Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde

NiFu · 04.09.2014, 14:13

Hallo,

zu Beginn die Warnung, ich habe nur sehr beschränkt Ahnung von Computern und/oder Netzwerken und allem drum herum. Bitte zeigt Nachsicht.

ich habe schon vor einigen Wochen von Avira die Nachricht bekommen, dass Malware entdeckt worden sei. Ich habe diese brav aus der Quarantäne gelöscht, aber seitdem taucht die im Titel genannte Fehlermeldung beim Systemstart auf.

Ich habe Schritte 1-3 der Checkliste "Informationen zusammenstellen" durchgeführt und dementsprechend den Defogger installiert und "Disable" geklickt, die Logs mit FRST erstellt und den Scan mit GMER gemacht.
An Schritt 4, dem Export der Avira-Logfiles, bin ich aber bisher gescheitert: Zum einen muss ich gestehen, dass ich die Meldung anscheinend schon mehr als 30 Tage ertrage und dementsprechend die damals gefundene Malware gar nicht mehr als Ereignis auftaucht, zum anderen geschieht schlicht und einfach nichts, wenn ich "Ereignis exportieren" klicke.

AUßERDEM, und das erschwert die Sache zusätzlich, meldet mein Laptop seit dem Scan durch GMER ein mögliches Problem mit dem Treiber für den Adapter Drahtlosnetzwerkverbindung und kann sich nicht mehr mit unserem WLAN verbinden (Ich erstelle dieses Thema von einem anderen Computer aus). Ich weiß nicht, ob hier ein Zusammenhang besteht, aber ich würde ungern ohne weitere Beratung den Treiber reparieren, wenn mit dem Defogger aktuell etwas auf meinem PC arbeitet, in dass ich so gar keinen Einblick habe.

In der Hoffnung auf Hilfe, leicht verzweifelt

Nina

schrauber · 04.09.2014, 14:18

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

NiFu · 04.09.2014, 14:40

FRST:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Nina (administrator) on LITTLEONE on 04-09-2014 10:07:59
Running from C:\Users\Nina\Downloads
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(ClientConnect Ltd.) C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(WiseCleaner.COM) C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe
() C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(phase-6) C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Dropbox, Inc.) C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Users\Nina\Downloads\Defogger.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated)
HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. )
HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [pfcuxj] => regsvr32.exe "
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe "C:\ProgramData\AfquWazes\AfquWazes.dat"
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\MountPoints2: {bd6a1d80-1049-11e0-b29a-001e3327cdfa} - D:\LaunchU3.exe -a
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\MountPoints2: {dff29601-cf0a-11df-951a-001e3327cdfa} - "D:\WD SmartWare.exe" autoplay=true
Lsa: [Notification Packages] EgisPwdFilter EgisDSPwdFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk
ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
URLSearchHook: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.)
URLSearchHook: HKCU - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = 
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029
SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
SearchScopes: HKCU - {77AA745B-F4F8-45DA-9B14-61D2D95054C8} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE396
SearchScopes: HKCU - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2475029
BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Conduit Engine -> {30F9B915-B755-4826-820B-08FBA6BD249D} -> C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MyAshampoo Toolbar -> {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} -> C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - MyAshampoo Toolbar - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll (ClientConnect Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default
FF Homepage: hxxp://www.ecosia.org/
FF NetworkProxy: "ftp", "proxy.uni-bonn.de"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "proxy.uni-bonn.de"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "uni-bonn.de"
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "ssl", "proxy.uni-bonn.de"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF user.js: detected! => C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-08-28]
FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20]
FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: MySearchDial - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi [2014-05-03]
FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28]
FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt
FF Extension: SimplePass Online Accounts Extension  - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26]
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2013-01-20]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21]

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.)
R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.)
R2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. )
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed]
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed]
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 TBSrv; C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe [350496 2014-03-26] (ClientConnect Ltd.)
R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
R1 DVMIO; C:\Program Files (x86)\InstantView\tools\dvmio_x64.sys [19560 2010-04-20] (DeviceVM, Inc.)
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-04 10:07 - 2014-09-04 10:09 - 00031790 _____ () C:\Users\Nina\Downloads\FRST.txt
2014-09-04 10:07 - 2014-09-04 10:08 - 00000000 ____D () C:\FRST
2014-09-04 10:06 - 2014-09-04 10:07 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:42 - 2014-09-03 23:42 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 22:35 - 2014-09-04 10:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-02 22:25 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-02 00:56 - 2014-09-04 09:18 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job
2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-08-05 12:00 - 2014-08-05 12:00 - 00000000 ____D () C:\Users\Nina\AppData\Local\{998615A4-19B8-4757-BE09-D3B71380782F}
2014-08-05 11:42 - 2014-08-21 14:23 - 00000000 ____D () C:\ProgramData\Package Cache

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-04 10:09 - 2014-09-04 10:07 - 00031790 _____ () C:\Users\Nina\Downloads\FRST.txt
2014-09-04 10:08 - 2014-09-04 10:07 - 00000000 ____D () C:\FRST
2014-09-04 10:08 - 2010-06-26 05:36 - 00000177 ____H () C:\dvmexp.idx
2014-09-04 10:07 - 2014-09-04 10:06 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-04 10:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-04 09:27 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-04 09:27 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-04 09:25 - 2010-06-26 05:21 - 01287823 _____ () C:\Windows\WindowsUpdate.log
2014-09-04 09:19 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox
2014-09-04 09:19 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox
2014-09-04 09:18 - 2014-09-02 00:56 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job
2014-09-04 09:18 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten
2014-09-04 09:16 - 2010-06-26 05:17 - 00176846 _____ () C:\Windows\PFRO.log
2014-09-04 09:16 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-04 09:16 - 2009-07-14 06:51 - 00534767 _____ () C:\Windows\setupact.log
2014-09-04 00:25 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini
2014-09-04 00:08 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:42 - 2014-09-03 23:42 - 00001155 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google
2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:04 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-09-03 21:27 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien
2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe
2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia
2014-09-03 14:20 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc
2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary
2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6
2014-09-03 12:38 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat
2014-09-03 12:38 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat
2014-09-03 12:38 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-02 22:25 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA
2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task
2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0
2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon
2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken
2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous
2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films
2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars
2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk
2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini
2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX
2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX
2014-08-09 17:24 - 2010-09-08 18:04 - 00000000 ____D () C:\ProgramData\Skype
2014-08-07 03:52 - 2014-08-13 23:42 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 03:46 - 2014-08-13 23:42 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-05 12:07 - 2011-02-04 01:14 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-08-05 12:00 - 2014-08-05 12:00 - 00000000 ____D () C:\Users\Nina\AppData\Local\{998615A4-19B8-4757-BE09-D3B71380782F}
2014-08-05 11:42 - 2013-02-26 02:42 - 00000000 ____D () C:\ProgramData\Avira
2014-08-05 09:20 - 2010-09-27 12:30 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Nina\Firefox Setup 3.6.9.exe


Some content of TEMP:
====================
C:\Users\Nina\AppData\Local\Temp\1E2B.exe
C:\Users\Nina\AppData\Local\Temp\avgnt.exe
C:\Users\Nina\AppData\Local\Temp\drm_dyndata.dll
C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwazsjh.dll
C:\Users\Nina\AppData\Local\Temp\DWPUpgradeInstaller.exe
C:\Users\Nina\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Nina\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\Nina\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Nina\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\Nina\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Nina\AppData\Local\Temp\k9-webprotection-4.4.276.exe
C:\Users\Nina\AppData\Local\Temp\Shockwave_Installer_FF-1.exe
C:\Users\Nina\AppData\Local\Temp\Shockwave_Installer_FF.exe
C:\Users\Nina\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Nina\AppData\Local\Temp\vlc-2.0.7-win64.exe
C:\Users\Nina\AppData\Local\Temp\vlc-2.0.8-win64.exe
C:\Users\Nina\AppData\Local\Temp\vlc-2.1.1-win64.exe
C:\Users\Nina\AppData\Local\Temp\vlc-2.1.2-win64.exe
C:\Users\Nina\AppData\Local\Temp\vlc-2.1.3-win64.exe
C:\Users\Nina\AppData\Local\Temp\Wise_SETUP.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-29 14:27

==================== End Of Log ============================

--- --- ---

--- --- ---

Addition:

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2014 02
Ran by Nina at 2014-09-04 10:10:50
Running from C:\Users\Nina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.1.60 - NewTech Infosystems)
Acer Bio Protection (HKLM-x32\...\InstallShield_{FD588AD4-9150-4A41-83E8-61596E0954E4}) (Version: 7.0.32.0 - Egis Technology Inc.)
Acer Crystal Eye webcam (HKLM-x32\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 1.0.3.0 - Liteon)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3004 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3011 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0413.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 14.0.0.110 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.3.153 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.15 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.15 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Ashampoo Burning Studio 6 FREE v.6.81 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.1 - Ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
AuthenTec Fingerprint Software (HKLM-x32\...\{0D0BB4B2-BD4F-4935-AB20-036866433B8A}) (Version: 9.0.8.23 - AuthenTec, Inc.)
Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
Backup Manager Advance (x32 Version: 2.0.1.60 - NewTech Infosystems) Hidden
Bamboo (HKLM\...\Pen Tablet Driver) (Version: 5.2.5-5 - Wacom Technology Corp.)
Bamboo Dock (x32 Version: 4.1.0 - Wacom Europe GmbH) Hidden
Bamboo Dock 3.3 (HKLM-x32\...\Bamboo Dock) (Version: 3.3 - Wacom Co., Ltd.)
BioExcess (Version: 7.0.32.0 - Egis Technology Inc.) Hidden
Blue Coat K9 Web Protection (HKLM\...\Blue Coat K9 Web Protection) (Version: 4.4.276 - Blue Coat Systems, Inc.)
Broadcom Gigabit Integrated Controller (HKLM\...\{F26DE123-C491-4D8C-BC86-FDF604F00226}) (Version: 14.0.2.2 - Broadcom Corporation)
Business Contact Manager für Outlook 2007 SP2 (HKLM-x32\...\Business Contact Manager) (Version: 3.0.8619.1 - Microsoft Corporation)
Business Contact Manager für Outlook 2007 SP2 (x32 Version: 3.0.8619.1 - Microsoft Corporation) Hidden
Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.)
Citavi (HKLM-x32\...\{E12C6653-1FF0-4686-ADB8-589C13AE761F}) (Version: 3.0.0.9 - Swiss Academic Software)
Conduit Engine (HKLM-x32\...\conduitEngine) (Version:  - Conduit Ltd.) <==== ATTENTION
Conexant HD Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 4.121.0.50 - Conexant)
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.3814.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3814.50 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DataSync Outlook (HKLM-x32\...\InstallShield_{1C9171AC-5519-4DF4-B44D-B28F678DEB4C}) (Version: 7.00.2906 - O3SIS IT AG)
DataSync Outlook (x32 Version: 7.00.2906 - O3SIS IT AG) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{132D27B8-C656-44BD-8C16-73C54EA8A85F}) (Version:  - Microsoft)
DivX-Setup (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC)
Dropbox (HKCU\...\Dropbox) (Version: 2.10.27 - Dropbox, Inc.)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
Fingerprint Solution (x32 Version: 7.0.32.0 - Egis Technology Inc.) Hidden
Free YouTube Download version 3.2.34.430 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.34.430 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.39.604 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.39.604 - DVDVideoSoft Ltd.)
GIMP 2.6.10 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.10 - The GIMP Team)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
InstantView (HKLM-x32\...\InstallShield_{5C4F9F4E-11AB-42CA-A034-5F519B073E80}) (Version: 2.1.2.0 - DeviceVM, Inc.)
InstantView (x32 Version: 2.1.2.0 - DeviceVM, Inc.) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2104 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.5.6.1001 - Intel Corporation)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
K-Lite Codec Pack 6.0.4 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.0.4 - )
Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.10 - Acer Inc.)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2003 Web Components (HKLM-x32\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM-x32\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM-x32\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Small Business Connectivity Components (HKLM-x32\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{7C39E0D1-E138-42B1-B083-213EC2CF7692}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{1FBEA8BA-D40B-48BC-85BC-EE2D5575F27C}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Mozilla Firefox 32.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0 (x86 de)) (Version: 32.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyAshampoo Toolbar (HKLM-x32\...\MyAshampoo Toolbar) (Version: 6.2.6.0 - MyAshampoo) <==== ATTENTION
Mysearchdial (HKLM-x32\...\mysearchdial) (Version:  - Mysearchdial) <==== ATTENTION
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.0.36 - Symantec)
OpenVPN 2.1.3 (HKLM-x32\...\OpenVPN) (Version: 2.1.3 - )
Pauls Schreibtischübungen Bildschirmschoner (HKLM-x32\...\Pauls Schreibtischübungen) (Version:  - )
PDF Architect (HKLM-x32\...\{064A929A-4DE8-40CF-A901-BD40C14E4D25}) (Version: 1.1.83.9982 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.0 - pdfforge)
phase-6 2.3.4 (HKLM-x32\...\phase-6) (Version: 2.3.4 - phase-6)
phase6_17 (HKLM-x32\...\{EFFE151C-F863-4B1E-9E22-3C1369B4C690}) (Version: 1.70.0000 - phase6)
Pinnacle VideoSpin (HKLM-x32\...\{FEB15887-0932-4D2D-BB85-6AC03FBF1AA8}) (Version: 2.0.0.669 - Pinnacle Systems)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Skype Click to Call (HKLM-x32\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 5.9.9216 - Skype Technologies S.A.)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.106 - Skype Technologies S.A.)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.6.0 - Synaptics Incorporated)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.5000.00 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687502) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{7DE7DF97-82FE-4B3A-AB8D-1621F9CC464A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player 2.1.2 (HKLM\...\VLC media player) (Version: 2.1.2 - VideoLAN)
WD SmartWare (HKLM\...\{9BAC619B-B811-4318-8C27-B11DDF3F1719}) (Version: 1.1.0.2 - Western Digital)
WebTablet FB Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.0.0.1 - Wacom Technology Corp.)
WebTablet IE Plugin (HKLM-x32\...\Wacom WebTabletPlugin for IE) (Version: 1.1.0.12 - Wacom Technology Corp.)
WebTablet Netscape Plugin (HKLM-x32\...\Wacom WebTabletPlugin for Netscape) (Version: 1.1.0.10 - Wacom Technology Corp.)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.01.3002 - Acer Incorporated)
WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4700 - Broadcom Corporation)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
Wise Auto Shutdown 1.41 (HKLM-x32\...\Wise Auto Shutdown_is1) (Version: 1.41 - WiseCleaner.com, Inc.)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2265225284-3977146242-1558665416-1004_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

