pokki löschen wegen Systembelastung

ewes-Ltd · 04.05.2014, 21:38

Meldung beim Hochfahren: localappdata pokki engine launcher.dII
"Das angegebene Modul wurde nicht gefunden"
Ich will pokki löschen. Eigentlich habe ich "pokki" überall gelöscht. Hier kommt er trotzdem.

Hallo Ihr fleißigen Helferlein,

ich hatte das Problem, dass ich keine word-Datei mehr speichern konnte.
Ich musste den Computer nach der diesbezüglichen Meldung ausschalten, wieder hochfahren, dann ging es zwei - dreimal - und wieder kam die Fehlermeldung.
Ich fing dann zu löschen an und habe vieles rausgeschmissen.

Jetzt ist der PC
a) sehr langsam
b) meldet dauernd vollen Arbeitsspeicher
c) schaltet die Internetverbindung aus

Auch jetzt, während der GMER seine Arbeit gemacht hat, kam die Meldung, dass der Arbeitsspeicher voll ist und ich GMER ausschalten soll -obwohl alles geschlossen war. Ich ignorierte - und es sollte trotzdem geklappt haben.
Im Anhang findet Ihr defogger, FRST und GMER und meine bisherigen Fehlermeldungen.
Ich bin nur ein kleiner Anwender und habe von Programmierung und Internas keine Ahnung.

Danke im Voraus für Eure Hilfe!

ewes

schrauber · 05.05.2014, 06:49

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

ewes-Ltd · 05.05.2014, 10:59

Danke Schrauber für die schnelle Antwort!

Und hier kommt der zweite Teil, nachdem die Datenmenge im ersten Teil zu groß war:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-05-2014
Ran by * * * * (administrator) on EWES2000 on 04-05-2014 21:05:46
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Program Files (x86)\Greenshot\Greenshot.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
() C:\Downloads\Software\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\MountPoints2: {ee278ac3-da13-11e0-9650-806e6f6e6963} - D:\start.exe
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
URLSearchHook: HKLM-x32 - (No Name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No File
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={8CC5F55A-3596-4DA7-9DAB-FB2C18CF21FA}&mid=aa3b6dc9db7747d0a931d16c644c3c2f-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=re011&coid=avgtbdisre&cmpid=&pr=sa&d=2014-02-27 13:07:20&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Wondershare Video Converter Ultimate - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF user.js: detected! => C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\user.js
FF NewTab: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=nt&installDate={installDate}&barcodeid={barcodeID}&um={UM}
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=hp&installDate={installDate}&barcodeid={barcodeID}&um={UM}
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&installDate={installDate}&barcodeid={barcodeID}&um={UM}&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\RelevantKnowledge\firefox
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (McAfee Security Scan+) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-04-30]
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Fast Discountz) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd [2013-09-05]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKLM\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKCU\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [angobeimajilfhlcpeiccndaifchnppl] - C:\Program Files (x86)\AppGraffiti\Chrome\graff_chr.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [chgdeabpmphfhkoemjjglmilajldekbp] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRChromePlugin.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [ieadcoanfjloocmfafkebdnfefmohngj] - C:\Program Files (x86)\BonanzaDeals\BonanzaDeals.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM-x32\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
S2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 21:05 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-04 20:46 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-04 19:10 - 00041670 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-01 21:07 - 00000336 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-04 14:14 - 00000392 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-04 21:06 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-04-28 19:12 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 00:37 - 2014-04-19 14:07 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2014-04-19 00:37 - 2014-04-19 00:37 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
2014-04-19 00:36 - 2014-04-19 00:36 - 00000000 ____D () C:\ProgramData\AVG SafeGuard toolbar
2014-04-19 00:35 - 2014-04-19 15:00 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:20 - 2014-04-19 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-1-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-10 00:13 - 2014-04-14 22:56 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log

==================== One Month Modified Files and Folders =======

2014-05-04 21:06 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-04 21:05 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-04 21:05 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-04 21:05 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 21:03 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-04 20:46 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 20:37 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-04 20:15 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-04 20:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-04 20:00 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-04 19:46 - 2014-03-19 02:42 - 01068638 _____ () C:\Windows\WindowsUpdate.log
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:15 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 19:15 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 19:10 - 2014-05-04 19:09 - 00041670 _____ () C:\Windows\iis7.log
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 19:09 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 19:09 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 19:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-04 19:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 17:30 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 15:15 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-04 14:44 - 2014-03-21 00:59 - 00006656 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-04 14:37 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 14:27 - 2012-07-12 18:34 - 00639488 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-04 14:17 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-04 14:17 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-04 14:14 - 2014-05-01 11:42 - 00000392 _____ () C:\Windows\setupact.log
2014-05-04 14:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-01 21:07 - 2014-05-01 21:07 - 00000336 _____ () C:\Windows\PFRO.log
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:38 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:37 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 21:24 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 19:12 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-28 19:12 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 22:11 - 2009-07-14 07:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 11:26 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2014-04-19 00:35 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar
2014-04-19 15:00 - 2014-04-16 23:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:20 - 2013-06-13 11:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Zip Opener Packages
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:07 - 2014-04-19 00:37 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2014-04-19 00:37 - 2014-04-19 00:37 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
2014-04-19 00:36 - 2014-04-19 00:36 - 00000000 ____D () C:\ProgramData\AVG SafeGuard toolbar
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:56 - 2014-01-09 21:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-15 15:10 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-04-15 15:10 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-04 20:58 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-04 14:32 - 2011-09-20 13:44 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-04 14:32 - 2011-09-20 13:44 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe
C:\Users\Wolfgang Dorn\ZipExtractorSetup.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 17:01

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---
6 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014

Wiederholung im zweiten Teil:

Dazu kommen die folgenden Meldungen zu Deiner Information:

1. Windows Word 2007: Bei der Weitergabe des Befehls an das Programm ist ein Fehler aufgetreten (Ich kann also keine word-Dokumente abspeichern, bzw. nur nach dem Runter- und Rauffahren des Systems kurzfristig).

2. Ich habe den SFC-Check laufen lassen – keine Probleme.
Eine blödsinnige Meldung habe ich beim Hochfahren (wenn es denn mal geht): „localappdata pokki engine launcher.dII“ wurde nicht gefunden.
Ich habe alles mit – irgendwie "pokki" – gelöscht. Aber diese Meldung blieb.

3. Der Arbeitsspeicher ist voll. Das System schlägt mir dann vor, was ich schließen soll. Dazu gehört allerdings auch die gerade geöffnete Datei, wie z.B. GMER, während der Bearbeitung. Ich habe diese Aufforderung weggedrückt - und alles lief weiter.

Nun das war's in Kürze. Viel Spaß und Erfolg, dies zu sortieren. Für einen Fachmann wie Dich ist es sicher kein Problem - für mich ist es Horror.

Und jetzt kam die Meldung bei der Weitergabe: Der Text, den Sie eingegeben haben, besteht aus 158175 Zeichen und ist damit zu lang. Bitte kürzen Sie den Text auf die maximale Länge von 120000 Zeichen. Somit musste ich einen Anhang machen - sorry.

Danke für Deine wertvolle Zeit!

Einen schönen Tag wünscht

ewes

NS: Dies ist der neue Post, was ja eigentlich Probleme verursachen sollte. Aber ich mach's erstmal, damit Du meine Daten bekommst, die für mich schrecklich aussehen.

ewes-Ltd · 05.05.2014, 11:13

Zitat:

Zitat von schrauber

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

-----------------

Hallo Schrauber - ich versuche es jetzt mal auf diese Art;
denn wenn ich zusätzlich antworte, dann ist meine Antwort auf Deine Anfrage schon durch mich beantwortet. Somit weiß ich nicht , wie ich einen neuen Post machen soll.

Hier kommen Deine Wunschdateien (hoffentlich):

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-05-2014
Ran by * * * * (administrator) on EWES2000 on 04-05-2014 21:05:46
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(NewSoft Technology Corporation) C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winampa.exe
(NewSoft Technology Corporation) C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
() C:\Program Files (x86)\Greenshot\Greenshot.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrvx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
() C:\Downloads\Software\Defogger.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\MountPoints2: {ee278ac3-da13-11e0-9650-806e6f6e6963} - D:\start.exe
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
URLSearchHook: HKLM-x32 - (No Name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - No File
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://mysearch.avg.com/search?cid={8CC5F55A-3596-4DA7-9DAB-FB2C18CF21FA}&mid=aa3b6dc9db7747d0a931d16c644c3c2f-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=en&ds=re011&coid=avgtbdisre&cmpid=&pr=sa&d=2014-02-27 13:07:20&v=17.3.1.91&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Wondershare Video Converter Ultimate - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll No File
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF user.js: detected! => C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\user.js
FF NewTab: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=nt&installDate={installDate}&barcodeid={barcodeID}&um={UM}
FF DefaultSearchEngine: Web Search
FF SelectedSearchEngine: Web Search
FF Homepage: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=hp&installDate={installDate}&barcodeid={barcodeID}&um={UM}
FF Keyword.URL: hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&installDate={installDate}&barcodeid={barcodeID}&um={UM}&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\searchplugins\Web Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\RelevantKnowledge\firefox
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (McAfee Security Scan+) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh [2014-04-30]
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Fast Discountz) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd [2013-09-05]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKLM\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKCU\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [angobeimajilfhlcpeiccndaifchnppl] - C:\Program Files (x86)\AppGraffiti\Chrome\graff_chr.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [chgdeabpmphfhkoemjjglmilajldekbp] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRChromePlugin.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [ieadcoanfjloocmfafkebdnfefmohngj] - C:\Program Files (x86)\BonanzaDeals\BonanzaDeals.crx [2013-09-05]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKLM-x32\...\Chrome\Extension: [oldchfemoapgakfjnmbngnljnkoapbhd] - C:\Users\WOLFGA~1\AppData\Local\FastDiscountz.crx [2013-09-05]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
S2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-04 21:05 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-04 20:46 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-04 19:10 - 00041670 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-01 21:07 - 00000336 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-04 14:14 - 00000392 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-04 21:06 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-04-28 19:12 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 00:37 - 2014-04-19 14:07 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2014-04-19 00:37 - 2014-04-19 00:37 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
2014-04-19 00:36 - 2014-04-19 00:36 - 00000000 ____D () C:\ProgramData\AVG SafeGuard toolbar
2014-04-19 00:35 - 2014-04-19 15:00 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:20 - 2014-04-19 15:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-10 00:13 - 2014-04-14 22:56 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log

==================== One Month Modified Files and Folders =======

2014-05-04 21:06 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-04 21:05 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-04 21:05 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-04 21:05 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 21:03 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-04 20:46 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 20:37 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-04 20:15 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-04 20:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-04 20:00 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-04 19:46 - 2014-03-19 02:42 - 01068638 _____ () C:\Windows\WindowsUpdate.log
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:15 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-04 19:15 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-04 19:10 - 2014-05-04 19:09 - 00041670 _____ () C:\Windows\iis7.log
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 19:09 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 19:09 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 19:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-04 19:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 17:30 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 15:15 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-04 14:44 - 2014-03-21 00:59 - 00006656 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-04 14:37 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-04 14:27 - 2012-07-12 18:34 - 00639488 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-04 14:17 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-04 14:17 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-04 14:14 - 2014-05-01 11:42 - 00000392 _____ () C:\Windows\setupact.log
2014-05-04 14:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-01 21:07 - 2014-05-01 21:07 - 00000336 _____ () C:\Windows\PFRO.log
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:38 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:37 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 21:24 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 19:12 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-28 19:12 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 22:11 - 2009-07-14 07:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 11:26 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2014-04-19 00:35 - 00000000 ____D () C:\Program Files (x86)\AVG SafeGuard toolbar
2014-04-19 15:00 - 2014-04-16 23:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:20 - 2013-06-13 11:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Zip Opener Packages
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:07 - 2014-04-19 00:37 - 00000000 ____D () C:\ProgramData\AVG Security Toolbar
2014-04-19 00:37 - 2014-04-19 00:37 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
2014-04-19 00:36 - 2014-04-19 00:36 - 00000000 ____D () C:\ProgramData\AVG SafeGuard toolbar
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:56 - 2014-01-09 21:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-15 15:10 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-04-15 15:10 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-04 20:58 - 2009-07-14 07:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-04-04 14:32 - 2011-09-20 13:44 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-04-04 14:32 - 2011-09-20 13:44 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe
C:\Users\Wolfgang Dorn\ZipExtractorSetup.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 17:01

==================== End Of Log ============================

--- --- ---

--- --- ---

und
GMER

GMER Logfile:

Code:

ATTFilter

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2014-05-04 21:43:43
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\00000061 ST350041 rev.JC4B 465,76GB
Running: Gmer-19357.exe; Driver: C:\Users\WOLFGA~1\AppData\Local\Temp\kxliapoc.sys


---- Kernel code sections - GMER 2.1 ----

INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 528                                                                                                                                                                                   fffff800031be000 17 bytes [00, 00, 28, 00, 4E, 74, 66, ...]
INITKDBG  C:\Windows\system32\ntoskrnl.exe!ExDeleteNPagedLookasideList + 546                                                                                                                                                                                   fffff800031be012 27 bytes [C7, 04, 80, FA, FF, FF, 00, ...]

---- User code sections - GMER 2.1 ----

?         C:\Windows\system32\mssprxy.dll [3284] entry point in ".rdata" section                                                                                                                                                                               00000000681c71e6
.text     C:\Program Files (x86)\Greenshot\Greenshot.exe[10620] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                        0000000076311465 2 bytes [31, 76]
.text     C:\Program Files (x86)\Greenshot\Greenshot.exe[10620] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                       00000000763114bb 2 bytes [31, 76]
.text     ...                                                                                                                                                                                                                                                  * 2
?         C:\Windows\system32\mssprxy.dll [10620] entry point in ".rdata" section                                                                                                                                                                              00000000681c71e6
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                                                    0000000076208791 5 bytes JMP 00000001554653fc
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\ole32.dll!OleLoadFromStream                                                                                                                                 00000000763a6143 5 bytes JMP 0000000155f2f68e
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\OLEAUT32.dll!SysFreeString                                                                                                                                  0000000074f03e59 5 bytes JMP 00000001554910b7
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\OLEAUT32.dll!VariantClear                                                                                                                                   0000000074f03eae 5 bytes JMP 000000015549b0be
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\OLEAUT32.dll!SysAllocStringByteLen                                                                                                                          0000000074f04731 5 bytes JMP 00000001554cb5dc
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\OLEAUT32.dll!VariantChangeType                                                                                                                              0000000074f05dee 5 bytes JMP 00000001554cc50f
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Program Files (x86)\Common Files\System\MSMAPI\1031\MSMAPI32.DLL!HrDispatchNotifications@4 + 112                                                                             0000000073e71b80 4 bytes [7A, AB, 8E, F7]
?         C:\Windows\system32\mssprxy.dll [123440] entry point in ".rdata" section                                                                                                                                                                             00000000681c71e6
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                         0000000076311465 2 bytes [31, 76]
.text     C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE[123440] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                        00000000763114bb 2 bytes [31, 76]
.text     ...                                                                                                                                                                                                                                                  * 2
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[127504] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                                                                       0000000076208791 5 bytes JMP 00000001554653fc
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[127504] C:\Windows\syswow64\ole32.dll!OleLoadFromStream                                                                                                                                                    00000000763a6143 5 bytes JMP 0000000155f2f68e
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 166                                                                                                                             000000002f071afc 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 253                                                                                                                             000000002f071b53 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 320                                                                                                                             000000002f071b96 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 390                                                                                                                             000000002f071bdc 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 738                                                                                                                             000000002f071d38 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 937                                                                                                                             000000002f071dff 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 958                                                                                                                             000000002f071e14 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE!wdGetApplicationObject + 970                                                                                                                             000000002f071e20 2 bytes [07, 2F]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\kernel32.dll!SetUnhandledExceptionFilter                                                                                                                                       0000000076208791 5 bytes JMP 00000001554653fc
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\ole32.dll!OleLoadFromStream                                                                                                                                                    00000000763a6143 5 bytes JMP 0000000155f2f68e
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\ole32.dll!StgIsStorageFile + 544                                                                                                                                               000000007642b758 4 bytes [14, F6, F2, 55]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\OLEAUT32.dll!SysFreeString                                                                                                                                                     0000000074f03e59 5 bytes JMP 00000001554910b7
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\OLEAUT32.dll!VariantClear                                                                                                                                                      0000000074f03eae 5 bytes JMP 000000015549b0be
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\OLEAUT32.dll!SysAllocStringByteLen                                                                                                                                             0000000074f04731 5 bytes JMP 00000001554cb5dc
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\OLEAUT32.dll!VariantChangeType                                                                                                                                                 0000000074f05dee 5 bytes JMP 00000001554cc50f
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                            0000000076311465 2 bytes [31, 76]
.text     C:\PROGRA~2\MICROS~1\Office12\WINWORD.EXE[131912] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                           00000000763114bb 2 bytes [31, 76]
.text     ...                                                                                                                                                                                                                                                  * 2
.text     C:\Program Files (x86)\Free Download Manager\fdm.exe[151988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 69                                                                                                                                 0000000076311465 2 bytes [31, 76]
.text     C:\Program Files (x86)\Free Download Manager\fdm.exe[151988] C:\Windows\syswow64\PSAPI.DLL!GetModuleInformation + 155                                                                                                                                00000000763114bb 2 bytes [31, 76]
.text     ...                                                                                                                                                                                                                                                  * 2

---- Threads - GMER 2.1 ----

Thread    C:\Windows\system32\svchost.exe [1488:2040]                                                                                                                                                                                                          000007fef79035c0
Thread    C:\Windows\system32\svchost.exe [1488:5588]                                                                                                                                                                                                          000007fef7905600
Thread    C:\Windows\system32\svchost.exe [1488:5820]                                                                                                                                                                                                          000007feecb32888
Thread    C:\Windows\system32\svchost.exe [1488:5936]                                                                                                                                                                                                          000007feecb02940
Thread    C:\Windows\system32\svchost.exe [1488:12676]                                                                                                                                                                                                         000007feecb32a40
Thread    C:\Windows\System32\WUDFHost.exe [5864:7552]                                                                                                                                                                                                         000007fee30124a0
Thread    C:\Windows\system32\CISVC.EXE [111744:112232]                                                                                                                                                                                                        000007fefe90a808
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:112704]                                                                                                                                                                           0000000076387587
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:112716]                                                                                                                                                                           0000000066f37712
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:112752]                                                                                                                                                                           00000000770c2e65
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:113176]                                                                                                                                                                           00000000770c3e85
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:161900]                                                                                                                                                                           00000000770c3e85
Thread    C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [112656:119956]                                                                                                                                                                           00000000770c3e85
---- Processes - GMER 2.1 ----

Library   C:\Users\ * * * * \AppData\Roaming\Telekom\MediencenterSync\DTAG.Mediencenter.IconOverlayHandler.dll (*** suspicious ***) @ C:\Windows\explorer.exe [142276] (Mediencenter Shell Icon Overlay Handler/Deutsche Telekom AG)(2012-12-13 16:30:28)  000007fefaa90000

---- Disk sectors - GMER 2.1 ----

Disk      \Device\Harddisk0\DR0                                                                                                                                                                                                                                unknown MBR code

---- EOF - GMER 2.1 ----

--- --- ---

Damit solltest Du alle Informationen bekommen haben.

Danke - danke sehr vorerst !!!

Einen schönen Tag wünscht

herzlichst

ewes

ewes-Ltd · 05.05.2014, 11:26

[QUOTE=schrauber;1295571]Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

Hallo Schrauber,

ich denke, dass ich jetzt etwas zweimal geschickt habe und dass diese Datei noch fehlt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-05-2014
Ran by * * * * at 2014-05-04 21:07:10
Running from C:\Downloads\Software
Boot Mode: Normal
==========================================================

