|
Log-Analyse und Auswertung: Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiertWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
11.09.2014, 13:52 | #1 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Hallo, heute hat Avira mir eine schädliche Datei angezeigt, die ich sofort in Quarantäne geschickt habe. Danach wollte ich Avira öffnen, aber es kam nur eine Fehlermeldung, dass das Programm durch eine Gruppenrichtlinie blockiert wird. Ich kann es auch nicht mehr deinstallieren. Ich habe dann versucht mit einem anderen Antivirusprogramm (360 Internet Security) den Fehler zu finden. Das Programm zeigt aber nichts an. Ich habe gesehen, dass einige andere auch das Problem hatten und auch teilweise phishing Angriffe auf das Onlinebankingkonto hatten. Könnt ihr mir dabei helfen? Ich habe leider keine großen Kenntnisse zu dem Thema. Viele Grüße |
11.09.2014, 14:00 | #2 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
11.09.2014, 14:28 | #3 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Hallo,
__________________danke für die schnelle Antwort. Hier ist meine FRST.txt Datei: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014 Ran by Asja (administrator) on ASJA-PC on 11-09-2014 15:15:51 Running from C:\Users\Asja\Downloads Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (Spotify Ltd) C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Dropbox, Inc.) C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\vpngui.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360sd.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rp.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\safemon\360Tray.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.) HKLM\...\Run: [ODDPwr] => C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated) HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-06-11] (Acer Incorporated) HKLM\...\Run: [IntelliType Pro] => c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.) HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [273848 2014-01-09] (Qihu 360 Software Co., Ltd.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-05-25] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-04-23] (CyberLink Corp.) HKLM-x32\...\Run: [DivXUpdate] => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW HKLM-x32\...\Run: [DivX Download Manager] => "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-21] (Avira Operations GmbH & Co. KG) HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Google Update] => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-01-19] (Google Inc.) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Amazon Cloud Player] => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3140608 2014-01-14] () HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Spotify Web Helper] => C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-04] (Spotify Ltd) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [UrukNoko] => regsvr32.exe " HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\MountPoints2: {75884a53-0e5f-11e3-b873-823d29978cd5} - F:\HTC_Sync_Manager_PC.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk ShortcutTarget: vpngui.exe.lnk -> C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe () Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll (Egis Technology Inc.) ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE415DE415 SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE415DE415 SearchScopes: HKCU - {84382464-AA22-4C6C-81C2-6BE986913DBB} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10395&src=crm&q={searchTerms}&locale=&apn_ptnrs=^ABT&apn_dtid=^YYYYYY^YY^DE&apn_uid=978aaa25-748b-43fa-9165-4e164a84e221&apn_sauid=925CE628-8473-451C-98C1-57A2F403401A BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {1ED48504-8834-11D5-AC75-0008C73FD642} file:///C:/Program%20Files/ProE/proeWildfire%202.0/i486_nt/obj/pvx_install.exe DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - No File Handler-x32: osf-roaming - No CLSID Value - Filter: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter-x32: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default FF Homepage: hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE FF SelectedSearchEngine: Ask.com FF SearchEngineOrder.1: Ask.com FF DefaultSearchEngine: Ask.com FF Keyword.URL: hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=978aaa25-748b-43fa-9165-4e164a84e221&apn_ptnrs=%5EABT&apn_sauid=925CE628-8473-451C-98C1-57A2F403401A&apn_dtid=%5EYYYYYY%5EYY%5EDE&&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File FF Plugin-x32: @divx.com/DivX OVS Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @microsoft.com/Office on Demand;version=1 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\npofficeondemand.dll (Microsoft Corporation) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF SearchPlugin: C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default\searchplugins\askcom.xml FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa Chrome: ======= CHR HomePage: Default -> hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE CHR DefaultSearchKeyword: Default -> 68855DBB6EC3D233BEA00A5CE334182A9AFB8947FAC32FDCF6FCE51A275AE701 CHR DefaultSearchURL: Default -> FCC21737ABC4418B2046A24E254EC6568A040E0EE7CE89415630720D5C84A4EB CHR Profile: C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04] CHR Extension: (YouTube) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20] CHR Extension: (Google-Suche) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20] CHR Extension: (AdBlock) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-10-02] CHR Extension: (Stealthy) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2012-03-31] CHR Extension: (Google Wallet) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (360 WebShield Plug-in) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pppagaglfkmlpgobnlenhknilehpmcbo [2014-09-11] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [] CHR HKLM-x32\...\Chrome\Extension: [pppagaglfkmlpgobnlenhknilehpmcbo] - C:\Program Files\360\360 Internet Security\safemon\360webshield.crx [2014-09-11] CHR StartMenuInternet: Google Chrome - C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [295608 2014-01-09] (Qihu 360 Software Co., Ltd.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-21] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-21] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [821792 2010-06-11] (Acer Incorporated) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] () R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [File not signed] S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed] R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.) R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2011-04-29] () R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] () [File not signed] R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L) R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [File not signed] R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [228800 2013-12-24] (Qihu 360 Software Co., Ltd.) S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97480 2013-11-27] (Qihu 360 Software Co., Ltd.) R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67272 2013-03-28] (Qihu 360 Software Co., Ltd.) R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305856 2013-11-29] (Qihu 360 Software Co., Ltd.) R3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41152 2013-12-09] (Qihu 360 Software Co., Ltd.) R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [286912 2013-12-24] (Qihu 360 Software Co., Ltd.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 BAPIDRV; C:\Windows\System32\Drivers\BAPIDRV64.SYS [179904 2013-12-10] (Qihu 360 Software Co., Ltd.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-11 15:11 - 2014-09-11 15:15 - 00029833 _____ () C:\Users\Asja\Downloads\Addition.txt 2014-09-11 15:09 - 2014-09-11 15:16 - 00028602 _____ () C:\Users\Asja\Downloads\FRST.txt 2014-09-11 15:07 - 2014-09-11 15:15 - 00000000 ____D () C:\FRST 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Downloads\FRST64.exe 2014-09-11 11:10 - 2014-09-11 14:20 - 00000000 ____D () C:\ProgramData\360SD 2014-09-11 11:10 - 2014-09-11 14:14 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:10 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys 2014-09-11 11:10 - 2013-03-28 04:11 - 00067272 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys 2014-09-11 11:09 - 2014-09-11 14:17 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:09 - 2013-12-24 11:27 - 00286912 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys 2014-09-11 11:09 - 2013-12-10 05:49 - 00179904 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS 2014-09-11 11:09 - 2013-12-09 04:04 - 00041152 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys 2014-09-11 11:09 - 2013-11-29 09:55 - 00305856 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys 2014-09-11 11:09 - 2013-11-27 14:10 - 00097480 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:03 - 2014-09-11 11:06 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:00 - 2014-09-11 11:02 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:41 - 2014-09-11 10:42 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-10 10:33 - 2014-09-05 04:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 10:33 - 2014-09-05 03:55 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 12:01 - 2014-09-11 10:39 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-03 20:56 - 2009-10-21 15:39 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l101.dll 2014-09-03 20:55 - 2014-09-03 20:56 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:59 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:53 - 2014-09-03 20:59 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-09-03 20:53 - 2009-12-02 00:02 - 00000601 ____N () C:\Windows\hpomdl47.dat 2014-09-03 20:53 - 2009-10-22 16:55 - 00643200 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01408000 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpost_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01175552 _____ (Hewlett-Packard) C:\Windows\system32\hposwia_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 00521216 _____ (Hewlett-Packard Co.) C:\Windows\system32\hposc_p04a.dll 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-21 16:36 - 2014-09-04 11:56 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-21 16:33 - 2014-09-04 12:03 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-11 15:16 - 2014-09-11 15:09 - 00028602 _____ () C:\Users\Asja\Downloads\FRST.txt 2014-09-11 15:15 - 2014-09-11 15:11 - 00029833 _____ () C:\Users\Asja\Downloads\Addition.txt 2014-09-11 15:15 - 2014-09-11 15:07 - 00000000 ____D () C:\FRST 2014-09-11 15:09 - 2010-09-14 17:18 - 01217891 _____ () C:\Windows\WindowsUpdate.log 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Downloads\FRST64.exe 2014-09-11 15:03 - 2012-10-28 17:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-11 14:45 - 2011-01-20 21:21 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job 2014-09-11 14:39 - 2011-01-19 16:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-11 14:28 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-11 14:28 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-11 14:20 - 2014-09-11 11:10 - 00000000 ____D () C:\ProgramData\360SD 2014-09-11 14:17 - 2014-09-11 11:09 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 14:14 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-11 11:29 - 2013-11-21 13:33 - 00013242 _____ () C:\Windows\setupact.log 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:06 - 2014-09-11 11:03 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:02 - 2014-09-11 11:00 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:54 - 2013-03-20 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-09-11 10:54 - 2013-03-20 14:28 - 00000000 ____D () C:\ProgramData\Avira 2014-09-11 10:54 - 2013-03-20 14:28 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-09-11 10:42 - 2014-09-11 10:41 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:39 - 2014-09-04 12:01 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-11 09:44 - 2014-07-25 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 09:44 - 2014-01-07 19:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 09:19 - 2011-01-24 11:12 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-10 20:31 - 2011-01-19 16:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-10 18:01 - 2011-01-20 21:21 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job 2014-09-10 16:00 - 2011-03-05 11:22 - 00000000 ___RD () C:\Users\Asja\Dropbox 2014-09-09 22:03 - 2012-10-28 17:10 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-09 22:03 - 2012-10-28 17:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-09 22:03 - 2011-06-15 09:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-09 15:27 - 2011-03-05 13:21 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-09 15:27 - 2011-03-05 11:19 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Dropbox 2014-09-09 15:24 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-08 14:33 - 2010-09-15 03:09 - 00654400 _____ () C:\Windows\system32\perfh007.dat 2014-09-08 14:33 - 2010-09-15 03:09 - 00130240 _____ () C:\Windows\system32\perfc007.dat 2014-09-08 14:33 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-05 04:01 - 2014-09-10 10:33 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 03:55 - 2014-09-10 10:33 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 12:03 - 2014-08-21 16:33 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-09-04 11:56 - 2014-08-21 16:36 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-09-04 11:51 - 2010-09-14 17:14 - 00287762 _____ () C:\Windows\PFRO.log 2014-09-04 11:50 - 2013-01-08 18:28 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-09-03 20:59 - 2014-09-03 20:53 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:59 - 2014-09-03 20:53 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:56 - 2014-09-03 20:55 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-08-28 12:17 - 2013-05-07 18:28 - 00000000 ____D () C:\Users\Asja\Documents\Bewerbungsunterlagen 2014-08-24 20:54 - 2011-01-20 14:01 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Skype 2014-08-24 13:04 - 2011-01-20 01:09 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Liteon 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 13:00 - 2011-01-20 14:01 - 00000000 ____D () C:\ProgramData\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-22 03:15 - 2011-03-08 17:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-22 03:05 - 2013-03-14 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-21 17:14 - 2013-09-10 23:46 - 00000000 ____D () C:\Users\Asja\Desktop\Asja 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-19 08:11 - 2011-03-05 11:20 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} Some content of TEMP: ==================== C:\Users\Asja\AppData\Local\Temp\avgnt.exe C:\Users\Asja\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl7lvyd.dll C:\Users\Asja\AppData\Local\Temp\ose00000.exe C:\Users\Asja\AppData\Local\Temp\SkypeSetup.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-21 17:37 ==================== End Of Log ============================ Und hier die Addition.txt Datei: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014 Ran by Asja at 2014-09-11 15:17:08 Running from C:\Users\Asja\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: 360 Internet Security (Disabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D} AS: 360 Internet Security (Disabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) 360 Internet Security (HKLM-x32\...\360 Internet Security) (Version: 4.9.0.4900 - Qihu 360 Software Co., Ltd.) 64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 4.0.7615 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 4.0.7615 - CyberLink Corp.) Hidden Acer Arcade Movie (x32 Version: 9.0.6423 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.63 - NewTech Infosystems) Acer Crystal Eye webcam (HKLM-x32\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 1.0.3.5 - Liteon) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated) Acer GameZone Console (HKLM-x32\...\{58F4D244-314F-4D26-B5EF-C28AB32E22CB}_is1) (Version: 6.1.0.9 - Oberon Media, Inc.) Acer PowerSmart Manager (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.02.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0222.2010 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}) (Version: 1.2.17.05001 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.3.0.422 - Amazon Services LLC) Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.) ATI Catalyst Install Manager (HKLM\...\{F5816A09-786E-C91D-3D99-8A8C92648750}) (Version: 3.0.765.0 - ATI Technologies, Inc.) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira) Backup Manager Basic (x32 Version: 2.0.0.63 - NewTech Infosystems) Hidden Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - ) Canon MP270 series Benutzerregistrierung (HKLM-x32\...\Canon MP270 series Benutzerregistrierung) (Version: - ) Canon MP270 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP270_series) (Version: - ) Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0421.657.10561 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help English (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help French (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help German (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden ccc-core-static (x32 Version: 2010.0421.657.10561 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0421.657.10561 - ATI) Hidden Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKCU\...\Dropbox) (Version: 2.10.28 - Dropbox, Inc.) eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden Eufloria (HKLM-x32\...\Steam App 41210) (Version: - ) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Half-Life (HKLM-x32\...\Steam App 70) (Version: - Valve) Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve) Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve) Harry Potter TM (HKLM-x32\...\{3F50AF3B-8997-4916-0095-99D63DDB785A}) (Version: - ) HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7 (HKLM\...