==================== Restore Points  =========================

26-08-2014 07:49:21 Windows Update
02-09-2014 10:17:59 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1FFF4522-5232-468A-A0DD-FCCA865B93C7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-03] (Adobe Systems Incorporated)
Task: {3051F4FF-3769-44A0-BC90-D0B39D57A4BB} - System32\Tasks\{66F668AF-9244-4B93-8244-6EBD56A465E2} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-07-24] (Skype Technologies S.A.)
Task: {70557CA2-77CD-4AE6-8851-359D4B505EB1} - System32\Tasks\{C9DB8E34-710D-4A0C-810C-4E698895E911} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112.259/en/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {BE33572B-7155-4A79-A897-F3FDC32679B2} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {D0FC42E5-5374-46AE-8519-A26DF3498A56} - System32\Tasks\Wise Auto Shutdown Task => C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe [2014-07-16] (WiseCleaner.COM)
Task: {D5A55542-2544-4DB9-AAC7-7F1283D0B333} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Wise Auto Shutdown Task.job => C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe

==================== Loaded Modules (whitelisted) =============

2009-01-21 16:45 - 2009-01-21 16:45 - 01401856 _____ () C:\Program Files (x86)\Acer Bio Protection\x64\LIBEAY32.dll
2013-02-17 01:55 - 2012-12-06 14:52 - 00136704 _____ () C:\Windows\System32\zlhp2600.dll
2006-12-09 05:55 - 2006-12-09 05:55 - 00022016 _____ () C:\Windows\System32\sugg1l6.dll
2012-05-30 15:40 - 2011-09-08 17:48 - 01183096 _____ () C:\Program Files\Tablet\Pen\libxml2.dll
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2010-04-16 18:45 - 2010-04-16 18:45 - 00173856 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-07-28 23:58 - 2013-05-05 17:29 - 00646744 _____ () C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
2009-08-17 11:26 - 2009-08-17 11:26 - 00049152 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\Memeo.API.dll
2009-02-25 16:18 - 2009-02-25 16:18 - 01196032 _____ () C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\sqlite3.DLL
2014-01-10 07:26 - 2014-01-10 07:26 - 01861968 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2010-06-02 22:00 - 2010-06-02 22:00 - 00012656 _____ () C:\Program Files (x86)\Acer Bio Protection\AT9Proxy.dll
2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll
2010-03-09 02:18 - 2010-03-09 02:18 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-03-09 02:13 - 2010-03-09 02:13 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll
2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll
2010-06-09 21:28 - 2009-12-24 02:32 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2010-06-09 22:02 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2014-08-05 11:42 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Nina\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-01-10 07:28 - 2014-01-10 07:28 - 00100688 _____ () C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll
2014-09-04 09:19 - 2014-09-04 09:19 - 00043008 _____ () c:\users\nina\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpwazsjh.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Nina\AppData\Roaming\Dropbox\bin\libcef.dll
2014-09-03 23:03 - 2014-08-26 10:14 - 03715184 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Cisco Systems VPN Adapter for 64-bit Windows
Description: Cisco Systems VPN Adapter for 64-bit Windows
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: CVirtA
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/04/2014 09:17:02 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/03/2014 07:19:17 PM) (Source: TabletServicePen) (EventID: 1) (User: )
Description: Prefs: Failed to get user path

Error: (09/03/2014 07:19:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Pen_Tablet.exe, Version: 5.2.5.5, Zeitstempel: 0x4e694ecd
Name des fehlerhaften Moduls: Pen_Tablet.exe, Version: 5.2.5.5, Zeitstempel: 0x4e694ecd
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000002489b4
ID des fehlerhaften Prozesses: 0xa94
Startzeit der fehlerhaften Anwendung: 0xPen_Tablet.exe0
Pfad der fehlerhaften Anwendung: Pen_Tablet.exe1
Pfad des fehlerhaften Moduls: Pen_Tablet.exe2
Berichtskennung: Pen_Tablet.exe3

Error: (09/03/2014 02:22:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DVMExportService.exe, Version: 1.2.15.2, Zeitstempel: 0x4c04c37b
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000001
ID des fehlerhaften Prozesses: 0x478
Startzeit der fehlerhaften Anwendung: 0xDVMExportService.exe0
Pfad der fehlerhaften Anwendung: DVMExportService.exe1
Pfad des fehlerhaften Moduls: DVMExportService.exe2
Berichtskennung: DVMExportService.exe3

Error: (09/03/2014 11:41:18 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/02/2014 10:20:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/02/2014 00:12:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/01/2014 07:27:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/01/2014 07:27:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: EgisService.exe, Version: 7.0.32.0, Zeitstempel: 0x4c0660ac
Name des fehlerhaften Moduls: EgisFinger.dll, Version: 7.0.37.0, Zeitstempel: 0x4c0660a0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00025261
ID des fehlerhaften Prozesses: 0x404
Startzeit der fehlerhaften Anwendung: 0xEgisService.exe0
Pfad der fehlerhaften Anwendung: EgisService.exe1
Pfad des fehlerhaften Moduls: EgisService.exe2
Berichtskennung: EgisService.exe3

Error: (09/01/2014 10:48:53 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)


System errors:
=============
Error: (09/04/2014 09:19:41 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (09/04/2014 09:19:41 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (09/04/2014 09:17:16 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/03/2014 07:22:19 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (09/03/2014 07:22:18 PM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (09/03/2014 07:21:49 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
cdrom

Error: (09/03/2014 07:19:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst WD SmartWare Background Service erreicht.

Error: (09/03/2014 00:34:46 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst EgisTec Ticket Service erreicht.

Error: (09/03/2014 11:44:13 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422

Error: (09/03/2014 11:44:13 AM) (Source: WMPNetworkSvc) (EventID: 14338) (User: )
Description: 0x80070422


Microsoft Office Sessions:
=========================
Error: (09/04/2014 09:17:02 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/03/2014 07:19:17 PM) (Source: TabletServicePen) (EventID: 1) (User: )
Description: Prefs: Failed to get user path

Error: (09/03/2014 07:19:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Pen_Tablet.exe5.2.5.54e694ecdPen_Tablet.exe5.2.5.54e694ecdc000000500000000002489b4a9401cfc79b1ce4ae46C:\Program Files\Tablet\Pen\Pen_Tablet.exeC:\Program Files\Tablet\Pen\Pen_Tablet.exe657705e7-338e-11e4-a2c7-cbdd7304a45b

Error: (09/03/2014 02:22:44 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: DVMExportService.exe1.2.15.24c04c37bunknown0.0.0.000000000c00000050000000147801cfc75b2ffb92b9C:\Program Files (x86)\InstantView\config\DVMExportService.exeunknown01744563-3365-11e4-ada7-f979c1703d66

Error: (09/03/2014 11:41:18 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/02/2014 10:20:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/02/2014 00:12:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/01/2014 07:27:21 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (09/01/2014 07:27:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: EgisService.exe7.0.32.04c0660acEgisFinger.dll7.0.37.04c0660a0c00000050002526140401cfc609ef407e3fC:\Program Files (x86)\Acer Bio Protection\EgisService.exeC:\Program Files (x86)\Acer Bio Protection\EgisFinger.dll3720eae3-31fd-11e4-add4-88044db0df49

Error: (09/01/2014 10:48:53 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

schrauber · 05.09.2014, 09:55

Adware & Co. deinstallieren

Lade Dir bitte von hier Revo Uninstaller herunter.
Installiere und starte das Programm.
Suche im Uninstallerfeld nach den Programmen, die unter:

diesen Zusatz haben:
Wähle die Programme nacheinander aus und klicke jedesmal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

NiFu · 05.09.2014, 17:44

Hallo,

Das Uninstall mit Revo Uninstaller verlief erfolgreich, Combofix hat auch nicht gemeckert, ALLERDINGS habe ich Esel vergessen die Energiespareinstellungen zu deaktivieren, also hat sich der Laptop prompt mitten im Durchlauf von Combofix in den Ruhezustand versetzt. Ich hoffe, das hat jetzt nichts zerschossen. Das Logfile wurde aber immerhin erstellt:

Logfile Combofix

Code:

ATTFilter

ComboFix 14-09-05.01 - Nina 05.09.2014  17:41:24.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.49.1031.18.3766.1982 [GMT 2:00]
ausgeführt von:: c:\users\Nina\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Disabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk
c:\users\Nina\AppData\Local\assembly\tmp
c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{3DA35E1F-A8BE-4073-A168-F1B319198252}.xps
c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{46F238D6-92D2-4818-BE5C-A40AFDB1FDC5}.xps
c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{D301467D-10A3-46F3-B35D-3AB6EAA7D1ED}.xps
c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{E6DB4844-848E-426D-882B-63E234B0D008}.xps
c:\users\Nina\AppData\Local\Microsoft\Windows\Temporary Internet Files\{FA397D9C-074D-42FB-A567-C87D06D98EC6}.xps
c:\users\Nina\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll
c:\windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-08-05 bis 2014-09-05  ))))))))))))))))))))))))))))))
.
.
2014-09-05 16:17 . 2014-09-05 16:17	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-09-05 15:05 . 2014-09-05 15:05	--------	d-----w-	c:\program files (x86)\VS Revo Group
2014-09-03 21:37 . 2014-09-03 21:37	--------	d-----w-	c:\windows\SysWow64\Adobe
2014-09-03 20:35 . 2014-09-03 20:35	71344	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-03 20:35 . 2014-09-03 20:35	699568	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-02 20:25 . 2014-09-02 20:25	--------	d-----w-	c:\programdata\AfquWazes
2014-08-29 08:38 . 2014-09-03 20:35	--------	d-----w-	c:\users\Nina\AppData\Local\Adobe
2014-08-19 10:52 . 2014-08-19 21:49	--------	d-----w-	c:\users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 10:52 . 2014-08-19 10:52	--------	d-----w-	c:\program files (x86)\Wise
2014-08-16 09:51 . 2014-08-16 09:29	880040	----a-w-	c:\windows\SysWow64\npdeployJava1.dll
2014-08-16 09:51 . 2014-08-16 09:29	802728	----a-w-	c:\windows\SysWow64\deployJava1.dll
2014-08-16 09:49 . 2014-08-16 09:49	--------	d-----w-	c:\users\Nina\AppData\Roaming\Oracle
2014-08-16 09:29 . 2014-08-16 09:29	--------	d-----w-	c:\program files (x86)\Common Files\Java
2014-08-16 09:29 . 2014-08-16 09:29	98216	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-08-13 21:42 . 2014-08-07 01:52	526848	----a-w-	c:\windows\system32\aepdu.dll
2014-08-13 21:42 . 2014-08-07 01:46	424448	----a-w-	c:\windows\system32\aeinv.dll
2014-08-09 15:24 . 2014-08-09 15:24	--------	d-----w-	c:\program files (x86)\Common Files\Skype
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-08-30 11:32 . 2010-06-24 10:33	23256	----a-w-	c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2014-08-21 03:43 . 2014-09-05 15:08	11319192	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{74DDEDED-BBE6-4C9B-9E87-49D5057B0E43}\mpengine.dll
2014-08-14 00:31 . 2010-11-09 17:12	99218768	----a-w-	c:\windows\system32\MRT.exe
2014-08-05 07:20 . 2010-09-27 10:30	270496	------w-	c:\windows\system32\MpSigStub.exe
2014-07-17 10:07 . 2013-05-07 12:50	42040	----a-w-	c:\windows\system32\drivers\avnetflt.sys
2014-07-03 14:40 . 2013-03-29 11:41	117712	----a-w-	c:\windows\system32\drivers\avgntflt.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll" [2014-03-26 424224]
.
[HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
2014-03-26 14:19	424224	----a-w-	c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-04-30 16:06	297128	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}"= "c:\users\Nina\AppData\LocalLow\MyAshampoo\prxtbMyA0.dll" [2014-03-26 424224]
.
[HKEY_CLASSES_ROOT\clsid\{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	131480	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	131480	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	131480	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DataSync Outlook"="c:\program files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe" [2009-12-07 720896]
"AmazonMP3DownloaderHelper"="c:\users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe" [2013-05-22 400704]
"AfquWazes"="c:\programdata\AfquWazes\AfquWazes.dat" [2014-09-02 266240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-12-24 284696]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-07-24 588648]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-03-08 260608]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-05-25 960080]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2009-12-24 401192]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2009-12-24 201512]
"VitaKeyTSR"="c:\program files (x86)\Acer Bio Protection\EgisTSR.exe" [2010-06-02 186224]
"BambooCore"="c:\program files (x86)\Bamboo Dock\BambooCore.exe" [2013-05-05 646744]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-08-05 751184]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2014-05-28 455512]
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2014-01-10 1861968]
"Avira Systray"="c:\program files (x86)\Avira\My Avira\Avira.OE.Systray.exe" [2014-08-04 161584]
.
c:\users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-7-30 36414496]
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2010-6-9 704032]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-4-16 1127200]
phase-6 Reminder.lnk - c:\program files (x86)\phase-6\phase-6\reminder\reminder.exe [2014-1-7 724992]
phase6_17_erinnerung.lnk - c:\program files (x86)\phase6\phase6_17\WinStart\WinStart.exe [2005-7-26 49152]
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2009-8-17 2104320]
WDSmartWare.lnk - c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe View=show_in_tray [2009-8-17 8919040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R1 DVMIO;DVMIO;c:\program files (x86)\InstantView\config\dvmio.sys;c:\program files (x86)\InstantView\config\dvmio.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys;c:\windows\SYSNATIVE\DRIVERS\wacmoumonitor.sys [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam64.sys;c:\windows\SYSNATIVE\DRIVERS\wdcsam64.sys [x]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]
S2 ATService;AuthenTec Fingerprint Service;c:\program files (x86)\Fingerprint Sensor\AtService.exe;c:\program files (x86)\Fingerprint Sensor\AtService.exe [x]
S2 Avira.OE.ServiceHost;Avira Service Host;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe;c:\program files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [x]
S2 bckd;bckd;c:\windows\system32\drivers\bckd.sys;c:\windows\SYSNATIVE\drivers\bckd.sys [x]
S2 bckwfs;Blue Coat K9 Web Protection;c:\program files\Blue Coat K9 Web Protection\k9filter.exe;c:\program files\Blue Coat K9 Web Protection\k9filter.exe [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 DvmMDES;DeviceVM Meta Data Export Service;c:\program files (x86)\InstantView\config\DVMExportService.exe;c:\program files (x86)\InstantView\config\DVMExportService.exe [x]
S2 EgisTec Service;EgisTec Service;c:\program files (x86)\Acer Bio Protection\EgisService.exe;c:\program files (x86)\Acer Bio Protection\EgisService.exe [x]
S2 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 PDF Architect Helper Service;PDF Architect Helper Service;c:\program files (x86)\PDF Architect\HelperService.exe;c:\program files (x86)\PDF Architect\HelperService.exe [x]
S2 PDF Architect Service;PDF Architect Service;c:\program files (x86)\PDF Architect\ConversionService.exe;c:\program files (x86)\PDF Architect\ConversionService.exe [x]
S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x]
S2 TabletServicePen;TabletServicePen;c:\program files\Tablet\Pen\Pen_Tablet.exe;c:\program files\Tablet\Pen\Pen_Tablet.exe [x]
S2 TBSrv;Toolbar Service;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe;c:\program files (x86)\Tbccint\ToolbarService\ToolbarService.exe [x]
S2 TouchServicePen;Wacom Consumer Touch Service;c:\program files\Tablet\Pen\Pen_TouchService.exe;c:\program files\Tablet\Pen\Pen_TouchService.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 WDDMService.exe;WD SmartWare Drive Manager Service;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [x]
S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe;c:\program files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [x]
S3 ATSwpWDF;AuthenTec TruePrint USB Driver;c:\windows\system32\Drivers\ATSwpWDF.sys;c:\windows\SYSNATIVE\Drivers\ATSwpWDF.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2014-09-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-03 20:35]
.
2014-09-05 c:\windows\Tasks\Wise Auto Shutdown Task.job
- c:\program files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe [2014-08-19 11:16]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}]
2014-04-22 15:17	357432	----a-w-	c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	164760	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	164760	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	164760	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2014-06-24 22:04	164760	----a-w-	c:\users\Nina\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2010-04-23 520760]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-29 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-29 391192]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-29 413720]
"InstantView Agent"="c:\program files (x86)\InstantView\tools\aoiosnap.exe" [2010-05-04 1093312]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-04-23 861216]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
uLocal Page = c:\windows\system32\blank.htm
mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
mStart Page = hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: &Citavi Picker... - file://c:\programdata\Swiss Academic Software\Citavi Picker\Internet Explorer\ShowContextMenu.html
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - c:\program files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
IE: {{F15096F1-C84C-4c24-875A-189ABBA3BD38} - {b289cf57-0878-36e1-9cbd-8bb7fc2da46d} - mscoree.dll
FF - ProfilePath - c:\users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\
FF - prefs.js: browser.startup.homepage - hxxp://ecosia.org/
FF - prefs.js: network.proxy.ftp - proxy.uni-bonn.de
FF - prefs.js: network.proxy.ftp_port - 8080
FF - prefs.js: network.proxy.http - proxy.uni-bonn.de
FF - prefs.js: network.proxy.http_port - 8080
FF - prefs.js: network.proxy.ssl - proxy.uni-bonn.de
FF - prefs.js: network.proxy.ssl_port - 8080
FF - prefs.js: network.proxy.type - 0
FF - ExtSQL: !HIDDEN! 2013-01-20 14:09; {ACAA314B-EEBA-48e4-AD47-84E31C44796C}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF - user.js: extensions.irmysearch.aflt - dvd_14_18_ff
FF - user.js: extensions.irmysearch.instlRef - 140305_a
FF - user.js: extensions.irmysearch.cr - 374483982
FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-pfcuxj - (no file)
Toolbar-Locked - (no file)
WebBrowser-{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-{047F790A-7A2A-4B6A-AD02-38092BA63DAC} - c:\program files (x86)\InstallShield Installation Information\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\setup.exe
AddRemove-{7F811A54-5A09-4579-90E1-C93498E230D9} - c:\program files (x86)\InstallShield Installation Information\{7F811A54-5A09-4579-90E1-C93498E230D9}\setup.exe
AddRemove-{96AE7E41-E34E-47D0-AC07-1091A8127911} - c:\program files (x86)\InstallShield Installation Information\{96AE7E41-E34E-47D0-AC07-1091A8127911}\setup.exe
AddRemove-{EE171732-BEB4-4576-887D-CB62727F01CA} - c:\program files (x86)\InstallShield Installation Information\{EE171732-BEB4-4576-887D-CB62727F01CA}\setup.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
c:\program files (x86)\Cisco Systems\VPN Client\cvpnd.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
c:\program files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe
c:\users\Nina\AppData\Roaming\Dropbox\bin\Dropbox.exe
c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
c:\windows\SysWOW64\RunDll32.exe
c:\program files (x86)\Launch Manager\LMworker.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-09-05  18:31:44 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-09-05 16:31
.
Vor Suchlauf: 8 Verzeichnis(se), 109.676.351.488 Bytes frei
Nach Suchlauf: 18 Verzeichnis(se), 115.450.449.920 Bytes frei
.
- - End Of File - - B5B88EED622BDF00CB32F3A01E4AC54B