==================== Security Center ========================

AV: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG AntiVirus Free Edition 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft)
1&1 EasyLogin (HKLM-x32\...\1&1 EasyLogin) (Version: - )
1&1 Upload-Manager (HKLM-x32\...\1&1 Upload-Manager) (Version: 2.0.676 - 1&1 Internet AG)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.2090 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 3.10.142.72249 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 3.10.142.72249 - Alcor Micro Corp.) Hidden
AllShare Framework DMS (HKLM\...\{BF01E7C5-918C-4AAB-8099-2D4411E6E6F4}) (Version: 1.3.21 - Samsung)
AnyMedia Player 4.5.1 (HKLM-x32\...\{1959CCD2-1227-4de4-97E7-04F29D526762}_is1) (Version: 4.5.1 - cyan soft ltd)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio 11 v.11.0.4 (HKLM-x32\...\Ashampoo Burning Studio 11_is1) (Version: 11.0.4 - Ashampoo GmbH & Co. KG)
Ashampoo ClipFinder HD v.2.3.3 (HKLM-x32\...\Ashampoo ClipFinder HD_is1) (Version: 2.3.3 - Ashampoo GmbH & Co. KG)
Ashampoo ClipFinder HD v.2.3.5 (HKLM-x32\...\{0A11EA01-36EF-0070-F54C-E06E25BC1924}_is1) (Version: 2.3.5 - Ashampoo GmbH & Co. KG)
Ashampoo GetBack Photo v.1.0.1 (HKLM-x32\...\Ashampoo GetBack Photo_is1) (Version: 1.0.1 - Ashampoo GmbH & Co. KG)
Ashampoo Movie Studio v.1.0.9 (HKLM-x32\...\{91B33C97-54B3-9CEB-E911-246EDA9BDC9A}_is1) (Version: 1.0.9 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 10 v.10.2.1 (HKLM-x32\...\{C92AB6F1-4B66-808A-D77C-25EF81C0176A}_is1) (Version: 10.2.1 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 11 v.11.0.3 (HKLM-x32\...\{C92AB6F1-0F9C-8526-5DF1-0A2FD0FB33D9}_is1) (Version: 11.0.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Commander 9 v.9.4.3 (HKLM-x32\...\Ashampoo Photo Commander 9_is1) (Version: 9.4.3 - Ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer 3 v.3.13 (HKLM-x32\...\Ashampoo Photo Optimizer 3_is1) (Version: 3.1.3 - Ashampoo Technology GmbH & Co. KG)
Ashampoo Photo Optimizer 4 4.0.3 (HKLM-x32\...\Ashampoo Photo Optimizer 4_is1) (Version: 4.0.3 - Ashampoo GmbH & Co. KG)
Ashampoo UnInstaller 4 v.4.20 (HKLM-x32\...\Ashampoo UnInstaller 4_is1) (Version: 4.2.0 - Ashampoo GmbH & Co. KG)
Audials (HKLM-x32\...\{D928A4B7-126D-47B6-AD76-9848E51E1426}) (Version: 10.2.14807.700 - Audials AG)
AVG 2014 (HKLM\...\AVG) (Version: 2014.0.4577 - AVG Technologies)
AVG 2014 (Version: 14.0.3931 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4577 - AVG Technologies) Hidden
BenVista PhotoZoom Internet 4.0 (HKCU\...\PhotoZoom Express 4) (Version: 4.0 - BenVista Ltd.)
Biet-O-Matic v2.14.8 (HKLM-x32\...\Biet-O-Matic v2.14.8) (Version: 2.14.8 - BOM Development Team)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BookScan&Whiteboard Suite (HKLM-x32\...\{F4933D9F-89CC-4CA9-B5B0-CF32968890C7}) (Version: 1.0 - Reallusion)
BroadCam Video Streaming Server (HKLM-x32\...\BroadCam) (Version: - NCH Software)
Brother MFL-Pro Suite MFC-250C (HKLM-x32\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
CheckDrive (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 4.4 - Abelssoft)
Cinema HD*2.0 (HKLM-x32\...\{4BC051E5-5521-4F01-0001-6DCA22CA4A7F}) (Version: 2.09.654 - Engelmann Media GmbH)
Citrix Online Launcher (HKLM-x32\...\{AC7E7905-8C59-4806-A96D-30936A2B1FC5}) (Version: 1.0.168 - Citrix)
Classic FTP (HKLM-x32\...\ClassicFTP) (Version: 2.30 - NCH Software)
COMPUTERBILD-Abzockschutz (HKLM-x32\...\{B451B75F-358C-4902-9477-4B30B68CFF49}) (Version: 1.0.34 - J3S)
concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Debut Videorekorder (HKLM-x32\...\Debut) (Version: - NCH Software)
DruckStudio Poster Drucker (HKLM-x32\...\{7ACDDDDC-3304-404A-A7F8-9F63E9201C3B}) (Version: - )
Epson Benutzerhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Useg) (Version: - )
Epson Connect Guide (HKLM-x32\...\Epson Connect Guide) (Version: - )
Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.2.0 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation)
Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 1.31.00 - SEIKO EPSON CORPORATION)
Epson Netzwerkhandbuch WF-2540 Series (HKLM-x32\...\WF-2540 Series Netg) (Version: - )
Epson PC-FAX Driver (HKLM-x32\...\EPSON PC-FAX Driver 2) (Version: - )
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
EPSON WF-2540 Series Printer Uninstall (HKLM\...\EPSON WF-2540 Series) (Version: - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: - NCH Software)
Express Rip (HKLM-x32\...\ExpressRip) (Version: 1.94 - NCH Software)
Express Zip (HKLM-x32\...\ExpressZip) (Version: 2.18 - NCH Software)
FileFort Backup (HKLM-x32\...\FileFort) (Version: 3.27 - NCH Software)
FileZilla Client 3.7.4.1 (HKLM-x32\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Fling Dateiübertragung (HKLM-x32\...\Fling) (Version: 2.33 - NCH Software)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FoxTab FLV Player (HKCU\...\FoxTab FLV Player) (Version: - ) <==== ATTENTION
Framing Studio 1.91 (HKLM-x32\...\Framing Studio_is1) (Version: - AMS Software)
FRANZIS onlineTV 8 (HKLM-x32\...\{CBC88F0E-1960-4AC3-8C38-8BAD44E3F6E3}_is1) (Version: 8.4.0.0 - FRANZIS Verlag GmbH)
Free Download Manager 3.9.3 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG)
Free YouTube Download version 3.2.20.1230 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.20.1230 - DVDVideoSoft Ltd.)
GIMP 2.6.8 (HKLM\...\WinGimp-2.0_is1) (Version: - )
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
GMX MediaCenter 1.6.2863.0 (HKCU\...\GMX Application {sync-000021}) (Version: 1.6.2863.0 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung (HKLM-x32\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.0.55 - 1&1 Mail & Media GmbH)
GMX Softwareaktualisierung CE (HKCU\...\1&1 Mail & Media GmbH 1und1Softwareaktualisierung) (Version: 3.0.1.0 - 1&1 Mail & Media GmbH)
Google Chrome (HKCU\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Desktop (HKLM-x32\...\Google Desktop) (Version: 5.9.1005.12335 - Google)
Google Drive (HKLM-x32\...\{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}) (Version: 1.14.6059.644 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
GoToMeeting 6.0.0.1259 (HKCU\...\GoToMeeting) (Version: 6.0.0.1259 - CitrixOnline)
Greenshot (HKLM-x32\...\Greenshot_is1) (Version: - )
HaoZip (HKLM\...\HaoZip) (Version: v3.0 - Ruichuang Network Technology Co.,Ltd)
HOAI Schnellrechner (HKLM\...\{B8E190A3-94F9-4085-A1B9-6A0B6A056516}) (Version: 4.0.3 - BauerSoftware)
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Inkjet Printer/Scanner Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - )
Ipswitch WS_FTP 12 (HKLM-x32\...\{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}) (Version: 12.4 - Ipswitch)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
K-Lite Mega Codec Pack 10.0.5 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.0.5 - )
LG Bluetooth Drivers (HKLM-x32\...\{AC7EE5F1-0DE4-4256-8E43-92B73C8E6019}) (Version: 1.1 - LG Electronics)
LG On-Screen Phone (HKLM-x32\...\LG On-Screen Phone) (Version: 0.4.26.20110517 - LG Electronics)
LG PC Suite (HKLM-x32\...\LG PC Suite) (Version: 5.2.33.20130406 - LG Electronics)
LG PC Suite IV (HKLM-x32\...\LG PC Suite IV) (Version: 4.3.80.20121017 - LG Electronics)
LG United Mobile Drivers (HKLM-x32\...\{5DB849D6-9392-4FB7-9ABB-87ED433152E5}) (Version: 3.8.1 - LG Electronics)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.141.11 - McAfee, Inc.)
Mediencenter 3.8.9799.6 (HKCU\...\Mediencenter) (Version: 3.8.9799.6 - Deutsche Telekom AG)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0407-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0407-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-0407-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.5 - F.J. Wechselberger)
Nitro Pro 7 (HKLM\...\{E43F57EB-3464-47FD-9272-D16AAB0B01A1}) (Version: 7.5.0.29 - Nitro PDF Software)
Nitro Reader 2 (HKLM\...\{E9ABE702-55E6-40E4-B3BD-99D70BB3DF24}) (Version: 2.5.0.45 - Nitro PDF Software)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5896 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10.62.40 - NVIDIA Corporation)
NVIDIA ForceWare Network Access Manager (HKLM-x32\...\{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}) (Version: 1.00.7325.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 307.83 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 307.83 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.109.706 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 307.83 (Version: 307.83 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
One Click Wipe Basic (HKLM-x32\...\Stepok's One Click Wipe Basic_is1) (Version: - Stepok Image Lab.)
One Click Wipe 3 (HKLM-x32\...\Stepok's One Click Wipe und Recomposit_is1) (Version: - Stepok Image Lab.)
Paint.NET v3.5.11 (HKLM\...\{72EF03F5-0507-4861-9A44-D99FD4C41418}) (Version: 3.61.0 - dotPDN LLC)
Photo Collage Maker 1.51 (HKLM-x32\...\Photo Collage Maker_is1) (Version: - AMS Software)
Photo Collage Printer (HKLM-x32\...\{2B5F72F2-523C-4413-9313-DAD174A09162}) (Version: - )
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photomizer Retro (HKLM-x32\...\{41B5224D-7853-4EA5-0001-C8949A33B608}) (Version: 2.0.12.925 - Engelmann Media GmbH)
PhotoPad Foto-Editor (HKLM-x32\...\PhotoPad) (Version: 2.36 - NCH Software)
Pixillion Imagedatei-Konverter (HKLM-x32\...\Pixillion) (Version: - NCH Software)
Platform (x32 Version: 1.39 - VIA Technologies, Inc.) Hidden
Presto! PageManager 9.03 SE (HKLM-x32\...\{04AF7536-446D-4F5A-8920-B4E885E4581B}) (Version: 9.03.06 - Newsoft Technology Corporation)
Prism Videodatei-Konverter (HKLM-x32\...\Prism) (Version: - NCH Software)
Private Fotos (HKLM-x32\...\{871122A8-EEC8-4D0E-A0A5-472FFA1FC9CD}) (Version: 1.00.0000 - Franzis Verlag GmbH)
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
Qtrax Connection Manager (HKCU\...\Qtrax Connection Manager) (Version: 20.13.07.02 - Qtrax Inc)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
RAR File Open Knife - Free Opener (HKLM-x32\...\RAR File Open Knife - Free Opener) (Version: 2.40 - Philipp Winterberg)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.43 - Piriform)
RipTiger 4.5.1 (HKLM-x32\...\{AFD4597D-56CC-447F-AA68-C1BF1AEA448E}_is1) (Version: 4.5.1 - cyan soft ltd)
RipTiger Extras 4.5.1 (HKLM-x32\...\{2EE6D53B-957E-48d1-801B-0B7DE81BACED}_is1) (Version: 4.5.1 - cyan soft ltd)
roomeon 3D-Planer (HKLM-x32\...\{0D55297D-C424-4A2F-BE94-BEAE479EBBB8}) (Version: 1.3.1 - roomeon GmbH)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.13114.22 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.13114.22 - Samsung Electronics Co., Ltd.) Hidden
Samsung Link 1.7.0.1310302230 (HKLM\...\8474-7877-9059-0204) (Version: 1.7.0.1310302230 - Copyright 2013 SAMSUNG)
Screenshot Director 3 (3.0.12) (HKLM-x32\...\Screenshot Director 3_is1) (Version: - )
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.14 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
Snap.Do (HKLM-x32\...\{6E82BCC5-F92D-4AE9-AF5A-CB01213D6AD0}) (Version: 1.161.1.12411 - ReSoft Ltd.) <==== ATTENTION
Snap.Do Engine (HKCU\...\{f3b37686-f3c9-4037-b7c3-3e8f939f6bb3}) (Version: 1.161.1.12411 - ReSoft Ltd.) <==== ATTENTION
SoundTaxi Media Suite 4.4.9 (HKLM-x32\...\{EF4C657F-632F-4CED-A220-F4C1C724241C}_is1) (Version: 4.4.9 - cyan soft ltd)
Stellar Phoenix Photo Recovery (HKLM-x32\...\Stellar Phoenix Photo Recovery_is1) (Version: 4.0.0.0 - Stellar Information Systems Ltd)
STRATO HiDrive (remove only) (HKLM-x32\...\STRATO HiDrive) (Version: - STRATO AG)
Switch Audiodatei-Konverter (HKLM-x32\...\Switch) (Version: - NCH Software)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.28223 - TeamViewer)
TomTom HOME 2.8.3.2458 (HKLM-x32\...\TomTom HOME) (Version: 2.8.3.2458 - TomTom)
TomTom HOME Visual Studio Merge Modules (HKLM-x32\...\{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}) (Version: 1.0.2 - TomTom International B.V.)
TuneUp Utilities 2013 (HKLM-x32\...\TuneUp Utilities 2013) (Version: 13.0.4000.245 - TuneUp Software)
TuneUp Utilities 2013 (x32 Version: 13.0.4000.245 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.4000.245 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_PROPLUS_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2878297) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{9B1DEEA3-B4ED-49F0-9EF7-4A820EEEA7F1}) (Version: - Microsoft)
Update for Zip Extractor (HKCU\...\Digital Sites) (Version: - Update for Zip Extractor) <==== ATTENTION
Update for Zip Opener (HKCU\...\DSite) (Version: - ) <==== ATTENTION
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft)
Vasco da Gama 5 HDPro (HKLM-x32\...\{067D2172-F8F3-477D-B4EE-0B0AA967D544}) (Version: 5.20.0000 - MotionStudios)
Vertus Bling! It 1.1.5 (HKLM-x32\...\VertusBlingIt) (Version: 1.1.5 - )
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.39 - VIA Technologies, Inc.)
VideoPad Videobearbeitungs-Software (HKLM-x32\...\VideoPad) (Version: - NCH Software)
Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies)
Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Winamp (HKLM-x32\...\Winamp) (Version: 5.65 - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
Wireless Keyboard Driver (HKLM-x32\...\{186C2C57-BD0C-457B-B8C2-F3897406D97F}) (Version: 1.00.0000 - Author)
Wondershare PDF to Word (Build 2.0.1) (HKLM-x32\...\{A0A6B577-9AB9-4B69-8EAE-EAAFD55676F0}_is1) (Version: - Wondershare Software)
Wondershare PDF to Word (Build 4.0.1) (HKLM-x32\...\{90599D63-1879-4B90-BE4F-051CE70FA576}_is1) (Version: 4.0.1 - Wondershare Software)
YTD Video Downloader 4.1 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.1 - GreenTree Applications SRL)
Zip Extractor Packages (HKCU\...\Zip Extractor Packages) (Version: - ) <==== ATTENTION
Zip Opener Packages (HKCU\...\Zip Opener Packages) (Version: - ) <==== ATTENTION
Zoner Photo Studio 13 FREE (HKLM-x32\...\ZonerPhotoStudio13_DE_is1) (Version: 13.0.1.7 - ZONER software)
Zoner Photo Studio 16 (HKLM\...\ZonerPhotoStudio16_DE_is1) (Version: 16.0.1.5 - ZONER software)

==================== Restore Points =========================

30-04-2014 20:51:53 Windows Update
01-05-2014 09:05:51 Installed AVG 2014
01-05-2014 18:18:01 Removed PaperPort Image Printer 64-bit
01-05-2014 18:19:39 Removed ScanSoft PaperPort 11
02-05-2014 21:00:17 Windows Update
04-05-2014 17:07:50 Windows Modules Installer

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00FA4D85-A4C2-45F0-8CB2-F42B2D6012E7} - System32\Tasks\{2D180A68-80CF-41F0-A055-46F623EE8BAA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {05EDBC5F-35DB-443F-99FF-70BCB37419CC} - System32\Tasks\{847C5971-C0C4-40A3-B222-B9B3216D3F79} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {06001375-A979-4C4A-BDC7-628BCF6953A2} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\SuperEasy Driver Updater\supereasydu.exe
Task: {0B976EE6-8781-4D1F-BE89-8B581109F148} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {0CB39D0E-7CE8-4D22-B5A1-92151A96FA94} - System32\Tasks\Microsoft\Windows\RestartManager\{CC243E5D-523E-444f-8AD6-9C07BCC003DB} => C:\Windows\system32\rmclient.exe [2009-07-14] (Microsoft Corporation)
Task: {19B1126A-4013-4CF5-9271-39CAB85A0E6B} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {1BE0C82C-6D3D-4A83-8C57-4EA37E94F254} - System32\Tasks\{32F166E1-9B2B-4848-9E52-C4F323F4CB16} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {1DA14C4D-5DF9-4772-81F7-7721ED24D011} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe
Task: {225D78AF-670D-4723-BFE4-A84FB09D73F5} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2014-01-28] (TuneUp Software)
Task: {2940E446-FF86-4241-8F64-A7A7A0CA79B9} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {2CD1598B-49AC-4D03-9B2A-C7B068E54E7F} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {3379D20C-A76E-421C-9DB6-6FFA22338DD1} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {3403483C-4F9E-4F4B-96B5-19087787C21F} - System32\Tasks\{BB346820-7025-4238-B1E7-7386DCA93CCD} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {3ADB2616-56C7-4A08-B294-D38565868B26} - System32\Tasks\{73191D68-729E-4630-9092-F75F765B129E} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {411C9376-E81D-4AAE-9B36-DA05629294F0} - System32\Tasks\{D53C7441-4CD7-4886-B113-C5485BCC65AA} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {430E30CD-1A97-43EA-8379-FF2A32880DEC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-20] (Google Inc.)
Task: {5A2BDED1-3D0D-4A4E-8B65-CA089C6D7633} - System32\Tasks\{5EC925E4-2947-4F89-9E40-C5197464EB6C} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {5BDF6F8D-47D7-47A1-9EC2-E7C825E9CA80} - System32\Tasks\{22C825DA-CD50-473C-9D52-C2B6A3CBF9F1} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {5CE264FA-4D39-4F91-86D3-031696C3DBCA} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5DBD3D5E-C70D-4884-9AE5-A05FE4066D64} - System32\Tasks\{1F74351E-43D0-4006-8286-2890296C401A} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {603BCBAC-14CB-4E7C-9F9B-AE9FE08C202E} - System32\Tasks\{5EDC4E18-88AB-4D19-9F71-7FE0461B3183} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {6149AF98-479E-4F9A-8324-9982376341D0} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2014-01-28] (Abelssoft)
Task: {6283B680-CD4D-40E8-86A0-53BD10AC034A} - System32\Tasks\{DFD590BB-AD9E-43B1-A481-BC9D4E457D19} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {62B20968-18DE-4F51-98BD-7E61F9E4309B} - System32\Tasks\{DFAFC72E-C4D4-4154-871F-3B21F3F507B0} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {69D9B933-1AE8-4398-9221-29B0269EE59B} - System32\Tasks\Registration 1und1 Task => C:\Program Files (x86)\1und1Softwareaktualisierung\cdsupdclient.exe [2013-06-18] (1&1 Mail & Media GmbH)
Task: {6AD2410C-2EB6-47BF-B49E-E55416A056C6} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-16] ()
Task: {6D086FB6-06EA-4FCF-A8B6-122359E34E5A} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {79DB01E5-9FDC-4854-AFA9-697923B7267C} - System32\Tasks\{F3D355EC-70BA-4135-BC36-4C57CBD648AF} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {7AF5EDF2-EC3E-4EC6-BC27-719D7FAE9028} - System32\Tasks\Aufgaben der Ereignisanzeige\eef7037d-984a-4271-9b16-a28d7569ef4e => Wscript.exe "C:\Users\Wolfgang Dorn\AppData\Local\Temp\tmp9C35.vbs"
Task: {7D637691-AA4A-43BA-9911-A72B68AE1AA3} - System32\Tasks\{11969140-9EEC-4D05-9F47-5C86795FC611} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {81BC4221-B24C-45B8-BD4C-70885DEE21BC} - System32\Tasks\{A83B017E-7756-45F2-BFBF-217307C07F00} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {854C0BF3-971E-492D-A4BD-2FE019A03C90} - System32\Tasks\{33985910-9BE3-46E4-BD6E-13FF79FC4597} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {8BDE0975-3FE5-4B98-B10C-D731DBBFBCFA} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {8F686DEA-4980-4273-8C0F-A809C13D0BBE} - System32\Tasks\{69060157-91C0-4C76-A58D-ACCB3349153F} => C:\Program Files (x86)\LG Electronics\LG PC Suite IV\LGUX.exe [2012-11-10] (Mobile Leader Co.,Ltd.)
Task: {903DCFFA-DA92-4CA4-AC03-63C9191DCA09} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {949A0E9E-254B-4631-B128-90C0BC78B170} - \EPUpdater No Task File <==== ATTENTION
Task: {A01E3768-6CCD-468C-9209-DE2F24A31F43} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {A45E32C1-7837-4035-9128-41939497E6FB} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {A5378959-6C03-4400-99FD-FC56E983FC60} - System32\Tasks\BonanzaDealsUpdate => C:\Program <==== ATTENTION
Task: {A6C08353-30C4-4F88-A85F-DB46F6D13258} - System32\Tasks\{04F47939-F9C7-48CC-8DC5-F2F02D41F5AA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {A7DA125F-7043-41F5-B12F-60CE15B151F7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-09-20] (Google Inc.)
Task: {AB08466F-947E-48EA-B76E-7A8E04C77347} - System32\Tasks\{9490E70E-9A7D-473A-A575-B4ED0F1964BA} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {AE9DB6AB-C167-4C93-BD39-1A0C8D23D129} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
Task: {B2825A89-0C03-4E57-A072-EE577F02F012} - System32\Tasks\{A0E062C2-10E5-445F-828B-12B352A1C8A7} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {B3CA7E10-0906-42FF-A253-984323EF5C16} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {B500F0F4-8D12-4691-9C49-A85F93A60F7B} - System32\Tasks\{FC9C53E6-DD91-46C3-8EE0-EA552962AC8F} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {B514BE02-C65B-4698-AC64-52F12066E8E7} - System32\Tasks\{D9767913-02E2-479D-A058-72AF869DEB44} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {B55AF5BF-B6BC-496C-A8D2-51C41FCBA495} - System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72} => C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE [2014-03-19] (Microsoft Corporation)
Task: {B77990A0-E659-41DB-9574-2C4886D0B39E} - System32\Tasks\NCH Software\FlingDowngrade => C:\Program Files (x86)\NCH Software\Fling\fling.exe [2013-07-31] (NCH Software)
Task: {B79C18EE-F7D9-4E61-8D39-5E5943E31C85} - System32\Tasks\{99AD014D-B6C5-4C5F-B667-C86EF89CB77E} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {C8366A87-654E-46CA-A0B7-790E845DCA64} - \RegClean Pro No Task File <==== ATTENTION
Task: {C876CBF3-F415-47CB-A049-8373A2BA3B27} - System32\Tasks\{F344863E-1A4F-4D43-A570-F2820310AC89} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {CE350911-130F-44C4-B4CB-B62DB3995EF0} - System32\Tasks\{376387C6-F400-49C8-A321-D1B56978DB5D} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {CEF1CE99-60A3-4923-B751-15C020E01C05} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {CF9D1616-7EC1-49CA-A1B3-E8A8753C1EBA} - System32\Tasks\{F6928024-6024-4E93-9F4B-FE88249FA0BB} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {D2CF7A21-F7F5-40D9-99FF-6CEE81B6A8B5} - System32\Tasks\DealPly => C:\Users\WOLFGA~1\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
Task: {D34196D7-5379-4DF3-AB4B-E0B424C072FF} - System32\Tasks\{3BA57946-3C40-4D18-A95C-29C4EA766ACE} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {D4714F26-3A4E-429E-B76C-6059C07F9344} - System32\Tasks\{997B84E9-6F98-4B32-AA5F-8783321849B4} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {D6827165-7B27-4264-AB31-F426D5B90DD8} - System32\Tasks\{4A560301-2DC7-4FE9-84AF-DCE65D861FBC} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {DC5B6244-80FC-4752-A246-124FF5792D47} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2014-02-13] (Microsoft Corporation)
Task: {DEEDBED1-EBFA-45F6-A305-B2D154BD97CD} - System32\Tasks\LaunchApp => C:\Program Files (x86)\MyPC Backup\MyPC Backup.exe [2013-09-20] (MyPCBackup.com) <==== ATTENTION
Task: {DFC8C3C7-9EF6-4F20-B6E3-08625A09900F} - System32\Tasks\{9BC17ABC-F0EA-47B4-8443-B9A8AD6AF698} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: {E0229F42-DBD8-4B48-9BCD-D5B401934B19} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {E54F21EB-5E20-42A2-9BE0-15BFB31DC7EC} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe
Task: {ED10A544-584A-4A21-98C6-A611F1F6B4E2} - System32\Tasks\Google Updater and Installer => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [2012-11-30] (Google Inc.)
Task: {ED9D5C6D-332F-486D-AFC3-7064336E6C4B} - System32\Tasks\{B9FCCD6D-E5D9-4778-8F3A-46D83F727EF1} => C:\Program Files (x86)\Wondershare\PDF2Word\PDFtoWord.exe [2012-10-23] (Wondershare)
Task: {F173F0BF-113C-4586-944B-5691CF394152} - System32\Tasks\{D2136E81-8964-49E0-A579-451F896CF77B} => C:\Program Files (x86)\1&1 Surf-Stick\UIMain.exe
Task: {F6868244-C564-4A46-ADD0-8EBCBE296FBC} - System32\Tasks\NCH Software\SwitchReminder => C:\Program Files (x86)\NCH Software\Switch\Switch.exe [2013-04-04] (NCH Software)
Task: {F72F4562-9ED0-47AD-B7F0-FB7DE2C2E872} - System32\Tasks\B2CNotiAgent => C:\ProgramData\LGMOBILEAX\B2C_Client\B2CNotiAgent.exe [2013-06-28] (LG Electronics)
Task: {F7AE6CC3-B07F-48B3-8BED-DF3F9D2A4DE7} - System32\Tasks\{5E704403-B3F4-4C95-BEBB-CC77E3889D87} => C:\Program Files (x86)\Real\RealPlayer\realplay.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe

==================== Loaded Modules (whitelisted) =============

2012-09-23 13:54 - 2013-01-31 11:25 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-01-18 23:05 - 2014-01-28 18:33 - 00019744 _____ () C:\Program Files (x86)\CheckDrive\AbStartManager.dll
2014-01-18 23:05 - 2014-01-28 18:33 - 00014112 _____ () C:\Program Files (x86)\CheckDrive\AbMessages.dll
2013-08-20 12:51 - 2008-01-22 19:35 - 00103808 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2013-11-04 22:41 - 2013-10-30 23:31 - 00012800 _____ () C:\Program Files\Samsung\Samsung Link\JniSys.dll
2014-04-09 10:03 - 2014-04-09 10:03 - 00515584 ____N () C:\Windows\Temp\sqlite-3.7.2-sqlitejdbc.dll
2013-11-04 22:41 - 2013-10-30 23:31 - 01394176 _____ () C:\Program Files\Samsung\Samsung Link\scone_proxy.dll
2013-11-04 22:41 - 2013-10-30 23:31 - 01435648 _____ () C:\Program Files\Samsung\Samsung Link\scone_stub.dll
2013-10-11 16:34 - 2013-10-11 16:34 - 00036864 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\JNIInterface.dll
2013-10-11 16:35 - 2013-10-11 16:35 - 00144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\ASFAPI.dll
2013-10-11 16:36 - 2013-10-11 16:36 - 00018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\MediaDB_Manager.dll
2013-10-01 11:09 - 2013-10-01 11:09 - 00030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-01 11:09 - 2013-10-01 11:09 - 00908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-10-11 16:35 - 2013-10-11 16:35 - 00521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.21\64bit\DMS_Manager.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 20:19 - 2013-07-23 20:19 - 00299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2014-01-28 10:37 - 2014-01-28 10:37 - 00741176 _____ () C:\Program Files (x86)\TuneUp Utilities 2013\avgrepliba.dll
2013-06-13 12:14 - 2012-11-14 22:22 - 00078456 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll
2013-06-13 12:14 - 2012-11-14 22:22 - 00386168 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll
2011-10-27 00:12 - 2010-07-01 21:41 - 00540672 _____ () C:\Program Files (x86)\Greenshot\Greenshot.exe
2010-01-02 16:42 - 2010-01-02 16:42 - 00098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2014-05-04 21:00 - 2014-05-04 21:00 - 00050477 _____ () C:\Downloads\Software\Defogger.exe
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00065352 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll
2014-03-24 18:22 - 2008-11-17 15:56 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\nsSign.dll
2014-03-24 18:22 - 2010-05-07 12:46 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PerformOcr.dll
2014-03-24 18:22 - 2010-12-23 14:17 - 00057344 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMISM.dll
2014-03-24 18:22 - 2007-03-30 11:24 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Qem.dll
2014-03-24 18:22 - 2010-12-29 18:52 - 00147456 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMCommon.dll
2014-03-24 18:22 - 2008-08-25 18:19 - 00069632 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PHooKDlg.dll
2014-03-24 18:22 - 2009-11-26 18:49 - 00081920 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NetFun2k.dll
2014-03-24 18:22 - 2011-03-11 11:47 - 00151040 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ScanModule.dll
2014-03-24 18:22 - 2009-09-09 15:44 - 00151552 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMANO.dll
2014-03-24 18:22 - 2007-03-30 10:49 - 00104528 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\ComClass.dll
2014-03-24 18:22 - 2010-11-30 17:42 - 00352256 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMTree.dll
2014-03-24 18:22 - 2010-10-22 11:01 - 00139264 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSet.dll
2014-03-24 18:22 - 2010-12-29 19:32 - 00614400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDB_N.dll
2014-03-24 18:22 - 2009-08-06 11:22 - 00421888 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\FT.dll
2014-03-24 18:22 - 2010-09-09 19:00 - 00061440 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMINSO.dll
2014-03-24 18:22 - 2010-07-13 11:48 - 00106496 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMProp.dll
2014-03-24 18:22 - 2007-08-31 18:51 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMVoice.dll
2014-03-24 18:22 - 2010-09-08 18:10 - 00073728 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\OutlookVBA.dll
2014-03-24 18:22 - 2009-11-27 18:38 - 00331776 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAppBar.dll
2014-03-24 18:22 - 2010-11-26 11:33 - 04583424 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMView.dll
2014-03-24 18:22 - 2007-03-30 11:01 - 00038992 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\NsOEMKey.dll
2014-03-24 18:22 - 2010-10-22 11:22 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSave.dll
2014-03-24 18:22 - 2010-08-03 11:44 - 00049152 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMOffice.dll
2014-03-24 18:22 - 2010-09-26 12:13 - 00430080 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPageVW.dll
2014-03-24 18:22 - 2010-03-02 16:09 - 00102400 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMDocVW.dll
2014-03-24 18:22 - 2009-06-26 10:03 - 00086016 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMApSet.dll
2014-03-24 18:22 - 2010-08-03 11:51 - 01036288 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\SlideBarDLL.dll
2014-03-24 18:22 - 2009-12-04 18:20 - 00323584 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMAnoSet.dll
2014-03-24 18:22 - 2010-09-26 12:13 - 00184320 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImgVW.dll
2014-03-24 18:22 - 2008-08-25 17:16 - 00040960 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMIEVW.dll
2014-03-24 18:22 - 2010-09-08 11:52 - 00036864 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMPDFView.dll
2014-03-24 18:22 - 2010-04-27 16:20 - 00065536 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMStatus.dll
2014-03-24 18:22 - 2011-01-21 16:05 - 00258048 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMScnSet.dll
2014-03-24 18:22 - 2007-03-30 10:57 - 00034896 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\Import.dll
2014-03-24 18:22 - 2010-11-26 11:45 - 00090112 _____ () C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMImageSplitter.dll
2011-09-26 12:21 - 2011-09-26 12:22 - 00034816 _____ () C:\Program Files (x86)\Google\Google Desktop Search\gzlib.dll
2014-01-07 18:23 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-02-11 21:29 - 2014-02-11 21:29 - 00093696 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00674632 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\libglesv2.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00093000 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\libegl.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 04081480 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\pdf.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 00390472 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll
2014-04-30 19:18 - 2014-04-24 02:33 - 01647432 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2011-10-27 00:12 - 2010-07-01 21:41 - 00024576 _____ () C:\Program Files (x86)\Greenshot\GreenshotPlugin.dll
2009-02-26 14:46 - 2009-02-26 14:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll
2011-06-22 12:46 - 2011-06-22 12:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll
2013-07-10 18:07 - 2013-07-10 18:07 - 00756888 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL
2014-04-30 19:18 - 2014-04-24 02:33 - 13692232 _____ () C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll
2014-04-21 18:10 - 2013-10-04 14:38 - 03560960 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:5C162581
AlternateDataStreams: C:\ProgramData\Temp:AD022376