\{014E482A-0C27-47E3-BA82-307E9DCA2F47}) (Version: 14.0 - HP) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation) Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025F0}) (Version: 7.0.250 - Oracle) Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle) Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.290 - Oracle) Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.7 - Acer Inc.) MathPlayer (HKLM-x32\...\{32F66A20-7614-11D4-BD11-00104BD3F987}) (Version: 2.2 - Design Science, Inc.) MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office on Demand-Browser-Add-Ons (HKCU\...\Microsoft Office on Demand-Browser-Add-Ons) (Version: 15.0.4551.1512 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 1.1.500.0 - Microsoft Corporation) Hidden Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.0.0 - Electronic Arts) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.212.0 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden Network64 (Version: 140.0.212.000 - Hewlett-Packard) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.630 - NewTech Infosystems) NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6636 - NewTech Infosystems) NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems) Hidden NVIDIA PhysX v8.10.17 (HKLM-x32\...\{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}) (Version: 8.10.17 - NVIDIA Corporation) Optical Drive Power Management (HKLM-x32\...\{AE09C972-EEB2-4DA5-8090-0FCF54576854}) (Version: 1.01.3007 - Acer Incorporated) Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Portal (HKLM-x32\...\Steam App 400) (Version: - Valve) Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve) PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden PTC ProductView Express - Wildfire 2.0 (M270) (HKLM-x32\...\{26B52E64-21C0-4834-8B57-D7B0D5BCB518}) (Version: 2.1.725.0 - PTC) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden R for Windows 3.0.2 (HKLM\...\R for Windows 3.0.2_is1) (Version: 3.0.2 - R Core Team) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6096 - Realtek Semiconductor Corp.) RStudio (HKLM-x32\...\RStudio) (Version: 0.97.551 - RStudio) Runaway, The Dream of the Turtle Demo (HKLM-x32\...\Steam App 7230) (Version: - Pendulo Studios) Scan (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated) Time Gentlemen, Please! - Demo (HKLM-x32\...\Steam App 37410) (Version: - Zombie Cow) Toolbox (x32 Version: 140.0.424.000 - Hewlett-Packard) Hidden Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden Vensim PLE (HKLM-x32\...\Vensim PLE) (Version: - ) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3002 - Acer Incorporated) WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4300 - Broadcom Corporation) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/01/2013 1.0.0.0) (HKLM\...\40A0325FAA3CCB4A2619424F1F22496EB01767A3) (Version: 01/01/2013 1.0.0.0 - Arduino LLC (www.arduino.cc)) World of Goo (HKLM-x32\...\Steam App 22000) (Version: - 2D Boy) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{225F8CFE-1B76-48E6-8E75-62CC471AFA28}\InprocServer32 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\RoamingOfficeActiveX.64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File ==================== Restore Points ========================= 28-08-2014 08:19:53 Windows Update 01-09-2014 11:40:44 Windows Update 06-09-2014 01:03:20 Windows Update 09-09-2014 10:48:44 Windows Update 11-09-2014 07:17:49 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0125C851-099F-4070-B7A8-343DDE94D92C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {32CE31F6-CF9C-4FD4-A92F-46D6E2129610} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {5CE1376D-80A6-4D56-9537-D84026334616} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft) Task: {6241BCC4-A95E-449F-B28B-B60C51CE55D5} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2358443310-1148957609-1059146875-1001 Task: {7A9E966C-492D-4BF3-AD60-A74586F690A2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation) Task: {7FAEF226-0770-49D2-8936-0860B1D61AB0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {8372AFBF-C806-4F29-8B26-6BF9381EF4C0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation) Task: {9A6D82DC-4D83-43D8-8B53-578FF75195F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated) Task: {BE812FAD-5649-4FAD-8441-FF96A81EC193} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {BEC7D25E-5E50-4EA6-A13E-F42693D023B9} - System32\Tasks\Amazon Music Helper => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [2014-01-14] () Task: {C2B95837-77FB-4E3B-8404-EAE26B349329} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {C822F4C5-D083-4F88-81F3-EA8FE427235E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E5F569DB-2AAE-4BEC-8043-8D16C3916228} - System32\Tasks\{33C71A51-2E88-4C96-8938-A85CF2E5C06B} => Chrome.exe hxxp://www.skype.com/go/downloading?source=installer&ver=6.0.0.126&LastError=-9 Task: {F85B149D-BB0C-42B3-9698-D55B0120AE06} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-08 18:28 - 2009-02-10 18:01 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2011-04-29 20:08 - 2011-04-29 20:08 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2010-09-14 17:41 - 2010-02-03 10:37 - 00244904 ____N () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe 2013-12-21 18:22 - 2014-01-14 21:46 - 03140608 _____ () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe 2010-03-26 10:41 - 2010-03-26 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-14 17:17 - 2010-09-14 17:17 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll 2010-05-25 02:16 - 2010-05-25 02:16 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2010-05-25 02:09 - 2010-05-25 02:09 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2010-07-02 14:00 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll 2014-09-09 15:27 - 2014-09-09 15:27 - 00043008 _____ () c:\users\asja\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpl7lvyd.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Asja\AppData\Roaming\Dropbox\bin\libcef.dll 2013-01-12 15:14 - 2013-01-12 15:14 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll 2010-07-02 13:24 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2005-09-21 04:57 - 2005-09-21 04:57 - 04325376 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\qt-mt335.dll 2014-09-04 10:26 - 2014-08-30 04:49 - 08577864 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.103\pdf.dll 2014-09-04 10:26 - 2014-08-30 04:49 - 00331592 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.103\ppGoogleNaClPluginChrome.dll 2014-09-04 10:26 - 2014-08-30 04:49 - 01660232 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.103\ffmpegsumo.dll 2014-09-04 10:26 - 2014-08-30 04:49 - 01098056 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.103\libglesv2.dll 2014-09-04 10:26 - 2014-08-30 04:49 - 00174408 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.103\libegl.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\Software\Classes\secfile: Pro/ENGINEER Section File <===== ATTENTION! ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/11/2014 11:33:43 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm chrome.exe, Version 37.0.2062.103 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 8f8 Startzeit: 01cfcda0952a2bc0 Endzeit: 15 Anwendungspfad: C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe Berichts-ID: 9f31db32-3996-11e4-b812-8e347ea539d2 Error: (09/07/2014 07:19:50 PM) (Source: SideBySide) (EventID: 63) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig. Error: (09/06/2014 02:25:55 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647 Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000795b ID des fehlerhaften Prozesses: 0x1ae8 Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0 Pfad der fehlerhaften Anwendung: ipmGui.exe1 Pfad des fehlerhaften Moduls: ipmGui.exe2 Berichtskennung: ipmGui.exe3 Error: (09/04/2014 04:02:53 AM) (Source: SideBySide) (EventID: 63) (User: ) Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3. Der Wert "x64" des "processorArchitecture"-Attributs im assemblyIdentity-Element ist ungültig. Error: (08/28/2014 10:19:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647 Name des fehlerhaften Moduls: ipmGui.exe, Version: 14.0.6.522, Zeitstempel: 0x53bec647 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000795b ID des fehlerhaften Prozesses: 0x920 Startzeit der fehlerhaften Anwendung: 0xipmGui.exe0 Pfad der fehlerhaften Anwendung: ipmGui.exe1 Pfad des fehlerhaften Moduls: ipmGui.exe2 Berichtskennung: ipmGui.exe3 Error: (08/24/2014 01:03:51 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm chrome.exe, Version 36.0.1985.143 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 1258 Startzeit: 01cfbf8af93561a4 Endzeit: 10 Anwendungspfad: C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe Berichts-ID: 3fd204cf-2b7e-11e4-b4b6-dfa5358649dd Error: (08/21/2014 04:28:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: atieclxx.exe, Version: 6.14.11.1051, Zeitstempel: 0x4bcee2f2 Name des fehlerhaften Moduls: atiadlxx.dll, Version: 6.14.10.1054, Zeitstempel: 0x4bced60a Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000001e8d8 ID des fehlerhaften Prozesses: 0x46c Startzeit der fehlerhaften Anwendung: 0xatieclxx.exe0 Pfad der fehlerhaften Anwendung: atieclxx.exe1 Pfad des fehlerhaften Moduls: atieclxx.exe2 Berichtskennung: atieclxx.exe3 Error: (08/19/2014 08:15:54 PM) (Source: System Restore) (EventID: 8193) (User: ) Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs; Beschreibung = Windows Update; Fehler = 0x81000101). Error: (07/20/2014 10:06:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: atieclxx.exe, Version: 6.14.11.1051, Zeitstempel: 0x4bcee2f2 Name des fehlerhaften Moduls: atiadlxx.dll, Version: 6.14.10.1054, Zeitstempel: 0x4bced60a Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000001e8d8 ID des fehlerhaften Prozesses: 0x49c Startzeit der fehlerhaften Anwendung: 0xatieclxx.exe0 Pfad der fehlerhaften Anwendung: atieclxx.exe1 Pfad des fehlerhaften Moduls: atieclxx.exe2 Berichtskennung: atieclxx.exe3 Error: (07/12/2014 08:38:55 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm wlmail.exe, Version 16.4.3505.912 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 17dc Startzeit: 01cf9d9bd9e142cf Endzeit: 75 Anwendungspfad: C:\Program Files (x86)\Windows Live\Mail\wlmail.exe Berichts-ID: 2cf7229b-098f-11e4-afd8-ebf778fd47dd System errors: ============= Error: (09/09/2014 03:25:47 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (09/09/2014 03:24:10 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: Das System wurde zuvor am 09.09.2014 um 15:22:13 unerwartet heruntergefahren. Error: (09/07/2014 11:20:44 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst Netman erreicht. Error: (09/04/2014 11:53:36 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (09/04/2014 11:52:39 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: cdrom Error: (09/04/2014 11:52:07 AM) (Source: NetBT) (EventID: 4311) (User: ) Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte. Verwenden Sie die Zeichenfolge "4C0F6E61DC1C", um die Schnittstelle zu identifizieren, die nicht initialisiert werden konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar. Error: (09/04/2014 11:52:07 AM) (Source: NetBT) (EventID: 4311) (User: ) Description: Es ist ein Initialisierungsfehler aufgetreten, da der Treiber nicht erstellt werden konnte. Verwenden Sie die Zeichenfolge "4C0F6E61DC1C", um die Schnittstelle zu identifizieren, die nicht initialisiert werden konnte. Sie stellt die MAC-Adresse der Schnittstelle mit dem Initialisierungsfehler oder die GUID (Globally Unique Interface Identifier) dar, wenn NetBT keine Zuordnung von der GUID zur MAC-Adresse herstellen konnte. Wenn weder die MAC-Adresse noch die GUID verfügbar waren, dann stellt die Zeichenfolge einen Clustergerätenamen dar. Error: (09/03/2014 08:58:49 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{10DA4F3C-CC99-4190-BE4D-58330754E882}{7DDEFEA6-98EE-4F13-A25B-EC83D9BC5541}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC) Error: (09/03/2014 08:58:49 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: ComputerstandardLokalAktivierung{10DA4F3C-CC99-4190-BE4D-58330754E882}{7DDEFEA6-98EE-4F13-A25B-EC83D9BC5541}NT-AUTORITÄTLOKALER DIENSTS-1-5-19LocalHost (unter Verwendung von LRPC) Error: (08/29/2014 10:57:37 AM) (Source: NetBT) (EventID: 4321) (User: ) Description: Der Name "ASJA-PC :0" konnte nicht auf der Schnittstelle mit IP-Adresse 192.168.1.56 registriert werden. Der Computer mit IP-Adresse 192.168.1.77 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Microsoft Office Sessions: ========================= Error: (03/29/2011 11:20:32 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2792 seconds with 840 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-09-04 11:58:59.422 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:08:43.308 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:03:42.866 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:06:29.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:02:34.876 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:47.033 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.780 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.230 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-03 15:11:43.310 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-03-01 15:22:12.330 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz Percentage of memory in use: 63% Total physical RAM: 3766.69 MB Available physical RAM: 1388.27 MB Total Pagefile: 7531.51 MB Available Pagefile: 4612.12 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:316.2 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 545C63FA) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
12.09.2014, 09:22 | #4 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
12.09.2014, 12:07 | #5 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Hallo Ich hab alles wie oben beschrieben gemacht. Als erstes hier die Fixlog.txt- Datei: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 10-09-2014 Ran by Asja at 2014-09-12 11:05:29 Run:1 Running from C:\Users\Asja\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM Group Policy restriction on software: C:\Program Files (x86)\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\McAfee <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files (x86)\Avira <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\McAfee <====== ATTENTION ***************** HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. HKLM => Group Policy Restriction on software restored successfully. ==== End of Fixlog ==== Zum einen hat Combofix rumgemeckert, dass ich Avira noch aktiviert hatte, dies konnte ich dann aber öffnen und deaktivieren. Zudem konnte von Combofix eine Datei nicht auf meinem PC gespeichert werden. Es kam eine entsprechende nachricht, ob ich diese (es war glaube ich die 5.) übersprigen möchte. Nachdem ich auf nein geklickt hatte, ist Combofix aber normal fortgefahren. Hier die Combofix.txt - Datei: Code:
ATTFilter ComboFix 14-09-12.01 - Asja 12.09.2014 11:14:41.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3767.2117 [GMT 2:00] ausgeführt von:: c:\users\Asja\Desktop\ComboFix.exe AV: 360 Internet Security *Disabled/Updated* {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D} AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859} SP: 360 Internet Security *Disabled/Updated* {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0} SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\vpngui.exe.lnk c:\users\Asja\AppData\Local\Microsoft\Windows\Temporary Internet Files\Notizen.Gadget c:\users\Asja\AppData\Roaming\Local c:\users\Asja\AppData\Roaming\Local\Temp\DDM\Settings\1.ddi c:\users\Asja\AppData\Roaming\Local\Temp\DDM\Settings\clitori4_dbl_xvid.avi.ddr c:\users\Asja\AppData\Roaming\Local\Temp\DDM\Settings\settings.ddi c:\users\Asja\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\8ffc818d0f877dde2792f6075314b712.avi.ddp c:\users\Asja\AppData\Roaming\Local\Temp\DDM\Settings\Temporary Downloaded Files\clitori4_dbl_xvid.avi.ddp c:\windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe . . ((((((((((((((((((((((( Dateien erstellt von 2014-08-12 bis 2014-09-12 )))))))))))))))))))))))))))))) . . 2014-09-12 09:41 . 2014-09-12 09:41 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-09-12 07:46 . 2014-08-21 09:24 11319192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{AFC99E82-E53D-4F9D-A718-3FE951516BB7}\mpengine.dll 2014-09-11 13:07 . 2014-09-12 09:05 -------- d-----w- C:\FRST 2014-09-11 09:10 . 2013-12-06 12:03 22584 ----a-w- c:\windows\system32\drivers\efimon.sys 2014-09-11 09:10 . 2013-03-28 02:11 67272 ----a-w- c:\windows\system32\drivers\360AvFlt.sys 2014-09-11 09:10 . 2014-09-11 09:10 -------- d-----w- c:\users\Asja\AppData\Roaming\360SD 2014-09-11 09:10 . 2014-09-11 12:20 -------- d-----w- c:\programdata\360SD 2014-09-11 09:10 . 2014-09-11 12:14 -------- d-----w- c:\users\Asja\AppData\Roaming\360safe 2014-09-11 09:09 . 2013-12-24 09:27 286912 ----a-w- c:\windows\system32\drivers\360FsFlt.sys 2014-09-11 09:09 . 2013-12-10 03:49 179904 ----a-w- c:\windows\system32\drivers\BAPIDRV64.SYS 2014-09-11 09:09 . 2013-11-27 12:10 97480 ----a-w- c:\windows\system32\drivers\360AntiHacker64.sys 2014-09-11 09:09 . 2014-09-11 12:17 -------- d-----r- C:\360SANDBOX 2014-09-11 09:09 . 2013-12-09 02:04 41152 ----a-w- c:\windows\system32\drivers\360Camera64.sys 2014-09-11 09:09 . 2013-11-29 07:55 305856 ----a-w- c:\windows\system32\drivers\360Box64.sys 2014-09-11 09:06 . 2014-09-11 09:06 -------- d-----w- c:\program files\360 2014-09-10 08:33 . 2014-09-05 02:01 574976 ----a-w- c:\windows\system32\aepdu.dll 2014-09-10 08:33 . 2014-09-05 01:55 424448 ----a-w- c:\windows\system32\aeinv.dll 2014-09-04 10:01 . 2014-09-11 08:39 -------- d-----w- c:\programdata\UrukNoko 2014-09-03 18:58 . 2009-10-21 13:38 254464 ----a-w- c:\windows\system32\Spool\prtprocs\x64\hpfpp101.dll 2014-09-03 18:57 . 2014-09-03 18:57 -------- d-----w- c:\program files (x86)\Common Files\HP 2014-09-03 18:57 . 2014-09-03 18:57 -------- d-----w- c:\program files (x86)\Common Files\Hewlett-Packard 2014-09-03 18:56 . 2009-10-21 13:39 138752 ----a-w- c:\windows\system32\hpf3l101.dll 2014-09-03 18:55 . 2014-09-03 18:56 -------- d-----w- c:\program files (x86)\HP 2014-09-03 18:53 . 2014-09-03 18:53 -------- d-----w- c:\program files\HP 2014-09-03 18:53 . 2014-09-03 18:53 -------- d-----w- c:\programdata\HP 2014-09-03 18:53 . 2009-10-22 14:55 643200 ----a-w- c:\windows\system32\hpzids40.dll 2014-09-03 18:53 . 