schrauber · 06.09.2014, 13:51

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

NiFu · 07.09.2014, 12:48

MBAM:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 07.09.2014
Suchlauf-Zeit: 12:19:06
Logdatei: mbam.txt
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.09.07.01
Rootkit Datenbank: v2014.08.21.01
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7
CPU: x64
Dateisystem: NTFS
Benutzer: Nina

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 332085
Verstrichene Zeit: 29 Min, 9 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.ClientConnect, C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe, 2760, Löschen bei Neustart, [f9d45595f08b63d32aad3b724ab76d93]

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 7
PUP.Optional.ClientConnect, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\TBSrv, In Quarantäne, [f9d45595f08b63d32aad3b724ab76d93], 
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, Löschen bei Neustart, [a12c6e7c7a013cfa1bd2aad2936f3dc3], 
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}, In Quarantäne, [a12c6e7c7a013cfa1bd2aad2936f3dc3], 
PUP.Optional.PriceGong.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, Löschen bei Neustart, [b815cc1e7efd8caa1846e9386a99857b], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, Löschen bei Neustart, [1db09159512a62d46d7ae541877ced13], 
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, Löschen bei Neustart, [3895bf2b0d6eb581460293aa0ef6d52b], 
PUP.Optional.Softonic.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\SOFTONIC\Universal Downloader, Löschen bei Neustart, [6964b93154271b1b050c9a7c55aee719], 

Registrierungswerte: 2
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\Mysearchdial\1.8.29.0\, In Quarantäne, [16b7bd2dd7a447ef9e20df7dfd0711ef]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0A2O1C1R1H2Z1S1G1M1F, Löschen bei Neustart, [3895bf2b0d6eb581460293aa0ef6d52b]

Registrierungsdaten: 3
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Ersetzt,[0bc22ac0e3989d992b997c74f01437c9]
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Ersetzt,[6667d416f2895ed8289c39b7ec18936d]
PUP.Optional.MySearchDial.A, HKU\S-1-5-21-2265225284-3977146242-1558665416-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=, Gut: (www.google.com), Schlecht: (hxxp://start.mysearchdial.com/?f=1&a=dvd_14_18_ff&cd=2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q&cr=374483982&ir=),Löschen bei Neustart,[6667b337dba0d46200c34fa12dd7ad53]

Ordner: 5
PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\mysearchdial, In Quarantäne, [7d5044a6a9d22c0ad8a206c359a9748c], 
PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], 
PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy\BFD13812C7E241988D2F9532ACACB313, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 

Dateien: 42
PUP.Optional.ClientConnect, C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe, Löschen bei Neustart, [f9d45595f08b63d32aad3b724ab76d93], 
PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll, In Quarantäne, [4d80a3475d1e8fa76671ecc1d42db14f], 
PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\Community Alerts\Alert.dll, In Quarantäne, [09c442a855264fe72daa09a46b96f50b], 
PUP.Optional.ClientConnect, C:\Users\Nina\AppData\Local\Conduit\CT2475029\MyAshampooAutoUpdaterHelper.exe, In Quarantäne, [94394aa043381422696e9419679a718f], 
PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}.xpi, In Quarantäne, [01cce4069dde8da9ff0d76a0de2508f8], 
PUP.Optional.MySearchDial.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\Mysearchdial.xml, In Quarantäne, [eedf6e7c2358270f9f123fdd04ff02fe], 
PUP.Optional.OpenCandy, C:\Users\Nina\AppData\Roaming\OpenCandy\BFD13812C7E241988D2F9532ACACB313\TuneUpUtilities2013-2200218_de-DE.exe, In Quarantäne, [14b94aa006758bab5d2b6b5e010135cb], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\1.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\2229.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\4489.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\450.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\a.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\b.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\c.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\d.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\e.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\f.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\g.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\h.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\i.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\j.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\k.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\l.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\m.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\n.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\o.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\p.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\q.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\r.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\s.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\t.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\u.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\v.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\w.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\wlu.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\x.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\y.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.PriceGong.A, C:\Users\Nina\AppData\LocalLow\PriceGong\Data\z.txt, In Quarantäne, [08c522c81c5f35018b80c60748ba50b0], 
PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.aflt", "dvd_14_18_ff");), Ersetzt,[5e6f6c7e2853fe38564171b21ce914ec]
PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.instlRef", "140305_a");), Ersetzt,[a9247e6c681376c0bed92201937224dc]
PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.cr", "374483982");), Ersetzt,[c70657930a71ee48deb99d866f960bf5]
PUP.Optional.MySearch.A, C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js, Gut: (), Schlecht: (user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0AtG0AyD0E0AtG0F0BtBzztGtByE0ByCtDyBtCyE0D0F0BtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyE0F0F0C0AyBtDtBtGyDyEyDtCtGtAtDyDyDtGyCtCzyyBtGtD0FyBzzyEtA0DzyyByCyEtB2Q");), Ersetzt,[bf0e36b4a5d62313f5a280a381840ff1]

Physische Sektoren: 0
(No malicious items detected)


(end)

Adw:

Code:

ATTFilter

# AdwCleaner v3.309 - Bericht erstellt am 07/09/2014 um 13:07:04
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium  (64 bits)
# Benutzername : Nina - LITTLEONE
# Gestartet von : C:\Users\Nina\Downloads\adwcleaner_3.309.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\Program Files (x86)\NCH Software
Ordner Gelöscht : C:\Program Files (x86)\Tbccint
Ordner Gelöscht : C:\Program Files (x86)\Common Files\DVDVideoSoft\TB
[/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien
Ordner Gelöscht : C:\Users\Nina\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Nina\AppData\LocalLow\MyAshampoo
Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\DeviceVM
Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Conduit
Datei Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
Datei Gelöscht : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\user.js

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Conduit.Engine
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT2475029
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_videopad-video-editor_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_videopad-video-editor_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B5C212A-18A3-4A6C-B2CF-CD4704B44E1E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{A1E75A0E-4397-4BA8-BB50-E19FB66890F4}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Schlüssel Gelöscht : HKCU\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\DeviceVM
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Tbccint_HKLM
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\MyAshampoo
Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
Schlüssel Gelöscht : HKLM\SOFTWARE\DeviceVM
Schlüssel Gelöscht : HKLM\SOFTWARE\MyAshampoo\toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\MyAshampoo
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DeviceVM
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browser ] *****

-\\ Internet Explorer v8.0.7600.17267


-\\ Mozilla Firefox v32.0 (x86 de)

[ Datei : C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\prefs.js ]