==================== Safe Mode (whitelisted) ===================

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: Norton PC Checkup Application Launcher => 2
MSCONFIG\startupreg: FUFAXSTM => "C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe"
MSCONFIG\startupreg: GrooveMonitor => "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
MSCONFIG\startupreg: PMSpeed => C:\Program Files (x86)\NewSoft\Presto! PageManager 9.03\PMSpeed.EXE
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: Samsung Link => "C:\Program Files\Samsung\Samsung Link\Samsung Link Tray Agent.exe"
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: WinampAgent => "C:\Program Files (x86)\Winamp\winampa.exe"
MSCONFIG\startupreg: WrtMon.exe => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:
==================
Error: (05/04/2014 07:52:33 PM) (Source: Microsoft-Windows-RestartManager) (User: EWES2000)
Description: Die Anwendung oder der Dienst "Windows-Explorer" konnte nicht heruntergefahren werden.

Error: (05/04/2014 07:00:03 PM) (Source: Windows Backup) (User: )
Description: Die Sicherung wurde aufgrund eines Fehlers beim Schreiben am Sicherungsspeicherort "E:\" nicht abgeschlossen. Fehler: "Der Sicherungsort wurde nicht gefunden oder ist ungültig. Überprüfen Sie die Sicherungseinstellungen und den Sicherungsort. (0x81000006)"

Error: (05/04/2014 05:07:01 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (05/04/2014 03:06:50 PM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.18444 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 23220. Meldungs-ID: [0x2509].

Error: (05/04/2014 02:32:18 PM) (Source: Microsoft-Windows-RestartManager) (User: EWES2000)
Description: Die Anwendung oder der Dienst "GMX MediaCenter" konnte nicht heruntergefahren werden.

Error: (05/04/2014 02:16:38 PM) (Source: Brother BrLog) (User: )
Description: TWN BrtTWN: [2014/05/04 14:16:38.215]: [00005144]: Initialize TwdsMain Class failed!

Error: (05/04/2014 02:16:38 PM) (Source: Brother BrLog) (User: )
Description: TWN BrtTWN: [2014/05/04 14:16:38.215]: [00005144]: ##### Fatal ERROR!! Create STI-device failed! #####

Error: (05/04/2014 02:16:23 PM) (Source: Brother BrLog) (User: )
Description: CTLCN BrtCTLCN: [2014/05/04 14:16:23.777]: [00005500]: brccMCtl.exe: ErrorMessage.cpp (0241) : -------- error code is [0x00001907].

Error: (05/04/2014 02:16:21 PM) (Source: Brother BrLog) (User: )
Description: CTLCN BrtCTLCN: [2014/05/04 14:16:21.257]: [00005500]: brccMCtl.exe: ControlCenter3.cpp (0159) : -------- CCParameter::InitCCParameter() error.

Error: (05/04/2014 02:14:40 PM) (Source: Service1) (User: )
Description: Der Dienst kann nicht gestartet werden. Das Handle ist ungültig

System errors:
=============
Error: (05/04/2014 07:09:56 PM) (Source: HTTP) (User: )
Description: \Device\Http\ReqQueue[::]:80

Error: (05/04/2014 07:09:56 PM) (Source: W3SVC) (User: )
Description: Der WWW-Publishingdienst (WWW-Dienst) konnte das URL-Präfix "hxxp://*:80/" für die Website "1" nicht registrieren. Die Website wurde deaktiviert. Das Datenfeld enthält die Fehlernummer.

Error: (05/04/2014 02:21:09 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/04/2014 02:19:18 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht.

Error: (05/04/2014 02:17:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (05/04/2014 02:17:55 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (05/04/2014 02:13:58 PM) (Source: volmgr) (User: )
Description: Die Initialisierung des Speicherabbildes ist fehlgeschlagen.

Error: (05/02/2014 11:25:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (05/02/2014 11:20:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (05/02/2014 11:20:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%1330

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Microsoft Office Sessions:
=========================
Error: (04/04/2014 10:54:11 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 277 seconds with 240 seconds of active time. This session ended with a crash.

Error: (04/04/2014 02:09:44 AM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6683.5002, Microsoft Office Version: 12.0.6612.1000. This session lasted 17562 seconds with 6480 seconds of active time. This session ended with a crash.

==================== Memory info ===========================

Percentage of memory in use: 78%
Total physical RAM: 3839.3 MB
Available physical RAM: 824.2 MB
Total Pagefile: 3837.48 MB
Available Pagefile: 362.43 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:368.15 GB) (Free:96.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 009B94D1)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=368 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=98 GB) - (Type=05)

==================== End Of Log ============================

So - jetzt sollte alles angekommen sein.

Du siehst, dass ich einfach nur ein Anwender bin und der PC mein Arbeitsgerät - aber nicht mein Werkstück.
Dafür brauche ich Spezialisten wie Dich - danke, dass es Dich gibt!

MfG - ewes

schrauber · 06.05.2014, 09:02

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

ewes-Ltd · 06.05.2014, 18:55

Hallo Schrauber,

danke wiederum für Deine schnelle Antwort.

Ich habe versucht alles nach Deiner Anleitung zu machen. Es hat anfangs auch gut geklappt, bis ich alles in der Quarantäne hatte (es war ne Menge). Dann fuhr das System runter, aber nicht mehr hoch. Ich musste es mit dem Stick starten und die Reparatur des Systems beim Start ausführen lassen. Dabei wurden ein paar Sachen gelöscht -u.a. vermutlich auch das neu installierte " Malwarebytes Anti-Malware " mit der mbam.txt Datei.
Auf jeden Fall lud ich es neu herunter und hatte dadurch eine leere Quarantäne und schaffte es nicht mehr eine "mbam.txt" Datei hinzubekommen. Was ich habe, ist hier im Text zu finden.

Den "fixlog.txt" habe ich hoffentlich richtig erwischt. Ich habe ihn direkt hier reinkopiert, weil er nur kurz war.

Nun bin ich dabei den AdwCleaner zu downloaden. Dazu muss ich aber erst den Browser schließen. Deshalb schicke ich diese Meldung vorab, damit sie nicht verloren geht.

Vor allem steht hier unter HKU mein geliebtes "pokki". Somit ist es vom System als Schadprogramm registriert. Dies wollte ich hiermit weitergegeben haben.

Ich melde mich später wieder mit dem Rest der angeforderten Daten.

Danke - danke - danke

ewes

------------------------------------------------------------------------------------

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-05-2014
Ran by Wolfgang Dorn at 2014-05-06 16:54:38 Run:1
Running from C:\Downloads\Software
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

*****************

HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Pokki => Value deleted successfully.

==== End of Fixlog ====

----------------------------------------------------------------------------

Code:

ATTFilter

 Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.05.06.08

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.17105
Wolfgang Dorn :: EWES2000 [Administrator]

06.05.2014 19:07:36
mbam-log-2014-05-06 (19-07-36).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 269216
Laufzeit: 12 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 7
HKCR\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B} (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923} (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD} (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\SmartbarBackup (PUP.Optional.SmartBar) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\SmartbarLog (PUP.Optional.SmartBar) -> Keine Aktion durchgeführt.
HKCU\Software\InstallCore\1I1T1Q1S (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0B1G1O1S0V1G1F -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 6
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl|Default (PUP.Optional.SnapDo.A) -> Bösartig: (hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}) Gut: (www.google.com) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.MySearchDial.A) -> Bösartig: (hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 9
C:\Users\Wolfgang Dorn\AppData\Roaming\mysearchdial (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\mysearchdial\icons_2.2.15.1631 (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\52DF61C3EFF94660B4180F7061BAEB59 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\6B85B1F5E4AF49FE939DA622D0BC98B9 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\7266E99A87C545DABDE0B370DF972C5E (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\BD305D061C6245DAB258E91273FB26DE (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\C5C935EC94AA4729B6E55A076B22DFBC (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\E18D8970059E46D787C840DD2A44AC2C (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

Infizierte Dateien: 16
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\52DF61C3EFF94660B4180F7061BAEB59\dlm.exe (PUP.Optional.OpenCandy.A) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\mysearchdial\icons_2.2.15.1631\62.ico (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\mysearchdial\icons_2.2.15.1631\80.ico (PUP.Optional.MySearchDial.A) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\52DF61C3EFF94660B4180F7061BAEB59\Installer.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\52DF61C3EFF94660B4180F7061BAEB59\SnapDo_RBCB_p5v1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\6B85B1F5E4AF49FE939DA622D0BC98B9\pokkiInstaller.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\7266E99A87C545DABDE0B370DF972C5E\Installer.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\BD305D061C6245DAB258E91273FB26DE\dlm.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\BD305D061C6245DAB258E91273FB26DE\speedupmypcDE.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\BD305D061C6245DAB258E91273FB26DE\speedupmypcDE_p3v0.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\C5C935EC94AA4729B6E55A076B22DFBC\dlm.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\C5C935EC94AA4729B6E55A076B22DFBC\Installer.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\C5C935EC94AA4729B6E55A076B22DFBC\SnapDo_RBCB_p5v1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\E18D8970059E46D787C840DD2A44AC2C\dlm.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\E18D8970059E46D787C840DD2A44AC2C\Installer.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy\E18D8970059E46D787C840DD2A44AC2C\SnapDo_RBCB_p5v1.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

(Ende)

ewes-Ltd · 06.05.2014, 20:51

Hallo Schrauber,

und hier ist die Fortsetzung.

Beim letzten Hochfahren kam kein POKKI mehr. Ich hoffe, dass das so bleibt.
Ich muss leider das Ganze auf Dreimal schicken. Mal sehen, ob das klappt.

Nun kommen Deine gewünschten Daten - Teil-I:

zuerst kommt adw.cleaner

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.207 - Bericht erstellt am 06/05/2014 um 19:59:38
# Aktualisiert 05/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Wolfgang Dorn - EWES2000
# Gestartet von : C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board\adwcleaner.exe
# Option : Suchen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\FastDiscountz.crx
Datei Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\LiveSupport.exe_log.txt
Datei Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\invalidprefs.js
Datei Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\user.js
Datei Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\regsvr32.exe_log.txt
Datei Gefunden : C:\Windows\System32\roboot64.exe
Datei Gefunden : C:\Windows\System32\Tasks\BonanzaDealsUpdate
Datei Gefunden : C:\Windows\System32\Tasks\Dealply
Datei Gefunden : C:\Windows\System32\Tasks\LaunchApp
Datei Gefunden : C:\Windows\System32\Tasks\QtraxPlayer
Ordner Gefunden : C:\Program Files (x86)\AVG SafeGuard toolbar
Ordner Gefunden : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gefunden : C:\Program Files (x86)\Delta
Ordner Gefunden : C:\Program Files (x86)\MyPC Backup
Ordner Gefunden : C:\Program Files (x86)\RegClean Pro
Ordner Gefunden : C:\Program Files (x86)\SimilarSites
Ordner Gefunden : C:\ProgramData\AVG SafeGuard toolbar
Ordner Gefunden : C:\ProgramData\AVG Security Toolbar
Ordner Gefunden : C:\ProgramData\Babylon
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Ordner Gefunden : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\SpeedUpMyPC
Ordner Gefunden : C:\ProgramData\WinMaximizer
Ordner Gefunden : C:\Users\WOLFGA~1\AppData\Local\Temp\OCS
Ordner Gefunden : C:\Users\WOLFGA~1\AppData\Local\Temp\Smartbar
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\MediaGet2
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Local\PackageAware
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\LocalLow\AppGraffiti
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\LocalLow\AskToolbar
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\LocalLow\AVG SafeGuard toolbar
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\LocalLow\Delta
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\LocalLow\Mysearchdial
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\0D0S1L2Z1P1B
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Delta
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\DigitalSites
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\DSite
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Mysearchdial
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Solvusoft
Ordner Gefunden : C:\Users\Wolfgang Dorn\AppData\Roaming\Systweak
Ordner Gefunden : C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\PC Speed Maximizer
Ordner Gefunden : C:\Windows\SysWOW64\AI_RecycleBin

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gefunden : HKCU\Software\APN PIP
Schlüssel Gefunden : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gefunden : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gefunden : HKCU\Software\AppGraffiti
Schlüssel Gefunden : HKCU\Software\BI
Schlüssel Gefunden : HKCU\Software\Classes\pokki
Schlüssel Gefunden : HKCU\Software\Conduit
Schlüssel Gefunden : HKCU\Software\distromatic
Schlüssel Gefunden : HKCU\Software\dsiteproducts
Schlüssel Gefunden : HKCU\Software\f28b8de168ec44
Schlüssel Gefunden : HKCU\Software\filescout
Schlüssel Gefunden : HKCU\Software\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gefunden : HKCU\Software\IGearSettings
Schlüssel Gefunden : HKCU\Software\InstallCore
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Digital Sites
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DSite
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages
Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages
Schlüssel Gefunden : HKCU\Software\OCS
Schlüssel Gefunden : HKCU\Software\powerpack
Schlüssel Gefunden : HKCU\Software\smartbarbackup
Schlüssel Gefunden : HKCU\Software\smartbarlog
Schlüssel Gefunden : HKCU\Software\systweak
Schlüssel Gefunden : [x64] HKCU\Software\APN PIP
Schlüssel Gefunden : [x64] HKCU\Software\AppGraffiti
Schlüssel Gefunden : [x64] HKCU\Software\BI
Schlüssel Gefunden : [x64] HKCU\Software\Conduit
Schlüssel Gefunden : [x64] HKCU\Software\distromatic
Schlüssel Gefunden : [x64] HKCU\Software\dsiteproducts
Schlüssel Gefunden : [x64] HKCU\Software\filescout
Schlüssel Gefunden : [x64] HKCU\Software\IGearSettings
Schlüssel Gefunden : [x64] HKCU\Software\InstallCore
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gefunden : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gefunden : [x64] HKCU\Software\OCS
Schlüssel Gefunden : [x64] HKCU\Software\powerpack
Schlüssel Gefunden : [x64] HKCU\Software\smartbarbackup
Schlüssel Gefunden : [x64] HKCU\Software\smartbarlog
Schlüssel Gefunden : [x64] HKCU\Software\systweak
Schlüssel Gefunden : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gefunden : HKLM\Software\AppGraffiti
Schlüssel Gefunden : HKLM\Software\Babylon
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppGraffiti.AppGraffitiJS
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\d
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gefunden : HKLM\Software\Conduit
Schlüssel Gefunden : HKLM\Software\DataMngr
Schlüssel Gefunden : HKLM\SOFTWARE\f28b8de168ec44
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\angobeimajilfhlcpeiccndaifchnppl
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ieadcoanfjloocmfafkebdnfefmohngj
Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gefunden : HKLM\Software\mysearchdial
Schlüssel Gefunden : HKLM\Software\PIP
Schlüssel Gefunden : HKLM\Software\systweak
Schlüssel Gefunden : HKLM\Software\Uniblue
Schlüssel Gefunden : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gefunden : HKLM\Software\Uniblue\SpeedUpMyPC
Schlüssel Gefunden : HKLM\Software\WinMaximizer
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{022C9F90-2E96-47D6-A971-107650154563}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Wert Gefunden : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041

Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Einstellung Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Einstellung Gefunden : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Einstellung Gefunden : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=

-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\prefs.js ]

Zeile gefunden : user_pref("CT2481020.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gefunden : user_pref("CT3196716.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gefunden : user_pref("CT3201318.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gefunden : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=nt&installDate={installDate}&barcodeid={bar[...]
Zeile gefunden : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gefunden : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gefunden : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=hp&installDate={installDate}&barcodei[...]
Zeile gefunden : user_pref("extensions.mysearchdial.AL", 2);
Zeile gefunden : user_pref("extensions.mysearchdial.aflt", "dsites0202");
Zeile gefunden : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Zeile gefunden : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
Zeile gefunden : user_pref("extensions.mysearchdial.cr", "892923884");
Zeile gefunden : user_pref("extensions.mysearchdial.dfltLng", "");
Zeile gefunden : user_pref("extensions.mysearchdial.dfltSrch", true);
Zeile gefunden : user_pref("extensions.mysearchdial.dnsErr", true);
Zeile gefunden : user_pref("extensions.mysearchdial.excTlbr", false);
Zeile gefunden : user_pref("extensions.mysearchdial.hmpg", true);
Zeile gefunden : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czut[...]
Zeile gefunden : user_pref("extensions.mysearchdial.id", "002522A8D5DCED05");
Zeile gefunden : user_pref("extensions.mysearchdial.instlDay", "16124");
Zeile gefunden : user_pref("extensions.mysearchdial.instlRef", "");
Zeile gefunden : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Cz[...]
Zeile gefunden : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Zeile gefunden : user_pref("extensions.mysearchdial.tlbrId", "base");
Zeile gefunden : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1[...]
Zeile gefunden : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Zeile gefunden : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Zeile gefunden : user_pref("extensions.mysearchdial_i.hmpg", true);
Zeile gefunden : user_pref("extensions.mysearchdial_i.newTab", false);
Zeile gefunden : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Zeile gefunden : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.019:6:40");
Zeile gefunden : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&installDate={installDate}&barcodeid={barcodeID}[...]

-\\ Google Chrome v

[ Datei : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gefunden [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Gefunden [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
Gefunden [Extension] : oldchfemoapgakfjnmbngnljnkoapbhd

*************************

AdwCleaner[R0].txt - [18762 octets] - [06/05/2014 19:59:38]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [18823 octets] ##########

--- --- ---

dann kommt adw-cleaner SO:

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v3.207 - Bericht erstellt am 06/05/2014 um 20:09:41
# Aktualisiert 05/05/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Wolfgang Dorn - EWES2000
# Gestartet von : C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\AVG SafeGuard toolbar
Ordner Gelöscht : C:\ProgramData\AVG Security Toolbar
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\WinMaximizer
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
Ordner Gelöscht : C:\Program Files (x86)\AVG SafeGuard toolbar
Ordner Gelöscht : C:\Program Files (x86)\Delta
Ordner Gelöscht : C:\Program Files (x86)\MyPC Backup
Ordner Gelöscht : C:\Program Files (x86)\RegClean Pro
Ordner Gelöscht : C:\Program Files (x86)\SimilarSites
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Windows\SysWOW64\AI_RecycleBin
Ordner Gelöscht : C:\Users\WOLFGA~1\AppData\Local\Temp\OCS
Ordner Gelöscht : C:\Users\WOLFGA~1\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\AVG SafeGuard toolbar
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\MediaGet2
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\PackageAware
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\LocalLow\AppGraffiti
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\LocalLow\AVG SafeGuard toolbar
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\LocalLow\Mysearchdial
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\0D0S1L2Z1P1B
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Delta
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\DigitalSites
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\DSite
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Mysearchdial
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Solvusoft
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Wolfgang Dorn\AppData\Local\FastDiscountz.crx
Datei Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\LiveSupport.exe_log.txt
Datei Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\regsvr32.exe_log.txt
Datei Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\invalidprefs.js
Datei Gelöscht : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\user.js
Datei Gelöscht : C:\Windows\System32\Tasks\BonanzaDealsUpdate
Datei Gelöscht : C:\Windows\System32\Tasks\Dealply
Datei Gelöscht : C:\Windows\System32\Tasks\LaunchApp
Datei Gelöscht : C:\Windows\System32\Tasks\QtraxPlayer

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\angobeimajilfhlcpeiccndaifchnppl
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\ieadcoanfjloocmfafkebdnfefmohngj
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\oldchfemoapgakfjnmbngnljnkoapbhd
Schlüssel Gelöscht : HKCU\Software\Classes\pokki
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Pokki]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppGraffiti.AppGraffitiJS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\d
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\speedupmypc
Schlüssel Gelöscht : HKCU\Software\f28b8de168ec44
Schlüssel Gelöscht : HKLM\SOFTWARE\f28b8de168ec44
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C292AD0A-C11F-479B-B8DB-743E72D283B0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D40753C7-8A59-4C1F-BE88-C300F4624D5B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3004627E-F8E9-4E8B-909D-316753CBA923}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CC99A798-FD3D-4AB4-969E-6071612524F9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF5625A3-37AB-4BDB-9875-2A3D91CD0DFD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6F6A5334-78E9-4D9B-8182-8B41EA8C39EF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{022C9F90-2E96-47D6-A971-107650154563}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\AppGraffiti
Schlüssel Gelöscht : HKCU\Software\BI
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\dsiteproducts
Schlüssel Gelöscht : HKCU\Software\filescout
Schlüssel Gelöscht : HKCU\Software\IGearSettings
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\powerpack
Schlüssel Gelöscht : HKCU\Software\smartbarbackup
Schlüssel Gelöscht : HKCU\Software\smartbarlog
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\AppGraffiti
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\mysearchdial
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\WinMaximizer
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Digital Sites
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DSite
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Extractor Packages
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Zip Opener Packages

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v28.0 (de)

[ Datei : C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\prefs.js ]

Zeile gelöscht : user_pref("CT2481020.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3196716.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3201318.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=nt&installDate={installDate}&barcodeid={bar[...]
Zeile gelöscht : user_pref("browser.search.defaultenginename", "Web Search");
Zeile gelöscht : user_pref("browser.search.selectedEngine", "Web Search");
Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=hp&installDate={installDate}&barcodei[...]
Zeile gelöscht : user_pref("extensions.mysearchdial.AL", 2);
Zeile gelöscht : user_pref("extensions.mysearchdial.aflt", "dsites0202");
Zeile gelöscht : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Zeile gelöscht : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R");
Zeile gelöscht : user_pref("extensions.mysearchdial.cr", "892923884");
Zeile gelöscht : user_pref("extensions.mysearchdial.dfltLng", "");
Zeile gelöscht : user_pref("extensions.mysearchdial.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.mysearchdial.dnsErr", true);
Zeile gelöscht : user_pref("extensions.mysearchdial.excTlbr", false);
Zeile gelöscht : user_pref("extensions.mysearchdial.hmpg", true);
Zeile gelöscht : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Czut[...]
Zeile gelöscht : user_pref("extensions.mysearchdial.id", "002522A8D5DCED05");
Zeile gelöscht : user_pref("extensions.mysearchdial.instlDay", "16124");
Zeile gelöscht : user_pref("extensions.mysearchdial.instlRef", "");
Zeile gelöscht : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1Cz[...]
Zeile gelöscht : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Zeile gelöscht : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Zeile gelöscht : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1[...]
Zeile gelöscht : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Zeile gelöscht : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Zeile gelöscht : user_pref("extensions.mysearchdial_i.hmpg", true);
Zeile gelöscht : user_pref("extensions.mysearchdial_i.newTab", false);
Zeile gelöscht : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.019:6:40");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&installDate={installDate}&barcodeid={barcodeID}[...]