2009-09-11 07:44 1408000 ----a-w- c:\windows\system32\hpost_p04b.dll 2014-09-03 18:53 . 2009-09-11 07:44 1175552 ----a-w- c:\windows\system32\hposwia_p04b.dll 2014-09-03 18:53 . 2009-09-11 07:44 521216 ----a-w- c:\windows\system32\hposc_p04a.dll 2014-08-24 11:00 . 2014-08-24 11:00 -------- d-----w- c:\users\Asja\AppData\Local\Skype 2014-08-24 10:59 . 2014-08-24 10:59 -------- d-----w- c:\program files (x86)\Common Files\Skype 2014-08-24 10:59 . 2014-08-24 10:59 -------- d-----r- c:\program files (x86)\Skype 2014-08-21 14:36 . 2014-09-04 09:56 -------- d-----w- c:\users\Asja\AppData\Local\Spotify 2014-08-21 14:33 . 2014-09-04 10:03 -------- d-----w- c:\users\Asja\AppData\Roaming\Spotify . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-09-11 07:19 . 2011-01-24 09:12 101694776 ----a-w- c:\windows\system32\MRT.exe 2014-09-09 20:03 . 2012-10-28 15:10 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-09-09 20:03 . 2011-06-15 07:50 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-09-04 09:53 . 2012-07-17 13:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2014-08-05 07:20 . 2011-03-23 18:53 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-07-25 14:16 . 2013-05-07 09:18 42040 ----a-w- c:\windows\system32\drivers\avnetflt.sys 2014-07-03 13:07 . 2013-03-29 19:52 117712 ----a-w- c:\windows\system32\drivers\avgntflt.sys . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"] @="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"] @="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"] @="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"] @="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 131480 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Steam"="c:\program files (x86)\Steam\steam.exe" [2014-01-27 1815976] "Amazon Cloud Player"="c:\users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe" [2014-01-14 3140608] "Spotify Web Helper"="c:\users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2014-09-04 1245752] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-03-04 284696] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-03-03 1300560] "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584] "EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920] "Norton Online Backup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-06-01 1155928] "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-05-25 265984] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-21 98304] "MDS_Menu"="c:\program files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe" [2009-05-19 222504] "ArcadeMovieService"="c:\program files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe" [2010-04-23 124136] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2014-08-21 751184] . c:\users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-8-15 36414752] OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE /tsr [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Acer VCM.lnk - c:\program files (x86)\Acer\Acer VCM\AcerVCM.exe [2010-7-2 704032] Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2010-3-26 1125152] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 360rp;360 Internet Security Real-time Protection Loading Service;c:\program files\360\360 Internet Security\360rps.exe;c:\program files\360\360 Internet Security\360rps.exe [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R3 AmUStor;AM USB Stroage Driver;c:\windows\system32\drivers\AmUStor.SYS;c:\windows\SYSNATIVE\drivers\AmUStor.SYS [x] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] R3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys;c:\windows\SYSNATIVE\DRIVERS\dc3d.sys [x] R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x] R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [x] R3 Point64;Microsoft Mouse and Keyboard Center Filter Driver;c:\windows\system32\DRIVERS\point64.sys;c:\windows\SYSNATIVE\DRIVERS\point64.sys [x] S1 360Box64;360Box mini-filter driver;c:\windows\system32\DRIVERS\360Box64.sys;c:\windows\SYSNATIVE\DRIVERS\360Box64.sys [x] S1 360FsFlt;360FsFlt mini-filter driver;c:\windows\system32\DRIVERS\360FsFlt.sys;c:\windows\SYSNATIVE\DRIVERS\360FsFlt.sys [x] S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x] S1 BAPIDRV;BAPIDRV;c:\windows\System32\Drivers\BAPIDRV64.SYS;c:\windows\SYSNATIVE\Drivers\BAPIDRV64.SYS [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x] S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe;c:\program files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x] S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe;c:\program files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [x] S2 ODDPwrSvc;Acer ODD Power Service;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe;c:\program files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [x] S2 RS_Service;Raw Socket Service;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe;c:\program files (x86)\Acer\Acer VCM\RS_Service.exe [x] S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 ZhuDongFangYu;Proactive Defence;c:\program files\360\360 Internet Security\deepscan\QHActiveDefense.exe;c:\program files\360\360 Internet Security\deepscan\QHActiveDefense.exe [x] S3 360AntiHacker;360Safe Anti Hacker Service;c:\windows\system32\Drivers\360AntiHacker64.sys;c:\windows\SYSNATIVE\Drivers\360AntiHacker64.sys [x] S3 360AvFlt;360AvFlt mini-filter driver;c:\windows\system32\DRIVERS\360AvFlt.sys;c:\windows\SYSNATIVE\DRIVERS\360AvFlt.sys [x] S3 360Camera;360Safe Camera Filter Service;c:\windows\system32\Drivers\360Camera64.sys;c:\windows\SYSNATIVE\Drivers\360Camera64.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] S3 intelkmd;intelkmd;c:\windows\system32\DRIVERS\igdpmd64.sys;c:\windows\SYSNATIVE\DRIVERS\igdpmd64.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - 360ANTIHACKER *NewlyCreated* - 360AVFLT *NewlyCreated* - 360BOX64 *NewlyCreated* - 360FSFLT *NewlyCreated* - BAPIDRV . Inhalt des "geplante Tasks" Ordners . 2014-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-28 20:03] . 2014-09-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19 14:57] . 2014-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19 14:57] . 2014-09-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job - c:\users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-20 15:02] . 2014-09-12 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job - c:\users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-20 15:02] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt1"] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt2"] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt3"] @="{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt4"] @="{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt5"] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt6"] @="{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt7"] @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\"DropboxExt8"] @="{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}] 2014-06-24 22:04 164760 ----a-w- c:\users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-04-22 10775072] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-04-22 2040352] "AmIcoSinglun64"="c:\program files (x86)\AmIcoSingLun\AmIcoSinglun64.exe" [2009-04-09 320000] "ODDPwr"="c:\program files\Acer\Optical Drive Power Management\ODDPwr.exe" [2010-04-22 223264] "mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-20 166424] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-20 391192] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-20 413720] "Acer ePower Management"="c:\program files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe" [2010-06-11 496160] "IntelliType Pro"="c:\program files\Microsoft Device Center\itype.exe" [2012-06-26 1464928] "IntelliPoint"="c:\program files\Microsoft Device Center\ipoint.exe" [2012-06-26 2004584] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2009-03-24 2184520] "CanonSolutionMenu"="c:\program files (x86)\Canon\SolutionMenu\CNSLMAIN.exe" [2009-03-18 767312] "360sd"="c:\program files\360\360 Internet Security\360sdrun.exe" [2014-01-09 273848] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE uLocal Page = c:\windows\system32\blank.htm mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 mStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 mLocal Page = c:\windows\SysWOW64\blank.htm IE: Bild an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm IE: Google Sidewiki... - c:\program files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000 IE: Seite an &Bluetooth-Gerät senden... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm TCP: DhcpNameServer = 192.168.178.1 Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - c:\users\Asja\Microsoft Office 15\root\office15\MSOSB.DLL DPF: {1ED48504-8834-11D5-AC75-0008C73FD642} - file:///C:/Program%20Files/ProE/proeWildfire%202.0/i486_nt/obj/pvx_install.exe . - - - - Entfernte verwaiste Registrierungseinträge - - - - . Toolbar-Locked - (no file) Wow6432Node-HKCU-Run-UrukNoko - (no file) Wow6432Node-HKLM-Run-DivXUpdate - c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe Wow6432Node-HKLM-Run-DivX Download Manager - c:\program files (x86)\DivX\DivX Plus Web Player\DDmService.exe Toolbar-Locked - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_15_0_0_152_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_15_0_0_152_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.15" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_15_0_0_152.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}] @Denied: (A 2) (Everyone) @="IFlashBroker6" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-8F48-A108237013BD}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-09-12 12:47:48 ComboFix-quarantined-files.txt 2014-09-12 10:47 . Vor Suchlauf: 12 Verzeichnis(se), 339.685.388.288 Bytes frei Nach Suchlauf: 18 Verzeichnis(se), 340.200.386.560 Bytes frei . - - End Of File - - 98A36805BE2F2CE34DDCF80093632C58 Liebe Grüße Geändert von ajp412 (12.09.2014 um 12:57 Uhr) |
13.09.2014, 07:35 | #6 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ --> Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert |
14.09.2014, 08:29 | #7 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Hallo, hier die mbam.txt-Datei: Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 13.09.2014 Suchlauf-Zeit: 09:54:14 Logdatei: mbam.txt Administrator: Ja Version: 2.00.2.1012 Malware Datenbank: v2014.09.13.01 Rootkit Datenbank: v2014.09.12.01 Lizenz: Kostenlos Malware Schutz: Deaktiviert Bösartiger Webseiten Schutz: Deaktiviert Self-protection: Deaktiviert Betriebssystem: Windows 7 CPU: x64 Dateisystem: NTFS Benutzer: Asja Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 321052 Verstrichene Zeit: 28 Min, 40 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristics: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registrierungsschlüssel: 0 (No malicious items detected) Registrierungswerte: 0 (No malicious items detected) Registrierungsdaten: 0 (No malicious items detected) Ordner: 0 (No malicious items detected) Dateien: 0 (No malicious items detected) Physische Sektoren: 0 (No malicious items detected) (end) Code:
ATTFilter # AdwCleaner v3.310 - Bericht erstellt am 13/09/2014 um 13:04:25 # Aktualisiert 12/09/2014 von Xplode # Betriebssystem : Windows 7 Home Premium (64 bits) # Benutzername : Asja - ASJA-PC # Gestartet von : C:\Users\Asja\Desktop\AdwCleaner_3.310.exe # Option : Löschen ***** [ Dienste ] ***** ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar Ordner Gelöscht : C:\ProgramData\Partner Ordner Gelöscht : C:\Program Files (x86)\ICQ6Toolbar Datei Gelöscht : C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default\searchplugins\Askcom.xml ***** [ Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolBar Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32 Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{83FF80F4-8C74-4B80-B5BA-C8DDD434E5C4} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046} Schlüssel Gelöscht : HKLM\SOFTWARE\ICQ\ICQToolbar ***** [ Browser ] ***** -\\ Internet Explorer v8.0.7600.17267 Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] -\\ Mozilla Firefox v [ Datei : C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default\prefs.js ] Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE"); Zeile gelöscht : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10395&locale=de_DE&apn_uid=978aaa25-748b-43fa-9165-4e164a84e221&apn_ptnrs=%5EABT&apn_sauid=925CE628-8473-451C[...] Zeile gelöscht : user_pref("extensions.asktb.ff-original-keyword-url", ""); -\\ Google Chrome v [ Datei : C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\preferences ] Gelöscht [Homepage] : hxxp://search.avira.com/?l=dis&o=APN10395&gct=hp&dc=EU&locale=de_DE ************************* AdwCleaner[R0].txt - [3090 octets] - [13/09/2014 12:43:26] AdwCleaner[S0].txt - [2950 octets] - [13/09/2014 13:04:25] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3010 octets] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.4 (04.06.2014:1) OS: Windows 7 Home Premium x64 Ran by Asja on 14.09.2014 at 8:34:42,05 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{84382464-AA22-4C6C-81C2-6BE986913DBB} ~~~ Files ~~~ Folders Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess" Successfully deleted: [Folder] "C:\Users\Asja\appdata\locallow\boost_interprocess" Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{007D9150-8C93-4ECD-9DA1-3591DB020450} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{00A1A3E7-A2E8-4585-86FE-01C375FE31C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{00DD186F-C499-4BD4-A3B3-2F44C9F8493E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{01F8828E-5E54-4EE9-896F-19AA4C41ABEA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0251EC1A-6CDB-4B31-AB83-1F6E3BFE30B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{025243E4-6489-4180-AA09-05BF51C8BC0E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0265E67C-DAE8-46D3-8ABB-040309B4ACB9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{02FC0051-F647-4A93-89C9-5FE46F913F3A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{03232E91-977D-4E93-80E9-AB74F42CB524} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0363D119-6B67-4353-B1CC-0E79D2041011} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{03824449-3B31-4B7E-8836-E3159EFE0342} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{039CC50A-A5C8-44FF-9697-B514E2DBE119} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{03DE123D-A4D2-407E-A184-05356CFF5F74} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0417C111-A6CF-43CF-BECF-F8E39B71B362} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0486C1A0-B826-4EF1-9787-17929DF239FF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{04B3C9AD-6CE9-4584-9316-6EFE81D2F1B3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{04D883F6-BC99-40EB-8E93-348DE163815B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{050D595F-9EA1-48FE-9447-C5D8594C4629} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{052B2D38-4F38-4917-A42A-1C3562ACCC12} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{053FF049-F8AA-4BDF-A0B3-C6BA7632EA17} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{05B739FC-4A50-43A7-A814-460BE1BA3F56} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{05C284FC-6D5C-4145-BF01-BC91CAE9922E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0626540E-5D1F-437A-905D-520B49B240CB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0644D069-23C0-4BB0-B529-3F4996BADECD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{066B860C-A14B-4504-8AB3-05D9DEAE08C0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0686E53B-F91A-4541-B2C9-02A490B30D6F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{068A3F8F-9DD0-48E5-A051-2A3F4DA65032} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{069DB5C4-3C4C-4133-BF9F-A284D8A36B26} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{06B49814-2B73-4D54-BA03-94AF7BCB53C2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{06EEF967-4DBA-42BF-A396-4B4D734254A3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{07733CB4-D094-42E0-B0BC-5E8574CB1171} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{08358E58-5FC2-45D1-9190-1D95F1269A75} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{085AA9DD-29B9-4434-B2B1-506FA6B0C8B1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{088B09A6-694B-4DDE-9A6B-77807DEC09D0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{094CCE46-FC8C-4A1C-B353-6F8915591AE1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{098963A2-34F0-4995-8963-3F9006C56595} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{09B22CB5-F9D7-42D0-A1C5-4E4310A1E71A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0A2F7AA2-3A5A-48C9-9A93-73D4F3CD5D41} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0A6B4189-C551-400C-90A2-A41DDB73CE07} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0AC33B53-0D15-4F62-8F97-37A491C4AC07} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0AD31B00-C933-4B6B-8EE1-86166E5FD1A1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0B6C733A-0C34-4679-8E64-3804FDE1811F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0B70A0EB-5480-41DE-BCE3-37508E51121A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0B87107A-83E6-43A8-9AF4-66CFCCE1B3A5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0BA01581-6098-4C1F-B0DF-F8E36A1970C8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0C646D1A-7B17-411B-8CB4-7BBC0C0D5D6D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0C85132C-01C9-4215-B05E-3DE8AC7A7F4C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0CB4E632-A9A3-46AB-9727-9DEAB54D8767} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0CB7D9AC-C681-49BC-A4A5-C35CAAC188ED} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0CBF7604-D769-47A2-81F4-C66C31BA1480} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0CF9CE70-1D45-485B-BC91-924D633A5A74} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0E25D947-E108-427E-B9DE-C4DF6FD73A5F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0E3ED8A7-FE0F-4D1C-9E58-56AB50D08BED} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0E40E01C-368F-4123-96A0-7BDE25BC2BA9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0EB2AB57-3B1E-4C2A-87E3-AA60FFE69314} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0EEFE44D-EEF5-4E27-88EE-8871CBA6634E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