Zeile gelöscht : user_pref("CT2475029..clientLogIsEnabled", false);
Zeile gelöscht : user_pref("CT2475029..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Zeile gelöscht : user_pref("CT2475029..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Zeile gelöscht : user_pref("CT2475029.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Zeile gelöscht : user_pref("CT2475029.CommunitiesChangesLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.CommunityChanged", true);
Zeile gelöscht : user_pref("CT2475029.CurrentServerDate", "28-5-2011");
Zeile gelöscht : user_pref("CT2475029.DialogsAlignMode", "LTR");
Zeile gelöscht : user_pref("CT2475029.DialogsGetterLastCheckTime", "Sat May 28 2011 17:35:38 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.DownloadDomainsCheckInterval", "168");
Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.DownloadDomainsListLastServerUpdateTime", "1201069983");
Zeile gelöscht : user_pref("CT2475029.DownloadReferralCookieData", "");
Zeile gelöscht : user_pref("CT2475029.FeedLastCount129133095456874337", 160);
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029379", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029381", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129132307482029382", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686870", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129133095459686871", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687146", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687147", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedPollDate129137437659687148", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029379", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029381", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129132307482029382", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686870", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129133095459686871", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687146", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687147", 40);
Zeile gelöscht : user_pref("CT2475029.FeedTTL129137437659687148", 40);
Zeile gelöscht : user_pref("CT2475029.FirstServerDate", "28-5-2011");
Zeile gelöscht : user_pref("CT2475029.FirstTimeFF3", true);
Zeile gelöscht : user_pref("CT2475029.GroupingLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.GroupingLastErrorCode", "");
Zeile gelöscht : user_pref("CT2475029.GroupingLastResponse", true);
Zeile gelöscht : user_pref("CT2475029.GroupingLastServerUpdateTime", "129484884546300000");
Zeile gelöscht : user_pref("CT2475029.GroupingServerCheckInterval", 1440);
Zeile gelöscht : user_pref("CT2475029.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Zeile gelöscht : user_pref("CT2475029.HasUserGlobalKeys", true);
Zeile gelöscht : user_pref("CT2475029.Initialize", true);
Zeile gelöscht : user_pref("CT2475029.InitializeCommonPrefs", true);
Zeile gelöscht : user_pref("CT2475029.InstallationAndCookieDataSentCount", 1);
Zeile gelöscht : user_pref("CT2475029.InstalledDate", "Sat May 28 2011 17:35:39 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.InvalidateCache", false);
Zeile gelöscht : user_pref("CT2475029.IsGrouping", true);
Zeile gelöscht : user_pref("CT2475029.IsMulticommunity", true);
Zeile gelöscht : user_pref("CT2475029.IsOpenThankYouPage", true);
Zeile gelöscht : user_pref("CT2475029.IsOpenUninstallPage", true);
Zeile gelöscht : user_pref("CT2475029.LanguagePackLastCheckTime", "Sat May 28 2011 17:35:26 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.LanguagePackReloadIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2475029.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Zeile gelöscht : user_pref("CT2475029.LastLogin_3.3.3.2", "Sat May 28 2011 17:35:15 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.LatestVersion", "3.3.3.2");
Zeile gelöscht : user_pref("CT2475029.Locale", "en");
Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipHeight", "83");
Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipShow", true);
Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Zeile gelöscht : user_pref("CT2475029.MCDetectTooltipWidth", "295");
Zeile gelöscht : user_pref("CT2475029.RadioIsPodcast", false);
Zeile gelöscht : user_pref("CT2475029.RadioLastCheckTime", "Sat May 28 2011 17:35:17 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.RadioLastUpdateIPServer", "3");
Zeile gelöscht : user_pref("CT2475029.RadioLastUpdateServer", "129054397178370000");
Zeile gelöscht : user_pref("CT2475029.RadioMediaID", "13098944");
Zeile gelöscht : user_pref("CT2475029.RadioMediaType", "Media Player");
Zeile gelöscht : user_pref("CT2475029.RadioMenuSelectedID", "EBRadioMenu_CT247502913098944");
Zeile gelöscht : user_pref("CT2475029.RadioStationName", "Mellesleg%20-%20Rapp");
Zeile gelöscht : user_pref("CT2475029.RadioStationURL", "hxxp://195.228.254.168:8060/");
Zeile gelöscht : user_pref("CT2475029.SearchFromAddressBarIsInit", true);
Zeile gelöscht : user_pref("CT2475029.SearchInNewTabEnabled", true);
Zeile gelöscht : user_pref("CT2475029.SearchInNewTabIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2475029.SearchInNewTabLastCheckTime", "Sat May 28 2011 17:35:16 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2475029.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
Zeile gelöscht : user_pref("CT2475029.ServiceMapLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.SettingsLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.SettingsLastUpdate", "1306530423");
Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsInterval", 504);
Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastCheck", "Sat May 28 2011 17:35:08 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.ThirdPartyComponentsLastUpdate", "1246786978");
Zeile gelöscht : user_pref("CT2475029.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2475029");
Zeile gelöscht : user_pref("CT2475029.UserID", "UN71680498347049385");
Zeile gelöscht : user_pref("CT2475029.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdownload.conduit.com/\"}");
Zeile gelöscht : user_pref("CT2475029.globalFirstTimeInfoLastCheckTime", "Sat May 28 2011 17:35:13 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.isAppTrackingManagerOn", true);
Zeile gelöscht : user_pref("CT2475029.myStuffEnabled", true);
Zeile gelöscht : user_pref("CT2475029.myStuffPublihserMinWidth", 400);
Zeile gelöscht : user_pref("CT2475029.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Zeile gelöscht : user_pref("CT2475029.myStuffServiceIntervalMM", 1440);
Zeile gelöscht : user_pref("CT2475029.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Zeile gelöscht : user_pref("CT2475029.testingCtid", "");
Zeile gelöscht : user_pref("CT2475029.toolbarAppMetaDataLastCheckTime", "Sat May 28 2011 17:35:08 GMT+0200");
Zeile gelöscht : user_pref("CT2475029.toolbarContextMenuLastCheckTime", "Sat May 28 2011 17:35:17 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2475029", "\"1294295055\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "L+tncv4eqt6Qm5T3dzChdA==");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "poKjTfHs0NrVUIalKI8jyg==");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "QmycQXJXVyFVAzIiNllWhQ==");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"803651ba7facb1:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.3.2", "\"07b2625f8cb1:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2475029", "\"634416823708270000\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634356118310000000");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2475029/CT2475029", "\"1306530423\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/equalizer_dead.gif", "\"0678fe477ac91:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/minimize.gif", "\"046c7ab477ac91:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/play.gif", "\"0484de117c4c91:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/stop.gif", "\"0e7a152347ac91:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Cornflower/vol.gif", "\"087c778347ac91:0\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634410529136300000\"");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/1344951.xml", "\"bcec633949bfb505b4a6d40895bed7af\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16887175.xml", "\"16805a433e033d615b947be8364a9d45\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/20536157.xml", "\"b22b76cb146a9f4b495f253a82b51be7\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/30261067.xml", "\"41df5f08475d0541ff0d1a21118945ee\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/34655603.xml", "\"87aee62226e15876cebaaafd336f8466\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/759251.xml", "\"c4a1726652f8a2fe628ceb2f677a335e\"-gzip");
Zeile gelöscht : user_pref("CommunityToolbar.EngineOwner", "CT2475029");
Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerGuid", "{a1e75a0e-4397-4ba8-bb50-e19fb66890f4}");
Zeile gelöscht : user_pref("CommunityToolbar.EngineOwnerToolbarId", "myashampoo");
Zeile gelöscht : user_pref("CommunityToolbar.IsEngineShown", true);
Zeile gelöscht : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwner", "");
Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
Zeile gelöscht : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
Zeile gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2475029");
Zeile gelöscht : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sat May 28 2011 17:35:15 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Zeile gelöscht : user_pref("CommunityToolbar.alert.locale", "en");
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sat May 28 2011 17:35:06 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Zeile gelöscht : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Zeile gelöscht : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Zeile gelöscht : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Zeile gelöscht : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Zeile gelöscht : user_pref("CommunityToolbar.alert.userId", "35679e2b-7340-4eb9-8519-e76c99293b9d");
Zeile gelöscht : user_pref("CommunityToolbar.globalUserId", "b148c481-547b-4521-af0f-28e1dab75f18");
Zeile gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Zeile gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_1344951.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_16887175.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_17151925.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_20536157.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_30261067.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_34655603.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_759251.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("CommunityToolbar.twitter.user_816653.LastCheckTime", "Sat May 28 2011 17:35:18 GMT+0200");
Zeile gelöscht : user_pref("ConduitEngine.HideEngineAfterRestart", true);
Zeile gelöscht : user_pref("extensions.irmysearch.aflt", "dvd_14_18_ff");
Zeile gelöscht : user_pref("extensions.irmysearch.cd", "2XzuyEtN2Y1L1QzuyBzz0EyEtDtDyDtC0ByD0ByDyCtA0CzztN0D0Tzu0SzzyDtAtN1L2XzutBtFtBtDtFyCtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyC0Dzz0FyDyDyC0DtGyDyCzy0At[...]
Zeile gelöscht : user_pref("extensions.irmysearch.cr", "374483982");
Zeile gelöscht : user_pref("extensions.irmysearch.instlRef", "140305_a");

*************************

AdwCleaner[R0].txt - [23406 octets] - [07/09/2014 13:02:44]
AdwCleaner[S0].txt - [21849 octets] - [07/09/2014 13:07:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [21910 octets] ##########

Junkware Removal folgt so schnell wie möglich!