-\\ Google Chrome v

[ Datei : C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxps://isearch.avg.com/search?cid={9C7BD158-A1CC-45E2-9AF1-A19091FB914F}&mid=aa3b6dc9db7747d0a931d16c644c3c2f-ad1491be2ce6c122f6b66faa90e70c2decf7d34c&lang=de&ds=AVG&pr=fr&d=2012-09-18 01:15:54&v=12.2.5.34&sap=dsp&q={searchTerms}
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN28792758373243189&ctid=CT3282494&UM=1
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&AF=100482&babsrc=SP_ss&mntrId=d4eded05000000000000000000000000
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=119357&tt=120613_ctrl&babsrc=SP_ss_din2g&mntrId=D4ED00FFB0B7B035
Gelöscht [Search Provider] : hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate={installDate}&type=hp1000
Gelöscht [Search Provider] : hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dsites0202&cd=2XzuyEtN2Y1L1QzutDtDtByDtBtB0Azz0DyD0D0C0E0DtDyDtN0D0Tzu0CyBzzyDtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=892923884&ir=
Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYBCH&co=DE&userid=103c61e7-efcc-79fe-bf18-9aa80d4f162d&searchtype=ds&q={searchTerms}&installDate={installDate}&barcodeid={barcodeID}&um={UM}
Gelöscht [Extension] : bopakagnckmlgajfccecajhnimjiiedh
Gelöscht [Extension] : ndibdjnfmopecpmkdieinmbadjfpblof
Gelöscht [Extension] : oldchfemoapgakfjnmbngnljnkoapbhd

*************************

AdwCleaner[R0].txt - [19016 octets] - [06/05/2014 19:59:38]
AdwCleaner[S0].txt - [19664 octets] - [06/05/2014 20:09:41]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [19725 octets] ##########

--- --- ---

und jetzt noch FRST - die neueste Fassung:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2014
Ran by Wolfgang Dorn (administrator) on EWES2000 on 06-05-2014 20:58:04
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Copyright 2013 SAMSUNG) C:\Program Files\Samsung\Samsung Link\Samsung Link.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Google Update] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
U2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
R2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:00 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-06 19:59 - 2014-05-06 20:13 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 17:04 - 2014-05-06 19:44 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 16:38 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 16:38 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-04 23:57 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2014-05-04 23:57 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2014-05-04 23:57 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:05 - 2014-05-06 20:58 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-06 20:50 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-05 09:22 - 00044948 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-06 20:15 - 00000646 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-06 20:15 - 00000952 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-06 20:34 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-04-28 19:12 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-10 00:13 - 2014-04-14 22:56 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log

==================== One Month Modified Files and Folders =======

2014-05-06 20:58 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-06 20:58 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-06 20:50 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-06 20:50 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:37 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-06 20:34 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:28 - 2014-03-19 02:42 - 01306184 _____ () C:\Windows\WindowsUpdate.log
2014-05-06 20:26 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-06 20:26 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:22 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-06 20:19 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-06 20:19 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-06 20:16 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-06 20:15 - 2014-05-01 21:07 - 00000646 _____ () C:\Windows\PFRO.log
2014-05-06 20:15 - 2014-05-01 11:42 - 00000952 _____ () C:\Windows\setupact.log
2014-05-06 20:15 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-06 20:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-06 20:13 - 2014-05-06 19:59 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:44 - 2014-05-06 17:04 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 19:44 - 2011-10-04 21:56 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-06 19:44 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-06 19:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-06 19:41 - 2013-09-19 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-05-06 19:22 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-06 19:17 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-05-06 19:17 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 18:49 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-06 00:37 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-06 00:13 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-05-06 00:12 - 2012-07-12 18:34 - 00640000 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-05 21:07 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-05 16:25 - 2014-03-21 00:59 - 00008192 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-05 09:22 - 2014-05-04 19:09 - 00044948 _____ () C:\Windows\iis7.log
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 19:09 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 19:09 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 21:24 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 19:12 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-28 19:12 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 22:11 - 2009-07-14 07:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 11:26 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-14 04:24 - 2014-05-06 16:38 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 16:38 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe
C:\Users\Wolfgang Dorn\ZipExtractorSetup.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\Quarantine.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 17:01

==================== End Of Log ============================

--- --- ---

Ich hoffe, dass Du damit weiterarbeiten kannst!
Im Moment bin ich schon glücklich, dass POKKI mich verlassen hat ??!??!! ... auch wenn ich evtl. etwas zuviel gelöscht habe beim AdwCleaner. Wir werden sehen, was dabei herauskommt.

Alles Gute jetzt beim Überarbeiten. Ich bewundere Deine Geduld! Danke

MfG - ewes

ewes-Ltd · 06.05.2014, 21:00

Hallo Schrauber,

hier kommt Teil II und somit

der erste Teil der JRT (ein bisschen lang geworden):

Code:

ATTFilter

 Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Wolfgang Dorn on 06.05.2014 at 20:33:29,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{27DE7D30-BCCD-44D1-ADCB-A74A4259EBEF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3A0EFC4E-F167-4D0E-9C24-FC5519237993}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{65DEE40A-3E93-4CAE-9F98-B8E06DCEE2BF}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1710860145-1155721231-3359118018-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65DEE40A-3E93-4CAE-9F98-B8E06DCEE2BF}



~~~ Files

Successfully deleted: [File] "C:\Users\Wolfgang Dorn\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"
Successfully deleted: [File] "C:\Windows\syswow64\wscm32.dll"
Successfully deleted: [File] "C:\Windows\syswow64\wscm64.dll"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\drivergenius"
Successfully deleted: [Folder] "C:\ProgramData\fighters"
Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\Wolfgang Dorn\AppData\Roaming\fighters"
Successfully deleted: [Folder] "C:\Users\Wolfgang Dorn\AppData\Roaming\zip opener packages"
Successfully deleted: [Folder] "C:\Users\Wolfgang Dorn\appdata\locallow\myashampoo"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{00D8F10D-2853-4B52-9DF6-F77660F35102}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{01684C11-B6AB-47F1-BBB9-7D55387ED889}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{01996898-9C5F-445D-9405-4043A5877FC4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{01C26473-ABA0-48A6-9E8E-838351CA5274}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{01CDBEB1-7D01-4695-A950-5754B3298BA0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{01D3844F-445E-4876-9A3D-F7962661FA3C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0280F415-D81B-4369-8695-BAEEE681EBC0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{028A6782-08D6-49B7-953A-8852C7601E1A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{02C00699-4449-4FEB-BF07-889F735A7206}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{02E122AC-650D-455E-B301-83A82ABEFCD1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0337E862-F767-4BD6-8E94-7FE4734B7F19}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{035EE3D8-9DB5-408C-A206-107B2D3567F7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{035FD11F-C7CC-4EC5-9E66-0D8BC400905D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0389AF72-9CDA-4F1B-AA61-71313521F49D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{04288F74-C8F8-48EE-ADCF-3C960F8E5967}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{046EDBAF-C953-4E26-A2EF-D85B310B0C70}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{05226BBE-4628-4083-9A03-1337F722CA95}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{053F905C-E062-4A6C-9D4A-8DE7DB243C3C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{05583ED6-2AE9-4074-8240-75DF5E2D268A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{056589DF-A779-48DD-B6E7-AD0C5A38CDE2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{059A5222-A790-4839-89B6-32CC2AAC50F8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{059CE7B8-A926-42B7-891D-2F52A35168B8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{05EBCB24-EDE6-4823-8DAA-E0B00C7DE3A7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{05EE8F92-73E3-4A72-A38E-B21E48B00188}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{06280EFA-30E2-4F2B-BBF9-4AAC825FD3D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0666B28D-CF3D-4F64-B39D-6C24123FF5AE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0678076F-28B4-4546-B045-1CAA2E521E61}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{067FD3D9-7AFD-442C-94D4-F9983F6E60DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{07559FCB-34B1-471E-A078-C28D326D4F63}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{075D994F-3BDC-44CB-89D8-F6A06E3EDD9C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0783A842-43DE-4480-9E1A-1EA85F957FC7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{07C37138-95F8-45A6-AFDE-4EF1A164AE81}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{07D16804-5FF1-4424-926B-E44A952A7FE1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{07F91205-0178-4C3A-A914-9FCFC3AFCE92}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{084B868B-5C1C-4CEC-89D7-412D1CFF33AD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{08D792AA-1F10-49DD-B3F7-E1E0173058A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{08F18136-B5E3-4E79-A1F1-9F7EE7D968A2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0924792D-84B1-40F1-B19E-B2B4F3307130}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{096D1151-31FC-4F01-B6EE-67A37B65E7EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0985AD87-078E-4084-965B-08917750C2B2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{09B7E3F9-E664-4EE2-9EB2-818542F108A3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{09E817D6-D0D3-4B07-B011-3A153CF21ACB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0A139BD6-F282-4E91-AB90-7B8C105A7C85}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0A29AC0F-80DC-4B22-9412-CD0DE76D235C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0A2DA335-257C-4013-8C66-09201824C863}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0A55C742-64C4-46F6-9577-F79EA84CD88A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0AC0CD15-EF2B-4D8B-9A9A-3A92E7B2CE4C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0AFFD4E6-630D-4CBC-8339-843D7DD4E699}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0B05F528-7B70-4B39-8B4E-9CAE9906277F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0B1705FD-082B-4339-9019-945610D6F60D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0B30E0A5-CDE9-4B90-8154-0167A8BD8BDD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0B3C4223-0B25-49D8-8F84-553E5B484E2C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0B5F222A-C41A-4F1F-A7E2-F9985F5CC9C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0BB858A1-22F6-4D75-ACCF-1CA32EBB6C4D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0BB9A661-13E7-485B-B15C-A10D3A6604A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0BC300C0-CF19-4A48-966F-E148FB098DDC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0BC7E581-ABC2-4956-BAAD-8FDB5171A9CC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0BE6C588-D719-4EB8-BB57-D6147F8A9924}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0C2C8C54-265F-419C-9DA2-996C6F01A1DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0C4E9177-81A9-4DC4-8F36-C27A2AC7C33B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0C87EA2C-770E-495E-884E-F55C80391E5F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0CA4E085-891B-4BB5-A20B-4C993914B1C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0D36F602-BB24-463A-83C7-EFF72D5F6B9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0D446919-52F8-48FE-844F-A5641E9B1E89}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0D63D4AB-912B-4319-9B1A-1D9F11ABC292}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0D6558D2-10E7-4F44-A4E6-121046A2081B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0D8B36FD-DA52-4C19-ACDA-3BC619CB9D30}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0DAFDE71-361D-485B-8DF0-6BD6253B8E43}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0DC81665-8F4A-458A-A7D3-A408DDA2AA2A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0DEA60E2-8D53-4BD2-BD0D-1DD2E4519AD0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0E6F8CB9-D2E2-408D-A111-D80EA42274C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0E9688BA-5D2A-41F9-9BD0-BF1F614878C4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0E9DF42D-99CB-4328-98D0-E3FEB2D849A9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0EC927ED-F198-40A8-A85A-50CDEB033468}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0EDE9ECD-E023-41B7-A4B0-B778AE12381E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0FA3C846-A30C-47F5-8253-A58F9AED6566}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0FAE1450-3971-4715-B550-74E84AF47335}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0FBC6C27-A148-456B-88D8-9194594B5316}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{0FEB32D6-76B6-4C9C-9731-DD0CEEEA52FD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{101F058B-54CB-4F2B-98C3-AB13A6C6150B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1026BF09-2537-4EF4-9772-0E027DA69402}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{105AC5AA-F571-4B0D-9B34-D81631C6C967}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{10640594-4461-42AB-9840-7696AE4F1E65}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{107298BF-D0DE-4C91-BC93-8E871DFDD68E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1104EA65-DA67-47FE-919D-5DE8CC7A6DCC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{110850EA-D350-47B2-91C7-6770B266DCC8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{116D875F-9216-47A8-8495-9C1B9187B7B0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{11E865DE-F179-48BE-AE28-1293B5EEF885}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{12033F45-8798-43E8-AC74-301962E6F112}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{123D0B99-4C40-4A4F-860B-D7A7D87BC305}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{12D68995-E5AD-4656-88F2-EBC52846CD9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{12D76460-70C7-4861-A64F-40FAA73546AA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{12E9CBCA-36CA-47D4-839B-EA60E1BF9312}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{12FC7B94-9FCA-4D49-BCDF-E172430D4D1C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1332C4AB-2BD3-48C8-89C8-EE617F5C1E33}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1338A82E-A2E9-4272-B873-855607B4AE1C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{13D25947-8488-4061-9B27-2B04D9423681}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{141D07E0-3B9D-4682-B010-9DBE03B01D26}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1427EE2E-D1AE-43CB-B228-EFE4FE76D5EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{146859DB-87C3-4E12-9DD3-862D529707DD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{148ABCE1-F366-4ADA-B66C-10BABB06AE0A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1490EE7C-5565-4FA0-8549-2EFB2B62799F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1492224B-1CBC-4E66-80BE-B7ED2CFF3FF2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{14C04FD2-2917-4394-BD6F-FA28BDB91624}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{14E7E983-F7D0-46EF-962D-7683349D8DB2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{15209FE8-4E06-4C9C-98A0-2AC625AC31B5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{153E4BC8-E524-4D6C-84D7-70D6B040BCBF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{157E9046-C363-46DD-9DD3-06AC9844CBDA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{159B9337-7082-4456-B433-1CB793D501FF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{15A41DAC-D725-4CDC-AB85-710D30FA082B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{15F59EF1-629F-4AF3-9750-F75370F46ABC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{16591053-6DE5-4654-B9BD-57D19137F2E2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{165ABB71-96AE-4683-A20B-4EC009A2ACE7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1710FD5E-228A-4ED8-9CF4-16750CD87FDC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1788726A-104A-43D5-9787-EEC7457E96BA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{17E9768F-3D0E-4AF5-B01E-44A3893CC82F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{18265B83-5274-41F2-BC89-E72BE43C7C5B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{183A470B-0BD5-4197-9E40-32BD1EB4BA5C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{187F0EE6-C59C-4AD8-9220-6BAC85140973}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{18834ED1-0390-48F8-BFC9-0AA91AEA7622}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1897FFF4-6E66-40FC-94F5-3732EE3A002F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{18A5B558-AA7E-4D34-BD12-C6E86457FDE5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{18B50633-8698-4C5E-AE56-DF74B2507BFD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{18BCD383-8AC6-44A4-B6EE-014012A77684}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{192D8B04-C303-4BA9-8DD4-8D5BCFEF7866}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{194F4CD8-2057-41F1-AB41-E694434A716F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A210B9A-8FEC-44A5-B337-D3DB7DBC2E4F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A4AE535-D12B-4B3F-B2DA-C6E9B7D72688}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A649BF3-4EC4-4E75-9700-8CA191DDB737}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A78F60D-5A74-4994-A20D-33A1A2ABB898}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A8550D3-AE95-4035-BDD7-44715C644F47}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A8D483F-611C-4FE8-BFFD-3C23CF1E4321}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1A956D5E-81B6-44A1-B0A7-ACDCDFEF3FBE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1B44601C-74B0-4DE6-AB1B-432E62777CCE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1C16C0A3-44D6-4785-A03E-15F5A651073A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1CADAA4C-3BD3-40BB-B386-64A2E32AD9F5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1CD59D40-B899-4C6D-98E2-C69689C4D0F1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1CED8AFB-C187-4BF5-998D-8312B6A14F11}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1D651C2C-0B1F-4B39-A400-58E59CDB8A1F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1D883739-1272-40A0-8D9B-3360907307B7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1E4919E7-B126-40F1-8468-18A89C5DB1B7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1E59E5F6-3C3C-445E-BE6B-CD44B7D71A3D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1E950AC1-4B5A-4D4C-903E-7EC211E043D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1ED7EF58-1D76-4234-8F12-39CE9B21066B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1F5949EE-0DFA-4880-BAFC-D0F80B584CD9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1F8CD4FF-7CE1-4DFD-8612-F60CDC77604F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{1FCE1269-5884-4F53-8C1D-D48B0E47810E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2011381D-3946-4653-A343-0CDCD392225F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2018DA5A-E5E6-4F57-AC26-FCDF96800C77}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{20277574-E596-4AC3-A9B5-31711204F866}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2028B495-DDE6-4955-BB22-A452B8428967}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{205AB305-9387-4BF2-9AE4-2CF84B2617B1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{206F9D83-9A19-4E02-AFF3-B56FC5F6EB6A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{20830129-419E-47DF-9453-4386B8D5805E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{20D9E3D1-6AC5-4647-A6F6-40201790BD0A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{20DF6252-B687-4988-BCF6-9AA86DD639A4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2108A273-2B3D-4D4A-BAE3-D2434818B37A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{212EC5A8-EE92-4220-8098-C774D23B9170}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2131AC02-3D55-4344-85E3-5D836D33CEB7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{213F9E6A-CDC3-41B1-8ECF-A5586923294F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{216C2560-E1F5-41E0-A3A8-5B9B323AB310}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{218A55EB-D6BD-42CE-A550-86E49E45B411}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{21A985C6-13DF-4CF0-816D-86EC1DBF488D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{21D596AA-51E6-40C6-A7EB-E4E8EBE396BF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{21E10179-0E6C-4F11-A489-C11140BBC3D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{21E5C29B-7F5E-4E72-B190-E06D5D7249E1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{21F8ED81-AD68-4974-940E-B95A218A474A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{222A22F5-023C-4ABF-AD30-C5F9383EE3E6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{222E2CD4-984D-4418-A523-951C1CB65F8F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{227090E8-DC12-433F-9A5E-B39D514632AB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{227EC9B7-DC80-431E-99C7-FF6E7A7CA171}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{22893BF2-2C85-4C86-A1FE-D3FD0B4CD3A3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{22C210CF-4C6D-462A-83B4-73E704A74A68}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{22ED8291-8B7D-42D1-8D87-86DF418FE451}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{23FF6CAC-236E-4B37-A7DC-FC49B8667FA7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{24184302-E4CC-4426-B954-30973B9CBDD4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{24210AB2-BCC9-4963-B367-C0F24CA3F4EA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2431FB9F-0B9E-468F-8DA7-04A54DC09580}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{24DB950B-62DC-43A5-AC26-46F60EEAC6DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2516C9E6-BA6E-4B45-BCD6-FB57629975C8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{251B7F6A-07A9-4146-B12E-FFCDA4E6AEF5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{25284B8B-56BC-4219-BA07-A572AB389054}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{255CB03E-A75D-4634-B3B4-00E002F26DDF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{25610582-9C59-46D6-83BC-3896B42410FF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{256846B9-4ACE-4F2F-90DB-5FA9E5DCF076}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{258F9E69-3A3D-4389-AB31-48B091670038}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{25917208-02DB-40BA-A53C-DB03B68BB4F6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26087B59-4719-428B-BC47-A59BECE38344}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{260BBD82-FD35-4B58-8CC4-BA02D5DC2BE6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26267D30-DF13-4126-93D1-88894CBE8042}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2633BC86-4968-43D2-B640-4076C9910CBE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{263DE6C4-C2A5-4869-B925-4B0E310AC3E6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2662EF9D-A811-45C9-9435-E14D9DE176CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26856864-F5E8-4EA9-B078-BD6AC8FF3044}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{268A304F-57D7-480B-ADDA-E6F2F5E41078}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26C7AC58-1B5D-4ABC-8D29-8F56299B36E2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26D1CB0A-FC7F-4172-8670-1BB4C20EBF45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26DB78FE-6631-4C95-8157-18DB0CBF1002}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{26F953C8-68B2-44DC-9D13-6110070D8005}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{272A8C76-B799-43D7-900A-A0510679A794}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{27648206-C17D-48C3-8E8D-46759292F02A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{27761976-B750-47C8-9F39-1A7ED92EAA06}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{28119CF5-E610-40C0-BE77-B9C7FF37F92D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{282E5295-0CD8-42B5-A208-A26350C343B2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2848E6DB-5203-4C5F-A05C-99714D460ADD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{284E8BB9-5A4C-4D0F-BBF9-90236773962A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{28DCED7F-50E0-49CF-B82F-83B9BC516BAB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{28F031E7-D97F-4EAB-98D7-1AC2A41D6873}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{28FB12E9-AA9F-4981-A648-A3113B987D6B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{290C8337-79AE-4AD1-8D97-657CF2D470BB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{29670F80-C360-487A-B789-F4DDF1A13FDA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{298FAE32-C372-490C-9763-3CA3DCEDC7DA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{299F4A7A-32A4-4167-ACF2-F64D1447F33B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{29D7222F-CD2A-4288-A91B-7EE8F7F20E2C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2A077A09-FF66-443A-AB56-C932ED02A7E4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2A3C91F8-5B97-4DFA-BF97-5BA307375056}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2A674D3E-AF98-4406-957D-C8014C0A2AB5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2A88515F-FB25-4955-A9AB-7C65F3528696}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2A96693B-0B7D-4FE5-8427-F9DE8D9F4D2F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2AA2C70B-2B01-49D2-868B-BE82540D1E4C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2ADE3BF3-9495-4253-8A5B-A4437C40FA76}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2B0F4F50-31B6-400F-814C-B7FE19D4B902}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2B0FAB4E-0775-4E0B-8E86-88B3D88B69E5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2B2F8212-083E-4FF5-AF81-E961251C2374}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2C0A6B61-E94F-4E85-BA4B-83D9354A2674}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2C294787-6497-4095-AFE3-1E5358E5B6D2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2C351175-1806-4928-9B98-F0D1A11CA7B2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2CDEF5D8-3F46-450E-9292-BD7402481515}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2CE0EC81-7545-403E-850D-578C61AC0624}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2D3394BE-73A6-4C68-BA62-45081D98BAFC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2DA01A69-3132-4C4A-BA6B-9A8151B7BDA0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2DADBDDF-AA0D-4B83-9F17-AD3C958F68F9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2DE1A772-7147-4B0E-86F2-C95C3396B56B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2E7542AB-086F-4501-A37F-D53CC50BA757}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2E7E6F33-E9FF-48FD-8FEF-33B119F1FB1E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2F0974A7-3D1E-4EDA-9A88-6083EA34DB8C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2F2EB8F7-7FB2-4C00-A9B6-44D14A1953DC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2F3D1B22-69F9-4EC0-8D03-26ABFD7C8C97}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2F5B2384-2478-4676-AAF8-091D3C979AFE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2F9CB422-9C46-42E7-A14C-4BCD2ECB774C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2FBCF42E-E4B9-4093-AA69-8D1811FE0EB0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{2FDDE0D6-329C-4B33-9D5C-FF286137ECCE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{300035E4-8074-447E-B7A6-109BC2EDB343}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{30181183-05DC-4E0F-BF2D-24BC0B0C61E7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{302558B1-6C1C-4627-A6CF-0DEED1D5F444}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{30650DC3-A867-4364-B125-29892277D845}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3065D8BC-B19A-453B-924A-36F6670F8209}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{309FB5BA-DE56-4791-A216-83ECB08A1BB9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{30F851E0-856D-45E5-8250-383660DEAF3E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{31582D4D-680C-4A69-B22E-B6B2E5AADFE0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{31F28EF0-233A-4DBF-A1B4-008FD326A332}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{31FCA85D-FF57-423D-8947-81C8ADB1F602}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3221EE00-AB0C-4490-BBF3-A9D19A72FF33}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{337D8042-3F88-456E-9EC9-1259EAF46477}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{33A1E5FE-7433-498A-9DE6-BACBC096E41C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{33C6B2A4-D8A9-40C8-A8EA-0E2DEEC71508}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{34004455-9130-48B2-9E0C-5F9EBBC533B8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3411D7DF-D62F-4D08-A9A7-07C988AB1BD8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3434030B-8867-439B-844B-C19FB934BCBD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3434A066-55F1-45BA-BA68-A4E604436B18}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{34506366-87E4-4718-9B12-97BE1172F58F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{34B8A262-954A-4BCC-BCED-E4BB6F591F85}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{35287F01-819B-4A88-B568-59DE7A6B06DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3562C452-DEA2-4FFF-AEE3-3A50B8A241BE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{359130EB-081B-4F99-880C-858F729F5B35}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{35928132-AFB4-49DF-9070-5A8FC54FB49B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{35CD314B-45BD-4546-B26A-70B42331581C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{35E10D45-2253-45CF-9C51-16F35469D2E8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{361C50D4-8D0B-4477-9A73-EF105CB3A09C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{364C24E3-FAEE-42FE-BF53-1DCF6D5FE430}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3669E34F-76DA-4333-A9F9-F5478A291AC0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{367CA96E-6813-40D0-AF8B-9FC03C770587}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{36816074-5530-45B0-99C0-2FFB5F959F3D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{36981507-3A4C-4D8B-BD7A-A37733F49B8E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{370041DD-6FDC-412D-9A2E-33BDE85FDFC2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{37FE157C-A152-4B8D-95E0-6CA3F592A84E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{382507C1-42F3-43E0-8653-7F849CEA9E2E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{38598829-F243-427B-94C0-0733EC5FF13F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{393FCCEA-81B7-4641-BBE4-A4B2FCBB685B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{39666A35-CE61-4D1B-AF47-19B0EDB23FCA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{399ACF0B-E771-4B80-9C32-F35164ADA72C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{39CDC625-083A-45F5-BCBF-FD7CE7FF334E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3AC7E840-53E9-4CBF-9EE4-9D5D86E6340C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3B3427FA-BB6E-43A2-B9F4-EE4399A02083}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3B34C760-E231-4607-93A3-3255B70E4889}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3B36FA12-63DB-4762-87F7-4299CDB4E1DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3BAD0D62-1C49-4E6F-BA7B-BA3D97046584}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3C3DC829-A60C-4D48-A099-994064F5AA4A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3C78463D-4C7B-40AA-9DD9-3E7848BE0DFE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3D1DD4BE-4C0C-4C0E-83D5-6100B6399653}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3D87BA0A-4350-44EB-994D-B1BE020A2ED3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3D89FD3E-9975-4498-A69A-1D8F30352268}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DAC4E03-DFCD-444B-BFC9-86EE7CDB71F2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DB30945-A27C-41D3-B438-03E52A9D63F8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DC87798-F604-43E0-9651-7B022AD22DC4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DCF365A-0B5A-4A3F-A533-FFC03C974A1D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DD8ADAD-F7ED-4E79-A362-699689C888C9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3DEAA237-211B-4CE8-B95E-DE6BC71AFFD0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3F2E0580-729C-4967-82AC-6CDEE9028886}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3F7417FF-C807-486E-8332-1400A4ED93CE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{3FA7CAFE-F424-4701-9420-C2EF2733C42C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{40782AF3-819F-47A0-804A-325C1AE3E0EA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{40CA492B-1E42-430E-8F5E-695779BB87D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{40F36606-1291-42C4-821F-605F7645F6EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{410176FA-FDE3-49D7-92AC-F728173EBD59}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{41212F6C-DA41-4053-95BF-5F1D4740E056}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4178F1D7-8855-4149-9E4B-75B7A4D943F2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{41A65FE2-9DB2-40A8-BF1B-CD0EBF09B7CB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{41D0D067-3FFA-4744-9113-9E2605D00C5D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{41D28B16-E6DF-4482-9417-79B0B264782A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{421FBEDE-FB16-4207-AA3F-7EB3C9CFCF8F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4228738F-BA73-4B75-AD72-90139BF8C562}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{42A6677E-1170-491D-A45B-44FF571DCD8A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{42A741FF-8E4C-4606-B380-144243B501CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4316CE3E-7FAB-47EF-BC46-403A0243340C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{43241108-F155-4BE3-8A9C-E7CC3F855887}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{43BB4859-84C1-44FC-B352-D437228C9B74}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{43F00F0D-1560-4911-9C65-8A5F1C5470E9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4443AC8F-53A8-49BF-9B9B-DF0A25729124}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{444977E9-F822-4C3E-98E7-2EC0F854ACB7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{445E6F6C-4FD6-4129-9FD5-D5EF5E1CB434}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4485CA95-0CE0-4122-91C5-376F99483DA8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{44B34319-E5B2-43E2-BB96-ED8A6031146A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4520644C-9AFB-47DB-8776-06DB8BBB6879}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{45422BB5-8058-4B07-ADA7-C917207508C1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4599B14F-071D-4C8B-A473-B600F890E27B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4602C141-68AD-4489-B9F0-AAE71AAA303D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4625B8B2-21E2-444C-A057-B9197AA660B3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{46836298-647C-4679-B8F2-17C28F18E14D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{468ECFA0-E6C9-4EDC-9D80-ADEBF24FCE11}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{46DF8B89-88F7-4841-AF1A-56CDAB21E741}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{46EA7A13-D41F-4E73-B98B-826238BBBD73}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4728ED0B-E9A2-461A-8E44-A0F1FC4201ED}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47784EEA-A53F-465D-8258-B546A4F547A3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47965954-C8F9-4389-A4C4-ECE62D412D3B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47B642AC-3724-40D3-8BE2-B04F4BBBA50E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47BB1485-18CB-4C16-8241-082B08E59D65}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47DD264E-85BB-433B-9F0F-11AF65BBD34C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47DF897A-E77B-4675-8783-A6B9D89040F9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{47E5EC02-FCBE-4F61-B142-BB0143BD617D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{483D1317-641A-4803-A338-6693B0E03608}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{488E86D0-D81B-4EA0-993C-557F994F315C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{48B76414-C763-4EF8-B3CC-A23EE6865A2C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4909C882-FDFD-4314-9B99-D9EBC7EF7F9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{49523C5B-757B-493E-B3D2-4E06EB3872FC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{495789F7-33B2-4AF3-9F48-CF1991538147}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{49E17099-0949-4BEF-A2B6-552C8327626E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4A31720A-8F46-4C9B-B613-FB8456EFB633}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4A588C8F-2B63-49E7-A2DF-45C37C344B14}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4AAAC2EF-BF8C-46F7-BEAF-E9D958908D6D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4AF80967-8E47-4D5F-B581-AE3E70E07471}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4B3C523C-59F3-4D3B-92C7-DC6EBE52F641}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4B40F0B2-6131-41CF-949D-45B7071B8C28}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4BEDDAF9-47FB-4743-999E-0BBBEE24C15B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4C53A049-A147-4436-B147-3471B274853B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4C67FE82-79F9-45B6-BE78-4A0073B698F4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4CC41652-C7A0-4F00-97DC-E548B6397CF3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4CE1D46A-4604-4334-B845-67CDCAA2A8CF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4D179567-B464-4831-B85D-1D23C99C86E0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4D3DAC2C-79C4-4F63-B58D-E0F83C5E5DD0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4D95B683-DD52-4C34-A912-64D2C4D24AEC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4D961351-38BA-414E-9C78-A0D6D04C7D8F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4DC003BC-A136-4B79-A5C7-925FF4403EEA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4DC77E6D-3472-4B13-87E2-E345C0F89410}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4DE125E7-A890-46D2-A183-CACAC45025DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4DE1889B-CC62-42FE-A76D-E2EC5ABEC799}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4DE5CB22-43AE-4960-9760-A5ABC38419D9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4E2662CF-CF39-4ADA-B433-5CB6F770372B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4E6C4954-DE7B-4C81-A0D5-42531ABA2323}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4E8C181C-C1BD-4750-B95B-9ABE3E0BEAAD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4EBCEA38-EA8A-4508-A493-FEB2080A43C1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4EEA8942-4464-401F-A97B-167DEB308369}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4EEAB56E-D324-4BFF-9E83-65E400D575FB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4F07240A-5036-4DED-9960-C7079564C852}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4F3FB89B-9060-47BE-9EE4-4A7A33776CE4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4F5E8428-7DD0-40FC-B88A-D404C20BBEE0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4FE15C0A-12AE-4EE1-88D1-926C7765D605}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4FE22C84-1A06-4757-8427-DAE6132BC96B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{4FF4761B-B617-4DE9-AB05-DB62C8661A6E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{505656B0-0AB8-45DC-9DF4-A46FEF0B607C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5076378D-B8E7-4508-BE4D-19737730D5AC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{507A12CE-2FAF-4789-927F-509C747CF9BC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{50B1DD92-E5F0-4446-AA3A-7EB8F89D9E8D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{50D85A5F-2EFA-4585-91AF-AB84D212601B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{50E45965-C3AD-4F06-824F-CD56BE3C61A3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{50F50FA1-F941-4487-B02A-8B2819FF8CFE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5169DA76-7EFF-4D1D-9B01-72E3FAF3BDF9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{516DF9FA-4C4C-4480-B65D-012D4B00D94F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5172158F-B578-4368-A34D-35441717B50A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{517ED646-AA0A-4DE0-824F-EFA2ABE0F0B3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{51A315B0-046A-4B1D-9ACF-F409F193254E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{51ECC889-D6D9-4805-9156-8C218DBC54BC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{524A4055-CAAB-45C6-B567-0FBBE8B3C307}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{52547002-A578-4951-B645-CF3C968BB045}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{527D55AC-C916-46D6-AD0A-08C5E525DBB6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{529E5AA4-99EB-4289-8A24-155E040E221A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{52A2C027-ADDA-4E7D-8118-C585F7287472}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{52B7DA4C-91FE-4C5C-B037-6E04D99756D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{52E1256F-4A7E-4576-9016-4A0F4FD0F96A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{533555D5-EF86-427E-9016-08718A32021A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{53ECA47A-67E4-4F53-8E0A-719F6FFA1472}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{547896B4-11B2-40B3-86D6-578031F93C64}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{54C5CCC1-0ABA-436E-A7B4-B703F40A54EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{54E875B3-E657-4580-89F4-53D2D2305450}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{55003A3E-8CB4-469D-AC35-8407B1DB06AD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{551797AD-1953-4A15-9693-5F3C030E8534}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{554C88A2-D058-4BA9-B8E4-1B96D31C5E20}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{55A8AC48-4C2A-4D0A-846D-4BE13AB4F8B8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{564985C0-F620-41D1-9AA1-711464B654EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56602780-E1E7-4249-BE48-166FCE572651}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56BF4EA8-C54D-44F4-B9DE-12ADD8D183E6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56C19666-84F7-4E41-80D2-595F7F8FA143}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56D290F0-3A65-4398-872B-248AFC16B726}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56DE2188-D37A-47E6-A2C5-6B38B07CC6B9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{56F6F0D8-47F1-4E82-8E3E-4C0A864FBCDE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{57208BD4-2702-4A81-B703-9CFD14DB5622}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{574764D6-5BA4-4E0A-99B3-64FF422B15E3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5750921E-5B64-45AA-9C75-C0CECD2AD1B0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{57C3BB16-D528-4970-95AD-21E08A943611}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{57C8EEEE-B6EE-4FB2-A74A-97620323A359}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5805BA05-73EE-4648-BEF4-9A1DAA7D9CEE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5849EE85-65DB-465C-85B3-91906E2DD9C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{586B51AE-D7F9-4214-ACE3-5158CCBE6B42}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{58794F45-B46A-4356-B838-E029358B064C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{587DFCFB-8520-4D67-AEA1-2BD60C73A4D8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{58BA4968-CDC2-448A-8189-36498F883559}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{58FB4659-6D62-45E9-A785-D072BC01D172}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{590B5F1E-4B33-4319-9778-3ECA7A947A04}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{59218ECF-0BF2-45DA-8A25-4593DC9AAC3E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5984E012-1143-4ED6-B7FE-B6AC71BAB765}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{598B06A3-6EC0-43CF-AF34-6FB569E367C7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{59C5A0CB-3B98-4E0A-B063-0951D2F48286}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{59E98E83-C42F-4003-B2B0-29E5D40CD8DC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{59F09D70-25E3-43D0-AB74-0B4DD40B581D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5AA1A0B0-74A5-44C5-B76D-B33BE006E7BE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5AB85FDC-FE62-45F3-9943-3B62770417C9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5AD008FB-D65E-4586-8C42-F81EA3078FEC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5B597748-E358-416F-9C35-2D803CD7CDC3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5BB31789-13C7-410D-9A6D-8CDB39F4E7E6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5C8917BD-12D5-4FF2-BBA9-FDD9D60BD1B7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5CC3FE8F-859F-4B15-B86D-28A2099320D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5CDD6FC6-F929-4F3D-9CB3-017A57D2979E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5CEBD92D-C0AA-437D-A158-8149B7CF5D07}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5D45B5A1-78F3-4204-BAB2-265A32FA1211}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5D972005-BD0C-4E0F-96E8-6A5996FBED92}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5D9F0AF1-0B92-44CC-ACAF-C4BBEA611D99}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5DF24A6F-6B4E-44B9-BA90-352DBFFC7C76}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5DF451A6-D256-4B30-8ADE-7400EB82E18C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5E1EDEFF-B31F-40FE-A1C3-2D8EDDA887CC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5ECCAF24-3EF1-4B8C-9D80-F45F4762EC67}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5ED77C91-5817-4FA9-802A-F6AB936C709A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{5F10DC98-2DC9-449A-A5B1-D0768C4EF2FA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{60153577-80E7-4272-B3C5-0F59502F0EA7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{602B215C-56E6-41C4-874D-410AA604D5F6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{604A0F28-4C0B-4D4B-8208-EFBF8DD3E7EA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6062C20A-1B97-4A6C-BEEE-C64A51F984AC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{606577D3-633C-456D-8760-AA4836085BBE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{60C3F97F-C2B6-41F3-8583-AABEA6933960}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{60F7ABC6-ADDB-4A99-8E22-0D308EF1F3D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61258A4B-7897-444F-930A-7FCBD6F8F8CD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61268174-A12D-4FB3-A9BD-2462207EA398}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{614B658E-495A-454C-9B62-9E1E21685265}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6174BDB6-5521-4F4D-94DE-264D0562424A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6183D6D4-575E-496D-BC34-FAB5333ECB04}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61A06DF1-6187-4E34-9687-E6D9A6F70865}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61A7D8C2-11D7-49DF-9821-42B8F7DFE1AC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61B96C64-3AE0-4B80-A812-5B8072C56429}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{61CBCBCE-BDFE-417E-9313-6B7A16D64887}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{624F0458-9070-4554-96C9-1144A3571A18}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6279DC5F-D935-4EE5-A44B-C681B7D517D8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{62AACD02-DBFE-4529-A66A-5538C9FBCBEA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{62FC713C-7049-433B-8FEA-65DC4F5F877A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{62FE400A-D3F8-4016-A222-21154DA987A4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{630676C8-735A-48BA-AF16-B36B2D010B91}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{63133657-32E1-4959-BD90-6C5AB0C31E40}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{63A00131-EC90-487F-AAA6-DC212770670C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{64182A22-C437-47D6-A373-22FF71C3D5A1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6425F5AF-3DB4-4AAE-9C7D-D615B33AD1D9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{648CA393-B75D-4150-8DB6-7D6BE13268D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{64B47D0E-47CF-4646-804E-BE74500DBFAC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{64C7A4CB-F72D-4064-8AF8-CA042E8E49D8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{64E32F47-C648-4D3E-A452-0F20EB17B807}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{652D6146-EFC8-490F-8AB7-5D9A650935B1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{655BA353-A191-4FDD-BF04-7D7E44ABB360}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{659D6C60-71AD-4FEE-BE2B-8BFBF4217F3F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{65B3212A-303E-45B4-ACC8-FBAFB7B83A9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{660B98FA-A0AE-4147-AB04-AA683C18673E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6637AEE3-4E14-450D-92AE-56DEE6E0777A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{666B18A9-1EAB-4C7D-A5C5-B04AD54265A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{66C4F2FB-E12F-4CD7-9D37-04E875A0AC99}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{671F61C4-C46D-4D1F-950E-9842C71DA1E7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{677D8C4B-58FC-493C-B2C2-D06547512CF3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{678EEDE0-1385-4ED5-8D2C-006F2E278603}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{67A296C2-31B2-424E-9BF4-70275D66966B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{67C0E60D-02F3-4438-9EE2-B5FE726D516F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{680F80B4-E1EE-4E12-ADFE-6F903E632E73}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{681676A6-7C97-4256-BC9B-386FF75A5602}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6821D54E-EB8D-41B1-8227-D34FF3599407}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{68247AAF-ACD7-4DE7-913E-62F5C26EEF6E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{684199E9-758D-497A-8FB1-13B45BCA6643}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6857A85B-2617-435E-8CA9-0A96FF977A96}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{687311A3-F240-4755-BE98-2C3731E9E6D2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{68A46ABF-2FD1-4BEB-8B2E-96B8E4E27A61}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{68CF8913-96E9-4387-96FA-4FD3827E1A96}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{68DA6DD4-957D-45CA-A74F-2D25FE93BF17}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{68E4CC1B-847C-4190-8781-C967F32B0AFC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{690D4093-D14E-4D7E-9C61-1F938E4513E9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6957C3D1-BDB6-4E76-9951-42E0F3BB5E13}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{695EA3E7-2440-4060-9317-324E39D8E30E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6984A7D6-7E5F-41F7-9107-8AE0D7ECC8ED}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{698D15BD-A758-4C91-B15E-28BAB634AF26}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{698FD1A6-D448-4301-B845-2872CFAD9028}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{69BE44AA-5869-4A77-9364-F2E7FF60BC56}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{69C36C2B-CB3C-4563-AB08-F0E54EBAC9E4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6A6FDAE8-3F4E-4424-9249-E2CB6050A4D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6A7439D2-1A76-472E-A69A-A8989BDD7C79}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6A934C41-F941-4F40-A69F-EFDE5311F1A1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6AB9B853-B891-439F-9957-E6BD9BA1622A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6AE2F554-39BF-4876-B796-15DEBC5701B3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6AF3F77C-9981-4DC6-BBB7-D70225558838}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6B04BD03-8B9D-4ED0-B0C2-367DB9654C62}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6B59A4C5-E304-4340-B36D-5A7419E282D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6BCF697B-354F-49FA-BB97-BA44A05B9B79}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6BE5C9BC-EA25-43BB-8051-FE8B19DCF0E0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6C6A997F-045C-4425-89C2-89923ACCE167}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6CB53AA6-029C-4729-881A-E249A78C3114}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6CF295D2-B4EF-4F8B-B0F0-20573A5B913C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6D18DCEF-26C9-455A-830F-E26AA371305F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6D3B7C1A-B684-4F2C-BA1E-C50BB51B75A0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6D4A68CD-1757-4419-8E7A-23DDC9917FE5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6DB3D3AC-D82D-47FD-9F9D-A8C05B925E5A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6DFF4634-6E3F-4748-BF72-7DCC0B1FDB56}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6E6AD062-BA49-4646-8ACA-C30FD6A25839}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6E7C0A21-149D-41C3-98BB-89A213132BC4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6E7FA5EF-CC2C-49C5-8349-4288FE381777}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6EE5E7C2-EF39-48C7-B1BF-F60843B48D7B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6EEC2A59-63C6-463A-8702-483EC92D5D43}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6F761429-6510-4F6B-AB8B-D062C33EB6DA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6F8EBAF3-FDBD-4866-8816-2220D2AF9BD6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{6FEA399A-613B-489B-A2FF-3C43576777D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{700DDA74-45AC-47A4-BA9D-E30375F37682}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{70150CF5-4824-4929-B344-4A6338CBDFEC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{70374E52-1D8F-40B4-9450-15FDD04F60CB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{707B75E2-EFC8-422C-8CC2-00F944603CA6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{70AE2215-529F-48F7-88B7-AD2CB7EEA7CF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{70DB5820-AB58-430F-9842-7DE7F8DFD36F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{70EF7A62-619D-4894-9470-23A1F23A96E7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7123666A-365A-4079-BF53-3194BB5DE90E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7267AF3D-B5C0-481A-A29E-AAE1F77FD027}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7284BFAC-4EF5-44BF-9011-C1D612E4C6B5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{72D4DEFA-AE5F-4CBD-85DC-E72CC392327C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{72D86403-6DD7-4760-A22B-975FDFE7BC59}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{72F63340-C598-4BED-BC87-83AE4B3EFAB8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{730A79AF-CC12-4EB3-A94C-7C9E1921B085}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7335F83B-8B7D-4054-B0D4-A94728BB419F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7354D115-46CD-48FB-B42A-12CE46A3B63A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{742E48BE-AFC7-4AEA-A987-20160017136A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{745E2FF1-6633-45ED-8CA3-B40FCD1F97B2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{74766AB2-846C-4EBE-942D-D41BE3B4345C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{74876D48-6AC9-4C1D-A4AF-4A119A1AE650}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{74E01EAD-FF47-4138-BC69-112198CE03D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{74E97328-844F-45F3-BD21-3EE65899AB69}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{74FF206B-E88B-4A83-9C42-9DA52306C2E3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7547B133-F1E3-4596-998B-AEFFF4891B24}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{755ADE0D-82B7-41CA-97FA-29B451CFAD02}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{75A2F07F-F965-41B6-87B5-183C1C22E19F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7641B1BA-9C3F-427C-BF2A-E5D5DFCE7B47}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7671844C-DEB4-4432-A6A9-E267084DB35E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{76873439-737F-4278-93A3-74BA02A421D2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{76D3835C-D69C-4332-8E24-CD6D7EBB5A36}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{76DE2CAA-C639-4C4C-980B-F7D3BE7D7877}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{76E255FD-1B65-4716-B106-FE297B521E9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{777E5B16-1CF6-422E-B882-CE8551E14B1E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7876C849-7180-495F-9E1D-51C248743475}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{78A5FC89-07EE-4668-9972-7402428A2DC2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{78BC0E35-2FB0-4E50-8F2C-C5D630D15184}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{795E7F79-55F6-4B78-899D-4349B0F0C9BC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{79892F87-5BF9-414A-93C9-83340868C543}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{79982AC3-64CC-409E-B9B8-AE0AB389039E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{79FB8F53-2EAA-4469-BFC1-082A3896276C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7A880AEF-DFB3-4521-BF76-2FFC7B684614}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7A8B01A4-B6A8-4DEB-AFA9-D5E79B88CD1F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7A8E5C26-61B7-4F09-B52D-E1D944926639}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7AE6E4E9-9B75-4C1A-8FAB-F4D5694C5539}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7AF3187C-D11A-4D5E-8176-EB82DE16F838}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7B459780-6E19-4090-90FC-611F2BBA8F82}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7BCCEF35-3