0F5D8014-321F-4438-AB66-3C92FB6B0FFE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0F5D9B2F-ABEF-4243-97DE-85F7510CE628} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{0FEA87E9-E8EE-4ADD-A8EA-F16E447F1BB1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1012A802-0E32-4C48-8961-351144D9AB7E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{10628362-5203-4AFD-8D56-81A8DB04FCDE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{106FCAE7-D380-4566-8F60-347A67C11A81} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{109423BB-D938-45BF-B180-0781E96B6411} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{112FB279-0A56-4A26-9BEF-80371E6AAC7B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{118F6623-8F84-4961-9620-03F38B5593F3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{11A08D36-70BD-4BBA-8187-7E1B56D7900E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{11F74D25-FB40-4C14-AF85-FBCCA2BE5023} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1228820E-9FFB-4D72-8EA9-566E3E483386} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1239FA6A-922B-45CB-A7F9-319989AEFA0C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{12486650-E320-4C05-A69E-BDA094B2CBD0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{125CF899-033A-4CD2-8D9C-CA1E861E6E0F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{12646DC5-DBB0-4F40-B0B0-A99FD56FBB75} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{12BF2192-65C7-4B8C-929E-F985394E0979} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{12C9103F-219E-4737-8B79-3CFFCFFE063C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{12CC47DF-9997-4953-AF48-3EF85F4E3432} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{130ABB6E-8109-48EC-875D-B3A28006263F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1324A98A-564D-4AE0-A225-A8F24BF64F7C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1346199C-9AA7-4F6E-92C1-C492BF6140DE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{13522298-34C4-4C1E-8887-E1D83E09765A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1357BFCA-887E-42FE-A170-CC79EC6D97BC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{136B8607-EDA3-473A-A885-07B761052A24} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{13ADAAD5-A4B4-4FC1-B97D-9C4CB4811B5F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{13BCB8F9-909F-4FAB-921B-A592DF0C1F1C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{13C50195-675A-43FB-9961-D9A741674F87} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{13CC9080-2416-47D0-A07C-98E25E4F10FD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{142A1169-4F99-4ECD-8C48-F2383183690F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{144E3057-92C2-4DCD-825F-CA31CD495F9A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1454A6C2-378B-43F3-B27C-9023CCDF0595} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{145B2F0C-2AD2-4F43-8C6F-E60E3597BB1E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{14B887A5-91E8-481E-9D77-B55D8F395F3A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{14BF870D-2EB0-4BA0-82BD-71FDF38EC9B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{14C3DA33-B1A7-40FC-BBFD-E47FCF184D10} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{14FB3906-FA4F-4284-BA2B-6C0855EC12E1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{15078DFA-01E3-47A7-B2B2-7ADA728DA870} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{15703C38-E718-4BC3-ABC5-2F7561012D59} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{15948AB9-36CE-430A-89D5-FAA587469F6F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{15BC02F2-6D39-4149-8215-7774D55EE981} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{16C885FA-5B17-4DCE-80F6-FFF1FEE4A780} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1707FF89-2693-4CED-99C8-2DDF78D72874} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{170C3BF5-0AA3-400A-BCD7-6CCFA12A3DD2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{174DC606-1217-4E09-AEA3-DC9367AAB925} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{176ABFF4-1CA4-4DAD-97FB-F605357A7878} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{179B3CED-BA5A-421A-889F-4A574C66BD9B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{17A8C61E-2CEC-40BD-87F8-4911FD403757} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{17F10D7B-85D9-4F2D-B10C-2D12BB63D19D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{18290F42-1B94-46CC-A42E-05F731E4E16A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{18AEC60B-10BA-40EB-BA91-6BE85DEB005C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{18D8C6A7-D16B-4C32-BD76-4A50484D978A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{19069BD7-BCFE-4D07-8414-D39451AD1A31} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{196D5214-65D8-4829-A1FE-5DA700D0FDD6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{19A75432-C86E-4E96-A329-A8C2136966BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{19AB3B5D-8B43-4DBD-9823-661DDFB34BFA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{19CC2F67-74E3-4DE3-966C-65D582F54A2C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{19DF70BE-C7C6-4E8B-BC9B-2701478B5208} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1A111B7C-D5A9-4AC3-90A6-EAFA8A5C282E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1A7CE8AD-9987-4D5C-A0BA-B3C4A39A2239} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1B583644-9237-4666-8B8B-E2B4A342BEAB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1B9E882A-76C8-4DD2-B0E6-EA480235D4CD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1BAB299C-74D5-46EF-BF43-76A55E618368} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1BE481FF-95A1-43A4-A439-EE7891607072} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1BE60A21-C55E-4153-8E26-ABF57742DBF3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C01C782-273F-4398-8004-F4390525AEBF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C0D9BA1-A530-4829-AD0F-977DF8F8D045} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C16FD6B-A1BE-4DF9-A722-B0FD50E3EAAC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C1E881A-7EE0-4777-B321-4394D85EE6AE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C361901-95CD-4B39-B32E-85202D1C5538} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C58B353-BF6D-4A54-A2CC-9CA8BA774864} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1C9708FF-1566-4E2C-8E4A-11AE8C87F0F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1CF4C487-7E1B-4242-ADE2-7E80C31BD055} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1D2594B7-78B0-44EA-ABA9-FAB678C7F9BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1DAF694E-05F3-4132-989C-4E2E8C02A736} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1DB0F0BE-CB45-4D89-A8E3-1911F143B297} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1E811CD3-49C2-4FA6-A61F-3066D7EACB84} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1E84DFDA-7939-4583-A2F4-81D091A45ECD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1ECACF96-4F9F-443A-866F-64EEE0DB2FE2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1F26FD0E-5607-445D-9D12-170E09A0D5D8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1F6C0D24-E8CE-4B7D-B527-FB7D7B3EBEF1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1F73DF1B-3EF6-42B0-8C76-EF4BC2698D5D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{1FD94B09-7FBC-40ED-89E2-F90374E75A26} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{204AAAED-018A-452C-BCF2-D6850F045F42} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21236EA3-60E6-45FD-8B0F-DC6C1F43DF44} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21668E84-6277-483B-9336-ECDAC32BBA92} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21741D0F-BEB7-4DF9-B90D-C9B3B2571E21} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21AED362-4DBB-4D39-88F6-453E8049E5E8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21AFB10E-9BE2-4C41-BEEA-1541302F8CFC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21C48C03-6818-487E-9F85-5C35612502A5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21E5AE71-D237-4F6C-A758-8298C8365737} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{21F92B17-77F6-46DB-8F7D-97E82FE66A30} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{22AEECB4-7514-4F58-927D-2AF06DD48133} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{22C3B047-58E4-49DC-9BCE-22F81487EEA4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2300A9C3-71CE-440D-A288-FE86B0139A54} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{233209F3-7993-4EFB-B013-0AC5EEF8D957} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{23545FA1-7256-49E2-8236-A4E0CA3F440B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{23AF1425-69DC-4932-9B62-BBF969E0FE42} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{23D18F98-472C-468F-9B29-A1D62AA4E2F4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{23D616A1-8701-46BB-89DF-8F2D23F360AC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{24320F7C-0BDD-4439-8665-9B44B123D559} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2443266A-F61E-43A2-B54F-9A0D45F580D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{24A16A45-01C3-4149-A102-D4FB1E8187F1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{25029540-0CF8-499C-9789-974A7FA4182B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{25260E6A-D862-4BC2-8C42-F9D8B45C53EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2569F28B-47A8-42C1-B5F4-AC1E60E68DF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{25BCD7CC-2309-45D1-91FE-CA3303E99737} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{25E0BEB3-ED3D-4051-A8D0-1424B9ACEF69} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{25FA6E2A-D2F2-40BA-8DFE-5AC40C306226} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{266DA840-9313-4039-965D-903EB6EC556E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{268E4ED1-4C51-41C3-9E5D-9C1E5F107730} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{26988738-E614-4DC5-B875-7FAE10E793DF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{26B0DDC6-C73E-41AE-8D4E-B38D6A1B0BE9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{26DC38A2-9903-467B-9400-B956B422DEC0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{26F33105-85E9-45F7-942E-A2B6D2161535} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{27030399-FA08-4CB1-AA80-540CF9BD8F7A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2716BB4D-1F98-4386-8A4C-0BD3D134E159} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{273059C5-091F-4C35-88BB-DA0BD9D4A454} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{27342DF1-C798-41DD-A622-325D2805158D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{28A5B38B-9D25-4827-BA15-9CFB5E05B98B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{28B330C4-4FB4-4D4B-9644-7D5484D2E882} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{28E148A3-0DB9-4BEB-9E41-E2E0AF1DF55C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{290324B7-20BB-404A-9F66-96C6FB87CB0D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{291E1D0F-13D4-4D45-BC88-839F92C9FF66} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{292CBBF2-95BA-4853-845B-61DE7CB77730} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{294302F2-9393-42AF-B7CC-7F35F515DC30} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{295DCB2E-9C32-4ABB-BEC6-A89D629659E8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{29A0C23B-FAF9-45C9-BE13-BD1CBD000160} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{29DBC9CB-9B93-44D1-9487-173E22DCD62E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{29EB0ECB-667D-4751-837E-687C8E992A2B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2A08E4F2-1475-4B33-B42B-B47E24693D09} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2A13E5FA-499C-49CF-8708-A78F980E154D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2A578E2C-332D-4EC7-A40A-1264B0794F9F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2ACEDF45-CECD-4FF4-BF18-C0F06D58A7E2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2AD2461D-6D18-43C7-B8E4-F14C51FE9C1B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2B282473-D98B-4B57-81A1-AB55EBE16D1E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2B5E4D50-03FC-4FDF-B72E-7B5220565C49} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2B80136C-1AA1-4A6A-8AD6-33495A8E30B6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2BBD3A39-1CC4-41E2-9F9C-27520AD65EC1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2BE2ABD7-29ED-48D6-BCB5-AE3712FD0772} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2C452EE3-077A-4AC8-9A58-F5DFD5241595} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2C6D9829-3A05-4205-8858-D21491E170B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2C75F35A-AB21-42D7-B611-F0980CA27CB9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2C9EBC9F-32FA-4A80-A32E-196B411F1241} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2CF61F9A-EA23-481E-9DD7-BAD44614A216} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2CFE50AD-762C-4B65-9235-8E8030F5C7EE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D0028D4-2992-451A-B36F-B4A2E6552C27} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D130A06-AA66-4FD7-AADE-380F8542FF03} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D55D261-4D93-4E2A-96E1-E682B7BEB425} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D574D5F-6649-4369-9275-17C6B28DB801} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D680D02-D191-4BD2-A694-E7560D7D73C9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D71086E-66B0-4D47-9255-380B3382A8B7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D74B315-E65E-4918-9EFB-0CD055174D48} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D81A864-4DA0-43C2-B30C-7F545D9226AD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D8E8A55-126E-4863-B19C-51330CCFCFE0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D977D61-41EA-4A0D-82DD-5CDB6A0FFA01} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2D9BD615-D9BA-4823-BFEA-BEE949DB9DA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2DF20BE1-7982-4871-A830-A2401E3BE37A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E184D14-6CA9-44ED-8696-0602ACB8E986} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E4C3F6D-865A-4D4C-B2B2-0474D681B657} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E5376F6-40DB-4F32-8756-CEC0284346F4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E71F6AD-FCF2-428A-B1CC-4C15B63B30B3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E867F0C-D999-4119-87CD-85C3A2E2D52A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2E89FE11-642E-4C82-9A1D-7A238801C543} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2EECCA8A-CBC1-4113-8EF1-07DA31D957F2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2F0CB704-84A8-4941-82F1-190371D6D535} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2F3E3DEB-C760-48EE-8903-782E1FA626B5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2F484A05-D4E9-4B40-B05D-A3D69D2DC0AB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2F8793A4-86C0-44F3-89A4-64AFEE9F2DB4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2F9D8802-44F0-458A-8759-A462634E9D18} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2FB72BBF-3A2E-41EC-B75C-2E225EB44B82} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{2FB89E6B-C01D-402C-9964-41003CE7714F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{301C62A6-81DB-497D-A708-4AB9033EAAEE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{30242BCB-F969-4A57-967F-737F41E76F8D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{30735E3C-E83A-41D5-9FC5-CF23BA258B4D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{308B2648-FB89-4AF1-ADBD-4339916ED5E2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{30E1EDBC-CE42-4B15-95B8-77EC0661A6DB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3116F290-5294-484B-B92A-971278A6F331} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{316C6DC0-0F1A-45E6-B400-76D8E23D7038} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{317B5FA0-406A-4626-8713-5B7D41534DF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{31A822F5-BD04-42AB-819A-F2AE0214C26A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{322BA550-BE95-40DF-B430-BC11F1AF1759} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{32488D69-291E-4FF4-A79A-18A612F16775} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3255B990-E286-430E-A277-DBFA75CF1167} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3294A785-F788-43F3-9FA2-D5205BED251C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{329DB902-06BC-41D1-9527-DE2E6DD22D53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{32A977D6-BF31-4F8A-9130-8ADED6842A2F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{32CDF1D0-F08A-488C-A999-6DEFF2F1A4B7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{32EAB95A-EF54-439C-B33B-188EA4386A54} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{330C74F4-2ADB-4AFE-BF86-04E21169986D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{336C3366-898D-4F10-A081-22965CC8B9C4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{34034D1C-D223-4429-B060-D0A08A46B0B2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3444C7EE-32EE-48EB-8039-38378B281BB3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{34839D3B-F5A6-4808-A632-96764D10FA73} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{348C1A41-0CC5-4BE1-BDB3-590DC8637C6F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{34B5BCB2-6F9D-4EF1-8CD1-4B1DF9E6A30A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{34CF3E60-4771-4476-95CA-D294AAC4DE01} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{34D40C31-675B-4895-A2F9-F601188216EE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{35319204-CB69-4362-B0D4-A6EB3DCA2108} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{354A30F1-C48A-429F-81FE-40139201464A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3596DC0C-E5E6-4253-8AC6-2FC20CFB0BFF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{35A2DE56-2688-409A-8410-6777CFBA7E3D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{35D2388C-2E24-4298-8D94-F47881D28143} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{35D81A4D-4D0F-4E55-9EA9-B1CDDC23BD46} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{361DD5D1-7273-49FC-84CC-81F806F6A309} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{36273464-8A81-4AC1-83DF-3C5AEECB7870} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{36426668-C92A-4056-A1F2-BA9D482158B1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3691A4D0-B3CE-4F19-817F-43812245D13A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{36CE7F3B-81B7-44A2-BE13-89A3F2E76F1F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{36E3432A-054D-443E-8E65-12CC86AB720D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{370559EF-2CC0-4F53-B2C6-210329CFEE3B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{373D7094-0D04-4B8B-93AE-2C4D8065570D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3799D99D-7886-4C2F-80AC-8FF4320AC5FC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{37C233DE-0923-4301-B433-ABE6C8123773} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{37EE0E70-93CB-42DA-B42F-1FAC3364A857} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3854AF13-D339-4C89-AF41-097699EFCCFB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3878C2BC-18F8-46BA-A503-F52999175987} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{38F588F5-62AB-47B2-8F0F-6A9467390B0D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{39045A15-AC84-4EDA-87DB-B65687F500CB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{391787F4-28BB-485D-AA8C-3500556A6978} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{39330BB0-B01C-47E2-A03F-9637CC178B94} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{395621B2-880E-4806-AB03-D35541211E72} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3A716711-1277-4C75-92E4-B86386593723} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3A94A387-DA9A-4C3D-931B-CCDA155DB0EC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3AA5BC22-264A-4DD1-B133-B774C7E46162} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3AB4CFD3-F5C3-464C-9863-DBAE1DF27F7A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3ADE4889-6300-4DE9-900D-AC471F7AA6B5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3B22A721-2C88-4A5B-AA1D-BB172849F5AA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3BB48D7C-2645-454A-B698-32BA2890C754} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3BC63767-1FA9-4D84-9A32-44703B5BDE7F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3BF3BF4A-A0A6-4EB1-BD45-E95855472A08} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3C0355D3-B0CA-4608-9B92-013F7EAE429F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3C0E3A23-0C53-4899-9582-882E35D2F357} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3C92C417-ECBF-4AE1-8646-7511A7F5E656} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3D0DD5B5-18A5-44B7-836C-E033E4D8A61F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3D36FB9A-A1C8-4977-AB68-C2F12B67A45B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3D389C4C-865F-4AFB-A2EB-B5AADF5A4FD5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3D584D5A-9F7C-4DAF-B804-D3DDD4E7370E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3D6ADFD9-3421-4A0E-A409-8ACACB562469} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3DC84B75-C95A-40EE-8A19-6CA3744F7225} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3E1355C5-9D49-4AFF-BED0-0CCE15558159} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3E3E22B6-7695-402E-8F6A-A41B1256DF9B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3EC5FFCD-AF67-4781-919B-0A7002297E87} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3F782DC5-3DD2-4CAA-9CEF-1C9EFA7042A7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3FA5A5F0-3C25-4D15-88C0-DCA3BB854F29} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3FBA5B23-7CAD-4E30-97DA-0632DD46A480} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{3FDDD939-C2A7-44A5-BEC1-52362AE7CEF8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4042419F-CCC1-4130-8B07-F12AAD22949A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{409C288B-7E1C-4B4F-839C-8D6733031D45} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{40D0E639-C090-4A46-A2F4-A55FC2743030} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{40EAD33E-3023-4B3C-AA41-0B67E204221B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{41312262-80C1-4F6E-A386-43D90ABEEF8B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4146E4DC-512A-4FE9-A5CE-DC1CB67F3362} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{41C6BAAE-AA89-4ACE-86C4-7C34F63A5A84} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4270A0FA-8370-42A4-8425-A15181258EDD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{42C1EE73-9B16-41A3-920C-3B541B31F4FA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{42F389EF-81E8-448F-90FE-209F68F8D5C8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{431682EF-9A2B-47F1-B711-1ABC78C7E5F2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4359A152-7DC9-48A6-81A7-736D24EA2965} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{435ED12A-800B-4A80-8F4C-6235328A6946} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{43600359-0DAA-4F23-83D2-719673BDDF1F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{43810FDD-650A-4D04-A66E-F03C950D9947} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{43D3E3E6-94F3-47EA-81B0-FE35EDBEA056} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4427EAA4-BD56-4902-A934-2F6CCD262DBA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4435598A-164C-43DD-9D8F-39E43BF51304} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4466C59E-903F-45DB-8CBD-7B4A84CD141D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{44C0D2CE-6A35-457C-B38C-13ADF2252A9C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{44C3BE09-5F05-4A0F-A0F0-51973D9B8C00} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4538C7E1-B210-4CF1-A8AE-09D3F94C8882} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4553C7F1-68F9-47A9-AA4F-241513009DD8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{457CA126-98A3-48E9-B1F8-22476EBAB881} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{458504F9-F32C-4137-93B9-6C3677719212} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{45AC3D3E-43BA-4526-843B-CFD3C3F7614E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{45B40C19-88F7-400D-A505-E84B8715C425} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{45C0B0AB-F402-42CE-BD9C-D18CA54206B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{45C3F912-5818-4683-BB28-31DC133C4682} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4652BDFF-EA84-4FF2-B144-B41CB4AC9547} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4665059E-DFF0-46AA-99E7-98AF0FFCF04D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{466A4D88-1844-4207-80E0-C657254D79A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4673B5EE-239F-42E7-A74F-371B81DF4134} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{468DC324-A76C-4970-A608-B658D7F73CD5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{46C422F4-4A24-4664-8103-BDB28EA06D40} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{46C71B4D-6F70-4489-87DA-A2B56544F7D9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{470A357A-76E1-4DDB-8B5F-63C9E268FCFC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4712B0A0-B3EF-4A95-A803-F17FED2FD574} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{472FDD92-4E64-4BDF-8B25-9C39D23930F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4785509D-887F-4314-BDD1-444F4722B94D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{47A1F656-1C91-47C2-B5CA-27472F2AAAC4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{47EE3401-4C67-4F63-81C3-9DABC5838656} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{483FFE59-6CCD-46DE-886F-E50530364AD0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4841250C-1191-4917-8940-1EFA312D929D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{48E2615D-A774-40F3-AE5F-738F707E48D3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{49393CDA-4933-4ED7-8B7A-427FC1745484} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{49CAA492-9862-4BB8-B4B5-9A0B7150C8C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{49D4BD98-A3D5-4382-8C69-8B6EFC5E9278} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4A02846C-46B6-499A-92C6-8DB659E824D5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4A0A2C3F-7C16-44FF-B8A5-246C79AECE99} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4A3CE04C-AE4F-4EC7-931A-9B1680060D21} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4A876B94-7709-45CA-9D32-F862E03ECEB8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4ACDC143-BFAC-4AA4-BDE8-FF6A29723CF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4AE59944-7CA6-46A9-BF17-319064B258FD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B00A1AB-C176-4F3B-AB82-17191AD90DA9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B05C5F9-AE57-4DB1-A174-CB933430C1CE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B32B9E8-87FD-465D-9D68-FDE9FDC5569F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B41DAD5-1732-4C3A-B7D6-BAA0C14CD4A0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B77D608-577B-4BBC-ABBA-D19DFCAE28B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4B96785C-A74E-4FE0-B234-FC28FE0ABD4B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4BD2EFDE-7D65-4AD9-B76C-267B72A047E7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4C1805A4-24FF-483B-9200-D7CC0499C3FA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4C59ED12-A9CA-417E-A16B-C341FE3474D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4C7E6FAD-974A-4AFB-B141-8CFC949D797D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4D57CBC4-AE38-487F-A437-4B14C8DE0CEB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4D716CA9-9A57-4905-BB5E-D08EAADE583A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4DC1AB7D-1AAB-45F6-9005-9AF9428CF90F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4DEF04DB-F4D8-4DBF-8973-E7DD7F75AAEC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4E48AB43-60FD-4972-B29E-8BCB8ADBB79D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4E6D9AB3-F5DF-40CC-8AB2-2B519CEEA3BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4E7169CD-56D8-49F2-947E-B653DD839F91} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4E7EEEB4-8AE1-461E-8B51-3AE9BD36C939} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4E9B483B-4E7B-4A71-837F-F787B7076EDF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4EE8A0BD-6F4A-4E85-9E90-3468FDAA6E00} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4EEB30FE-A845-4D27-A4B0-DF27B86610BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4F436E19-9BEB-4F66-A490-86F2886AA8FF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4F460D10-E136-4ED4-87D0-F2DE3688DFD5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4F799A9A-4A23-45BA-B593-9B5BA5C493B7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4FB68CC6-530D-4A74-A0A4-ABB411B70E82} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4FBCA736-8A0A-4BB8-8803-ECB0EC66DBBE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{4FF6C10A-51D0-45E0-BC79-40438262F2F6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5008B4C4-0239-4328-8D12-979541515C39} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{501B6C8F-90CB-4D6E-A577-F7B4F0A1182B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5047E276-8F30-4D11-BBEC-45FA7AB0B7C7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{504F5A8D-5733-4D5D-8BDF-CF9414140184} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{50F1CCC2-21FE-4F39-800F-D3A4E2F5423C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5110FB06-35A8-43A9-A418-91CDBDDAFC9A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{51B89A9F-2FDF-4DFA-B808-122789590DE1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{51EC5C9C-EC04-49A9-9F13-E0240F4A23BC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5208A496-F025-4336-A293-553E60021042} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{521A0DD9-4E05-4C2A-92C1-4A73C9148019} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{522CB091-6D01-4E2D-9EE1-91E4C7E8BCC0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5247D5CE-1D5D-4FF1-92EE-04CA5479CEA0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{525E9A20-8C38-4C5F-B25F-81A0E964EE4B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{52823877-9C01-4EB4-9E66-AA7617C90FE1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{52CDA8DF-316D-4778-B81A-C0964F06D989} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{52DD9AB9-0B87-49DF-B48F-649B435FFF4E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{534F7AAD-FA41-4487-BC60-B57BDF84395E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{53B3B777-F97A-4757-887C-DE52DCC59131} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{53DA635E-C790-4543-99B9-47D539593EAC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5507E4DB-54BD-4C1A-BDB4-334CD60B5398} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{554130A7-0836-405A-A1DC-53DBC9CAF74A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{556866E1-F93D-4271-A5FB-B2431CABBC4D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5607949F-3970-41B6-83FB-ABEA1762F3AC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{561C5310-A9FA-4F0E-8A35-9B049737FE78} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{562C44D4-3834-4AA8-842A-F8EB8427E0EC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{56569F7B-7491-4506-9BD1-9E2977698483} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{568E441B-18E6-42EC-AE99-D131F52032D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{56D6D1A2-564C-431D-89B5-948C815A0825} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{571D3746-0E33-42EE-B43E-9A40087207DA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{572ECADA-B006-4F72-9FA3-4FF429C3713C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{57450837-C039-4DCA-8516-8F2826583529} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{575F5718-890E-4A03-A1D3-099F6FCF9AFF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{57B07A60-3276-4DB5-88D7-67B13AF73300} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{57F5B970-0A39-41D4-AF46-E66A7A7030AF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{586996A8-4C25-430A-9B77-EC5F962028BA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{58D42140-F002-4769-9E32-65BC4693ADF9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{58EEE916-DF60-47B0-8EE4-6D22163FEB64} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5900AA11-A953-4C54-A513-CCE09921C918} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{590445E5-0A8E-48AA-BCCF-599AD725B5F4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{590CBF61-F2BA-48EE-9A93-CE226287DE2F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{590F2EC3-3DBB-414F-95C8-6C5ABECF196F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{596AC666-C7D3-4484-85B3-B40B6E76E48C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{598653AB-E1B0-492A-ABD8-A22AF64B3D08} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{59CCCA42-2757-43F6-9AEC-D2FDC82972FA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{59F4C210-74F9-4C66-A88E-E91FD144B4F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5A08879B-721E-44B6-8BE4-C7C04AC60BCC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5A10980F-BEC1-4C51-8A47-9A64BB68D158} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5A2AF61F-F040-4148-BD41-534ECC7B41E0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5A6411B2-C941-4719-89A5-C771D433542B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5A734880-A482-4189-BAA8-B06E21F64FAE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5AB1AB9D-D955-48A6-95A7-6BEBD3FEC94D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5ABB7A3D-444C-4715-9463-E3D1482DC273} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5AD79C43-503B-4CE9-B5DB-322CB4F1F32F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5B2D19D4-05A2-4D82-950D-A1DDCB0B1AEB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5B5E8F7B-A600-4BC2-96B0-0651E54C5F16} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5B604C22-2CD9-434F-9BF6-5307AB0809D0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5B8CBC7D-0D55-46CB-8CA6-487E96CC4148} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5B8F88DD-9267-4855-A8DC-E6CCC738093E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5BC19C2E-24B7-4B4D-A436-C02D98088E96} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5C20D195-CAF8-4242-B61C-846F9F063735} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5C6021DD-C978-48E2-8121-BD486E0B9323} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5C6E2B35-5C8C-4193-8BE1-DAD53FDC2251} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5CC6F80F-775A-4047-BCB8-A8BF1F75FD42} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5D0A965C-E0B2-420A-89A4-73FC7BF90B26} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5D2505C1-14DF-4EA7-BABD-627202BD106E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5D56696D-A1BB-48D5-B1F0-CB9B788C5665} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5D8121FD-16E1-4F23-87A4-86655ACC1E77} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5E730DB7-9315-4478-AF40-D43EF27ED04F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5E8FB034-BA9F-46D8-98E2-88A462AFDE30} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{5EDB41C8-FFA6-4CD9-91C9-95A0BA9C609C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6001B565-F34E-46B5-9371-C326304D0F84} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{603744D4-470C-46EC-97E0-0EBB229E229F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{60A56FC5-36CA-4D52-9BF6-6ECA8C311415} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{60DB82F3-B6B7-4BB0-8A64-8C8451B6A72F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{610B2664-A3A3-467C-8A57-7D9E575CBBAA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{616DDCA5-10E6-4FFE-951F-F4A754E01768} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6184AC01-EF25-49EE-864B-AD7B4373F3FA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{61D20D47-5F2F-44AC-95C3-C2608DA6FB07} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{624D5AFD-500D-44C8-A0F2-6CAA284C87D8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{62652E2C-0A85-4B14-89D1-F55664124BA3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{62950ECA-29A7-48A8-9545-F39555D6033F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{62BE5EA0-8B16-46FB-B759-467D8B61D352} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{62F07AC6-7367-4383-ACE1-3212EC4C8089} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6391C70F-AB7E-440A-AFF6-