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Nina on 07.09.2014 at 13:22:44,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Nina\appdata\locallow\boost_interprocess"
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{029D830E-F428-49E7-BD74-0348B92744F5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{031D70A7-56D6-418F-8373-9C2F30D6EDC5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{03528794-A793-4F39-ADF6-E42381E5BFF0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0384FFA3-E1DD-4ADB-99E4-1CF57B3C162C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{039E07FB-462F-4801-B048-5371FD6A6135}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{03CEF6C0-96C3-4822-ADC2-E74BDA3AF2B9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0461C0E7-EA43-42FC-9733-CCB8853D01E7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{047AA1E0-9661-4D21-A465-714B1DFE1151}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{051E53F8-5907-4D46-9FA8-C701DAA6BDA7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{056D3BB6-4987-40AC-98D4-92870D3E3192}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05754939-9291-4342-B9D7-28AFAADD6A43}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05B62694-E6CD-4192-B47A-A694CA2115EA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{05E4053A-2E01-40EF-9BDD-234773F8A770}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{068A5E0C-88FC-4F14-A525-0AEC379F3E5F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{06B34E4F-3441-4E9E-A13B-9CB6E6213CBB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{06EAA74A-B969-47BA-A1B5-FF19FE475E10}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0765FDDD-E906-4B87-9250-20854E175A05}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{086B74BF-A76F-4267-AA09-A9BAC0767893}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{08779DFC-DC04-4803-ACCA-2C4149126420}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{089D3CDF-CC0E-4550-BA18-8122FB760B72}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{09CA7CF7-1C5F-49C1-AE1E-B2E5A1F9EE72}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0BCFF5E2-F450-4D4A-9807-086032F343EA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0BE9B4B3-2E88-487E-A958-5F9E93AD46EB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0C366AC8-E27F-4A1F-B86C-4E885E3802C9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0C941BB7-5830-4774-9DB6-10969314057C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0D5000DB-D4D5-412C-B36D-841B0ECDF39B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0DF00B88-D44B-4A10-8332-D009195EAC4E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0E9648ED-B536-48EB-976F-697622531AC4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F720A56-E420-4268-9606-29BB369EAE86}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F8E7728-D702-4CA5-A2E5-7F7F534E74A2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{0F9E48DE-0481-40B7-A721-5948AFD6D12D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1074A37C-5003-4401-87AB-12B337F5D69A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{10AEAC26-65E5-4456-AA28-C6B3CDF7DB58}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{13617C45-E96B-4263-A585-A8CFA63B4A21}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14F779D6-A451-4D55-BABB-2B45BBA2C135}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14FE2536-1A5C-4CBD-BADA-C3A2CAE67601}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{14FE8BD3-572B-470E-AFBC-4F780401B4A6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{153C9E7F-E851-41CE-A81B-C10461112224}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{15D23D6A-E6C9-4251-A0E1-24538085E676}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1673BE9C-3F57-4935-82EE-D3D44E273929}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{16A39DF4-C45F-43C3-8384-E3417F747434}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{16B17BF7-0936-446B-B9ED-57012E3FB85F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1887C285-71C1-4BDF-9612-CE1E3454E902}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{19582329-C343-49F6-AAFF-77BB67AE545E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1A96E710-B7F1-4BBF-B2F7-121DD6EA48E1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B20882C-3DB4-4912-B78E-D271BBD6530F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B309313-9FB2-4132-9952-F4F8DBA7A42C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B3E6F75-7443-4311-B4BE-27FC52B7CFC5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1B3F6ED1-584F-486C-A6DF-1081308B9DB4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1C4B1CC0-E7B1-4F20-B099-9D755C219497}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1DA0A392-89F3-4863-A2E3-3F50A2DC9EE2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1E812AB2-BFF4-4324-946D-B8C705D597ED}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1EDA21A6-6163-4852-98E6-F23D0F328042}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{1FD01FC3-A8A4-45B5-AFB2-92151D823223}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{200C9266-3317-447F-9F49-AABA36F8A2FC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2026024B-5D98-435A-8BA9-A2395DF0C63B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2090DA16-4CD1-49FC-8140-150D1D03CD91}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20A1088C-D712-4F9C-AF57-336FAB12E465}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20AB4BF6-A9FA-4D03-B93C-C9311D8E31E3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{20DB0770-0B50-45EE-92E6-9CEA873A9189}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{210093B6-C7E3-4BF5-9B94-533DE8D9BE7A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2175A595-F4DA-45DD-A2D3-1F867DEFBA28}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2200A531-DECC-434B-AB4F-74AA95C4E3B2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{23A62B1C-BD4D-4613-AC69-A6731C591D75}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{23B92E8C-454B-4D02-95BA-A9FB7D52B6FA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{266C1BEC-C967-415C-B97B-93C350D85A34}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2778B576-48E3-4183-9461-53E7DC3FE095}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27A2A828-23B7-44C8-90B0-A7C013661E17}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27A30146-5103-418D-907B-74A3E315B5FB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{27D78E89-BA0B-4C16-8EEC-F1180476C975}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{28392372-30AC-40F4-8F46-778188BAA374}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{287D198D-C64E-44DB-93C2-CCAE92A940A1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{28A22016-193D-48BF-A538-392FBD005863}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{29D525AD-D8FC-4059-BA14-AA99FE785F12}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A250127-1F3C-4748-BE4B-30B3EE6B3986}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A40B785-3AB9-4FBB-8942-3A3D571F4146}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2A729402-798A-4FC1-903C-A456233B832D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2B28E343-4E1C-4F4F-9C45-46EB93CD5B0E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2B8ACB50-78AC-44F3-8C50-1F7E6E78CCC8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2C19541B-BDEB-4778-9CDD-AFCDFBEA5478}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2C4F5A9E-D4FE-4608-A2A8-47719CE418DE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2DBFFE4A-6AC1-408A-B198-95FF2990A116}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2DE692EE-2EC2-44E5-8EB0-8D480940E8C3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{2E634E7F-D17D-4844-86AA-D46B5593A403}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{30B2F81B-061D-4B07-B192-AAA348C7A72B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{30DA46A1-F907-4B18-B4BB-07F50836693F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{310CD5C7-3D04-43EF-9160-86FCC177D6BA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3130D064-71DD-414D-BD99-6DA3D38402B7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{315F2FB7-D9D2-4B8C-8B95-D2F6BD03E6F2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{316F5C47-9440-43BE-9F7E-48C99EAD0E90}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{31B8766A-C4D9-446B-965E-61C9481DEDA2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{31E933CA-B33D-4A15-906B-C756D2068379}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32BADEE8-5F3A-4742-8D6D-4260AA0C01D5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32C7BFEB-5047-4035-A5E7-49A01C919F10}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32D73DFD-0AE9-4089-AD85-B6637A9AC537}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{32DDDEB6-FFB6-4E4B-80F9-7891B9192F24}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{33336EBE-731B-478D-B6A8-6862B57A0378}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{35A284F4-0DDF-4F27-A27F-F8C8D0173B53}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{361FFFAF-147A-4C88-8772-0B2B182F40FF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3642F59D-C327-4A53-AE52-8BEF13CC9C06}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3644F219-662F-41DE-9EB5-886389CB8024}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{36EC8C2B-D98A-463D-904A-82097D698300}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3721D08C-129B-463A-8601-E73328150E87}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{375EE61D-D3E4-4D63-BBC1-9E80E81D14C3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{383C953C-C6E6-4656-8EBC-7673D24CD955}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{389E0B13-DAD7-4F38-A593-F2F26A4B763A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{39D1BEB7-7ADD-45FF-9F29-B976C6A7D5F5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A4BF910-DFA2-469E-A500-F6CCEE451CFB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A6E9921-B0B7-4E07-A680-11545CD10F3F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3A88EE2C-3C09-41AC-A4BC-B1388CB6ED8E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3AA219E2-D416-441C-8ABC-A4D822161665}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3BB2BB61-D1EA-4EE6-88C7-770D6DCB7CFD}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3C4F2A63-B9A1-4013-886B-880F87D4382A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3CBA2D54-2BDC-43EB-9A6A-91CF99FBDCF5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3DD03556-B7BA-4043-971D-124046B4C9EB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3E091262-E8D8-48EF-AA44-88B98519568B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3E1B9656-9829-47C1-AB44-95C672AA3A8B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3F197E66-E95F-4E3B-B47F-306FF23B7837}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{3FCB7CE5-3C3C-42A6-9E42-6AF6BC1EC558}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{41980302-8273-453C-814B-B61963EAADC1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{42D70BF1-6E72-48BB-B3F7-9DC9E726D2D9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43056C1A-4D6C-42D0-8CA7-833C5A2FA8A9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43406E0E-F961-431A-95C3-29A80EE5EAE1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{435B5CA7-B37D-467A-BEBB-890A9255EA95}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{43E353EE-814B-4F67-B567-5A4ED6AB0D3C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{45D3E4BE-0050-4030-A73A-9FF8265A062A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{45E0DC16-AB43-4339-8766-5C0AD72D1535}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{46CE913A-76F1-4E05-BBBA-9EC40010C4D4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{46DA5067-BFA2-4CD5-9CE8-BE6187A69FFC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{47A42E75-C557-4D65-BDDA-09C413B0BBC4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{48481666-9223-4AE6-B6C8-7873E443B375}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{492584B0-F7E7-462A-BEA6-2E29024D278C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{49547A4A-BA3C-441E-A6CC-3FEA9B59EF87}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{49FB6AC8-5FCE-49D5-89DD-88BE16BFFEE8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4A1BDC7E-BD9B-4EFB-BCE2-E59B0A8EBDAE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4A9B36B1-1E81-4958-8356-A3AA2E5749AA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4B100F44-017B-497A-8A39-E53D61DC6C8E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4BA33900-9255-4E23-8F08-CA110088C817}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4C57138B-0AFF-4F2D-9563-6E08D8F87F12}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4C8EE85A-0AC2-4642-B1B8-83DE42F35AEE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4CA82E83-5AF2-4BF3-A95D-374C9622A47F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4CDCA13A-C56C-4CA6-8C3E-F5C837C2CB49}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D1BE080-215A-4014-9681-BA793C1DCC80}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D1CABD4-C42C-469B-9ECC-1EFE49FC4086}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4D65A72D-A7F1-47E3-B167-3794B9C9FB23}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4E02D17D-DCCF-41DE-8CD2-AFD55BE00041}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4EB4A5CA-18E3-448A-88BB-A658B500BF00}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4ECEAF48-A6EF-433F-81C5-CE0F55E6B611}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4ED0D7F6-57FC-4B4F-B946-FCA690627EB2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4F53BC86-6D8F-4317-8E6C-D4901D4D7F30}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{4F90FE6D-B77B-46FE-A72F-7FDB5684648C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{501DEDBE-8AC9-4484-8C3D-05356481F126}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{50681163-4A01-4C74-A300-ECFA65F78CB6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{507239DD-6D88-4B0C-8F35-0625EF629A9D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{508CE52D-49CB-4241-9279-5445F7F461E5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{51AB8D27-6E61-4DA3-AD05-86F34AA2F430}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5240DED4-DCA7-4C02-82B8-1ADAE9AB9F31}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{527062C1-C72C-4469-8548-FB0B058B7C05}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{52D94F45-2E54-4D4D-AB9A-25F0545DBEA5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{52F61266-0929-4032-A206-5F81A2E7231F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5312D84C-C937-410A-B0F2-3CB3E849B94E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{53402FBC-6B68-49F3-A00D-8895DA033D0C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5391D825-FDE8-4250-82C9-1AD4943569A2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5570F2BA-D583-4612-8D4F-3AFD6B5CCB58}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{55A1AC91-81A9-4AD0-915E-DF98FC3B1F17}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5645E131-17F4-49F0-A656-154D0F6B9868}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{56F19ED8-06C0-42E2-8525-3D24D4B42401}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5706C12C-030E-4283-81FD-6FA92F0BA057}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{57254126-343F-4A70-8254-3666CAF4BC12}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5859141F-41A1-4A05-BDF4-A50009940E7F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{59143784-0110-4EAF-85E0-DB0DF91E2914}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{593F63F7-8EC1-4D10-B82D-CF90EE27BF85}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A10641F-8389-4165-93ED-72F685B37C0B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A3C80CA-74ED-4CD6-8E2C-5878C956AB0C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A3E8C91-CAAD-40C5-8F18-F6046DD8B8B4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A68260D-179B-4FAF-8685-23EBE5830766}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5A990C96-280F-4A4A-BDCC-BAF22F3888D4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5B28D5FD-57E5-48EC-984C-B78597E5956F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5C5EC22C-3664-4BDA-9C9D-D120E566B774}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5DEB7CC3-F36E-4899-B427-9076905014EA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5E0A5BDC-8293-4F86-A5B8-D938A69CDBA7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5E8CE1E9-4671-478A-AEC6-74F3179E4BA4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5EF28C96-0420-4D08-87C2-D5B4B9B77590}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5F3C1AF3-A9C4-46B9-B431-DB66A9802A5A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{5F47E8CD-A0A8-49DC-BE15-636F0F7EB4B5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{60681DED-2AC3-44A6-9E1E-1E6E3D5E912F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{61F35954-F46B-4F48-91A2-1A7AAB6F6675}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{628D546D-94F2-4486-BD5D-BAA0145A1EA9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{63600632-E2C6-455E-BC45-909EA7609815}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{636D0DF5-F6B4-4DDA-8255-C61AEB3E0886}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6431360B-8E5D-43AC-8FB8-0FCEA459B3E0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6486ECA1-6856-4E32-ACB5-EADEF605AACF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64AE90EC-32A1-4774-A634-C8A56C0FC415}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64AF0230-214B-4A30-B57C-6D20FFEB9F61}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{64C28440-25E4-4F7F-9964-E8ECC55DB939}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65103D88-20DC-4413-B755-A5914D6A87A4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65D79EFE-8210-45EF-AA6E-D46909983CF1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65F2E55D-1615-4364-AABB-CCAA4BED0886}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{65F9A462-F4A9-4668-BC19-866F9CFB2910}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{667B82F1-CCD7-4C54-AE1D-EED978851C75}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{66D53E6D-4C17-4646-9FFD-633A6E81B7E8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{67EBC499-5481-41BD-9B3F-682D4B146D54}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6811A33D-CE95-49C3-BCF4-03C6E2AB6638}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6829483F-9AE4-4271-B158-12DCA69CF205}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{683DF5AD-AC07-4FF8-9877-0267B0B53D8C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{68995E0D-C9A0-47D4-83B2-ECFEB724118D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{68CB6B5A-8030-44FC-B536-28DF0E53C00D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69388422-70C8-4CAD-A380-17F8CFD3A964}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6942FE8E-6A33-4FC5-A0CD-0CFF6D35E838}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69CC905A-997D-465C-8331-FF1B958EB984}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{69F77BE3-C713-468D-BCBD-FF1AB76CD9DC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A5452DB-1D0B-4910-8035-C3F99BD23E12}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A69D387-6A6C-4709-8AF4-CCF3887DDBAA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A8EAB68-53C3-4754-AEDD-A67E23381E49}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6A97D209-7B20-4012-8DC9-1E11E11D3CDD}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6BE9A956-F8A7-4A56-AEE4-A2E10BEE0D2E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6C960F61-7F70-4168-94F0-306C4C643D87}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E0CF25C-71E8-4AA3-8C31-E4552F907891}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E128FB9-3DE3-4917-9538-C03668B41E55}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E37A17D-0207-4178-8A5D-B310C860AA96}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6E9224BA-D97D-48C9-BA9B-9B96E11F115E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6EA65BF7-9B83-438A-84C1-C02602822A60}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6EBC7888-1BF4-4CE3-A716-5AF095FB0128}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F0FDEEA-B336-47E0-8FCB-470FF907B677}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F1D437D-67EA-455A-A913-2F3F4A10FBF3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F2FE038-ABBF-4482-9E46-FC3F42ACBA80}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6F41E4CA-C4DF-4055-AE0F-BAFB3E857EEA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{6FC89343-BA32-4BAB-B7D6-475AE7F53D1E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7258198B-E489-4E76-8D26-F34548E4431F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{734CEFF5-1E22-438B-9393-5CD86B137877}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7379D1A6-A2FA-4B6B-824E-CB14C4AB7840}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73886C50-2C6C-40A2-AF9E-02F2B6706A85}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73D83507-5AD0-433B-A56C-35A5CDB40772}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{73E285E3-7853-4A23-9549-7762EA6833E9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{750AE376-4FC6-4340-9952-52EA20569DFE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{75F97E5F-2CEE-4CD0-972E-93D0A673C3A8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{763B0558-FC7F-45D0-B8F5-422E2484504F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{76C2EA96-7917-45E5-9AB9-4F6F22DE7811}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7776FDCC-77E7-46A4-AEC1-D41775489B5D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{779F2220-7DD9-4962-BE53-6F84FDD66CC3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{78620EA3-57DA-4A79-AFA1-91A8E9505709}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7894C603-BB43-40A7-96CE-B0A59C2FEE48}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{789FE0D9-492D-497D-BC2B-2B5114E61A4F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{78A2ADA8-6AEF-454C-8DB6-E07E15B5A997}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{79F1667C-CC77-481C-8C3C-031DA449DD68}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7ADEDEF7-8B84-4707-B06E-3AC48626C5D8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B620989-DD07-4BED-9444-B1A58D1277E6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B79DB91-2760-4B28-94AA-7D07BB9A239E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7B8BEBDB-FDBC-4889-8B4D-95EEC913B710}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BCFDA45-3594-4519-94C7-951E047BDD18}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BEF2BF0-45C4-4E62-9EF6-4089A4D3C690}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7BFFDAF5-9BD7-4991-BF53-CC8E174FA400}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7C5D0C97-A6E5-4D1B-B595-2A7558342B66}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7D2F6A1D-49FB-4A92-949F-2B5E9A3EE203}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{7E04D3E0-E1E4-4517-8DFD-40A2B66EC745}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{805E879A-DED7-40F5-B940-3F6345D6068D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{80E38BC0-F1BF-49A1-BCD1-1BFD280B39ED}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8138C80E-A94F-4CC8-8EE6-5AD14EEC18A8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8140EA31-548E-45E3-96DF-D90C82FCA6D1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8203D243-C559-49D8-B2D5-01275CDF1DB4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{82A5F07A-CE02-42B4-8FEE-C9913980BA94}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8300E6B3-0E1C-492D-9D1F-CE5F2C6E7022}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8311E7EA-AEE6-450C-A203-DF26E0D35536}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{845F06EB-9687-4FBD-A8CB-F5F29CB2CE75}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{84A8BDB3-A8A4-4C1C-83AA-58F55E7AB491}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{85594B07-1C78-4801-BE10-A85F9D1EA9E4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{863AD83C-8282-4D87-AC40-EDD3458D8A04}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87154DF9-147D-4F5D-A001-F4DD983DB31B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87577DFA-74C2-4191-8C7B-9C59167168EB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87712429-795E-4519-A948-D47ACB6A36E7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{87733A6C-90B2-4008-98BB-2A64646B8BBE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8773F4F3-837A-48FC-B729-B249F9835E8C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{879C1D89-F258-47B1-A2EE-5421DE6F0C36}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{88083C39-D1FB-4A7A-86C9-D1719BFFE3EE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{880F67FA-A615-46DF-AE31-197DB6C80840}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{88DB05F8-6894-477C-AF9A-0E03A0ACA2F6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{896E116A-7922-4E4A-93FA-E19798CD0475}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{89EF97F7-E12A-4B84-9117-042194DB5D10}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{89FC8A27-2541-4F7F-8605-27B7C0186778}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A2B292C-F8D4-4473-BEC9-5BE5782C54A9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A3056CC-563B-44CA-8CA8-764F2C214C3F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A4A7280-2F8F-4171-8F3B-E18E455F09CA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8A77B936-111C-4D2B-862D-E9FE79D636F4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8AE9E41C-3296-4DA9-B2FF-62365BDDD382}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8B91C22F-11F6-427C-8F6A-2CE85C35DFD3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8C84EA4D-309C-4118-ADC4-991492B1E272}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8D3CB47C-950C-4E81-BF12-6171C686405E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8D5E9050-D4E2-4C4A-B474-CD4C15C3C960}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8DB1DFEF-1495-4847-99A8-FE3A5C60CFCA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{8EFDFDF7-14F0-43A2-86B1-E6162F98BACC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9044909D-5DB0-4DB6-ABBD-6AC0469C7C73}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9052AA7E-2AF2-4FED-BA9C-AB50BF9DB2EA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{905FD5B0-7CF8-4D8F-8EEE-47AE5180B23B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91712EF5-53D9-4390-BCFE-32D48D7D0768}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{917ADAA9-4D71-4584-8931-6D82AF3EFB9C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91853912-789D-46B3-8A20-465785A77118}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{919F7B14-E2D9-45F9-A2F0-A7AF9A5B37B2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91B6E25D-1063-478A-BC49-B13F8808901E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{91E4636B-11A9-4250-B24B-68A319C61D53}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{92A68555-F9A8-4248-8B1A-11CF8BD0C808}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{92B13D92-8044-42CC-BC00-A826BA981285}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9556E1FF-A069-48C0-9FD7-F9C5B2328C30}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{95C6B798-DE26-459B-A5C0-B0B31F5836EF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{97408B00-9F61-4623-BE45-29543525DFC9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9792A5B2-5298-4C61-B951-F9BE3D361737}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{97CF9236-C518-46B6-90AC-61832075F691}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{983AB8AC-CCB5-42E6-AE31-A6FCB99C48C2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{993E4B73-77E4-4EC4-AC16-55C45D464B33}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{998615A4-19B8-4757-BE09-D3B71380782F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{99FFA968-BC19-465A-92BE-97309F63BA5A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A309A1B-6786-4206-8B1C-A6F17E43B599}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A705B04-F26F-4E37-982C-232BF40CC396}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9A7B0F91-C361-4694-9CBC-B0C212F73C69}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9ABBD6E5-2998-4424-8AEE-3FB5FC55CF16}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9AFE8F23-932D-4426-860D-9DAA6B2E981E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C158578-E66B-426A-91E0-ED98D57F691A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C762968-A63A-42AF-BA2C-BF6B5099F27B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9C7A0F7B-71EE-4DEF-B423-0C3BDD8B73B3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9CC023E2-7902-4267-8B1A-68427E3795B4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9D43AA61-FBDA-48BA-9910-F4110E8C48BE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9DB0F9FE-C660-4E28-BB96-FEBAEC1CCD0A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{9FAE4DA2-66AA-48B3-9E5A-64E9A46844C7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A030AC57-0195-42A7-969B-27F1D7AB55A2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A03F61CD-89EC-4533-8D22-B544648A35A7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A1105233-FD54-4F83-BFFD-4FE036A67EA3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A26F83CE-3967-4D0B-89ED-24F5D0F2A3A2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A2EFB2BE-C194-49B8-A5A3-E3C563FE80D5