A71-481C-9B55-3D11D0441EFF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7C019370-CED5-401D-949D-5E8135B3AC6F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7C3A3577-4618-46FF-BAC1-A2249E3417B3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7C412019-3E32-430F-ADCB-E3922AFF97F3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7C62B02B-C18D-4687-8FDC-74A2F1E7C37F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7CBE1FCA-5E82-416A-8A40-378E62663CC2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7CE2F446-AF1F-4476-84AF-B7D9C58E1A8D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7CEA1134-FABF-4D63-A952-A06740CFB9BE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7D238E76-B1CF-4AFF-AC1D-28F53216647C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7D56655F-48CA-453D-BE4D-9C7F01B08491}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7D5B4EFC-2F2F-4D30-AD77-8524EB70C59D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7D664786-753D-42E3-A9D5-CBC027B4B97C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7D90BE5E-39C9-4208-A4AF-4A4776180258}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7DA15186-9DE5-471C-8F66-063C077E2874}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7DB17F16-61CC-46D1-B427-4F9C55ADFB4F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7DDAE67C-B55D-466F-AB19-8FA77533143D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7DDC4E07-DA41-4C50-8372-E2F3219D84EE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7E2C3D70-B700-4F0E-B36F-05F6487A1BE3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7E8168B0-BF08-412B-9144-AF66B2D5EAA9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7F2788F6-5D33-4A33-8015-E1A6FEF77FF1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7F4ACE53-1F62-4935-B086-4FA24DC751DD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7F8CBB34-A1CE-4F64-A127-6846CE35008F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{7FF50BC8-2267-438E-B4F8-DCBF98B1F647}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{801982F3-60BF-48B7-8C81-194E3F529E26}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{802641A8-0735-4098-B989-4F355D79BB7A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{802B9A22-3E5F-455D-BA8E-7892C86C942A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{804CB435-3823-4111-BECA-80F3ECD21895}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{807B5276-6C09-4B0E-80DC-19DF73BC6459}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{80C1BD8C-4574-41C8-99BB-38FF845CAC05}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{80D165B7-EA63-4AD1-BB46-9A7B59E85DB1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{81085A62-0288-4C77-A780-5F0606497710}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8120EFC6-12B7-47E9-A814-758C00F385B9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{817E8FEE-9B67-40CD-9947-C1D33F1661E5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8181A012-6189-4FDA-98AD-9CFC67C69B45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{81B3F74C-8179-44E7-8EA3-40CA4705BAFC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{81BACB06-38FF-4232-89BB-2129961814CB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{81BE6B9B-E491-4853-95B4-7DA3D7B6F278}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{81C0A630-813F-492D-815D-312DA800A4CE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8241DC55-87F5-4EC4-A3A4-EC30ED27CDEB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{82496278-B45C-4C4B-AB69-DAC60326F0A2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{82E9DD24-86FE-4260-9C02-E6507002A72B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{83268273-4C11-4445-9BA8-FD6E88B4B594}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8356EB3E-C4CD-4A7C-A1B0-74E60C3DA1C4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{83668328-CCD3-4FD7-9488-F12D60E315C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{849ED2CA-F759-4655-8AC0-9290B67DCDF4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{84D2C4C5-84ED-4D51-8403-54F4921F3939}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{84E67F1D-B0BF-47E8-AD39-C5F80716429B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8519C048-860B-4E64-8580-2F1FA51860A1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8622B142-3E0E-4586-B44B-9F4DFA239F32}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8641B88F-BF2F-4F53-A32E-CD8C3558AD7B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{865FB6A6-4CC3-4302-B730-D400FC1AC0B4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8687A9E4-59C2-4730-8432-EF00EDE785BF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{86A08A46-AC1C-4DDA-987B-9AC84F75372B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{871183E9-3179-4236-ACD9-5309035F12D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{877A1E39-8030-4C95-8908-18093347F28C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{883650B2-EFE8-4AD6-89C8-3C7DB2A5D59B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{884C0A8C-50AF-4AA5-85B7-B2928A305033}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8877C203-E512-4509-880B-CC8D297FF8C4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{88C333F9-4D04-454F-B67B-DFC63E1631BB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{88D23536-1CBF-4909-895E-B3858406BEE7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{89174E7D-4761-4B52-8D77-228E43DB0FF5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8921E35F-5C39-4873-8099-190C7A4FFC0C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8A0AAF98-2FA3-4ED1-BC07-556F74E44C8B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8AA70270-6F7A-4E5A-87BD-BA879034474F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8AD6CF9A-BB09-433A-BB1D-16D9802E304D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8B17ED2D-1C54-4570-96CB-282FF728D7CC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8BAD1C4A-F00F-49FB-8192-C5DF9460E2CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8BB4E4DE-4562-439E-B813-B9D546CAB0C0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D231542-A2BF-4BE8-8111-51C21E18662A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D29BD62-DC49-4CD4-833F-B6BDBA350B30}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D5CBC4C-5FFB-47C8-910F-BC854327BA9A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D62A965-82D7-4B10-9160-8367D72B8BD8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D7B92F2-2A76-4F6B-AD17-3792D9AE7125}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8D972393-2474-4E61-93E5-EF93AC27E2F7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8DB37F7B-C133-4F65-8780-4FCBCBB7F0A0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8DB73E7E-7503-4D4D-BF53-369A7D482F32}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8DD96CF3-28A8-4DFE-A249-8A4276709F8E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8DDEFE4A-7AFB-48E8-8BD4-1DCB21042E8B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8DEA4AF9-3F42-48ED-A3F7-DE0ADBC293D0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8E063508-57F4-44FE-A0A9-109143C89CB3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8E1EBBA4-C17F-4CE7-83D2-EF6EEE840608}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8E2F659F-738E-4580-BFFD-B62E088CBEF0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8E56DACB-1A6F-49E1-B0E8-3CA8B3AA2B26}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8E722329-D2DC-4755-8E12-4EFCFAD60A5D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8EBDC1E3-40BF-4F6F-8A95-E50AEADA1F45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8ED90222-88FF-43D2-9C95-108E2BAA7FF7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8F3C5D73-33EC-4502-9F26-049A0D667773}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8F4A442E-ACE9-424C-AFD2-89D531BF43D8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8FA1BA01-91F7-4463-869B-887C3D670FF6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8FB24364-F370-4456-B2C0-A5FAE8748369}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{8FDCA0BB-BD98-43CD-9C82-1EEDCE509600}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9003F6E8-AF7C-49B0-B02C-BE88E5BC46BE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{904E08A0-2B45-433E-BAFD-ED283BFDF3A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{90A5A15E-C4C9-4958-BFAD-1FA10A958C9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9139B30E-D3DA-4F37-B6C1-A72CD3CC6F5F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9177F63F-FCA6-44AC-BAFF-2142AB8DD87C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{917DA094-F154-49E0-A97C-D6971C198EA2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{91BD44C7-57B3-442C-A1B4-1A0456708F39}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{925063B5-9447-44AD-9388-5E3EC1F6B53A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9264379F-422E-4C40-9105-C9FCABD0AE20}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{92937A82-EF36-472A-85BB-9D372B742D31}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{92A70865-0262-4061-9497-4C51253FE849}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{92F91A3F-E377-4601-B835-253AF1187CB2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{93604745-1663-4B84-875C-F00E26EC69D3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{939F064D-641D-430A-979E-5835EAFE02EB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{93A2F5E0-5E88-4684-B91E-85AAEC4D1B63}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{93C474D5-FD48-43E3-9AF8-5A6C8D3CC2D4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{93F8BCA2-0CB6-4E4C-B1DE-4631B710DED7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{940F7DAD-1C33-4666-AAD3-6D505DF2799B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{944AF3B4-D570-4FD0-82C8-2D39DE2860B2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{94595D1C-393F-450C-B136-542D98E54439}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{94E72F25-2E4F-4B35-B7FD-1788428F9E40}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{94F8B5BD-B998-49F6-BAFE-41348B201F42}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{94FD563B-F1DF-48A0-8FDB-91C43EBD9D04}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9520D347-A72A-4B77-9B9A-982B98ED9D97}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{953DDA30-35F9-48EB-8C41-B10BCA4356C0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9542DFEB-F722-4A86-B4E2-B57E65C3820B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9579C1A1-8E3E-47DF-91DB-3B10D336146C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{960BBB2D-0D5F-455B-95F2-950EE6B6DAB5}

Ich musste sie nochmal aufteilen - mal sehen, ob sie ankommt in zwei Teilen

MfG - ewes

ewes-Ltd · 06.05.2014, 21:04

Hallo Schrauber,

hier kommt der dritte Teil meiner Meldung, bestehend aus dem zweiten Teil von FRST:

Code:

ATTFilter

 Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{96342372-136F-4CCF-841E-09217AD70C36}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{964C28F7-F49D-41E9-A9DE-C0D730E633DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{964D4D03-C9D6-4767-80B3-EF57C6B0D1CF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{96A6DD94-AA2F-4A7E-9F2F-FF0A99C6A6EA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{96B2E21C-C329-4121-A51F-32844AAA243D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{96DA7101-E411-4F6E-91CB-8642BC54BE4F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97094E05-0EB8-41BE-971E-6A3B3CF7A3F7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97338509-F8E5-4BF1-ADB4-9A063CED391A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9755D296-D5F9-4543-B6BF-591A222752C1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9756B9EC-3108-4FC8-9393-362A90ED63AA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{977C5470-AAAD-4872-9103-EFA4F91753FC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{979231F6-E2AA-4A35-9548-4E477751EA13}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97A0FC74-9C8D-42D9-8902-F94982A3FC6A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97A7E075-D5DA-456F-B9A8-4C107F7C9010}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97BCA047-0AC8-4B35-98BD-064FDB66EC2F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{97DE2F2A-7EF9-44BF-9F3A-0853D2265278}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9857683F-5510-4ED1-B3F3-4AE5CC8A9EF8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{985CD69B-EAE5-4195-9CFB-B2C3B250670F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{98B7393F-C2BF-40D6-9826-6DDEB951C601}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9918131F-F5FE-4DB5-963A-D6A41E627D39}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{991DBD54-60EE-4BD3-B676-81B8F8B082EF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{99AB90E3-7770-4295-A75B-AA355A40634B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9A1C971D-BA48-4D83-8E2F-D9DA127D62BB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9A210248-F90C-48A3-889F-585889A0E567}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9A29D776-9F97-4E11-8822-438EB7B26B70}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9A476C2D-6970-46CE-BECD-E719CC430D28}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9A62AE10-B9FB-44D9-96AF-6AC68FE72FE2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9B235736-556D-4A2F-AB32-EDEBF696EC9A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9B559177-CDF2-410A-8823-6E9B4006B023}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9B780822-E476-4A95-AE4F-429A1F2FEF24}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9B8AECEE-A8E9-4A53-8A02-BB84A3C78B5A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9B928045-9999-407D-BC64-2B79C76833CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9BAB8CCD-0D57-433C-A150-2F4B69A70EB1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9BB3CAE0-ED2D-40D6-A1B5-0BB68C35FC24}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9BFBD516-6330-4B89-A197-32E264B16213}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9C2379C3-2737-4D7F-BD99-7D08D7912AF4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9C400E8F-B7BC-485F-B3CD-EE28FCF73738}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9C8227F0-F7BA-4D9C-808D-43BA8864435E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9C82572D-524F-40DF-B63A-743A4CE642FB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9C921399-3DB4-4C72-9E45-F8617423DB2E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9CA9BA52-4292-4B28-85D4-2425B449F09F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9CD52666-1CFD-44D1-BFDA-2E0D1FBE6781}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9CE54AF1-2CA2-47DD-9245-B6EFB6ED912A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9D2154CD-D699-4969-A248-5CA6711BA65E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9D3FCEF6-9953-4383-AF88-C68B83114F45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9D59CB7A-71E7-42A1-A68A-C037AFA56A41}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9D789A17-FD30-4713-A958-C8819F0B5C6B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9DB58FEF-05AC-469B-A8BD-4D7FADC1CC7A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9DBEEC0A-4AC4-480F-8D74-839252A0BE3B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9DD5EC81-0F14-4475-8C5A-4E93B0E16C60}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9DEBCDFB-95AA-41AC-BAC7-54DCE51D1ABF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9E11162C-9B21-4449-A412-D4441113A7EE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9E29A76D-D38D-4BB6-B584-08C8D98E5144}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9EC3E21D-D29A-4E6A-9F2F-DD8D45D0B71F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9F0CA5B8-FB5F-4749-BE72-18318CC4FDDD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9F30FA67-018E-41A7-A537-9C37BD34B1EA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9F7DBC99-DE19-45D7-AD0D-AE751DCAD9C9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9F9A7E75-E488-4CB9-A39A-2A24C40E2087}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{9FAFB7A2-CE2A-4489-A738-0ECD6A09A265}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A0081533-BCFA-4C48-B8E5-A3C7FA5F4A65}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A06B18BF-2D03-4870-BCE2-B14B428089FB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A06BA169-1E61-4FED-921D-486F7736B3A8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A0A10C6B-D901-4E67-A7A3-9F72464C8504}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A0DE7E75-721D-4100-958C-37F61864B2CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A120A3E6-CFDE-4B7D-BB6B-56001C7787FB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A1D57643-0A2B-426A-A5A6-FAB2EC5B0B14}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A1FFE872-AC58-47C0-9205-147E54CA4765}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A225E075-714D-4F26-8305-C4BFDA47553A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A279F474-4C9B-402E-BADB-D9864DF01ACD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A304FFB3-1807-4995-8428-C51F9D544C88}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A391FE0F-6C21-4C2B-B3E7-D47C524708F3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A397AA5D-7065-4CC0-87FF-20C00608CFBB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A413B71E-0023-4565-9756-E79BF15A8159}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A44C8634-9319-4ECC-9144-C018C4F25B6E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A44DE864-023F-44E9-801B-DA7FFA8AE6C4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A4F22CEB-3D5F-46C0-B161-6173A9FA0350}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A503BB61-79D5-4A4E-90D9-14D7D5B580AF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A5292F1F-FD4A-4282-9AEB-1633FA15EC41}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A53E8A6B-3760-4F9C-9480-278B52ACFDE9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A58B3164-FF18-420C-9B7A-01162B1E6A98}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A5CCBEC4-7286-40EA-BB92-5755DABAC4CB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A63EFC1D-A1EB-42E4-A8AD-06F15825AA9B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A643332C-D549-4D99-B555-9FE30548C05B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A6CB36E6-A209-49F5-80A8-01683F62FB3E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A702964E-80D3-4E8E-B644-A3B25A476131}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A75C2581-36E4-44ED-B05E-B35EC33EDFA0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A7DA5C49-F5E2-4A2D-880A-5A8545689C08}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A82883DB-283E-49D8-B969-927C8E840580}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A845BE28-8C64-46B7-9241-8B50594B736B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A87697D9-45C0-4E27-AB19-7A98E36F2810}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A8AD98CA-97EA-43E9-8CCD-3B5081715ABD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A8B5E84D-B4F9-4C29-8FFB-2BB2D9E67F7D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A8D2A871-1629-4D66-B638-A67644688A2E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A8DF58A5-0C5D-4700-AEC9-AE5D26F6EE26}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A90DB74D-602A-403F-A330-186CDCAF9998}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A92166CC-8B05-4123-BD9B-6685CAFCBACD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A93056C8-8DB8-434F-89B3-F89751E9EE9B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A9AB46A5-F08F-44E7-9268-15466D79F35B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A9AE5343-33ED-4ABC-B1A5-BAC2887BA70B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A9B5B8E8-EC64-4ABE-9FDE-25F11E1426DC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{A9BCF427-0E93-4B05-8085-B953E987E41A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AA1578CD-4519-4303-900A-223290AD4898}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AA7F00D5-6D0D-496E-A009-BA73B2D1216B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AA866DF8-22F1-4BF6-8628-4F223A844BED}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AAB93D40-4073-41EE-9A0D-2CC48BB41A5A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AB055CED-DA34-44EB-865E-A47F417CCC1E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AB39184D-BFB2-4494-B027-D753D676365A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AB8654B9-17F1-490D-AF69-90B4E5C2E9FA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC28BE48-3D72-4202-B24B-8478E77261E4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC49310A-9F9D-4AD1-A9E4-5EF6AB007498}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC6901F1-076C-49E5-8574-2A792CEFC88C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC699889-0B5A-4789-AA5B-96634C54AEB9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC7883C4-0174-4FD9-A76B-02F61710B064}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AC94E07A-73C8-40F8-92DB-F0F5EBBC84BD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ACB64362-2BE5-4C81-B42E-7A4EF89EC789}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ACC9714B-AA7F-4C9C-9121-EA745FF808EB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ACD4945D-9FD3-4FF5-8F38-7F2A71D72219}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AD5E7C9C-6A0C-4B2F-9F55-37A521F68621}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ADB95788-1836-4CE4-81A9-8E48ACC7A367}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ADBB37D2-8B2A-4098-A4FA-8DEBEAADEF29}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ADBF914A-3392-42C8-BA70-3ADC75C69793}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ADEE39E7-FF9E-486A-865F-CC3BBE777A0E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ADFBDC8A-F603-4CD6-8433-7B722EF164DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AE02EA6C-AF43-4EC1-8C1D-64728D37670B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AE135BC9-5E8C-4249-986E-887B480A4D71}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AE39278F-EB70-4F55-8131-BF3453012C1E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AE5A4C8E-2620-4BD5-ACAA-1593D6E95B1F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AE9E4ACB-D3DD-4130-A74D-90B4FBCA1A2F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AF5E1719-B809-4283-819A-2F8C1EE08AFD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AF815238-A5EF-4C88-A7F7-21C3028E6AEC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AF9B0F03-EB26-4348-B88A-8E2EC77E88C8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFA6459C-82DE-42F9-8CDE-F5B195BEDE1A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFBFEDC2-CB6B-4C63-BD8F-12AA2DE7FADD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFC9E4A5-2F14-4155-B0E1-3AC0A8E1D8BD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFD8DE1B-A63A-4367-8935-A4AB02D89F10}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFF59451-7E7E-49A0-9175-4AC367921A88}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{AFFAF9C2-765D-406E-B915-31F15E60C6CA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B0506226-324E-47CB-AB95-55933FAAFA92}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B0998D95-B91A-42BE-9184-208ECD7B520B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B0B4036D-1180-45E6-BBAB-D0306D252C42}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B12B966D-B0C4-4713-86FF-2C77152816DE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B19ABA92-FBA2-4E03-8E67-8C9F9D1190B6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B1CA12C8-AFD1-4BB7-A618-2D23B3536604}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B1D4760B-5784-4045-B7D3-D4ABAA64B89F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B1F68782-F637-4821-8E2F-0D96019B3C55}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B2343C4E-F6A5-4F88-BCD9-DDC239D51568}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B2682EBE-1127-4312-BF47-CC2163183F0E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B33739ED-0EA6-4774-85B7-F05DBEE1754F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B3A54490-ABE7-4870-BBD3-B60C8249761A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B3A55606-9426-4B7B-B080-F5678B123B0D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B3A828F1-B8C2-40AD-A289-3A59E2B61CD9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B441E04A-EA34-4E9C-A982-EF4DE00BA80A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B4528BBF-53D8-40A1-8153-71129DDC13B5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B47A1A26-5A05-4C64-B5F0-1894C2E1457E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B49A8750-E22E-4A17-8CDC-88AF3847510F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B4E3E052-B3D7-4929-AB35-27767C00DAC8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B515D972-046D-4226-BB60-98D6D0E9993E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B5D18181-C913-4028-A2CE-93363AEFF37D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B63D4CDE-1F24-4077-9681-DC482E482653}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B6482590-3DC3-424A-90F9-E09E0E0232A4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B669B2F2-4838-4DF5-99AE-79CE2E05FAE9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B66DBDAD-7BC8-4F67-BCD2-2619E210F2E5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B689FC04-68A3-479A-AC53-5822CEBE880F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B68C3854-D84F-47F6-B64E-0064901DDB5E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B69D4AE4-E2A9-4ABD-B2BA-0EB61A704557}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B6B42343-CC40-4BE7-B228-B206E08653FE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7016CEF-66E2-43F9-BE4B-56B5F9C390FF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7576D68-44A0-454B-808A-12ADC65BB69D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7BD2D11-3F5A-482C-BB27-13E515D6724B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7D5FE5B-5E4C-4721-BB5B-A9D3E5D79CA0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7E3EA2F-2257-4EF1-92C3-FBE89048F9EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B7F07817-BC4F-4C03-A826-F90732B75882}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B8308034-D10A-4FCB-8F4E-273AD0C01D40}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B84864BA-AF69-43FF-BC5E-B33967FCDB09}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B986EA82-6656-4757-8B46-5FAEE65BBCFF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B98F3F35-B458-4E47-87CB-4693A6F5995B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B99FE1DF-CC48-45DC-8C96-394581918293}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{B9A357DF-281A-448E-8C95-90EFF7F25560}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BA108389-CEF4-4E14-9AE0-830D8E6FF920}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BA17E79D-3747-430D-8723-FABDA5DAA3A2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BA5E333B-A4A1-4EFF-BEAF-77D21EB070F6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BAD371F3-6DEF-4B09-8C84-155D34ECF91E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BAD67817-C0C4-491A-9244-6E6CC1C85E30}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BB025E30-EA5F-4A07-9055-D4048E8205B3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BB732090-290C-44B8-8169-D21094D204DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BB8CF942-97BB-4BD0-BDF8-A6448D660634}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BB8E4AB5-3BE0-451D-849B-551A0A781F3B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BBAB4D77-0A9A-44B1-AF04-5C3394B79452}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BBF445E0-CC26-4766-9F39-B2475270D041}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BCB5EC42-AD61-4E6C-B3DB-B9A1DDD1DDB6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BCC3E792-DF81-4816-8F33-D2141BCBB3C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BD326DFB-8270-460B-8F13-3403D7AB6278}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BD373772-DA72-4E83-B512-E42102528F20}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BD3A620D-6C24-4D4D-B053-2C5B117C0A67}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BD403A16-584F-4548-940B-702BB25D1EDA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BD559F50-B990-43A9-8385-0A7BFB01F68A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BDD779B6-2E5D-43C8-808D-67E3AE8B52D6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BE2666A8-22DE-4B7D-A791-546F73261E82}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BE3034A4-8102-4918-ADFB-7FD74F054DBC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BE77B76C-DAB9-45ED-A05C-25B7B3688B5E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BE8C5671-64C9-4620-8352-C735C98C4155}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BEE0B805-D6EE-452C-BD73-BA82646BFFE7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BF656270-9DC6-4057-85F8-776430E8FC5B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{BF9A0672-4F5C-4327-A11C-2115EB79EB36}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C0327045-FEBA-440B-ABA9-7608D3F3DCF6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C03B3CD1-14D0-4A31-AE8A-61431DDED712}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C0F38942-F054-4E85-80BD-2B5D270CB27E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C102CC3D-D449-453B-8153-A717051C4217}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C120E23F-D880-4FCC-8CAD-C74F7051625B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C12AAC16-0090-469F-BA7C-23C1DA7FB510}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C139714D-6171-4FEA-BF54-B530E1163A48}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C17D5F33-36AA-4D3B-9872-5651F1E53DF9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C1A26DCD-3218-4938-A403-F4C59726A75E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C2506901-F72E-4E46-ADC4-D0A59AE01A2F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C2E3A927-FF86-4E15-979B-A6C16A6B3FCE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C3035F27-69B5-4FF9-937F-5CA4AE5B074E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C31DB4C9-4C87-4E63-BDCE-B85E6CEDC257}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C322A251-1E41-4FEB-B8DB-C4DDC11F2642}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C41F713D-5D36-4878-B337-D6BD447B9C3E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C424AFC4-C91F-415F-BC40-25501B827F6B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C4C0080B-7888-418D-9123-F5A5BE2D7C04}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C4EDA947-7341-4E7A-B939-CFFC4A647608}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C521572C-57CA-41EE-8E1F-B2F415CCA6F0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C528B20E-BE14-48B9-A302-61D79B4C5962}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C5D913C8-D7AC-4913-BB6C-129CE77B32A6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C5FB3D6D-B0FF-4A2D-A5D0-19EBA571EBCC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C5FC5D45-2151-4044-9AC0-C61A1EC07D32}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C601CD07-F42F-4208-B475-75C806D14578}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C6E9725B-5349-4CB3-8D6C-AA6EA34EDC19}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C786CB5D-5324-4204-A42B-13A5CFEAC6D1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C786E843-53BD-4764-9C1A-13EEC5F47B39}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C7D53176-033F-4FE4-8E8B-D5B3D7F0B59B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C7FD6347-2D1B-4792-9C09-B27C1FE7E9F4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C88778C2-291A-4407-9315-088431CAD7AE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C890D9FE-E2E8-41A9-A3A6-5B76C2A8805B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C8E49B56-13DD-402E-B316-B370949337B1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C8E9825C-AD43-4473-BBDD-426305593BA7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C8FE7C5A-5166-4A4F-B94F-83131E21F5C0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C92432F1-8A71-4AC2-8A43-0DE12E8EB9A9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{C9D5BC42-34F6-445C-BD43-F3B89EACB781}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CA211415-CC50-4B15-A989-C90A48FFB25E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CA62EE67-B250-4089-AB74-5BDFCD48900F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CA64FBDE-E1D4-4FCD-A02D-CA7CA392FA89}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CA8EFCA0-316A-42B4-90D0-AA15922B59FB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CB2860CB-93CF-47A3-9603-9808670AA473}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CB6C9EB6-2DAD-43E5-869D-B0F628B09B10}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CC6FA44B-AE73-4E69-8CB6-10B0E49144ED}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CC97CF0C-6376-42FA-A3E7-F4E709A80736}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CC9C95C7-FE29-4CE1-929F-22FB2E57A9D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CC9E940E-527B-4591-8A08-9707D84D4584}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CCC2DE28-82F4-48F8-BA2F-500FE9BF4685}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CCD47C6F-F78D-4A50-8EE1-90CD68B6E1B1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CCD4DFD1-9E03-4918-8AE4-53232F0E0555}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CD127C0B-A464-4C1D-904E-0AFA4A688D99}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CD5338F0-23BA-41F4-8E44-5B73BA86C2CD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CD5517B3-C9C6-4626-B956-B845718DD49D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CD592B71-5394-4FD9-BF0C-DB9E6CD7416D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CDBC384C-B664-435D-8B2F-88D494F593B6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CDBE13BA-B5D1-43F1-A9FC-5C2FAB1CE756}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CE0EBCB0-6418-434A-8179-CED3DA022808}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CECBD8B6-61E4-45A2-BF82-DDDEB7C090D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CF7CF5D0-2D63-47E8-8C21-66658E0DC648}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CF7E76B5-C013-47C2-A823-57A73D344E06}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CFC65900-8921-48EB-9508-D34908949EB7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CFD55626-71E1-42CE-97B0-12466EB57DA3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{CFDFF48E-32CC-4B13-9776-10C00EAF71A9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D00E0468-541A-4FA5-9FF0-CCFC00B9BF88}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D027616C-9634-465F-91E1-504DEAE8FAD7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D1292FC4-1836-4AD4-AF09-9C1BB361679B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D143816B-5638-44A1-920C-EF6E342B4A9B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D1FDE416-B161-4922-997B-7FA96A516621}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D2047D50-902F-4671-B145-02CEA62E722C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D22CEA58-79DC-43B9-B14D-E61CA33FDEB3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D24E0764-34A2-465B-B1DB-D39E97FC7C7D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D2A852B2-1D00-42DA-96B9-882F99DC21E2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D2E76F3B-B626-4A20-9C18-4C868DA02CA7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D334E5F5-760B-4979-8667-24D08A2B417A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D34783FB-CE77-44C8-9E23-442BA574541C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D403F8F7-C406-40B5-A875-6F58E8F5DDC3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D40AE1B2-0D40-4023-A584-FDCD7D206ED9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D42F18E9-2023-41D9-8305-B5474F27FB2D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D4BB521A-7529-4518-B302-8BD47CB415D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D4BB9598-B2CD-4505-8335-1FA2FDE77D08}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D512A6A8-D878-4407-BF02-923F6D088889}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D524F12A-A0D4-4FAC-93AF-DECF14C14388}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D5288752-B24E-441C-80A2-CA571BC03EAC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D53990D6-0457-41C0-B82B-5ACEA6AC2432}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D592E4F0-5893-48B3-A31F-B1C3971663E7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D728752C-13F3-4133-BCFB-7E56D9443B40}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D749B293-AD74-49D4-965E-681078E24A2B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D750DFA7-4403-43E0-AE6C-D0E9D745490A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D77768AC-220F-4C77-8CB9-FD154D9E7F96}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D7883556-7C21-40F3-B2EA-5837A9FC948D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D7D5ADD4-E016-4421-A76A-4537BED00F47}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D8317C67-A456-4739-984B-5F8778979253}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D8481CA9-E7A6-4465-A2C1-F7CF96D4814C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D87F963A-8E19-48C0-B983-0A28F86E2D5D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D8AA8BEC-C591-4D0E-9ED4-CEFE13B1E7AD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D8C2F7C6-9F15-4080-A29C-EBEC260CFEAC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D8C842D4-51F7-4087-B26B-91FD916F0EC0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D91D48C1-3B3E-40B6-B0D4-9A2AFE354F6A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D9553760-EF6E-435A-8128-3FEBA8F76A76}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{D964484D-0EED-4D02-B72D-534C5920B322}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DA1412BC-0F64-4653-8591-234C4CD9A9B5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DA411369-7F43-410E-8317-4A845F89DBD6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DA9E7721-8013-468B-BE2E-6BA42652CDF1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DAB12D40-A253-47B7-B2DF-651D0993BEAA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DAB53029-1F1A-42F0-94C2-1DFA3C5A273E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB2DE69C-7993-429E-9B89-B76388B58E45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB2E93B4-39FC-44CC-B381-5FB28ACF25F3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB49996C-B1DF-4C60-894E-F19EEB2C62A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB4E2933-5959-4E6C-8029-97EE6A5F35F2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB579A28-6205-4649-B2A7-2075A78896C4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB6D2954-9EC1-47B1-9321-65A348C59366}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB7631DB-4C89-467C-A75E-65AE415D964D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DB961E03-6519-4CCA-97E1-23C7311251F3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DBA7A741-ABE1-41FD-87DF-FBE5846B7F3D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DBE5D4C9-DC76-47A0-A82F-44A65F0C698C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DC115999-91EF-4548-842F-692FAB085B96}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DC4AF806-3F99-4263-AD86-2F3753A5FF44}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DC83D6FB-6FC1-4B12-8261-B3CF37677499}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DCA8DB98-6981-4C6E-A1CF-2C1D90B206C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DCD37487-02CA-4462-9745-E72EBB7B92D0}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DCDB663D-3C13-4BA5-B1CC-A22793D5E895}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DDC06739-ABFD-41C0-A765-DFB6C1B6E439}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DE162B3A-E3D7-4564-9762-9BE2BE802658}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DE5FAE99-0967-447E-B05D-5167CD6ECF23}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DED39F10-CE56-4F94-B80D-24EDBF490366}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DEECEA56-F040-4B5C-B142-0ACF35D730BD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DF3974B5-9AF3-497F-8BBB-3B68211E057F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DF7309BC-BD1E-4384-8363-2BB7C02D12C1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DF828DB7-4C63-430B-9BD3-80C628D4E432}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{DFBE22D2-B966-4C17-B775-8429B05C03F8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E00FEF8A-4AE2-4E84-9D54-BC79E8E15056}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E026D40E-735B-4BF8-8514-AFF048D6EFA3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E048B5EB-B0DB-422C-B0F6-153C4887C9FC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E0606510-6CE4-4F89-975A-D028AB456318}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E0B62D3E-8339-453E-A2BF-43503567AFD7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E0D6A032-028B-4E04-BF28-45ABEEF398CD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E10CF854-6383-40EB-BD8F-3C0E15C91905}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E16F9C1B-4F91-484E-B980-212D46E75DD9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E1E938DC-9551-4977-AEED-1683D45FC55A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E241533E-4C60-4F3E-A55C-ADD3D4C7BE2C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E241C2AB-5812-413B-AC69-3D0D200397D2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E2A70065-6991-4BBC-BB18-187D15574451}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E3107FF0-E16E-4BC2-B9E1-A2F67E3E3717}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E31BB0BB-F0FD-4ED2-A54A-DBCAD7558050}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E3466624-59FC-4A19-B570-90F306C9AE4B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E3BAB5F2-EA57-44EA-B20E-E27DAC68D6FE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E3E1C3A2-5F4C-4892-B5B1-716DBA83F9A5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E407D4BA-E34D-49E3-B692-517DAD9C43DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E431EFBB-372C-49BA-B9E9-F86C47D8D742}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E4374120-D4B1-4E63-8629-6F7BD8D0DC91}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E442BB26-FC40-4D83-BC31-3709FA54D414}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E442DED8-6B75-46F8-9718-1DCA7469D545}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E4439FC2-398B-430B-BFA7-33F220897662}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E485E2BC-81D3-4D46-9B91-74F048DB7230}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E4A7FFF3-F776-4F06-923B-F058799C3C12}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E514444E-67DC-45DC-9CBA-4902093A3C38}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E5168C7C-F1F4-4960-A6E0-31C3ACA7C7BB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E52F3DE3-83CD-4417-8C89-AE5C6043DC4F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E5559178-C18E-43D6-BD50-83C3FE1DC4E9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E5606A75-94AD-4F56-9330-7E2818559EB8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E5BE3B45-C364-4220-A426-81B37BA6ABE1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E5D2E118-62A0-444B-99F2-F694E125ED5B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E62BB048-C91B-4478-AEDC-10D2DB9A3947}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E675FADF-3F4E-4559-9ADF-CAD9AD045118}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E677D070-79A3-4748-BF22-B7F06EC049E1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E6B1FEE7-95F3-4566-A3C4-DDBC1AE3A086}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E6D1F691-E037-4624-B1B4-E07D379EF13E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E705E40B-2AC1-49F0-A2FA-0EE88E960313}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E762FE09-DB18-4270-B68B-CC97757F6A45}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E78F5A7B-C3B1-4669-92D2-5A6F98B7262D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E7BF581C-AA24-43A6-A912-C0F713163CFC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E7D4C256-E2F5-4913-932A-6C2D310C6C94}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E7F754FB-2FD3-4915-AFEE-36A19A07B7DB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E84CF078-0F9E-4AE6-9935-FAAC9B2F47E1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E86462B1-027F-435B-8176-849C5D543EE8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E86E283A-0E90-4E7B-9846-CA6DD32E88E5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E86EDA02-57FB-4295-8845-27627CB7DEB9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E8801CBF-AABD-4C6D-A110-5D3B1D7E4350}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E8FCBC27-92FE-4350-80AF-76FD30675D92}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E93BD74E-BEF8-4767-8C5F-6C5EFDFD49D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{E9425A34-C7E4-427B-89E9-8E481141E1D2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EABBDEF5-E71F-4AED-B935-57E70A809051}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EADFD569-1E74-42CE-B87A-100C37D63771}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EAEC8799-FB4D-4ED4-B45D-699D2C4FB4B4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EB0E4C99-6DD7-47BB-95B4-8B1BFB99A3C8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EB1634F8-514D-4D3E-A550-7DDE55B7C393}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EB7881CA-5CD1-471A-A06E-3AB6A8B670EF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EB98A6D4-C8BE-48FC-9A8A-E6D1F58DC924}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EBCBB57B-56B5-4891-9985-369362863A52}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EBD1DCA2-DB4D-4694-9D14-30CD422F6A41}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EBE2C281-90A0-470D-8EFE-E52064AC6039}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EC386C8C-7D9A-427D-94C9-443E079DE4DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ECEF47D9-F8DC-4303-B066-2C4ABDD32024}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ECFEE94E-078D-46B1-8298-5F3BDB882B62}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ED32991F-EEA7-4663-BCD7-9448E91DB70E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ED687E3B-663B-4CC0-9CF0-8EFBD052DB9E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{ED944DCC-CB3B-4989-8235-BF67DEF6BADD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EDAD578A-62A1-4A74-BF9F-0036156759D9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EE69B898-5D00-4E5A-BB2E-EE14D7410F3A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EEB7B6ED-FEAB-4065-A352-74C67615412C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EF0ED0DE-66C1-4392-A6B3-E067970DAA5F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EF42C3A2-71F6-42CF-99E5-E32E275EDC49}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EF546D82-540A-4AEE-8B89-89B4DAE3D555}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EFC8D91F-0823-4A9B-B5DF-602BC0A64F1C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{EFE331B4-DCF3-423E-9AFE-CBA53AF13152}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F046664F-7245-436B-8BB9-F07FE2B9A972}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F091561A-99B3-40B1-93C6-4D462C8912EC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F0F2890A-68B1-48F0-BC5A-7F2EAF2B439C}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F1593B71-2789-4DF8-BBAA-F3DC1BCDF6A1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F15FF424-9EDF-4161-B6CF-C4CB3C8EB33A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F1D8C3FA-655E-4871-ADD9-5F0E927CE984}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F2181C66-B743-4049-820C-CBFF5BE6FA1E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F23AB311-FB7C-4796-9006-DD3675AA399A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F2452741-5BF0-4B7D-AFB0-3448339FC90A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F2BA6431-6D6E-42BE-805E-7FA170E48B12}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F36FC929-5F51-4018-B316-041C9A82A9FD}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F3CB63D6-E9FA-4086-9A46-512CF0E5230D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F3D71B90-BBAB-47FD-BCAD-DEC3CBFF4AFA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F3EAA5EF-BFAE-4BBF-AA36-15418F213B4E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F3FB24D6-3486-4CA4-A7A1-D4E40F13CA4A}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F40657C0-91E6-4F60-98E8-4B0C3EFD4B07}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F4430766-B920-4BA3-8E51-E309678AED79}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F4498EED-AFA6-40BE-A270-C8DCEFCF5E15}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F4A6E945-39F2-4956-BD19-3AF108599979}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F4BF0239-073E-47A2-8DE3-C25B51C2720D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F4D10DF2-FBD7-4626-81AE-732366E5C342}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F52EF535-5F23-4D9C-89EC-D44D7C7B4682}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F55B6C26-7B82-4F55-B192-15D2E2993421}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F5638671-B52E-49FE-AA6B-3A16253820AC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F5B49B1B-7139-4B4C-BB2D-CC57BD2F40DF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F5CDB8EF-442D-446C-B399-CACF4DE8E880}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F5D0EFDE-5318-4399-A64D-D79F930D6251}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F65E2981-A395-496E-8297-5CC65ECB9A02}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F6676444-BD31-47C7-B83E-9596535E5976}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F67CE094-4F77-4FAF-953D-F94A6FBF2DD4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F6E7B615-C0CB-4A4C-84FB-A62718077EDC}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F6F8FAF4-5584-434D-A0C1-06A9A9A14482}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F71A9970-FA2C-4B9D-9B30-1CE00F9359B4}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F722F9B6-B79B-4F5C-9836-601B429BB169}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F768C829-26BF-4385-BBE5-7E80AB359E2B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F7A74C92-056B-4542-A835-5484529424E9}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F7B49D84-5F2A-411C-AAB8-6DCE0FD7369B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F7EA8B4A-8AB9-45DA-8523-4117D57C8451}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F8467939-5702-4617-ABEE-4D1EA3968DF6}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F89144DF-304F-4528-85D1-6FABBA1D599E}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F90603A0-D008-445F-A81B-ADA026541170}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F9279B06-376D-46AE-B7EA-5B5401DDC15D}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F97CC46C-E894-4BDE-B33E-7D889AE01455}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F9B043DB-1E41-42EB-B4E6-86B880289310}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F9EF6377-E197-4E51-92EB-BBC15CD6F4E8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{F9F62386-F102-4558-B047-802AA2625AEB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FA5AB733-8EB3-42F3-AEDA-5BA960D79655}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FA6B8DB2-C8B9-417D-A30B-62573F90BFB1}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FB226F89-5C77-4152-9968-AB6B5B147BFF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FB2655B7-C398-4986-B3EA-F0793A434D30}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FB4CFE36-07F0-4160-A25A-D3F4086357C3}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FB5D24D1-1972-485E-B572-C6CF14EE18E8}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FBC408AE-DEB2-4559-8727-97B44D9FE5BB}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FBF11780-FF57-4B95-B0E6-C3881BE48FAE}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FC0610B4-27F1-4A81-B2C8-42F5A7FB1A73}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FC3910D7-B21D-47FD-B7EB-C4C72D68B9C2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FCD124B3-C6DE-4416-9FFF-8E71D0238F29}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FCE78467-2CD1-4358-BFDE-864C8C84B3D5}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FCF373B7-0739-449A-826C-9A5B8A6A072F}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FCF710C9-26CB-42E4-8DD5-4B40FA32F907}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FD366275-BEE2-49C7-B91C-992EBF7358F2}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FD957AFA-9CAC-4E6C-BBA4-5E8AA2EDC0EF}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FDA5FBC1-F5DF-4E1F-AF52-663FB08D9C59}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FDA8B558-0BA6-422C-A2A3-5DE37E9A5F28}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FDEC01FC-1905-4810-9AFA-D01632C6D612}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FDF54BFC-7C37-48DF-8438-3238A0B13B25}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FE20DCE1-C0EC-4959-B0CD-46972362AEFA}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FE822C42-3057-4706-AD45-E197AE1304D7}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FE85ED2D-E632-4D59-8A41-AF2104B2F09B}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FEB8E678-052D-4825-BAB8-F17E63C0DA11}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FEF24BB4-F3F3-4435-B0BE-75C5675AF226}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FF4F73CA-E83E-487C-AFF3-E7EF95430482}
Successfully deleted: [Empty Folder] C:\Users\Wolfgang Dorn\appdata\local\{FFD52D89-47C5-4C56-AC4B-18E09B7EAAE3}



