4DA1-8A82-401C59D82F87}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E10CCFA4-48EB-413F-B605-93F6AEAA111C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E128DEC8-FAAD-499C-8E96-8396A770E06D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E207C122-B024-4D3F-A03F-4EB72407CC14}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E23A0D7F-7107-4948-ADB0-5051AA3D7E7F}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E3446C3E-4A9E-49D9-AEF8-4D1302A64926}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E50EA679-23E5-4BF7-BC64-C73538FE458C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E67A3F69-2A57-4FD0-9D41-004A2ADC5183}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E696EF22-9153-4FD4-921A-E9818C064344}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E7012791-5F4B-4ADE-9CAC-74BE83A454C1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E721EDC8-5441-4814-B031-717613D4DF34}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{E987AA42-B964-48BE-ADD4-7B2BE2C230CE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EA14B5B2-1037-42B2-8094-DD1A04C93947}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EC3ED52D-B6E0-4E7A-AF7A-5C60DDBED74E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{ECCE2CD3-B7DF-427C-95A9-D7BB3D5A41DE}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{ECD51A36-68CA-448C-BC10-B233C0B57BFC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{ED83CB0F-09F4-4E1F-B56C-11B107F2BF0E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{ED8C66FE-5C81-477D-9122-DB33F4772DAA}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EDDA877D-C58B-4DB4-B07D-DCACB6914643}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EF044FA0-4C79-4A06-8CB3-120932A0AADF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EF4CC4CA-1362-4C6E-8D66-D73FE2218194}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{EFC2CCD1-88F8-478B-A1C8-2F62FD926A9A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F0DBA31F-951F-46AF-89BC-D9407AF33ECB}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F26338E9-02B1-482E-9C43-1783C1A183DF}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F2B906B3-7CBE-431E-B9CE-0668E512E012}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F2DBFA38-7693-4B9B-AF56-835C86AE3284}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F3DFAE07-CC82-4612-8A66-C38B57E3859D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F5144E11-B4DC-4091-8AEB-86F863706738}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F531D68B-9AB5-4343-AA6D-8EEE330440EB}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F58CC73A-2D5B-463A-BDAE-8A64EC6F29A1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F67AEC5B-DF39-464A-8136-FD7A124C5FD2}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F695EDD6-A89D-4EE1-9E67-75AF1D86D02E}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F70B7BCE-3285-4047-A8E2-E5E5081CCE29}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F71B1DBB-2D60-4F74-9EA7-A6B67D0D23C9}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F9FA9ABB-811E-44F1-9EA2-7B0183F19447}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{F9FCA6BB-8D20-4E1A-8E0F-E1A1FD04519D}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FA31E2C0-D4B6-4163-9DDD-BDFDB071CA65}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FAAB74DF-5540-4BBD-99DA-DA5C93D358D4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FC3DF026-FCB9-4D28-AFF9-392B69D6D928}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FCD59254-5E16-4B61-8E4E-ED21AB97C60A}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FD9EFED1-7B8E-42EB-BFCC-6FA1FD7F9FF1}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FDFA2BEC-E35A-403A-8018-FDF57E786C35}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FE065BAB-F2CA-47A1-902B-FEB8B58AAACC}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FE761382-487B-4F0B-B97A-28596C53174B}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FECBDF4A-B209-42C6-A859-A8715657BA1C}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FEE2D5CC-141E-4A18-811E-39AC0D6884A4}
Successfully deleted: [Empty Folder] C:\Users\Raphael\appdata\local\{FF889873-C74A-43A6-94D3-4249A562B7CE}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Emptied folder: C:\Users\Raphael\AppData\Roaming\mozilla\firefox\profiles\8kvmy6nq.default\minidumps [10 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.03.2014 at 23:32:54,30
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

18.03.2014, 19:55	#5
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Interpol Virus - FRST.exe Ja, führe bitte Schritt 2 im abgesicherten Modus durch. __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

22.03.2014, 00:09	#13
deeprybka /// TB-Ausbilder /// Anleitungs-Guru	Interpol Virus - FRST.exe Das freut mich! Wir sind aber noch nicht fertig. Bitte warte auf weitere Anweisungen. Morgen machen wir weiter. Gute Nacht... __________________ Gruß deeprybka Lob, Kritik, Wünsche? Spende fürs trojaner-board? _______________________________________________ „Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Interpol Virus - FRST.exe

Plagegeister aller Art und deren Bekämpfung: Interpol Virus - FRST.exe