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A3448E0E-CAA9-4CC5-A63E-0A4571B0CC20}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A3A73200-1318-462B-AA04-723435262778}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A44FC8D3-D6F2-48BB-BBEB-33D0D1E0BECB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A4C9FAE6-B578-41A1-AF43-B1B0B759AF01}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A5CAA8BA-E62E-4CDA-9738-FCE2870C07CA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A6C64E63-2771-4DBA-AD4B-A8E071D36C88}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A7DF6CBD-965B-4199-A2DB-93AE75CBD0E6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8A5A33C-143C-4B04-801B-67C2D1A548BD}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8AE3F88-25B5-463E-A0FC-7A906817F93A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A8BFBBAC-5DAE-4034-A238-5822215F822B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A92596E9-160F-4271-8429-948060FC149F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9362AA3-CB0D-4734-83D1-D1EBE69D4DD8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9432BEE-DF8F-4EFB-B5FD-3760E4703142}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A962EA4C-598F-48A6-BCE8-FF5885DDCA87}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{A9AD5A4B-EDAC-4B92-A3B5-1082702EF82B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AB631A7A-48D4-433A-AFA9-3AF049CB2BC3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABB51346-970C-406F-AB09-816E1A3DB0A7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABC013BA-89A4-4642-BC7D-6D190A30740D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ABC2DE1F-6264-4502-9302-C4CD7D48B2A3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC13BD86-7539-416C-B09D-811FD5FDF8C3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC21C33D-8442-41F0-A4A6-91AC79B8DCB0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AC6AD567-98BD-4987-BA6C-536CE8EA66D3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AD4889BE-3A7A-4FC8-8C7D-5AB89CD9CB7B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AD78E5B9-5AEF-4BC6-94EC-D24C91552936}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ADB10979-B9E5-4C65-A4C9-7A57569952EF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{AECA3020-ED1B-43B4-A1BE-C5DED4043989}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B091C4C2-3791-4C00-A0A4-05F50BBB1372}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B0DCC8C4-C019-4C58-83D8-4569E3DE2C8A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B0F28EED-9FC5-4F3B-8452-B44940EFF419}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B105647F-6968-4719-9BFA-D3284F090A4F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B1476CBA-138E-48C6-B794-E0EEBC1D920E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B2B116A0-F7F7-4AF6-8226-8ACB6750827C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B2EF0790-3682-45A1-B7A8-E76195692473}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B40267D6-B3FD-46CA-AF89-FF1A427A7CDF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B5746458-F1BF-46F3-AF71-BBAC3CF0A0E7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B5C93932-1622-48EA-8547-7167531F652B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B61A76FC-BF4E-4210-A2BF-C8A18FBF84E1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B62D7DBF-6AE1-4D4A-AB6F-F71ED6984450}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B6399BEB-6D92-424E-8D3B-CA420F9E1D6F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B74CD69D-106A-4D45-AD7C-2D8C4B728E27}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7927D3C-839C-4D4A-8864-EC888769D631}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7942996-22CD-4881-8E06-6008D77C8DF1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7995065-FE72-4028-BBB1-4E9F353BDF70}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7DCB85B-CFD9-4C34-8B81-BA9826E08F45}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B7EEC998-698E-4788-ADEA-BE24BDD0C835}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B81FF54E-5992-4D1A-98C9-4DA7D7BAEA6E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B8371FCC-AFF6-43CB-BBF2-F64090FA39DC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B87A61E5-1B2F-4B53-817E-173AED2FE696}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B88373BB-01CE-4B1F-82AF-19CC19522F6F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B8DDF08D-6F41-4002-9324-3CD1A07D9D39}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B93BEB10-FD95-4231-8697-E9634D0BF59E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B95866F8-BBD0-4070-8998-2497C5F7D009}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{B9FEA595-873B-409A-B775-186EF974FDE6}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BA7AD6BE-7DC4-4089-B4F9-12E749A6631C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BB911F03-B9C6-4A33-8713-0BE87A05C743}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BBEABD98-F0AC-4049-B287-32D4986D6913}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC0ED74A-5E36-4E72-9FFF-3E0E1DDD17DD}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC1BBCC5-66D5-4079-A77F-F1090AF57C87}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BC39761F-5A62-4AD9-9441-7CEE2652DCC5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BCCFE3DA-CE2E-41BB-BC3E-3BB8A5DDF459}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BD96EBD6-3627-46CC-B7D1-0402A4CBDC6D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BE6E2A0E-2EE1-490F-8C58-DBD090A5F532}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BEAD2CE5-C555-49A5-BBD5-F0D138A870AE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BEBEB1AA-29C9-464C-97EA-A2AD2E0B595C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{BF7B58B5-64E6-4380-AC1A-98C0BFAD389E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C0E59206-1A3B-4566-BE12-A0791449CA19}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C11548B5-854D-410F-8A31-1B1E86017F97}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C150984F-6E47-4E91-9639-E88D0251EA9B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C18728B5-6292-4E17-876C-10C2AC031E3E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C205A912-8662-42F1-887D-980C5699E911}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C20BBEB6-F8B2-4629-AF56-5C595A788930}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C215136B-5F40-4E56-8BB6-B72D9CA9FE7A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C2C4E6A9-46C3-4E75-9A8A-6DC95AC1FBAC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C3A83712-9EAE-4F67-B5DA-C9B6E6EB40CF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C3ED8225-A150-4C08-BA20-CABFD33EA616}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C41E5127-6506-4E1C-B678-8413BF861ED7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C447DB6E-B45B-4AD4-AEB2-8B2408C0CEBB}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4D0DF8B-D266-4FCA-94B4-402FBE4BA381}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4E8BE46-3A20-49C4-9B8B-78744BDB6302}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C4EE3B97-DB26-4938-8848-740D02350A0B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C645C338-F2C8-4DFA-83DA-8CBF33629F9D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C6A6DCFB-77CB-480C-808E-DDC690CB276C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C793B7F3-8D11-405C-959B-95E8022202B9}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C7B893FC-F1CC-4898-9622-62E8C3A2C379}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C7C56AC0-45D2-4250-A227-22B9EE3021FE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C8DFCD7B-6086-48EC-8320-DC4109C90EF0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{C9864B40-639B-4D70-BEE2-2410D79A374B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CA1BCCBC-0F92-487E-88D5-757703DC32EC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CA497B48-8C72-45EA-B236-D03F0E130FBC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CAEA1B43-57C3-437B-8DA4-CDC832757D7C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CBB1A9D6-B25C-412C-BC08-CA94D9938E6C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CC41F55A-1ED7-4216-814F-5880C8B4DBDE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CC52C6C6-3206-449F-B521-43AC456B5E93}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CD92449C-A587-4FFC-BE44-B31861BFE65E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CE0B4A3B-66B2-4E9E-A8A5-7C5C2C77175F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CEB1A45B-3F90-486D-A126-3B21D6AD14DC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CEC15515-12F4-4974-B05F-6F32733F9BA4}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF29BB94-8A88-4110-8A3B-4EF36F770E72}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF8851D1-ACD6-445E-964E-394BD6FBDD1C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF8FF3D8-50B7-48D0-A225-1B9AFC4E6628}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF9B3145-B416-4DDD-85E7-FFBFD5B825E5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CF9C061B-6296-466C-89C1-8B6EC00F0C21}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CFA2F687-A467-482A-A1E7-EDC0825ECD0B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{CFCC01EF-4A2C-45A3-8BEE-66EDA1765856}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D04B96E1-83FA-4441-9C96-0AB00090E2D7}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D1515A08-9230-4702-9004-208353EF8C09}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D1AD3914-8BE8-4E0F-B948-CC9A6AE3B44E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D2F167F3-A012-4607-9E9F-3CF079D05AE1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D311A7A2-4BC4-4A6E-AF60-98D729A06455}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D38F53BE-C053-4A86-B697-C49C3D202703}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3AA2FB9-CFE7-40D8-A4F0-9C33B6469A50}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3DAC667-C3E9-4768-802E-C8772F86C184}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3EB9225-D17A-41BA-A215-B7D6955408B1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D3ED76DA-EE25-4516-B97E-9C8C29A99DB5}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D40C15A5-4530-4F05-9141-72FA173D8730}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D4877055-243D-4B83-9017-780318F48C7A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D757EE6C-787D-45F1-9C6F-E40ED73FBA25}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D76BE50F-983E-4E12-9B4B-4C247D493C04}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{D95A2C1D-39CB-4C22-8E63-720394F60EEF}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA25E517-C441-4337-BB27-3536E5E81C1B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA2DE117-0225-41BE-929E-F9B71821B7B8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DA5AAEC8-6113-4315-8DF6-A5E417F0166D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DAD19485-66C0-4CA5-BBC4-39ABA7236AE2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DB5CCD8A-108F-4E32-B561-58D53ABC2A40}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DC10D610-C96A-4279-97B7-EE49C5A3EF2C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DC879D6E-3AD6-4B95-B4E3-943546A3FB48}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE1E4BCF-35FB-4A1D-B7AC-5AC669F8C15C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE20C605-B727-47F5-BC8A-DDA0781222CE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DE7B5F0A-E583-412F-98FC-B0B783ED661C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DF81481E-52D6-4438-A566-6C9FCB3F2880}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DF930DAD-094E-44F1-974A-A6E7F6BF0554}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{DFEA45F1-0F24-4EF2-AB78-4AD4A68BB0ED}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E0281FFB-2ECD-447F-9B0C-2889695D9D4D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E0824090-D4CF-4B46-94C9-C24224E89505}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E199EFA8-8410-4443-BD09-731F8ECC1A92}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E20D13C4-6DBC-402D-8E57-1F3B16789DC3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E25DC990-4C29-4AF5-A405-2B702200DBE2}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E33ADAE3-4BCF-4B5D-A1AE-4648CA425D15}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E36F46DE-D9FB-45A8-A7E5-62D4DEBAEF11}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E4045DDF-5643-43BE-A1D6-141EDFE4354F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E43C70A1-C480-493D-A472-354E3C9BEBDE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E5AB4D1A-D42A-4EF7-A0A1-B5E73C850090}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E6AB5736-F5C7-46BF-B074-F99E268F06EE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E7E0E27B-97AD-4CE1-BDDC-5108F63B0686}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E87B104E-916F-4286-B7DA-FD8D44A27226}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E89830F7-4639-4D6E-9A39-A23F2C73CF45}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8BC9549-4FD3-47B7-B8D2-6166DA02CF07}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8DE1127-633F-42CB-9425-885EBD3EB3D8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E8F0EBDC-4E52-4831-A2F3-8BDA6D3762FC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{E986CC04-39EE-4957-B7EC-744F16050700}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EA25CB4C-E69D-4D15-BB4B-3707A631BB2F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EB1B83EA-8B51-4A69-9E50-51E87A358E84}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EBDF00F9-7914-4DDE-A862-A2C80B6E6AC8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ECB00095-59EB-42EE-9F91-E60B1C2EFAEE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{ED807047-E042-485D-84A0-F35402272D80}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EDCB3145-E2BE-409D-AEAD-9D87F57A6A0C}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EE6CCB81-E205-46CB-9AD3-F1458027DDC1}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF543FE7-4617-48DA-B0FA-0FBA7F5DF249}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF999DDE-B38B-49DD-A5F8-DEBF637B84EC}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{EF9F40D0-6655-4791-A734-B2239F01ECE8}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F01F374C-62AF-4DB9-AD1C-6C2435668890}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F0B0B3AE-0F9B-4B5B-8323-A5B4EA2D3E48}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F13FAEE5-2EDC-4846-AD42-16DF40D9FF88}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F161CBAA-C68C-4DEC-8988-8D830484269E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F1E16341-12CC-4886-A567-C4F946EB9283}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F3A58AD0-DF08-42A4-B0DA-4CCD32D72E76}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F5911072-5E6E-4C98-96E0-3E65BDE8B301}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F6503FBA-5B3D-4E2B-93E9-ABDA9E1A7E17}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F68438A5-9520-4072-8BF3-323705A87AC0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F6C239AF-9635-4C1C-8D54-7A72787CDF4B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F7A71C3B-D1CF-44ED-ACC6-724703AFED53}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F7B05ABD-2F4E-4817-AD61-441CD90CF04A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F90B4D35-AEF0-4141-A8CD-A01B77A42DDE}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F9175BFD-0AE3-4798-8BB1-23FFF8EE662B}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F93CA2FA-E5E0-4E03-8FCC-59BBE4C2A92D}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{F95C5700-B425-45D7-9B3F-73728694F886}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FA6CCA0D-38C0-4996-8D34-34C1A86A3C77}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FA99CEBF-604E-402B-941B-2532F719E5BD}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FBC18B31-DEBB-4D14-92E6-D9657220BDAA}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FBEC7C2B-5781-4DAA-9E55-4182FECB993E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FC99521D-4F7A-474D-93F3-2458AE5A70E0}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FD88CE99-39A5-48FA-A182-A03DFC06ED2A}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE2B3D72-9D3E-4AD8-8169-AB31603FE32E}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE3744B9-46FC-4F2E-8154-5D8C4DDE332F}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FE37C4F2-0396-4370-A2F0-C179DFD3AAF3}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FF504ACF-ACA0-4D2C-8571-A36480C2AB31}
Successfully deleted: [Empty Folder] C:\Users\Nina\appdata\local\{FF58CC91-0699-4133-97DF-52E4299990B6}



~~~ FireFox

Emptied folder: C:\Users\Nina\AppData\Roaming\mozilla\firefox\profiles\npi0g2yw.default\minidumps [689 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2014 at 13:41:02,93
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NiFu · 07.09.2014, 17:47

Und hie rnoch das aktuelle FRST:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Nina (administrator) on LITTLEONE on 07-09-2014 18:35:15
Running from C:\Users\Nina\Downloads
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(WiseCleaner.COM) C:\Program Files (x86)\Wise\Wise Auto Shutdown\WiseAutoShutdown.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated)
HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. )
HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe "
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk
ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default
FF Homepage: hxxp://ecosia.org/
FF NetworkProxy: "ftp", "proxy.uni-bonn.de"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "proxy.uni-bonn.de"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "uni-bonn.de"
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "ssl", "proxy.uni-bonn.de"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-09-05]
FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20]
FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12]
FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28]
FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt
FF Extension: SimplePass Online Accounts Extension  - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21]

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.)
R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.)
S2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. )
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed]
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed]
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 DVMIO; \??\C:\Program Files (x86)\InstantView\config\dvmio.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 18:35 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST
2014-09-07 13:41 - 2014-09-07 13:41 - 00054959 _____ () C:\Users\Nina\Desktop\JRT.txt
2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT
2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe
2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM
2014-09-07 13:02 - 2014-09-07 13:18 - 00000000 ____D () C:\AdwCleaner
2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe
2014-09-07 12:59 - 2014-09-07 12:59 - 00013010 _____ () C:\Users\Nina\Desktop\mbam.txt
2014-09-07 12:18 - 2014-09-07 12:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-07 12:18 - 2014-09-07 12:18 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 12:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-07 12:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-05 18:34 - 2014-09-05 18:34 - 00023015 _____ () C:\Users\Nina\Desktop\COMBOFIX.txt
2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt
2014-09-05 17:38 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-05 17:38 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-05 17:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-05 17:37 - 2014-09-05 18:31 - 00000000 ____D () C:\Qoobox
2014-09-05 17:37 - 2014-09-05 18:27 - 00000000 ____D () C:\Windows\erdnt
2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 00001272 _____ () C:\Users\Nina\Desktop\Revo Uninstaller.lnk
2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-04 11:39 - 2014-09-04 11:39 - 00147024 _____ () C:\Users\Nina\Desktop\GMER.txt
2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe
2014-09-04 10:10 - 2014-09-04 10:13 - 00067212 _____ () C:\Users\Nina\Downloads\Addition.txt
2014-09-04 10:07 - 2014-09-07 18:38 - 00025016 _____ () C:\Users\Nina\Downloads\FRST.txt
2014-09-04 10:07 - 2014-09-04 10:13 - 00000000 ____D () C:\Users\Nina\Desktop\FRST
2014-09-04 10:06 - 2014-09-04 10:07 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 22:35 - 2014-09-07 13:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-02 22:25 - 2014-09-07 12:07 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-02 00:56 - 2014-09-07 18:31 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job
2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 18:38 - 2014-09-04 10:07 - 00025016 _____ () C:\Users\Nina\Downloads\FRST.txt
2014-09-07 18:35 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST
2014-09-07 18:33 - 2010-06-26 05:36 - 00000012 ____H () C:\dvmexp.idx
2014-09-07 18:31 - 2014-09-02 00:56 - 00000450 _____ () C:\Windows\Tasks\Wise Auto Shutdown Task.job
2014-09-07 18:31 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten
2014-09-07 18:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-07 18:31 - 2009-07-14 06:51 - 00536335 _____ () C:\Windows\setupact.log
2014-09-07 13:50 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini
2014-09-07 13:50 - 2010-06-26 05:21 - 01367852 _____ () C:\Windows\WindowsUpdate.log
2014-09-07 13:41 - 2014-09-07 13:41 - 00054959 _____ () C:\Users\Nina\Desktop\JRT.txt
2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT
2014-09-07 13:21 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-07 13:21 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe
2014-09-07 13:18 - 2014-09-07 13:02 - 00000000 ____D () C:\AdwCleaner
2014-09-07 13:18 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox
2014-09-07 13:18 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox
2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM
2014-09-07 13:09 - 2010-06-26 05:17 - 00189808 _____ () C:\Windows\PFRO.log
2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe
2014-09-07 13:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-07 12:59 - 2014-09-07 12:59 - 00013010 _____ () C:\Users\Nina\Desktop\mbam.txt
2014-09-07 12:58 - 2014-09-07 12:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-07 12:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-09-07 12:18 - 2014-09-07 12:18 - 00001110 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-07 12:15 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat
2014-09-07 12:15 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat
2014-09-07 12:15 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-07 12:07 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-07 00:26 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype
2014-09-05 18:35 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet
2014-09-05 18:34 - 2014-09-05 18:34 - 00023015 _____ () C:\Users\Nina\Desktop\COMBOFIX.txt
2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt
2014-09-05 18:31 - 2014-09-05 17:37 - 00000000 ____D () C:\Qoobox
2014-09-05 18:31 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-09-05 18:27 - 2014-09-05 17:37 - 00000000 ____D () C:\Windows\erdnt
2014-09-05 18:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-09-05 18:18 - 2009-07-14 04:34 - 76546048 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 24903680 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 00001272 _____ () C:\Users\Nina\Desktop\Revo Uninstaller.lnk
2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-04 15:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-04 11:39 - 2014-09-04 11:39 - 00147024 _____ () C:\Users\Nina\Desktop\GMER.txt
2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe
2014-09-04 10:13 - 2014-09-04 10:10 - 00067212 _____ () C:\Users\Nina\Downloads\Addition.txt
2014-09-04 10:13 - 2014-09-04 10:07 - 00000000 ____D () C:\Users\Nina\Desktop\FRST
2014-09-04 10:07 - 2014-09-04 10:06 - 02104832 _____ (Farbar) C:\Users\Nina\Downloads\FRST64.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google
2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 22:35 - 2014-09-03 22:35 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-03 22:35 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-03 22:35 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-09-03 21:27 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien
2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe
2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia
2014-09-03 14:20 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc
2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary
2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6
2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA
2014-09-02 00:56 - 2014-09-02 00:56 - 00002874 _____ () C:\Windows\System32\Tasks\Wise Auto Shutdown Task
2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0
2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon
2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken
2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous
2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films
2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars
2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk
2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini
2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX
2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX
2014-08-09 17:24 - 2010-09-08 18:04 - 00000000 ____D () C:\ProgramData\Skype

Files to move or delete:
====================
C:\Users\Nina\Firefox Setup 3.6.9.exe


Some content of TEMP:
====================
C:\Users\Nina\AppData\Local\Temp\avgnt.exe
C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeiuhpt.dll
C:\Users\Nina\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 18:18

==================== End Of Log ============================

--- --- ---

schrauber · 08.09.2014, 13:35

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

NiFu · 09.09.2014, 23:36

So, erst einmal das ESET:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=74c6b6e52e27934b9b1b2deff9803db7
# engine=20064
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-09-09 06:41:03
# local_time=2014-09-09 08:41:03 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7600 NT 
# compatibility_mode_1='Avira Desktop'
# compatibility_mode=1810 16777213 100 100 43236 154787235 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 75308 161917911 0 0
# scanned=293284
# found=14
# cleaned=0
# scan_time=39397
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=37FDC039C02562267559D42D94DDB64B692FD091 ft=1 fh=7aeecd1bb81f6a22 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hk64tbMyA0.dll.vir"
sh=A6D053127826CDA8DD8FCDBB4E81F63000910624 ft=1 fh=e8f05c501331b563 vn="möglicherweise Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hktbMyA0.dll.vir"
sh=7148AC44C7FE0CB8D30A12ACB28171AE1F609C20 ft=1 fh=779162af1796b620 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\tbMyA0.dll.vir"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll.vir"
sh=4209335C4BA9AFCFF95CB4D3D9F28978B67B9AAB ft=0 fh=0000000000000000 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2012-07-15 190000\Backup files 6.zip"
sh=FA2F3919D12D002D3924FF54AF40C5114547DFF5 ft=0 fh=0000000000000000 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2012-07-15 190000\Backup files 7.zip"
sh=065FCF833F6DD354E53D9D279A6626585E44D7E5 ft=0 fh=0000000000000000 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2013-03-09 001808\Backup files 5.zip"
sh=65D49DD916F512A485C97635A41D6BE3405D3C8C ft=0 fh=0000000000000000 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="E:\LITTLEONE\Backup Set 2012-07-15 190000\Backup Files 2013-06-02 194051\Backup files 4.zip"
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=37FDC039C02562267559D42D94DDB64B692FD091 ft=1 fh=7aeecd1bb81f6a22 vn="Variante von Win64/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hk64tbMyA0.dll.vir"
sh=A6D053127826CDA8DD8FCDBB4E81F63000910624 ft=1 fh=e8f05c501331b563 vn="möglicherweise Variante von Win32/Toolbar.Conduit.X evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\hktbMyA0.dll.vir"
sh=7148AC44C7FE0CB8D30A12ACB28171AE1F609C20 ft=1 fh=779162af1796b620 vn="Variante von Win32/Toolbar.Conduit.B evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\tbMyA0.dll.vir"
sh=ABF759CA3BFB16DE62197DD7C417AC5039A43AE0 ft=1 fh=1801af74030ebca1 vn="Variante von Win32/PriceGong.A evtl. unerwünschte Anwendung" ac=I fn="E:\WD_SmartWare\95D79BC1529F476FBCD51F0AD5C7773C\C_\AdwCleaner\Quarantine\C\Users\Nina\AppData\LocalLow\MyAshampoo\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll.vir"

Und das Security Check:

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.87  
 Windows 7  x64 (UAC is enabled)  
 Out of date service pack!! 
``````````````Antivirus/Firewall Check:`````````````` 
Avira Desktop   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java 7 Update 67  
 Adobe Flash Player 15.0.0.152  
 Adobe Reader 10.1.11 Adobe Reader out of Date!  
 Mozilla Firefox (32.0) 
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
 Microsoft Small Business Business Contact Manager BcmSqlStartupSvc.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