~~~ FireFox

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{c7ae725d-fa5c-4027-bb4c-787ef9f8248a}
Emptied folder: C:\Users\Wolfgang Dorn\AppData\Roaming\mozilla\firefox\profiles\h1av0rt4.default\minidumps [7 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\chgdeabpmphfhkoemjjglmilajldekbp



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.05.2014 at 20:43:24,73
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Das war's wohl für heute. Ich hoffe, dass alles übersichtlich ist und dass ich die richtigen Daten geschickt habe.
Nun liegt es erstmal in Deiner Hand, ob aus meinem Arbeitsgerät wieder ein vollwertiges Mitglied der Arbeitsgemeinschaft wird.

Danke erstmal und bis später

herzlichst

ewes

schrauber · 07.05.2014, 17:33

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ewes-Ltd · 08.05.2014, 03:54

Hallo Schrauber,

hast du jetzt einmal, oder zweimal, oder gar keine Antwort bekommen?

Ich habe Dir zweimal die Scans geschickt und meine Bedrohungen, aber ich finde jetzt nichts mehr.

MfG - ewes

schrauber · 08.05.2014, 16:30

gar keine

ewes-Ltd · 08.05.2014, 21:53

Hallo Schrauber, danke erstmal!

Ich habe zweimal alles weggeschickt - mit Anhängen.
Beides mal ging die komplette Sendung raus, aber ich fand keine Kopie hier in der Auflistung. Die letzte Post war um 05:15 Uhr heute Morgen.

Jetzt versuche ich es nochmal zusammenzubringen. In Kürze das Ergebnis: ich habe 4 Trojaner drin, die ich vermutlich nicht gelöscht habe.

Während des ESET-Scans über 7-Stunden kamen folgende Meldungen:
"Der Computer hat nicht genügend Arbeitsspeicher. Speichern Sie die Dateien und schließen Sie folgende Programme: Windows Explorer (Arbeitsplatz, Ordner)" Dann hatte ich die Wahl - Programm schließen oder abbrechen. Ich entschied mich für abbrechen.
Das Prüfprogramm blieb dann bei 57% hängen, lief nach 1 1/2 Stunden weiter und stand dann bei 94% ca. 2 Stunden.

Dazu hatte ich auch noch die Meldungen:
Arbeitsspeicher voll
und
Windows Explorer funktioniert nicht mehr
und
Die Ausnahme "unknown software exception" (0x40000015) ist in der Anwendung an der Stelle 0x011cb90a aufgetreten.

Insgesamt fährt der Rechner zu langsam hoch. Es findet irgendeine Arbeit im Hintergrund statt. Die ICONS auf dem Bildschirm bekommen Farbe, dann verlöschen sie wieder - und irgendwann kommt wieder ganz langsam Farbe in die Dinger.

Nur die Meldung von POKKI fehlt. das ist der erfreuliche Unterschied.

Die Trojaner sehen folgendermaßen aus:
C:ProgrammData\Microsoft\Windows\Start Menü\Programm (Bedrohung) LNK/URL.B
C:Users\AllUsers\Microsoft\Windows\Start Menü\Programm (Bedrohung) LNK/URL.B
C:Users\WolfgangDorn\Desktop\Downloads{.gimp-2..........(Bedrohung) Variante von WIN 32/Kryptik.BWJC
C:Users\WolfgangDorn\Mediencenter\Computer/Regu........(Bedrohung) Variante von WIN 32/Adware.Reg REVIVE.A Anwendung

Ich hoffe, dass dies alles noch so stimmt, wie ich es jetzt geschrieben habe. Mein vorheriger Text ist komplett weg. Dies waren nur Notnotizen.
Die log.txt existiert nicht von ESET
Soll ich ESET-Scan heute Nacht nochmal durchlaufen lassen?
Ich habe den Scanner bisher noch nicht entfernt - deswegen.

Hier kommt checkup.txt:

Code:

ATTFilter

  Results of screen317's Security Check version 0.99.82  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
AVG AntiVirus Free Edition 2014   
Microsoft Security Essentials     
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 TuneUp Utilities 2013   
 TuneUp Utilities Language Pack (de-DE) 
 Java 7 Update 55  
 Adobe Flash Player 13.0.0.206  
 Adobe Reader 10.1.9 Adobe Reader out of Date!  
 Mozilla Firefox (28.0) 
 Google Chrome 34.0.1847.116  
 Google Chrome 34.0.1847.131  
 Google Chrome Plugins...  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials msseces.exe 
 Windows Defender MSMpEng.exe 
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 AVG avgwdsvc.exe 
 Common Files Microsoft Shared Windows Live OnlineScannerApp.exe -?- 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

und nun kommt noch wunschgemäß FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-05-2014
Ran by Wolfgang Dorn (administrator) on EWES2000 on 08-05-2014 03:54:12
Running from C:\Downloads\Software
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.23.9\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(NCH Software) C:\Program Files (x86)\NCH Software\Fling\fling.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesApp64.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(Microsoft Corporation) C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIUE.EXE
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(Google) C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe
() C:\Downloads\Software\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5670448 2013-02-05] (VIA)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Google Desktop Search] => C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502952 2012-07-09] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Fling] => C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
HKLM-x32\...\Run: [FileFort] => C:\Program Files (x86)\NCH Software\FileFort\filefort.exe [1391144 2013-08-24] (NCH Software)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2013-09-28] ()
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [32D4EFD63E3776D01E26F2FB20F229EDFF05E6BE._service_run] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe [841032 2014-04-24] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20922016 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [SkyDrive] => C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-04-15] (Microsoft Corporation)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [1&1_1&1 Upload-Manager] => C:\Program Files (x86)\1&1\1&1 Upload-Manager\DAVSRV.EXE [989264 2011-11-21] (1&1 Internet AG)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIUE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Google Update] => C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-11-30] (Google Inc.)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-1710860145-1155721231-3359118018-1000\...\RunOnce: [Uninstall C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811] - C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Wolfgang Dorn\AppData\Local\Microsoft\SkyDrive\17.0.2015.0811"
IFEO\davsrv.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\filefort.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\lgux.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\strato hidrive.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\tomtomhome.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\unins000.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
IFEO\uninstall tomtom home.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2013\TUAutoReactivator64.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe (McAfee, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: 192.168.2.1:80
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
URLSearchHook: HKLM-x32 - (No Name) - {5786d022-540e-4699-b350-b4be0ae94b79} - No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: CBAbzockschutz.InitToolbarBHO - {2e250b90-0e7a-42a3-9d65-e39f9f227fa4} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Wondershare Player 1.6.0 - {43D9786F-A485-683B-9B5B-ACC97ABC17FC} - C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll (Wondershare)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - COMPUTERBILD-Abzockschutz - {353e2a48-6254-4bd3-88f4-3b51a0ca7870} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {5786D022-540E-4699-B350-B4BE0AE94B79} -  No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Handler-x32: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: WSIEChrome - {6D02ED5F-FD0D-4C4C -  No File
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.15.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro PDF\Professional 7\npnitromozilla.dll ( )
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: samsung.com/SamsungLinkPCPlugin - C:\Program Files\Samsung\Samsung Link\utils\npSamsungLinkPCPlugin.dll (Samsung)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Wolfgang Dorn\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Wolfgang Dorn\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-26]
FF Extension: Ghostery - C:\Users\Wolfgang Dorn\AppData\Roaming\Mozilla\Firefox\Profiles\h1av0rt4.default\Extensions\firefox@ghostery.com.xpi [2014-04-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\
FF Extension: No Name - C:\ProgramData\Wondershare\Player\Player@Wondershare.com\ []
FF HKCU\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt\
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome: 
=======
CHR HomePage: hxxp://www.google.de/
CHR StartupUrls: "hxxp://www.google.de/"
CHR Extension: (GMX MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\camnampocfohlcgbajligmemmabnljcm [2014-03-03]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2014-03-03]
CHR Extension: (Learn Spanish with LoMÃ*sTv) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejdepbibpmpfkeokhhnlidhfgmpapnm [2013-11-05]
CHR Extension: (Skype Click to Call) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-04-22]
CHR Extension: (AVG Secure Search) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof [2014-03-13]
CHR Extension: (DVDVideoSoft) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-01-25]
CHR Extension: (Google Wallet) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Learn Spanish - QuÃ© Onda) - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmcdjmebmeoobmdghjbjhbifoocbcmaj [2013-11-05]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [bkdegagmpemadclljncealhmmkojfoam] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR StartMenuInternet: Google Chrome - C:\Users\Wolfgang Dorn\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 AllShare Framework DMS; C:\PROGRAM FILES\SAMSUNG\ALLSHARE FRAMEWORK DMS\1.3.21\ALLSHAREFRAMEWORKMANAGERDMS.EXE [404360 2013-10-11] (Samsung)
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
S4 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 4\DfSdkS64.exe [548704 2010-03-13] (mst software GmbH, Germany)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 FlingService; C:\Program Files (x86)\NCH Software\Fling\fling.exe [1145368 2013-07-31] (NCH Software)
S4 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [496232 2010-01-21] ()
S3 GoogleDesktopManager-051210-111108; C:\Program Files (x86)\Google\Google Desktop Search\GoogleDesktop.exe [30192 2011-09-26] (Google)
S3 GSService; C:\Windows\SysWOW64\GSService.exe [443080 2013-12-16] ()
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] ()
U2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NitroDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Professional\7.0\NitroPDFDriverService2x64.exe [216072 2012-09-04] (Nitro PDF Software)
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [229392 2012-09-13] (Nitro PDF Software)
S4 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [209000 2010-01-21] ()
S2 Samsung Link Service; C:\Program Files\Samsung\Samsung Link\Samsung Link.exe [605768 2013-10-30] (Copyright 2013 SAMSUNG)
S4 STRATO HiDrive Service; C:\Program Files (x86)\STRATO AG\STRATO HiDrive\STRATO HiDrive Service.exe [32768 2011-11-15] (STRATO)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2412344 2014-01-28] (TuneUp Software)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-12] (VIA Technologies, Inc.)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 JetDrive WindowsClosingService; C:\Windows\System32\WindowsClosingService [X]