F6F647954053} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{63C86A61-61E5-4B3D-862D-BBEEDAE6CE22} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{63EF09F7-F26B-40A8-8BDD-825F4DD72F1E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{63F399EF-4796-4233-A0FC-949BF1ACFB3B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{645AAE80-277C-4DAD-96E1-4107B70FC034} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{64A5570F-FB16-4D18-8846-F57F95946FE0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{65048E3B-32DA-456B-AF84-8C760A726521} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{650923B8-6006-4FFE-943A-7B436E9B0171} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{657A5A75-2BA7-4296-AF6E-0C65D32EC221} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{659926B3-D93E-4491-9074-8FA837F4B07B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{65A48EBA-23D5-477D-94C0-09848B1AEECA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{65BC4261-1E09-4C19-9637-704BFFEFB7EE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{65D64E29-328E-4CBE-9A0F-DC99E59165C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6606A231-FF36-489F-A71C-D3C8F141D508} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{660E0309-AE1E-42AC-BFE5-A02C08A4EE3E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{66266FBF-CB59-446F-89FD-64C147F47550} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6691BF53-00DE-4A0A-BE92-01057C173315} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{66D5AB31-8D2B-4822-96A2-4BA6E84D64C9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{671C1D30-0D61-4B13-8169-A7FE6A626924} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{676D43ED-B816-4760-9F41-BDEFC18A2D0F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6776B123-85BB-4FC7-8B52-FD320825D7C3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{67DC8CBF-340F-4BA9-8798-865FA4525B3A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6821C2FE-1FBE-4897-99A6-4DB479FD5F61} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{68341DC5-D496-41EC-ACA1-668FB531D042} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{683DBD5A-8141-41BE-A2AD-E85182E2AFB5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{689D45F9-5256-4E5E-B959-5CB0B085B72A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{68BDED1C-9C03-45BF-ACEF-B36F20AEC6EF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{68C643C1-8105-4EA8-A5B3-92E50DBBC252} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6906C001-2040-478B-AC7E-1B0426DA2FA6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{692B5F69-79FA-4CA7-AB04-26CC2D96338A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6974802A-8314-454F-ADB2-F63FC3FF1D26} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{69AC04F9-3A57-430C-AAE3-21AD67B76E36} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{69E2737D-04AF-45DB-965C-122266CEB64E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6A31E442-BD33-43CF-A16F-47CFD4EF54C7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6A5BB183-0FB0-4F52-AA44-E2F51AF8E311} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6A6131C0-1DFF-456F-94F5-106A6C592D69} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6A659E1E-74B7-431C-A4FF-7AEE0F6708BE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6AB3CC0C-3F92-486C-9F55-A6A132DB227B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6AD29526-E573-4980-A4A0-9A44395CD521} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6AEE2ABE-13E6-4F2B-96E7-62DE3398D1CF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6B346B78-0FC2-4FA1-8B2C-65A4AC643F3C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6B680FE1-A5C0-44BA-A550-95744331A175} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6BC8741D-82AF-4301-BFD9-D97B769179B6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6BDD9F37-5A77-4DBA-8022-5417202B3759} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6C35D3FD-C35F-43E3-ABF9-7B3B6066267F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6C54454A-AE07-4D0B-A3D2-048E9218FCC0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6C97C1EE-3E02-43E2-A741-1596A46EB859} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6CC3096E-0F9D-4DC3-9A6E-C53DBAD859EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6CEEE304-2FFF-4FA4-B12B-D54965490B0E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6CF08192-7216-41B1-8282-48D307048EBB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6D2B8769-3425-48F8-98E6-A49823B17601} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6D4671C7-7A8F-4DCA-B768-B42031E37D6B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6E0E09D3-EF2F-48E2-A678-E250B2EC2B60} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6E532519-A458-4747-83EA-226F80E28C9C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6E556D6E-1339-4FF9-9B5E-73C281511E34} |
14.09.2014, 08:30 | #8 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Und Teil 2: Code:
ATTFilter Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6EC05A51-63DE-4923-A6D9-2884190BDFF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F074ACF-56F3-4EF3-962C-1C2ED1CE2437} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F19842B-8740-432D-8AAD-2BA95CA80643} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F4931A2-3BEB-40B9-9790-FE1A42BB586E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F4ADDBE-29B4-401B-ABA5-FF5CA96B8721} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F7C818C-818E-4B17-8AB0-B067D2C06646} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F85758E-1E54-44FB-8D3E-3D6D664CE8EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{6F9067BE-5C98-44A7-A888-5C1BFF0866E1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{70980FA4-6A8C-4401-8685-5C53E0EBE1B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{70AD892F-1CE7-48A0-B085-325AB4E72641} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7152F7A1-4B46-4FD2-98C3-D2C6B173BE1C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{71C260CD-9755-491D-958F-57C12876D66A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{71F7BCC0-6CDA-4D3C-8BC9-471C4591BBBD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{71FECADF-AFED-46C2-8D4E-94916E38DAAA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{72811BB9-CCE6-464F-9CA3-526438BE1F73} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{72999B28-F0D9-4882-A571-DC74FA2A5F55} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{72E1F63C-BA11-4CAC-8B14-70DF0C841EB5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{72F85446-0862-46D3-A0C1-360A8EFBBD7C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{73107DD3-8CA0-430E-8CC3-979E520472EA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{73B941B8-4CF3-4C04-BA98-D1926855A4AF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{740F15FF-C2A4-4556-A766-170ED6306AA8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{74123B49-E1E6-4376-8449-C89F65FAC6B4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{74392297-7523-4723-928E-7173F355A819} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{748C64BB-8372-42F2-BADB-2F5535311D2B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75165AAB-F156-474C-ABE5-A78F3EBCC79C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75959021-6CA5-40C7-90CA-EBF0FD6FF32D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75974AEC-FB25-4E73-88B9-F0234631DE04} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{759D0236-7402-4F46-AEF1-3EEB7E861E42} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75A29B25-814E-4EAF-8DD9-1D8122B043EF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75F62EBB-ACC8-41CF-ABC7-1476D7B7082F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{75FC18BB-354A-45DF-96BF-6F05CF7C9F50} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76418693-3A72-4D21-AECE-4EF037BE8231} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76AC6FFC-3950-4E42-A131-919B49BF34CC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76BAC339-4107-4D97-B2F1-D8D03EDF51DD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76CAABBC-6D2D-45EE-9F2D-195D73CA46D9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76CB7311-CA0F-4702-B52A-6C03998844DF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{76E75B74-280B-403C-9A78-253F68D9F6C4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{770AE252-84C2-4870-8DF7-CF2B544C9941} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{77330ACF-A6F4-44C3-B27F-A11E5540F3B5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7736F5CB-1E48-46EF-8319-3A60C856D94C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{77DA7F7D-C713-4C16-AAEC-C697C4A6949E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{77EBD246-F48B-4140-A631-96D25225E2F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{78139A6D-44F8-49A5-ACCE-A24B3B7CB529} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{782D3963-CBD7-4D94-9CB9-7D4A1FD1EFA8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7836580A-8F3B-43FB-BF47-4186B6C0E47A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{78444351-0469-49DA-AF5C-FFBB704DE2B4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{785CC56E-25F2-409A-9B1A-8111345FC2C4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{78712277-56BB-4CFA-BC03-6C7AA316B5DD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{78806075-6252-4699-9824-641D54A8EDFD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{789DA976-8397-416C-AB4A-AD641F468D59} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{78C6521A-6F48-4327-B2E9-2702B96888C0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7946CC8B-971C-44B4-A699-4B5A18BBE169} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7977D4CA-D5C7-44FB-8ADF-6A81BDDFDEDA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{798F2ADF-5338-4092-BF06-13B2C3EED342} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{79A3D4B9-7000-47EE-9B20-509CBC7C1996} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{79D391C8-5D49-4B4E-808F-588D8B44223B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{79F370E6-9443-4EF2-AB75-AF3D825F45A2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7A0234E9-77AD-417B-9E66-A15A2209152F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7A0B46D7-484E-44A3-BCE7-300E5F3D75D9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7A26B6F6-8A45-4733-8DA5-49C4046D34F8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7A6EF5EC-0294-4BE2-85C6-2C04738A8BF1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7AA4C88F-E0BE-401A-946A-71EAE05BFA07} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7AAC7884-E6CC-4FAB-B818-2D756DC9FDDE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7B27ADCE-A899-4D2B-8C91-C0FE40ECD094} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7B526191-BA05-4D51-A294-E65024807EA4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7B6B8458-35F5-4759-B47D-C156596EEE77} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7BB6DDDC-C598-491A-A50A-74E69C67393B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7BD1D5F2-93E6-4089-AE9B-C619276F2F98} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7BF31535-AC67-4250-A32C-690268819143} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7BF328B7-14B6-4885-9587-646B29F2512F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7C849056-D534-4071-9256-363AD7184C15} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7D86F12E-A307-405F-BFF9-DC197CD98F8B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7DC39BCB-DC05-4BBB-9149-013BEFE7A00C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7DDEA85A-56A6-4147-A67A-076F551CAC05} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7E32D5C3-9570-4F65-A778-315E375F3C64} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7EC158EF-0FC3-4434-A14C-EF9F8DC499E6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7EC326F0-A02A-45CE-981F-7F463BFCD911} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7F640D87-6FE7-492B-B79D-35F8E71C5AB0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{7FA27E4E-9938-4C4E-A11E-E97042243678} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80357F5A-0319-45B3-ADA6-6F56499D3E3E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80408D70-274A-4DAE-8266-1B6D3583D41A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8047473D-741D-4AF7-A9D6-032A205FE2A5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80687ABD-F034-460C-A272-C2B0ADFC5054} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80AA6C94-6DF8-4A73-B281-8F02F73D10C4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80C0D77C-A426-4BD4-AF1A-5EF1A4D9CEB5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80C597A9-2131-4E0C-B15E-7E3FB69F2058} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80CB1267-71A0-46AA-844B-86D925DFD586} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{80ECBED6-9014-4356-8DAC-9D9BF2662229} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{81344AF9-0BA9-4C06-BA27-5CC345B2CCF8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{819FD42C-B4F1-44B1-9D4B-38451CD8C682} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{81C550A2-FA69-4B68-9BBB-5E56D3420847} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{82035011-616F-436B-9F88-5B2AF8A9E80B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8279400E-993A-47BE-8604-4FA21BDA4BA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8279BE0E-973F-4581-A9C1-7BB56F4F5C74} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{82841118-D422-40E7-B570-EC7BF92E263F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8298FE33-2325-46DB-BB26-537311FA1895} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{82AE6848-BD7E-4EB0-8AFF-C5A02004C71A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{82DB88EE-A198-4452-BFEE-E1891D6B117C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{82F3EC2A-E3E2-4CFF-AF8D-1997952ECE45} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{831F24EC-CD51-41B8-89C4-C99843635ED1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{835602A7-8D49-4736-9305-359FC414617A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{83757DF4-88F2-4E7E-AC28-BD021C556E89} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{83C8680A-2A60-43BA-9E35-3EC50BFD38BF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{83E08D11-461A-4922-AA53-0566ECB6DC1C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{83E2A18E-8BB4-48A9-A684-B19CAFCB03BE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{84461597-7BFB-4401-A088-264B62AEFC53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8463DBE2-7705-4375-892F-3C2BBD64C108} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{84E8745F-20F1-48D5-910B-CBF6258DF6A5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8574B05E-41A4-46C9-9DF6-78752741E892} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{85797770-3F60-4216-AC4D-F7D9A7F5D24F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{858C9FEC-0167-42F2-8DD8-929A2BB246A1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{85AF3B30-6145-4895-B5BC-2B8B1B54BAC5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{85D7B350-15DA-483F-9EEA-A398B5BCE109} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{86777E9C-6594-41B5-8E40-DA942C1CE8FE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{86D6DC2F-7367-4E0D-B44B-BB616C778CCF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{875A9955-B17B-4C0F-9F4B-9491B39A171C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8760C8D4-92DA-4CD4-A37E-62A75C08B847} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{877DE9D3-39E2-4329-84F6-B5F2497FD7C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8818FA97-DDA3-48D5-B0A7-936F9D902671} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8829E7C0-6BCB-4EBD-A2A5-C90DDF26DF46} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{88F89B55-364B-4DFF-BE07-B0C0B4FC5802} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{893F9EE0-5B98-461D-894F-ED6EDB1583B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{894CA6D0-9942-409D-8A96-0A51B50D09C5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{894E13EE-A16D-4DFD-9697-6FACDD033137} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{89AB58BD-B924-43D4-AD7A-4EC2FDCA19D8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8A05A4FF-76F2-4FAB-936F-79FCA2DD8CB0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8A43CD35-8BFB-4CF5-AF81-05EF2E8D15E2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8A4D74DD-3F9A-45CF-A0F2-DAB1B59B85A8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8B095E48-69F4-429A-9236-8E99BEB88126} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8B5E0CD2-C38C-41EC-9298-3793339F0D58} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8B6F88B3-C256-4360-B02C-7BBC68BCA616} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8BD9B204-FD36-447A-AE02-ED577EC0708A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8C87EC6B-A910-44B8-9E7F-9DF94B26298B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8C9081E3-97AD-4DBB-B40A-CE3C9CA16FA3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8CE38035-5691-4C9D-8C9D-68194C4A9863} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D0D704E-6549-4122-8201-3F3E0158F17D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D23BC22-2F69-42D2-8EED-F49CD6815CFB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D488175-5289-42F9-BBD9-A2B92F383B8A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D6F7662-286D-49F6-B4F0-105214F601B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D7FBC18-3D15-4D53-8383-80FCD858485C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8D8B0C70-2F41-446A-A49F-BE8F701822B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8DEA9709-7032-440F-A31E-D1533828B81E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8E031077-98BA-4C2D-AD2D-BDEA090CF8A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8E503236-51F4-4FDC-B9F6-DA8FE8CEF663} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8E669841-E767-4800-9586-6160AF411079} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8E717165-AE05-4210-BAE1-55F1CB033A95} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8EA569BF-21E1-4BE1-9FE0-2850F5D547DE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8F13962A-A24E-4918-B435-32E62C94C0CD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8F22140B-0EF1-4D94-B0CB-7A9D129FCACB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8F772AB4-D809-49DB-8CBD-47860B92E415} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