und das FRST:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 07-09-2014 01
Ran by Nina (administrator) on LITTLEONE on 10-09-2014 00:32:08
Running from C:\Users\Nina\Desktop\Wurmkur sept\FRST
Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 8
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AuthenTec, Inc.) C:\Program Files (x86)\Fingerprint Sensor\AtService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Blue Coat Systems, Inc.) C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\config\DVMExportService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DeviceVM, Inc.) C:\Program Files (x86)\InstantView\tools\aoiosnap.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(O3SIS AG) C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Western Digital) C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
() C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
() C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Egis Technology Inc. ) C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\Nina\Downloads\SecurityCheck.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-04-23] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2029352 2010-01-29] (Synaptics Incorporated)
HKLM\...\Run: [InstantView Agent] => C:\Program Files (x86)\InstantView\tools\aoiosnap.exe [1093312 2010-05-04] (DeviceVM, Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-04-23] (Acer Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-24] (Intel Corporation)
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [588648 2009-07-25] (Symantec Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [260608 2010-03-09] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [960080 2010-05-25] (Dritek System Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [401192 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201512 2009-12-24] (Egis Technology Inc.)
HKLM-x32\...\Run: [VitaKeyTSR] => C:\Program Files (x86)\Acer Bio Protection\EgisTSR.exe [186224 2010-06-02] (Egis Technology Inc. )
HKLM-x32\...\Run: [BambooCore] => C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744 2013-05-05] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-05] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [455512 2014-05-28] (DivX, LLC)
HKLM-x32\...\Run: [DivXUpdate] => C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1861968 2014-01-10] ()
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [DataSync Outlook] => C:\Program Files (x86)\Deutsche Telekom\DataSync Outlook\DataSync Outlook.exe [720896 2009-12-07] (O3SIS AG)
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe "
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase-6 Reminder.lnk
ShortcutTarget: phase-6 Reminder.lnk -> C:\Program Files (x86)\phase-6\phase-6\reminder\reminder.exe (phase-6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\phase6_17_erinnerung.lnk
ShortcutTarget: phase6_17_erinnerung.lnk -> C:\Program Files (x86)\phase6\phase6_17\WinStart\WinStart.exe (phase6)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
Startup: C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_8172&r=27360910t306l0421z135x46j1n27q
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
BHO: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\x64\EgisPBIE.dll (Egis Technology Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: SwissAcademic.Citavi.IEPicker.IEPicker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: EgisPBIE Class -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files (x86)\Acer Bio Protection\EgisPBIE.dll (Egis Technology Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} -  No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default
FF Homepage: hxxp://ecosia.org/
FF NetworkProxy: "ftp", "proxy.uni-bonn.de"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "http", "proxy.uni-bonn.de"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "uni-bonn.de"
FF NetworkProxy: "socks_version", 4
FF NetworkProxy: "ssl", "proxy.uni-bonn.de"
FF NetworkProxy: "ssl_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1213153.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Windows\SysWOW64\npdeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.10 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wacom-plugin,version=1.1.0.4 -> C:\Program Files (x86)\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.0.0.1 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin -> C:\Users\Nina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin HKCU: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\ecosia.xml
FF SearchPlugin: C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\searchplugins\yahoo-msd.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira Browser Safety - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\abs@avira.com [2014-09-05]
FF Extension: Suche App - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{47744fca-0011-4ba5-ba33-24ae19355a42}.xpi [2014-07-20]
FF Extension: LeechBlock - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{a95d8332-e4b4-6e7f-98ac-20b733364387}.xpi [2013-10-12]
FF Extension: Ecosia — The search engine that plants trees! - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [2013-09-28]
FF Extension: Adblock Plus - C:\Users\Nina\AppData\Roaming\Mozilla\Firefox\Profiles\npi0g2yw.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-10-12]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-07-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-07-23]
FF HKLM-x32\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files (x86)\Acer Bio Protection\FFExt
FF Extension: SimplePass Online Accounts Extension  - C:\Program Files (x86)\Acer Bio Protection\FFExt [2010-06-26]
FF HKLM-x32\...\Firefox\Extensions: [{8AA36F4F-6DC7-4c06-77AF-5035170634FE}] - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox
FF Extension: Citavi Picker - C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2010-11-26]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-05-21]