==================== Drivers (Whitelisted) ====================

S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus64.sys [19456 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag64.sys [27648 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps64.sys [27136 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem64.sys [34304 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [31744 2010-08-02] (Google Inc)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [237336 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192792 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [236824 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [324376 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [130840 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [32536 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [274200 2014-03-31] (AVG Technologies CZ, s.r.o.)
R3 HaozipVirtualCDBus; C:\Windows\System32\DRIVERS\HaoZipVirtualCDBus.sys [204888 2012-07-24] (Shanghai RuiChuang)
S3 jetdrive; C:\Windows\System32\DRIVERS\jddrv.sys [37248 2012-05-22] (Abelssoft GmbH)
R3 LgBttPort; C:\Windows\System32\DRIVERS\lgbtpt64.sys [16384 2009-09-29] (LG Electronics Inc.)
R3 lgbusenum; C:\Windows\System32\DRIVERS\lgbtbs64.sys [14848 2009-09-29] (LG Electronics Inc.)
R3 LGVMODEM; C:\Windows\System32\DRIVERS\lgvmdm64.sys [17408 2009-09-29] (LG Electronics Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2010-07-16] (CACE Technologies, Inc.)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-03-22] (RapidSolution Software AG)
S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [16152 2014-04-26] ()
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-08-28] (TuneUp Software)
R1 ui11rdr; C:\Windows\System32\DRIVERS\ui11rdr.sys [199752 2011-11-21] (1&1 Internet AG)
R1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [102664 2013-12-12] ()
R1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [25992 2013-12-12] ()
R1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [700680 2013-12-12] ()
R3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-03-25] (Wondershare)
S3 cpuz134; \??\C:\Users\WOLFGA~1\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
S3 VBoxDrv; \??\C:\Program Files\Oracle\VirtualBox\VBoxDrv.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 18:18 - 2014-05-07 18:35 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:00 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-06 19:59 - 2014-05-06 20:13 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 17:04 - 2014-05-06 19:44 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 16:38 - 2014-04-14 04:24 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-06 16:38 - 2014-04-14 04:19 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-04 23:57 - 2012-06-01 07:39 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\wamregps.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 07:36 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 07:35 - 00060928 _____ (Microsoft Corporation) C:\Windows\system32\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 07:34 - 00055296 _____ (Microsoft Corporation) C:\Windows\system32\admwprox.dll
2014-05-04 23:57 - 2012-06-01 07:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\iisreset.exe
2014-05-04 23:57 - 2012-06-01 06:40 - 00010752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wamregps.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisRtl.dll
2014-05-04 23:57 - 2012-06-01 06:37 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisrstap.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\admwprox.dll
2014-05-04 23:57 - 2012-06-01 06:35 - 00026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ahadmin.dll
2014-05-04 23:57 - 2012-06-01 06:34 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iisreset.exe
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:05 - 2014-05-08 03:54 - 00000000 ____D () C:\FRST
2014-05-04 19:41 - 2014-05-08 03:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-04 19:09 - 2014-05-05 09:22 - 00044948 _____ () C:\Windows\iis7.log
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-02 23:00 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-02 23:00 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-02 23:00 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-02 23:00 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-01 21:07 - 2014-05-06 20:15 - 00000646 _____ () C:\Windows\PFRO.log
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:42 - 2014-05-07 19:30 - 00001176 _____ () C:\Windows\setupact.log
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-26 22:10 - 2014-04-26 22:16 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 21:17 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-04-23 21:17 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-04-22 19:04 - 2013-10-02 04:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-04-22 19:04 - 2013-10-02 04:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-04-22 19:04 - 2013-10-02 04:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 03:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 03:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 03:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-04-22 19:04 - 2013-10-02 02:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-04-22 19:04 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-04-22 19:04 - 2013-10-02 02:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-04-22 19:04 - 2013-10-02 02:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-04-22 19:04 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-04-22 19:04 - 2013-10-02 01:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-04-22 19:04 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-04-22 19:04 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-04-22 19:03 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-22 19:02 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-22 19:02 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-22 19:02 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-22 19:02 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-22 19:02 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-22 19:02 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-22 19:02 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-22 19:02 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-22 19:02 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-22 19:02 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-22 19:02 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-22 19:02 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-22 19:02 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-22 19:02 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-22 19:02 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-22 19:02 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-22 19:02 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-22 19:02 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-22 19:02 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-22 19:02 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-22 19:02 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-22 19:02 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-22 19:02 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-22 19:02 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-22 19:02 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-22 19:02 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-22 19:02 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-22 18:59 - 2013-09-25 04:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-04-22 18:59 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:42 - 2014-04-21 23:43 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-05-08 03:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-05-04 21:03 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-04-21 18:10 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 13:56 - 2014-04-23 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-21 13:56 - 2014-04-14 20:13 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-21 13:56 - 2014-04-14 20:05 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-21 13:56 - 2014-04-14 20:05 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-21 13:56 - 2014-04-14 20:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-21 13:55 - 2014-04-21 13:56 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-20 01:05 - 2014-04-20 01:11 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2013-12-16 20:31 - 00443080 _____ () C:\Windows\SysWOW64\GSService.exe
2014-04-19 23:58 - 2014-04-28 19:12 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-19 23:55 - 2013-08-22 19:09 - 00256088 _____ () C:\Windows\system32\unrar64.dll
2014-04-19 23:55 - 2013-08-22 19:09 - 00217176 _____ () C:\Windows\SysWOW64\unrar.dll
2014-04-19 23:53 - 2014-04-20 01:05 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-19 15:30 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:24 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-19 14:24 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-19 14:24 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-19 14:24 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-04-19 14:23 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-04-19 14:23 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-04-19 14:23 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-04-19 14:23 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-04-19 14:22 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-19 14:04 - 2014-04-19 14:59 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-19 23:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 01:55 - 2014-04-19 23:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-17 01:47 - 2014-04-28 19:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-17 01:47 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-17 01:46 - 2014-04-23 22:06 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-17 01:46 - 2014-04-23 22:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-16 23:17 - 2014-04-17 00:50 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-16 23:17 - 2014-04-16 23:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 12:35 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:21 - 2014-05-04 16:26 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-04-15 15:21 - 2014-05-04 16:26 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom
2014-04-10 00:13 - 2014-04-14 22:56 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log

==================== One Month Modified Files and Folders =======

2014-05-08 03:54 - 2014-05-04 21:05 - 00000000 ____D () C:\FRST
2014-05-08 03:54 - 2013-11-29 21:19 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\HaoZip
2014-05-08 03:54 - 2011-09-28 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Skype
2014-05-08 03:37 - 2011-09-20 13:44 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-08 03:25 - 2014-05-04 19:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Trojaner Board
2014-05-08 03:25 - 2014-04-21 18:12 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Free Download Manager
2014-05-08 03:22 - 2012-11-30 14:09 - 00001152 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA.job
2014-05-08 03:19 - 2014-01-08 02:11 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\CrashDumps
2014-05-08 03:14 - 2012-07-15 20:16 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-07 23:00 - 2014-03-19 02:42 - 01382344 _____ () C:\Windows\WindowsUpdate.log
2014-05-07 19:48 - 2014-05-07 19:48 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-07 19:44 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-07 19:44 - 2009-07-14 06:45 - 00014784 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-07 19:33 - 2013-11-25 20:53 - 00000000 ___RD () C:\Users\Wolfgang Dorn\SkyDrive
2014-05-07 19:33 - 2011-09-29 01:20 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Nitro PDF
2014-05-07 19:30 - 2014-05-01 11:42 - 00001176 _____ () C:\Windows\setupact.log
2014-05-07 19:30 - 2011-09-20 13:44 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-07 19:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-07 19:22 - 2012-11-30 14:09 - 00001100 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core.job
2014-05-07 18:35 - 2014-05-07 18:18 - 129058304 _____ () C:\Users\Wolfgang Dorn\paragon-drive-copy-professional-14-bootcd-builder.msi
2014-05-07 18:35 - 2011-09-08 14:18 - 00000000 ____D () C:\Users\Wolfgang Dorn
2014-05-07 17:58 - 2014-05-07 17:58 - 00002350 _____ () C:\Users\Public\Desktop\Paragon Drive Copy™ 14 Professional.lnk
2014-05-07 17:58 - 2014-05-07 17:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paragon Drive Copy™ 14 Professional
2014-05-07 17:56 - 2014-05-07 17:56 - 00000000 ____D () C:\Program Files\Paragon Software
2014-05-07 17:52 - 2013-06-13 11:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Downloaded Installations
2014-05-07 17:21 - 2012-08-14 01:05 - 00000000 ____D () C:\ProgramData\MFAData
2014-05-07 12:17 - 2013-01-22 04:26 - 00000000 ___RD () C:\Users\Wolfgang Dorn\Mediencenter
2014-05-06 20:43 - 2014-05-06 20:43 - 00137837 _____ () C:\Users\Wolfgang Dorn\Desktop\JRT.txt
2014-05-06 20:33 - 2014-05-06 20:33 - 00000000 ____D () C:\Windows\ERUNT
2014-05-06 20:25 - 2014-05-06 20:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 20:15 - 2014-05-01 21:07 - 00000646 _____ () C:\Windows\PFRO.log
2014-05-06 20:13 - 2014-05-06 19:59 - 00000000 ____D () C:\AdwCleaner
2014-05-06 19:44 - 2014-05-06 17:04 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-05-06 19:44 - 2011-10-04 21:56 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-05-06 19:44 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-06 19:41 - 2013-09-19 23:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-05-06 19:17 - 2012-11-30 14:09 - 00004138 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000UA
2014-05-06 19:17 - 2012-11-30 14:09 - 00003742 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1710860145-1155721231-3359118018-1000Core
2014-05-06 19:03 - 2014-05-06 19:03 - 00001073 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
2014-05-06 19:03 - 2014-05-06 19:03 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-05-06 18:58 - 2014-05-06 18:58 - 00002155 _____ () C:\Users\Wolfgang Dorn\Desktop\ Malwarebytes Anti-Malware  - CHIP Downloader.lnk
2014-05-06 00:37 - 2012-07-12 14:49 - 00403968 ___SH () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Thumbs.db
2014-05-06 00:13 - 2011-09-26 12:31 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Winamp
2014-05-06 00:12 - 2012-07-12 18:34 - 00640000 ___SH () C:\Users\Wolfgang Dorn\Desktop\Thumbs.db
2014-05-05 16:25 - 2014-03-21 00:59 - 00008192 _____ () C:\Users\Wolfgang Dorn\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-05 09:22 - 2014-05-04 19:09 - 00044948 _____ () C:\Windows\iis7.log
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\inetsrv
2014-05-05 09:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\inetsrv
2014-05-04 21:24 - 2014-05-04 21:24 - 00000000 _____ () C:\Users\Wolfgang Dorn\defogger_reenable
2014-05-04 21:03 - 2014-04-21 18:10 - 00000000 ____D () C:\Program Files (x86)\Free Download Manager
2014-05-04 19:23 - 2012-01-18 11:07 - 00000000 ____D () C:\Program Files (x86)\Brother
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-05-04 19:10 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\SysWOW64\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Windows\system32\BestPractices
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\Program Files\Microsoft Games
2014-05-04 19:09 - 2014-05-04 19:09 - 00000000 ____D () C:\inetpub
2014-05-04 19:09 - 2009-07-14 19:58 - 00748396 _____ () C:\Windows\system32\perfh007.dat
2014-05-04 19:09 - 2009-07-14 19:58 - 00163768 _____ () C:\Windows\system32\perfc007.dat
2014-05-04 16:26 - 2014-04-15 15:21 - 00001062 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-05-04 16:26 - 2014-04-15 15:21 - 00001050 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-05-04 14:18 - 2014-03-24 18:26 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\.oit
2014-05-01 21:07 - 2014-03-19 02:38 - 00424632 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-01 20:39 - 2014-03-27 10:13 - 00111336 _____ () C:\Users\Wolfgang Dorn\AppData\Local\GDIPFONTCACHEV1.DAT
2014-05-01 20:38 - 2014-05-01 20:38 - 00003352 _____ () C:\Windows\System32\Tasks\{BE9F1861-5360-4496-93C7-1CF89F0403EE}
2014-05-01 20:21 - 2012-02-22 18:53 - 00000000 ____D () C:\ProgramData\ScanSoft
2014-05-01 11:52 - 2014-05-01 11:52 - 00001278 _____ () C:\Users\Wolfgang Dorn\Desktop\GMX MediaCenter.lnk
2014-05-01 11:52 - 2013-12-09 18:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\GMX Application {sync-000021}
2014-05-01 11:31 - 2011-09-26 12:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2014-05-01 11:24 - 2011-09-26 12:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-05-01 11:08 - 2014-04-02 17:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-05-01 11:08 - 2013-09-27 18:42 - 00000941 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2014-04-30 22:45 - 2014-04-30 22:45 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-04-30 22:45 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-04-30 22:38 - 2014-04-30 22:38 - 00000000 ____D () C:\Users\Wolfgang Dorn\.swt
2014-04-30 22:33 - 2011-12-10 16:20 - 00000000 ____D () C:\Windows\pss
2014-04-30 20:47 - 2014-01-18 23:05 - 00000000 ____D () C:\Program Files (x86)\CheckDrive
2014-04-30 19:18 - 2012-01-08 19:33 - 00002400 _____ () C:\Users\Wolfgang Dorn\Desktop\Google Chrome.lnk
2014-04-29 16:01 - 2014-05-02 23:00 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-29 15:40 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-29 14:48 - 2014-05-02 23:00 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-04-29 14:34 - 2014-05-02 23:00 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-04-29 11:14 - 2014-04-29 11:14 - 17931952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-04-29 11:14 - 2012-07-15 20:16 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-04-29 11:14 - 2011-09-20 14:20 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-04-29 09:40 - 2011-09-19 01:32 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-04-28 19:46 - 2011-09-27 10:48 - 00000000 ____D () C:\Program Files (x86)\Biet-O-Matic
2014-04-28 19:12 - 2014-04-19 23:58 - 00000083 _____ () C:\Windows\SysWOW64\gpupdate.bin
2014-04-28 19:12 - 2014-04-17 01:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\RipTiger
2014-04-28 17:45 - 2011-12-30 20:08 - 00000000 ____D () C:\Program Files (x86)\ubuntuone
2014-04-28 17:44 - 2014-04-28 17:44 - 00000000 ____D () C:\Users\Wolfgang Dorn\Ubuntu One
2014-04-27 19:46 - 2013-12-03 20:35 - 00000000 ____D () C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige
2014-04-26 23:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-04-26 23:35 - 2013-05-29 14:45 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-04-26 23:04 - 2011-09-19 01:59 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-04-26 22:16 - 2014-04-26 22:10 - 00000000 ____D () C:\Program Files (x86)\DriverUpdate
2014-04-26 22:10 - 2014-04-26 22:10 - 00016152 _____ () C:\Windows\system32\Drivers\SWDUMon.sys
2014-04-26 22:10 - 2014-04-26 22:10 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\SlimWare Utilities Inc
2014-04-26 14:40 - 2014-04-26 14:40 - 00001123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00001111 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-04-26 14:40 - 2014-04-26 14:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 12:18 - 2011-09-27 11:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Paint.NET
2014-04-26 11:02 - 2014-04-26 11:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Media Player Classic
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieUserList
2014-04-25 16:35 - 2014-04-25 16:35 - 00000000 __SHD () C:\Users\Wolfgang Dorn\AppData\Local\EmieSiteList
2014-04-23 22:06 - 2014-04-21 18:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2014-04-23 22:06 - 2014-04-21 13:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files\WinPcap
2014-04-23 22:06 - 2014-04-19 15:30 - 00000000 ____D () C:\Program Files (x86)\AnyMedia Player
2014-04-23 22:06 - 2014-04-17 01:47 - 00000000 ____D () C:\Program Files (x86)\SoundTaxi Media Suite
2014-04-23 22:06 - 2014-04-17 01:46 - 00000000 ____D () C:\Program Files (x86)\RipTiger
2014-04-23 22:06 - 2013-08-07 13:31 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-04-23 22:06 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\AppCompat
2014-04-23 22:05 - 2014-04-17 01:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SoundTaxi Media Suite
2014-04-23 22:05 - 2011-09-26 17:14 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla
2014-04-23 09:52 - 2012-03-11 17:40 - 00000000 ____D () C:\Users\Wolfgang Dorn\Tracing
2014-04-22 22:11 - 2009-07-14 07:13 - 01629348 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-22 19:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-04-22 18:48 - 2014-04-22 18:48 - 00003002 _____ () C:\Windows\System32\Tasks\{C552955F-0F48-460B-B2E0-DB1DA714EB72}
2014-04-22 17:53 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-21 23:43 - 2014-04-21 23:43 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-04-21 23:43 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-04-21 23:43 - 2011-09-28 23:55 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-04-21 23:42 - 2014-04-21 23:42 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-04-21 23:36 - 2014-04-21 23:36 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-04-21 23:05 - 2014-04-21 23:05 - 00000000 ____D () C:\Windows\CheckSur
2014-04-21 18:12 - 2014-04-21 18:12 - 00000000 ____D () C:\ProgramData\Free Download Manager
2014-04-21 18:10 - 2014-04-21 18:10 - 00001031 _____ () C:\Users\Wolfgang Dorn\Desktop\Free Download Manager.lnk
2014-04-21 15:11 - 2013-10-23 12:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-21 13:56 - 2014-04-21 13:55 - 00004253 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_55-b14.log
2014-04-21 13:56 - 2012-07-02 08:43 - 00000000 ____D () C:\Program Files (x86)\Java
2014-04-20 22:49 - 2013-12-06 20:48 - 00000000 ____D () C:\Users\Wolfgang Dorn\Bavaria Holiday Enterprises, Inc
2014-04-20 11:26 - 2011-09-19 01:59 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Microsoft Help
2014-04-20 01:11 - 2014-04-20 01:05 - 00000971 _____ () C:\Users\Public\Desktop\RipTiger.lnk
2014-04-20 01:05 - 2014-04-19 23:53 - 00001082 _____ () C:\Users\Public\Desktop\SoundTaxi Media Suite.lnk
2014-04-20 00:24 - 2012-02-22 18:54 - 00000000 ____D () C:\ProgramData\InstallShield
2014-04-20 00:24 - 2011-09-19 02:20 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-04-20 00:23 - 2011-09-19 01:29 - 00000000 ____D () C:\ProgramData\Brother
2014-04-19 23:55 - 2014-04-17 01:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2014-04-19 23:55 - 2014-04-17 01:55 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2014-04-19 23:35 - 2014-04-19 23:35 - 00001132 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00001120 _____ () C:\Users\Public\Desktop\Express Rip.lnk
2014-04-19 23:35 - 2014-04-19 23:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-04-19 23:35 - 2013-05-29 14:44 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\gegl-0.2
2014-04-19 15:47 - 2014-04-19 15:47 - 00000000 ____D () C:\Users\Wolfgang Dorn\.gimp-2.8
2014-04-19 15:12 - 2011-09-26 12:15 - 00000000 ____D () C:\Program Files (x86)\Wondershare
2014-04-19 15:09 - 2012-06-10 18:28 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\RealNetworks
2014-04-19 15:09 - 2012-01-16 10:55 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Real
2014-04-19 15:00 - 2013-08-14 18:05 - 00000000 ____D () C:\ProgramData\Wondershare Player
2014-04-19 15:00 - 2013-02-27 16:23 - 00000000 ____D () C:\ProgramData\Wondershare
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Winamp Erkennungs-Plug-in
2014-04-19 15:00 - 2011-09-26 12:32 - 00000000 ____D () C:\Program Files (x86)\Winamp Detect
2014-04-19 15:00 - 2011-09-26 12:07 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\vlc
2014-04-19 14:59 - 2014-04-19 14:59 - 00003356 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2014-04-19 14:04 - 00003238 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:59 - 2012-01-16 10:55 - 00000000 ____D () C:\ProgramData\Real
2014-04-19 14:46 - 2013-08-15 16:51 - 00000000 ____D () C:\Windows\system32\MRT
2014-04-19 14:33 - 2012-07-05 00:02 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Local\Mozilla Firefox
2014-04-19 14:31 - 2014-04-19 14:31 - 00003260 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:30 - 2014-04-19 14:30 - 00003378 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-19 14:08 - 2014-04-19 14:08 - 00000000 ____D () C:\ProgramData\Avg_Update_0414b
2014-04-18 15:01 - 2014-04-18 15:01 - 00237336 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2014-04-17 01:56 - 2014-04-17 01:56 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\RipTiger Error Report
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\ProgramData\Freemake
2014-04-17 00:50 - 2014-04-16 23:17 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-04-17 00:06 - 2012-12-22 02:49 - 00003398 _____ () C:\Windows\System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1710860145-1155721231-3359118018-1000
2014-04-16 23:45 - 2014-04-16 23:45 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\dlg
2014-04-16 23:41 - 2014-04-16 23:17 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Freemake
2014-04-16 23:04 - 2014-04-16 23:04 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\anyburn
2014-04-16 20:32 - 2014-04-16 20:32 - 00000000 ____D () C:\Windows\de
2014-04-16 20:32 - 2011-09-26 19:13 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2014-04-16 20:31 - 2014-04-16 20:31 - 00002446 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2014-04-16 20:31 - 2014-04-16 20:31 - 00001265 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-04-16 20:31 - 2013-11-25 21:01 - 00001334 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-04-16 20:31 - 2011-09-26 19:14 - 00001450 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2014-04-16 20:30 - 2011-09-26 19:13 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-04-16 20:29 - 2011-09-26 19:12 - 00000000 ____D () C:\Program Files\Windows Live
2014-04-16 14:39 - 2013-08-07 13:30 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Wondershare Video Converter Ultimate
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
2014-04-16 14:02 - 2014-03-24 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2014-04-16 14:02 - 2012-01-08 19:33 - 00000000 ____D () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-04-16 14:02 - 2011-12-20 23:24 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2014-04-16 01:54 - 2014-01-30 22:17 - 00007601 _____ () C:\Users\Wolfgang Dorn\AppData\Local\resmon.resmoncfg
2014-04-15 23:23 - 2014-03-24 17:58 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Epson Drucker
2014-04-15 22:53 - 2014-03-24 17:10 - 00000000 ____D () C:\Program Files (x86)\Epson Software
2014-04-15 21:28 - 2014-01-18 23:27 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\Abelssoft
2014-04-15 19:37 - 2014-04-15 19:37 - 00002204 _____ () C:\Users\Wolfgang Dorn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-04-15 19:37 - 2014-04-15 19:37 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2014-04-15 15:23 - 2014-01-18 23:06 - 00000000 ____D () C:\Windows\System32\Tasks\Abelssoft
2014-04-15 15:23 - 2011-12-20 23:25 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\TomTom
2014-04-15 15:23 - 2011-12-20 23:24 - 00000000 ____D () C:\Program Files (x86)\TomTom HOME 2
2014-04-15 15:23 - 2011-09-26 12:31 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-04-15 15:22 - 2011-09-26 17:41 - 00000000 ____D () C:\Users\Wolfgang Dorn\Desktop\Downloads\.gimp-2.6\environ\Documents\25.09.2011
2014-04-14 22:56 - 2014-04-10 00:13 - 00008817 _____ () C:\Users\Wolfgang Dorn\Sti_Trace.log
2014-04-14 20:13 - 2014-04-21 13:56 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-04-14 20:05 - 2014-04-21 13:56 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-04-14 20:05 - 2014-04-21 13:56 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-04-14 20:04 - 2014-04-21 13:56 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-04-14 12:06 - 2014-03-24 17:12 - 00000279 _____ () C:\Users\Public\Desktop\Epson Benutzerhandbuch WF-2540 Series.url
2014-04-14 12:06 - 2014-03-24 17:12 - 00000256 _____ () C:\Users\Public\Desktop\Anleitung für Epson Connect.url
2014-04-14 04:24 - 2014-05-06 16:38 - 00465408 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-04-14 04:19 - 2014-05-06 16:38 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-04-12 19:28 - 2014-04-12 19:28 - 00000000 ____D () C:\ProgramData\TomTom

Files to move or delete:
====================
C:\Users\Wolfgang Dorn\FileViewPro_2014.exe
C:\Users\Wolfgang Dorn\gimp-2.8.10-setup.exe
C:\Users\Wolfgang Dorn\haozip_v3.0.multi.exe
C:\Users\Wolfgang Dorn\pdf24-creator-6.0.1.exe
C:\Users\Wolfgang Dorn\RevoUninProSetup.exe
C:\Users\Wolfgang Dorn\setup.exe
C:\Users\Wolfgang Dorn\sysrc_trial_3267_3965405.exe
C:\Users\Wolfgang Dorn\WEB.DE_MailCheck_chrome_setup.exe
C:\Users\Wolfgang Dorn\winamp565_full_emusic-7plus_de-de.exe
C:\Users\Wolfgang Dorn\ZipExtractorSetup.exe


Some content of TEMP:
====================
C:\Users\Wolfgang Dorn\AppData\Local\Temp\Quarantine.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\shutdown1398699937.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is33D2.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is6B6C.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is80AF.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_is8B30.exe
C:\Users\Wolfgang Dorn\AppData\Local\Temp\_isE209.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-04 17:01

==================== End Of Log ============================

--- --- ---

--- --- ---

Dies war jetzt meine Ausbeute.
Wie oben angeboten, bin ich gerne bereit, den ESET-Scan nochmal laufen zu lassen.
Wenn meine Kiste mitspielt, sollte es diesmal in kürzerer Zeit erledigt werden können.

Oder - was soll ich noch tun? Wie kann ich Dir zuarbeiten?

Herzlichst

ewes

Nachmeldung

Hallo Schrauber,

ein Arbeiten ist relativ schwierig zur Zeit. Es kommt laufend die Meldung:
Der Computer hat nicht genügend Arbeitsspeicher.
Speichern Sie die folgenden Programme: Windows Explorer (Arbeitsplatz, Ordner)

oder einfach

Arbeitsspeicher voll

Wenn ich dann versuche weiterzuarbeiten, wird die Schrift riesig und alles blockiert. Dann muss ich den PC gewaltsam runterfahren.

Eine weitere Meldung ist auch schon bekannt. Diese wiederholt sich ebenfalls:
Die Ausnahme "unknown software exception" (0x40000015) ist in der Anwendung an der Stelle 0x011cb90a aufgetreten.

Vorrangig spielt das Gerät aber mit dem vollen Arbeitsspeicher. Dies kann aber logischerweise nicht sein, weil ich fast gar nichts öffne. Dies bedeutet, dass ich mich auf jeweils eine Datei beschränke und die dann wieder schließe, wenn ich eine neue aufmachen will.

Entschuldige, wenn ich das noch hinterhergeschickt habe. Aber vielleicht hilft es Dir bei der Fehlersuche.

Danke wieder einmal mehr

herzlichst

ewes

schrauber · 09.05.2014, 16:11

Ja versch mal bitte den Scan zu wiederholen.

08.05.2014, 16:30	#13
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung gar keine __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

09.05.2014, 16:11	#15
schrauber /// the machine /// TB-Ausbilder	pokki löschen wegen Systembelastung Ja versch mal bitte den Scan zu wiederholen. __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

pokki löschen wegen Systembelastung

Log-Analyse und Auswertung: pokki löschen wegen Systembelastung