8FCAD5B5-FA67-442E-A0E0-D4730BDF69E6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{8FFC8FFB-5AA7-4548-9F2E-50D8617541D4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{907C4480-AD2F-4FF3-8EFE-7B9E2E6CEE51} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{90E99F63-B398-49AC-A87B-64AE0D90199B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{90F760E6-2947-4E2F-9509-826F24D90B49} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{910289B0-CBC2-4CD3-AD7A-538D876904C6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{91161ADA-1336-4B32-95A6-0693D47B9E6E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{911B5A91-0488-4767-8D56-097150E2B082} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{915EC264-1144-4857-AFF5-0C1C12731767} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9165F75B-7BD2-4AB5-A5D1-E19CD8423389} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{91C89DE9-773B-4C01-9EAD-FFAB3199D1CC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{92151D38-D35C-4F56-B32F-F71019A9C030} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{921A628F-2C3C-4AAF-A844-1860D5E98403} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9245B3A4-FF61-4950-AA1D-64C0355A959D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9267FFF8-A255-42E6-BCED-72E1115B3DD0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{92862784-CB9B-4989-BC1E-F10552E4B57E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9292EBC3-D2F0-4BB3-97DA-059C32DDCD55} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{92C6787B-57B3-438B-B4A1-AE37D4B39871} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{92CBEB96-4337-474D-B5D2-74D0EEBCF74F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{933B1038-52A8-4994-892D-7C2B32E94E53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9390A45E-D3CB-47F6-90B6-8FA337E35146} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9391D05E-1224-47EF-A86E-422FE0F92B3D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{93B1AC68-6A9B-4F55-A4FB-6121404869A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{93FB8501-C5E3-44E3-837F-61B6EC08CB1B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{940133A7-5CDC-4102-87EE-7561D161CC92} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9469E690-11EC-43AD-8365-BA26D9591972} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{94812737-0F39-4449-9E72-CECB59AE28D4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{94A19795-4DEB-490A-8476-5A6A85457CF9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9541BCA1-9ADC-4E7E-A3D5-3A7C1D16F8E8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{956A9175-AAD8-449F-B651-6DEECCAF2FD6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{956E5464-20CE-4903-8D44-9C7DF193B1EE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{959E801F-10F4-4173-929D-433F09E21F53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{961F3399-08EA-43C9-ADFA-0C5F0B828487} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9621A59F-C719-4711-A979-614284EBACA9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{966F0759-DDE9-44AA-89CA-819B22BE345F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{967484E9-D883-4FA0-9851-8036F7762C2D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{96BB527C-F19B-47B2-A79E-2F3BC9DFDBF4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{96EAB777-CF52-460A-A9B7-0B4798AAEB97} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{970CD40E-A934-4754-9F21-5CFA90AA78EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9718A4CC-BA15-4DBF-A62F-F5B4C9EAEA31} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{97265ED2-4C65-4C59-BBAD-9F54D13F39B1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9749148A-EA66-4555-918F-83BFB22B41A7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{97B69B10-EDA6-4247-9FDA-C9CB608CB55E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9855DF6A-FDA4-45C5-BE5F-9B3BEC8316F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{98EA52E8-D9EF-40E9-A728-5C9AB871F62A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9912637A-AAB4-4AFD-9836-C1AB0ED594A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{997B0A91-2A4E-4D03-94D2-93A5DE22048A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9986AB48-FA62-4A43-82E6-D78B0F9EFD0B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{99A7577B-DABB-48D4-A01B-47277B8AE1E4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{99DEB515-3AE6-4391-A4B7-BBCF80A8A15F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{99E1B789-265B-4803-98FB-E073586A16E0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9A08B83A-FE50-4A5D-9426-DF30764136C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9AA9DD46-C985-4FD5-9F1A-649B903CBD80} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9ACD1B3A-4741-4252-9460-31FA61105562} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9B00582E-8823-49B6-82D1-0A12981ADF9B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9B32B0E0-CB49-445D-A5C2-A30A53DFA0EF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9BAD069C-ED3D-4102-B832-C4E4551F426D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9BB4035E-4E25-4068-B1BB-6682D849D358} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9C1DE23E-1771-4893-B507-B44D59CA7D62} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9C36E6A7-E198-48D5-BCF1-559CAEB95C85} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9D39BED1-A3E8-40E3-A321-29E24A04A38F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9DCD9FDF-E559-4AA1-98FE-39709B6FC8C2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9E4D2411-4381-4F5D-BE7B-F0514DCB14CD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9E75A72E-C216-44CF-8AFF-87D6A5B0E792} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9E779701-2A09-490E-8583-F3C48737331C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9EA876B1-ED04-4DF3-BB41-7F8D4715EA3F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9EB74E5F-366A-47A1-8471-0143E8F0D746} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9F36145B-244F-4AD9-BFE1-30A7D47EB0A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9F45A2A6-CE06-4B0B-836A-7F3E5A5F8C0C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9F9A9DEF-B0CB-41F2-831A-931F16D74D2D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9FA33BFE-0750-4794-9234-0F1BE63EF976} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9FA97430-A635-4C40-93BA-0A2CACA9845A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9FCF71F9-37F2-40D3-94B1-D24C4C2208E8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{9FF1C88E-C827-4598-93B4-8B182BB9A9D8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A11FB048-7FF6-471D-B74E-4D12F7756ED3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A153E5FC-0E0B-4EC3-BD52-D22E98E76A2F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A2477EF0-8293-4B0D-8E57-535E0666EC68} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A2518379-F92F-4E57-AC30-82C1F09ED935} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A262D266-A51B-4E24-97F1-56A4186613AF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A2D3400A-5402-4959-ADBB-57D43E745487} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A2E2A55E-0226-4989-8D6C-45D46A292461} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A2F1D69F-4516-45B6-BADF-3B22AD087C79} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A30079B1-E89B-49A7-9DD4-367B62C82966} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A3A551AA-4E74-4345-9794-7FE4C4E2F6BE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A3E53FF6-BDD9-474B-BC2D-CF3C45EA1ED2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A3ED8848-AB63-409A-AEF6-8636FE69BEFA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A4B48B07-A7AA-4C33-BDF7-CCE8E676E76E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A4BB66FB-DCE4-4567-B14B-6A3520827F6E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A591B67C-626C-4937-8C04-4D523F64DCEA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A5B4B7D9-45C4-4109-BFCF-4F915C3ADA70} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A664481C-78C1-4C57-B0DA-980AEB64C8FE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A6B5F8BF-6A8D-461D-B384-EB08F97EF1E9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A6C4E209-63DC-4CA5-B9D8-737D0F25CC53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A6DE30A6-3794-4A5C-BAE0-528F08AEE40E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A6F88212-55AE-47A0-AE68-4DE4684958DB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A74D2580-9C09-4684-A95C-9F4D6558A789} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A7A252B3-48ED-4069-8E30-63116BDF03D0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A7C11B07-6AB0-4F9B-9EA3-22A683B03CD9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A7EB9719-6B92-408D-923E-368EEDB636AF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A7EF0706-40FA-4C37-87EB-8BAD7AE1DA79} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A89F961E-17B2-4CB6-92DD-DDFCA602CD0B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A8B288A0-2C48-467E-86AF-7101EEF7737C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A8C0B0DE-EB93-4480-BEB0-EB28538AC169} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A9366254-C666-4287-90D4-B035AB211742} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{A946456B-9811-4C05-8385-FD53F5EC14B4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AAA6A9A4-9636-4BC4-B36A-7737F81A083E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AABEA3E6-42EC-48CD-8940-33E25B5F839D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AAC98AB4-A11E-497D-B94D-888C2AB01127} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ABF6C920-5295-4723-9591-89D503CF4A41} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AC3A597D-EF06-4E0D-8A24-217AA96C3247} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AC9E14AF-C461-44CE-94CE-DCBE6155285A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ACC06985-235E-4A12-92B6-87837FE12C6F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ACE0F5A5-C1AD-4D59-8E66-47BA90ED6CF5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AD499C53-318E-491C-8B98-7E255F6D45E6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AD99A0F2-3403-41FB-A267-CA0B58EA82A8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ADBE826B-1E74-410B-BC49-D561921DBA05} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AE55BB6F-9C06-4BFD-A807-B1A9025FCA78} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AE568C02-639F-4694-96BA-5BC51A96259F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AE7DC7B6-565A-4575-A142-8C8327266C7B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AE89D1B7-FE37-4CC7-BA76-6108F0DCD9B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AE979AE1-365F-4B66-BEC9-CEE6D9D76312} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AEA6617C-CDB2-4D73-B032-A9E640D95871} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AEB0ADAC-5DA6-41D7-8C79-D693FABB0F4E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AEBD4E88-4B06-4476-A756-8C5E9C00A7FD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AF7AD38C-E653-4EB1-A993-447D23E1F5C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AFA2E802-0841-4631-A19A-43902E2FEE63} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AFAD7EA7-A673-4D7A-A446-649F06244A41} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AFD74242-F192-4CA4-BE75-987E3E6F5F4C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{AFFADA51-524D-4DE2-8A1A-DD07D004B5AB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B02530AD-6A44-4EFB-8A42-B7C51723E97B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B07C32F1-4FD1-4227-839A-02EAEDC04D7C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B0D7D3A4-4FBF-4D06-9082-56D4D02E0F13} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B0DCA2F2-6587-4304-9692-DEE56235AD5E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B0F19328-1090-4D5B-AFDC-95FBC992B1BC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B1118592-A6EF-4651-8851-B687A4338D58} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B123D22A-AD22-4C16-9ECC-8B8DD0558AB7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B16D0FFB-FEB3-4D21-A30B-F18BB1D6910E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B1819E2A-D99B-4811-8BAC-93F497CF8D33} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B1AB237E-13A8-4575-AEF9-F291066EE1C8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B1D73BC4-4A5E-40D1-A3CC-E0D70ABA39D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B1E004C2-3002-43BE-887C-2355CBE0455B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B2200DD9-DA0A-4F08-8964-4DBD0D00A670} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B231328E-9B06-49BE-AE24-E214CE6BDDB3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B2406087-0543-4460-960E-B48B8934A960} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B26F7B02-77AF-4633-B47C-19EE0876D950} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B2E850A7-EEAB-4815-BC55-BD3702901210} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B325D839-058B-42A7-A233-BB47AB55709C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B38946E8-AB85-4113-AFD1-D27616252790} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B40D1807-86E6-4008-9DB9-1CD3A31F40DB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B41AD44D-366B-489F-BF47-0D38FE0956A6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B41F4377-19B3-4D3F-9099-EAF01D4B8C2B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B4FD9B6A-74E9-4434-973F-8156FCF9B670} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B5DD339A-0365-4649-8AFB-C642C7A5A159} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B619BE39-9B54-4204-920F-D183D68D4023} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B6E07FBB-BC51-4927-AD64-CC11D2B21FBA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B6EAE6C9-67DD-4102-9522-294AFD99AD9C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B700DB1A-320A-4775-A6BC-331C2D5A74A2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B73A803F-2C34-426E-8CA5-32323DB2AE4A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B73C0A1D-424C-40C0-8C0D-3D2C2DC1F38B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B74A3473-5F18-40F5-A2A0-DD43C2E34F10} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B75C6CBB-07AB-471A-8A17-7D2708E161B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B7C11EF5-B1E8-401D-B666-215346134D28} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B7CB2F8C-D5F3-41B0-AFC4-10ED19E9592E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B8A8969A-ED8A-437B-8D47-E1558431C567} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B8E51FCF-664B-4204-8E10-A7E6574FFC93} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B8EFA2E1-F2E1-46F8-84E4-39B4BA3C3B66} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B8F694F5-9E42-4110-88AB-975F5C95DC45} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B9388C34-CDAC-4384-B749-B75FD3B83E22} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{B9D611B8-D2BC-4A7D-938A-95CE1A7F0FE4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BA18D1C1-1C61-48BB-9809-F18810D047C8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BA2DC427-E521-46B3-A472-FE8984D7C34A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BA690A05-6985-4D8C-AD8A-A7ACCFEF77C1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BA800F19-6BB9-4C10-B6CA-1147342AAF4D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BAF0ABC6-DC4A-4C7D-B493-D8685B36078F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BAF173A7-FB47-4A64-BA8E-675F47F3FF50} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BBC534C3-02CA-4D4D-B04F-1AB5BBB34802} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BBFBBCCD-4AB3-4DF1-8242-4D74403871DA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BCA0CFEA-C6D1-4518-B795-5F90F9A26A16} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BCB022E4-23B4-4635-AF63-B0634AA9385B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BCC76686-B8F5-4DF8-B6C5-81E0CE2FB9F5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BD326E0D-BB3D-413B-9846-0938570BA910} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BD44A64B-7101-40C9-8291-DBD1AF198031} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BD6BE2FC-21E9-4C95-82AF-7A1367ED7862} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BD844CBB-60A5-471F-95AE-DF94F49B9893} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BDE4BE7C-FDAA-4035-95AF-5F72B53AE48B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BDF1E3D5-8366-40DB-A8EB-20076918D303} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BE9CA709-0320-4271-810B-CAF248E38F8E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BEA8B82F-6874-4955-8782-41C14E515FC9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BEAA05B8-C6C0-4CAC-8067-CFE582813E53} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BEDDFF43-5167-4E40-9FE3-EC1A5E75DA00} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BF336405-E722-4F83-8236-3B7D3E100C4C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BF3DA340-9AA6-4817-ADED-B6044B78766E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BFC2D3D6-FEAA-4DF8-8F8A-3CB402FCCC36} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{BFE3CB6D-1A18-4498-97A7-696F7F84E763} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C015E782-F263-488E-B417-2948FC2F5936} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C01A8CD3-08D6-4796-AE35-44B74CAB5EF4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C05E81CC-7ABD-48CB-A9AC-632AF5C6F5D6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C0C8988A-0CAB-4F05-9819-D5583B7E327C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C0D703EF-5BD3-4517-A4A5-2E2F8DC6C224} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C1252B5C-F001-463D-8CA7-098B8395584D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C14D4079-AF31-44D8-875C-E70E00DBD625} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C1D544D1-EAA5-4236-ADB0-4A02FA12CDEF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C1DA8BAF-E571-4E6D-A48D-D2821351DF4C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C21DFCA1-85CD-4CF3-8DAC-905688E7F1AB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C26A47C8-C61C-47E0-9051-D9861FC025BF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C2882402-E01B-4EB7-A8A3-EB5527776DD0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C295C3A6-DF68-4952-8F6D-8206