Chrome: 
=======

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-05] (Avira Operations GmbH & Co. KG)
R2 ATService; C:\Program Files (x86)\Fingerprint Sensor\AtService.exe [2037248 2010-04-26] (AuthenTec, Inc.) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 bckwfs; C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe [2647256 2014-01-24] (Blue Coat Systems, Inc.)
R2 DvmMDES; C:\Program Files (x86)\InstantView\config\DVMExportService.exe [420088 2010-06-02] (DeviceVM, Inc.)
R2 EgisTec Service; C:\Program Files (x86)\Acer Bio Protection\EgisService.exe [310128 2010-06-02] (Egis Technology Inc. )
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 MSSQL$MSSMLBIZ; c:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed]
S3 OpenVPNService; C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe [31744 2010-12-15] () [File not signed]
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
R2 WDDMService.exe; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [116224 2009-08-17] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 bckd; C:\Windows\System32\drivers\bckd.sys [126168 2014-01-24] (Blue Coat Systems, Inc.)
R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] ()
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 DVMIO; \??\C:\Program Files (x86)\InstantView\config\dvmio.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 00:19 - 2014-09-10 00:19 - 00854417 _____ () C:\Users\Nina\Downloads\SecurityCheck.exe
2014-09-08 23:45 - 2014-09-08 23:45 - 02347384 _____ (ESET) C:\Users\Nina\Downloads\esetsmartinstaller_deu.exe
2014-09-07 18:42 - 2014-09-08 23:44 - 00000000 ____D () C:\Users\Nina\Desktop\Wurmkur sept
2014-09-07 18:35 - 2014-09-10 00:32 - 00000000 ____D () C:\FRST
2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT
2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe
2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM
2014-09-07 13:02 - 2014-09-07 13:18 - 00000000 ____D () C:\AdwCleaner
2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe
2014-09-07 12:18 - 2014-09-07 12:58 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-07 12:18 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-07 12:18 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt
2014-09-05 17:38 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-09-05 17:38 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-09-05 17:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-09-05 17:38 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-09-05 17:37 - 2014-09-05 18:31 - 00000000 ____D () C:\Qoobox
2014-09-05 17:37 - 2014-09-05 18:27 - 00000000 ____D () C:\Windows\erdnt
2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:35 - 2014-09-03 23:36 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 22:35 - 2014-09-10 00:01 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-03 22:35 - 2014-09-09 20:02 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-03 22:35 - 2014-09-09 20:02 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-03 22:35 - 2014-09-09 20:02 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-02 22:25 - 2014-09-07 12:07 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-08-29 10:38 - 2014-09-03 22:35 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-08-19 12:52 - 2014-08-22 11:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 23:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-19 11:09 - 2014-08-19 14:37 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-16 11:51 - 2014-08-16 11:29 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:51 - 2014-08-16 11:29 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-14 12:44 - 2014-08-14 13:46 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-13 23:42 - 2014-08-07 03:52 - 00526848 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 23:42 - 2014-08-07 03:46 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:21 - 2014-08-12 00:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-10 00:32 - 2014-09-07 18:35 - 00000000 ____D () C:\FRST
2014-09-10 00:19 - 2014-09-10 00:19 - 00854417 _____ () C:\Users\Nina\Downloads\SecurityCheck.exe
2014-09-10 00:10 - 2010-06-26 05:21 - 01416340 _____ () C:\Windows\WindowsUpdate.log
2014-09-10 00:01 - 2014-09-03 22:35 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-09 20:02 - 2014-09-03 22:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-09 20:02 - 2014-09-03 22:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-09 20:02 - 2014-09-03 22:35 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-09 16:00 - 2010-06-26 15:11 - 00756680 _____ () C:\Windows\system32\perfh007.dat
2014-09-09 16:00 - 2010-06-26 15:11 - 00173344 _____ () C:\Windows\system32\perfc007.dat
2014-09-09 16:00 - 2009-07-14 07:13 - 01768244 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-09 15:56 - 2009-07-14 06:51 - 00537567 _____ () C:\Windows\setupact.log
2014-09-09 11:03 - 2013-03-26 22:37 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\vlc
2014-09-09 09:43 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-09 09:43 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-09 08:40 - 2011-02-04 11:14 - 00000000 ____D () C:\Users\Nina\Documents\Outlook-Dateien
2014-09-09 08:35 - 2010-11-03 15:00 - 00000000 ____D () C:\Users\Public\Documents\phase6_17_Daten
2014-09-09 08:34 - 2010-06-26 05:36 - 00000012 ____H () C:\dvmexp.idx
2014-09-09 08:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-09 00:54 - 2010-06-26 08:24 - 00000268 _____ () C:\dvmaccounts.ini
2014-09-09 00:00 - 2014-02-17 21:19 - 00000000 ____D () C:\Program Files\Blue Coat K9 Web Protection
2014-09-08 23:45 - 2014-09-08 23:45 - 02347384 _____ (ESET) C:\Users\Nina\Downloads\esetsmartinstaller_deu.exe
2014-09-08 23:44 - 2014-09-07 18:42 - 00000000 ____D () C:\Users\Nina\Desktop\Wurmkur sept
2014-09-08 22:02 - 2010-09-08 18:05 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Skype
2014-09-07 13:22 - 2014-09-07 13:22 - 00000000 ____D () C:\Windows\ERUNT
2014-09-07 13:19 - 2014-09-07 13:19 - 01016261 _____ (Thisisu) C:\Users\Nina\Downloads\JRT.exe
2014-09-07 13:18 - 2014-09-07 13:02 - 00000000 ____D () C:\AdwCleaner
2014-09-07 13:18 - 2013-09-03 11:00 - 00000000 ___RD () C:\Users\Nina\Dropbox
2014-09-07 13:18 - 2013-09-03 10:40 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Dropbox
2014-09-07 13:09 - 2014-09-07 13:09 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\DeviceVM
2014-09-07 13:09 - 2010-06-26 05:17 - 00189808 _____ () C:\Windows\PFRO.log
2014-09-07 13:01 - 2014-09-07 13:01 - 01370483 _____ () C:\Users\Nina\Downloads\adwcleaner_3.309.exe
2014-09-07 12:58 - 2014-09-07 12:18 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-09-07 12:51 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\security
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-07 12:18 - 2014-09-07 12:18 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-09-07 12:15 - 2014-09-07 12:15 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Nina\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-07 12:07 - 2014-09-02 22:25 - 00000000 ____D () C:\ProgramData\AfquWazes
2014-09-05 18:35 - 2011-09-05 15:15 - 00000000 ___RD () C:\Users\Nina\Desktop\Internet
2014-09-05 18:31 - 2014-09-05 18:31 - 00023015 _____ () C:\ComboFix.txt
2014-09-05 18:31 - 2014-09-05 17:37 - 00000000 ____D () C:\Qoobox
2014-09-05 18:31 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default
2014-09-05 18:27 - 2014-09-05 17:37 - 00000000 ____D () C:\Windows\erdnt
2014-09-05 18:22 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-09-05 18:18 - 2009-07-14 04:34 - 76546048 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 24903680 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00524288 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-09-05 18:18 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-09-05 17:30 - 2014-09-05 17:30 - 05576440 ____R (Swearware) C:\Users\Nina\Desktop\ComboFix.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Nina\Downloads\revosetup95.exe
2014-09-05 17:05 - 2014-09-05 17:05 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-09-04 15:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-09-04 10:20 - 2014-09-04 10:20 - 00380416 _____ () C:\Users\Nina\Downloads\p2n2tqh1.exe
2014-09-04 10:04 - 2014-09-04 10:04 - 00000470 _____ () C:\Users\Nina\Downloads\defogger_disable.log
2014-09-04 10:04 - 2014-09-04 10:04 - 00000000 _____ () C:\Users\Nina\defogger_reenable
2014-09-04 10:04 - 2010-09-08 16:08 - 00000000 ____D () C:\Users\Nina
2014-09-04 10:02 - 2014-09-04 10:02 - 00050477 _____ () C:\Users\Nina\Downloads\Defogger.exe
2014-09-03 23:51 - 2014-09-03 23:51 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full(1).exe
2014-09-03 23:42 - 2010-09-08 16:54 - 00000000 ____D () C:\Users\Nina\AppData\Local\Google
2014-09-03 23:42 - 2010-06-09 21:57 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-03 23:37 - 2014-09-03 23:37 - 00000000 ____D () C:\Windows\SysWOW64\Adobe
2014-09-03 23:36 - 2014-09-03 23:35 - 12846640 _____ (Adobe Systems Inc.) C:\Users\Nina\Downloads\Shockwave_Installer_Full.exe
2014-09-03 23:03 - 2014-09-03 23:03 - 00001167 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-03 23:03 - 2014-07-23 20:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-03 23:03 - 2012-05-03 02:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-03 22:35 - 2014-08-29 10:38 - 00000000 ____D () C:\Users\Nina\AppData\Local\Adobe
2014-09-03 20:12 - 2010-09-08 16:23 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Adobe
2014-09-03 20:12 - 2010-09-08 16:10 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Macromedia
2014-09-03 13:25 - 2011-09-09 13:18 - 00000000 ____D () C:\Users\Nina\Desktop\Temporary
2014-09-03 12:56 - 2010-10-13 12:39 - 00000000 ____D () C:\Users\Nina\.gimp-2.6
2014-09-02 13:12 - 2013-12-29 19:19 - 00000000 ____D () C:\Users\Nina\Desktop\BA
2014-09-01 23:06 - 2010-09-29 00:20 - 00000000 ____D () C:\Users\Nina\Gesendete
2014-09-01 17:09 - 2014-09-01 17:09 - 00003987 _____ () C:\Users\Nina\.recently-used.xbel
2014-09-01 17:09 - 2010-10-20 10:50 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\gtk-2.0
2014-08-30 16:27 - 2010-09-09 19:00 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Liteon
2014-08-29 12:34 - 2012-01-08 22:25 - 00000000 ____D () C:\Users\Nina\Documents\Essen&Trinken
2014-08-29 12:33 - 2011-09-05 15:10 - 00000000 ___RD () C:\Users\Nina\Desktop\Miscellaneous
2014-08-29 12:03 - 2011-11-24 03:19 - 00000000 ____D () C:\Users\Nina\Desktop\Celtic Films
2014-08-22 12:00 - 2011-09-05 15:16 - 00000000 ___RD () C:\Users\Nina\Desktop\Regulars
2014-08-22 11:02 - 2014-08-19 12:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Auto Shutdown
2014-08-21 19:41 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-21 14:23 - 2014-08-05 11:42 - 00000000 ____D () C:\ProgramData\Package Cache
2014-08-21 14:23 - 2013-02-26 02:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-08-21 14:23 - 2013-02-26 02:42 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-08-19 23:49 - 2014-08-19 12:52 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Wise Auto Shutdown
2014-08-19 14:37 - 2014-08-19 11:09 - 00000000 ____D () C:\Users\Nina\Desktop\Collage
2014-08-19 12:52 - 2014-08-19 12:52 - 00000000 ____D () C:\Program Files (x86)\Wise
2014-08-16 11:51 - 2012-07-07 10:46 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-16 11:49 - 2014-08-16 11:49 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Oracle
2014-08-16 11:30 - 2013-10-21 19:09 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-16 11:29 - 2014-08-16 11:51 - 00880040 _____ (Oracle Corporation) C:\Windows\SysWOW64\npdeployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:51 - 00802728 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-08-16 11:29 - 2014-08-16 11:29 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-16 11:29 - 2014-08-16 11:29 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-16 11:29 - 2014-07-18 17:37 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-14 13:46 - 2014-08-14 12:44 - 00000000 ____D () C:\Users\Nina\Documents\Ausweisdokumente
2014-08-14 11:40 - 2013-09-03 11:00 - 00001019 _____ () C:\Users\Nina\Desktop\Dropbox.lnk
2014-08-14 11:40 - 2013-09-03 10:57 - 00001388 _____ () C:\Windows\wininit.ini
2014-08-14 11:40 - 2013-09-03 10:56 - 00000000 ____D () C:\Users\Nina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-14 02:38 - 2013-07-13 15:40 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 02:38 - 2010-06-09 21:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-14 02:31 - 2010-11-09 19:12 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 02:30 - 2014-07-16 08:21 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-13 10:56 - 2014-08-13 10:56 - 00000293 _____ () C:\Users\Nina\Desktop\Kinder-Rollenspiele Astraterra, Age of the Tempest, Mouse Guard - SPIEGEL ONLINE.URL
2014-08-12 00:22 - 2014-08-12 00:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2014-08-12 00:22 - 2010-12-21 20:32 - 00000000 ____D () C:\Program Files (x86)\DivX
2014-08-12 00:22 - 2010-12-21 20:28 - 00000000 ____D () C:\ProgramData\DivX
2014-08-12 00:21 - 2010-12-21 20:34 - 00000000 ____D () C:\Program Files\DivX

Files to move or delete:
====================
C:\Users\Nina\Firefox Setup 3.6.9.exe


Some content of TEMP:
====================
C:\Users\Nina\AppData\Local\Temp\avgnt.exe
C:\Users\Nina\AppData\Local\Temp\drm_dyndata.dll
C:\Users\Nina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpeiuhpt.dll
C:\Users\Nina\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-06 18:18

==================== End Of Log ============================

--- --- ---

--- --- ---

Die Fehlermeldung direkt nach Anmeldung bleibt leider

Oder war die Frage nach anderen Problemen neben der Fehlermeldung?
Was tue ich am Ende eigentlich mit den ganzen Programmen, die ich jetzt installiert habe? Behalten, oder besser entfernen und bei Bedarf in der akutellsten Version neu installieren? Ohne eure Anweisungen kann und sollte ich da ja eh nichts mit anfangen.
Vielen Dank auf jeden Fall für all die Mühe bisher!
Lg
--- --- ---

schrauber · 10.09.2014, 17:38

Adobe updaten.

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

HKU\S-1-5-21-2265225284-3977146242-1558665416-1004\...\Run: [AfquWazes] => regsvr32.exe "

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Fehlermeldung sollte weg sein. Unbedingt Windows updaten. Da fehlt ein ganzes Servicepack!

NiFu · 02.10.2014, 00:29

Hallo,

das kann ja nicht wahr sein... Ich habe schlicht und einfach nicht gerafft, dass der Thread auf eine 2. Seite gesprungen ist und mich gewundert, warum nix mehr kam. Die Email muss mir irgendwie durch die Lappen gegangen sein. Gah.

Werde mich gleich dran machen.
Edit: Alle Adobe-Programme (Flash, Shockwave, Adobe Reader... ) updaten?
Windows Update behauptet das System sei auf dem neusten Stand, das kann natürlich in den letzten 20 Tagen erfolgt sein v.v' .

schrauber · 02.10.2014, 17:09

Das Servicepack gibt es schon Jahre.....

NiFu · 02.10.2014, 19:56

Aber wie kann ich es denn updaten, wenn der Updater überzeugt ist, dass das System up to date ist?

Was die Adobe Updates angeht hänge ich auch etwas in der Luft. Gehe ich da einfach die Liste der verfügbaren Updates auf Adobe.com durch?

schrauber · 03.10.2014, 13:12

Adobe Reader deinstallieren, aktuelle Version installieren, lade Dir das Servicepack1 für Win7 als Offline Installer.

02.10.2014, 17:09	#13
schrauber /// the machine /// TB-Ausbilder	Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde Das Servicepack gibt es schon Jahre..... __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde

Log-Analyse und Auswertung: Windows 7 meldet beim Start 'RegSvr32 Fehler beim Laden des Moduls "". ' seit mit Avira Malware entfernt wurde