343E2C68} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C2DBEF0A-5DD1-4FA8-A83E-793490B12CB4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C2EECCEC-4BFC-4AE3-8B2E-B2693F94D45B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C305F9F7-2A0A-4B01-9E9C-6F11B599C846} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C3274F96-731B-4705-8821-22CD7254D515} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C339BD51-E439-44C4-9F7C-C372CC20DEDB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C3B505AF-F0E2-42BB-82AA-81FBCA281099} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C3CE058F-7F64-4F84-9B15-932C0E78168C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C42DFEFB-9BA9-4F9E-8563-0B13F8B037E4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C4379551-9051-4515-ACA5-78DBB84738A6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C45CE413-3459-4BAA-B597-5EFA17681D6B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C4A5CF55-5410-4C21-BA84-B67E548DD4C2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C4BF1194-82EC-44BA-80D2-7CD0A9D20F97} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C4C32502-9061-44D4-8F2C-4334AC57964E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C50D10E3-5626-4F03-AA80-5D424058859C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C583F8D8-7DDE-4660-84FF-E4953346FA37} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C593891F-B72E-47EE-9470-EC7D4E238C9A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C5C1899C-B8CC-4651-8025-5F80C3162A0D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C5F195EA-BA72-4995-86E2-70969155FF6E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6274922-76B5-4377-BC8B-EDCE07C26531} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6400525-0B46-44EE-B88F-042B79E85913} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6690FD1-1260-4CE3-9C04-4F5A9A2399FA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6768EAE-95F5-41A8-AB30-796363173BA8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C67C5B08-B394-4710-B525-C52CBA0C56B3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6B17481-59B5-44B7-AB11-85B208F9E5D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C6CEE9ED-CFFC-481F-A5A3-A753ABE98376} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C71D3894-C630-4BAD-A29C-A8593421A506} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C7420489-80F5-4981-9408-537590C1D681} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C74B282E-2698-44F5-9AEE-00A554C6D764} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C77A5A94-AF3D-46CA-A749-4651040ABB79} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C7C41CB7-FEAB-4298-B10F-F0FFD83DFF52} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C7D3A9AB-A243-4DC4-961F-B67BF12B27BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C7E96671-D174-4542-91F1-923A472BDCC3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8418A48-8C10-4ABA-8C4F-35F59EBDB4D3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8471378-8DA8-4F7B-A00F-75A662F7404C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C865A2B6-848B-47B7-88BB-9C41ED5DB644} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8A3E94F-8FA2-4196-806C-0A8834A7FBB6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8AF082B-0968-4773-9593-E3F41A8BF86C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8C9006F-1AC4-475D-B5B3-35C598561C09} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C8D4C15D-BA49-4B81-9E6F-9F9064CCBA2B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C91C5B86-5F2B-4D21-A6F2-412664221211} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C93BBD41-80FF-4723-B319-6DE3F3C321A0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C9C4DBD4-C210-4D45-9480-6E82DD7161DE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C9C63181-B000-4725-B3B3-8B5B12F9C3A7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C9ED7258-914B-42F7-81F9-AA504AE9010A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{C9F54B2B-4CFF-4C88-AECA-67B5FBF2C7DF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CA160768-A51A-49A9-AA04-A7ACDCA2BF8C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CA26B69D-43DE-471C-835B-3CD3E5223B62} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CA39C464-6B46-45B7-BBE1-81AA3C9BB365} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CA7EE0D4-3699-47BC-BEDC-46E14A111016} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CA9FBC10-C09F-43B3-8D9F-462522D69E49} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CACBB12C-9F6F-451B-AF64-BED3344D4F12} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CAE79E5B-4C78-452D-909D-9A9B50116CC7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CAFF035A-0D78-4450-8648-9B85A9A262C7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CB070099-B52E-4E99-B4A3-3D951F0D39B6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CB0D2634-6A31-438B-8DCB-EE0FA25C53DB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CB21A034-6C3A-4498-A2F6-375FD9028919} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CB294F87-2F1C-4888-923A-D715102C9421} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CB81F268-4D6A-4932-890C-D0A151CC6D29} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CBCB07F1-8BE2-4CEC-814A-1A02A87F4FF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CC0C1DA8-BC03-49F9-85D0-926DC08F7C14} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CC209C12-6505-4A4A-AA3C-44FA2292E107} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CC4D4D0E-43F5-4943-B0F6-5474F1323A70} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CD13DB29-7387-428D-90EF-83CD15FF615F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CD968066-9DEE-4FAF-A15E-57301724108F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CD9D99AA-91DE-490E-A4B1-1EE37E9464FB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CDC19039-ABDB-4D1D-BDA6-0D1056629A3C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CDDB9C49-62A5-4E37-A818-10452B4051DD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CE57F7DA-9607-45E9-A60D-4043FCB02036} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CE83314A-740B-4017-B0BF-B2D1B06BA60D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CEDD0D0A-7426-466A-9999-95D273DE8C86} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CF08DC13-D886-4A39-AAC8-77136279BC8B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CF5AD3C6-6135-4FE2-A7F5-92573DB6CA62} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{CFFC2CDE-DFCE-4A19-94C7-ADFDF398D54D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D00FB9C3-1723-4E6B-A200-2FD7A77327E4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D028D0BF-206E-456D-BD0B-45B1F6485D34} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D05C1FEF-B206-4FE8-8253-C4AC3BE381CD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D06094EC-88F9-4491-940F-6AE39AB6F4AC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D0A949AC-CDE1-47CE-B356-E32938AE1430} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D12C6F29-493B-4052-B6CB-18AA322763E9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D17995B0-8A2E-4707-86CB-32A6C3BBEA93} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D1A986E1-DAD3-4CDF-81AB-EEB42E965CFF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D210F8D4-C12E-4616-B519-424C574590FB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D244E81A-99E2-4306-B925-352346D0615A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D2E0B8E6-9571-494A-8D1E-008EFC1C3465} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D30371C7-E3DC-4021-B6EB-B839A0C2FA37} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D307EC43-6DDD-4DA1-A7C0-689BF5E3DD93} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D3188D94-0560-42A5-BFAD-1006B92CDF29} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D33B3B46-DC9F-4498-B4B4-6F67D809417E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D34A30F2-25F9-40E8-96E4-D4D584E1536B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D391A3F3-EAFD-4971-9C97-0C0CC0F64825} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D398EF88-42AA-4E2A-AFC8-E51E2C84FDCB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D3AE0463-F825-49BF-A548-2D307A395E88} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D3B3C9E7-DCB0-4251-9E02-9FC3891B1C03} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D3FF035B-422B-4EE9-A374-37E0F2F1BC0B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D4053EA7-C512-4310-A833-00524559F289} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D44BC239-DE7A-4D64-BC90-65CD1D2C62B4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D49D6EA2-5517-4E25-8A83-5E8AEF0B1033} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D4A8533D-8908-4FC1-9130-4025AE86EEC3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D4B1D0CC-AEF2-4FC5-9410-EAE3C002072B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D4B3176E-AE0F-4D52-847A-BAF4C5DA0D7A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D4D97113-BA0D-4124-B145-98EBC5F950F9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D5023307-65EF-48C8-9BD4-731683DDE4A8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D52CC1FF-962F-49AB-B490-422F83A54AA4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D55108EB-F582-44A8-971F-8D2B04A58B5B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D5C2B059-231A-48FD-BC81-11A5855A1389} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D5C75FB0-AF8C-4095-BD40-CF096DD18D7F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D603B4EC-ABD2-4ABA-A75B-A0830B0BDA35} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D60CDBF0-450B-4119-B121-196422967937} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D642A995-58AD-4152-B8BB-9B1A87BCCEA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D6AB630A-6B43-49C2-ABFD-80C3AB8F1D7A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D6B1D9AB-C1A3-4ED1-B72E-77F0B4D2E6A4} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D6B51B64-31C3-4D0C-9996-005033329257} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D758850B-A65D-45CC-9473-38915110127A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D7701E76-03C2-48F2-B94C-884300DC4D91} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D797F2B7-AC41-41F8-AECE-FB8FF1FB96D0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D79B7739-97E6-4AC9-BE67-68E8FE32BC51} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D7EE6905-0E2D-4AAF-A7AC-F748CF2ABCF6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D8A6C1E0-DB4D-4023-9102-1C1FE29AFE86} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D9126208-404E-436A-B941-9DD00B5EF4D0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D940376F-9DFA-4859-BDCF-A5119F8A3535} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D976A342-9FCC-4E37-9E2B-DCFD194B445E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D9899CBB-6B11-4321-A61A-26AD1D68129E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D9BE9B80-396C-4E05-A904-523E53D988C6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{D9F3FED9-B424-4AC6-8A97-F161208BA897} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DA96AE28-0F38-48BE-89A0-5C53025EB5C3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DAC511D2-B174-4B13-8CFF-A073DC317BF3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DAD7EC12-1BEF-4B8E-B2C6-B3D2C4FCCDCC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DAE00515-0268-4004-8F6E-C06ECF96A9F8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DAE6A59B-D8AD-472B-B199-6D1C03340B57} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DB1FCB42-D193-480E-A6C6-77FAFA9E81E5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DB3D6810-E920-4DAA-8C51-865D524D886A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DB5FEF1D-8AC4-40DE-BBBE-34D9BCC33C11} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DB7BA379-6FB4-4DA1-A99F-D19901E99BD5} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DC171777-2D56-48E0-BB8B-AE2839165ED0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DC411583-FFA5-4B6B-BE6A-E21EEB44B74F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DC476F6E-1459-40BA-AA74-2ADBCB0C1D6E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DC6C80DE-4919-441B-82BD-33FAFE4429DF} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DC7451D4-4B3A-4884-AAF1-58CEABF2C794} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DCB78D43-E233-4A50-84CC-A91A23BADA84} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DD4E9E0A-858B-432A-A45E-EC58B7D49E06} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DD5B9635-964D-4137-82E0-F2CF4EB04141} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DD921098-A194-40E9-9293-EE0C5212ABF1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DDE6E0DB-AD66-40CF-A950-108AC22876A6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DE9A42F8-E96E-483A-9E3D-2524ED1A9A56} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DE9FB3BF-CEF4-42D5-BDB6-C0C163A3803A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DEC43A6E-77F1-49E4-9662-1F149F57C627} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DEE2F232-3F8D-4B9A-B381-66C1F4770302} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DF391B26-D36F-4315-ADA1-387A8098AE18} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DFA08F42-1201-4814-B429-6B5DC1AF631C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{DFA2E48D-C7F6-48DA-9EA5-15FAE00E7DA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E0095AA4-4296-472E-ACA8-ECA1EC18727F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E0117B8A-3428-4472-BD7B-2F76DF079D6C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E02ACE7E-1FCB-4215-9647-FF79FE5E98FC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E0466690-D192-4D90-95C4-12D991A3E989} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E05802BE-2DBC-4F22-8E80-D6CA1D75E419} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E058B11A-A796-478A-9D87-3CC83A5177F0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E05EDA46-0A2C-4C53-B63F-E1650F677335} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E10C9CF8-A7CD-477A-9B8C-396C1CD4765C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E133591C-BCED-4E89-87A6-C6ABD4088AB2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1A6508E-CDAD-4492-B31C-7079B41A2292} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1AC1488-1B3B-4B66-90AE-FE67F90B3A52} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1C0AD2B-4B88-4CD2-8123-11B61F001A38} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1C20121-7FA7-4942-8584-DFF6E74B1EAD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1CA444A-CF42-45B2-9155-B732D26AEBD3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E1CFCA41-8B79-41B7-9149-C62BF6D50CA7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E2395C61-D3B7-42D2-8CB4-9B24F2AC0E2E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E27D4236-989A-4134-A917-CBAC00DAD13B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E298C368-CC9E-4D5F-9B9D-CD49CB7AC634} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E29ED195-B5BA-4158-B376-C0FEE0ED3135} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E2AB29C5-A902-48E6-A2FD-062DDD7177F7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3393202-8726-484C-AB11-398C4E0BE5EA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3553C70-EF08-4C6D-9F0B-3B56CC800F7B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3A8F24E-6C92-4729-BEB0-3DB8457ACE83} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3C7F4EA-D320-4E95-8413-FDC4534213EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3D0C3F0-81AF-471F-9048-790657887C81} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E3E5FD9A-C4F2-4675-9B90-223A9073B470} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E40DE7AD-B7A5-4D3A-8076-B664421E4F63} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E5153796-53D0-401D-874E-CA473E87F354} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E531A188-E291-4D0E-ABE3-D0B3046298F1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E5AA568C-B15B-450F-BAF6-B4F81355FC36} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E6F8397E-C86A-4305-97BB-404589650529} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E82FD72F-6055-4277-AB22-4BB38C53564B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E83F3144-FC29-4293-A004-A05113C60C0D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E875EC1A-DFD1-414A-932B-34F5DC4F6253} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E8904C15-8DBC-44C1-A140-2870F82B9165} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E8B18D75-F436-4084-91D4-9F41EA047FBD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E8E44E95-022B-49D9-9CB4-C3B97E0949BE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E8FD3796-FBC5-4173-AA47-DB5E5CE233BE} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E905F1A4-5434-4A56-ADAE-E9348B48A248} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E932956A-D130-421C-9273-5B62B053F79E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E93B2EE0-40B6-4A68-8D94-F79478C06635} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E93F228D-7574-49D9-B075-2E85F0ACBCE8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E9577F47-9EB4-4203-90AD-BA7AE8E14FD0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E95DA3AA-C938-4650-AA70-62132236D398} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E96AC9F7-99ED-454E-A445-21A925DF9029} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E9818BAA-FCB4-48BE-9207-FBED8DD1FBA2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E9850243-8140-4395-9C7E-B1928FBA69F7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{E9BF0B8E-1FCE-4F1B-9D71-C2B12EE69879} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EA31902C-B19D-42DA-B348-1D36A6438C52} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EA5D266B-FF34-4468-B8E7-F9B42CE2FE5B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EA98F783-EFF7-43EE-BD8A-812747330150} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EA99CD0A-9020-4D5C-A642-DF868CC1FF9F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EB1F7F64-9649-4649-AB9C-898D6A4ABDFA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EB73CBCE-66EF-451D-BC8E-4427BFB3ADA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EB8AEE4B-8C30-43CA-B6E0-B4DF026FF15D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EBB1830F-682E-4AB2-AA18-F0411A2414D6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EBE3F599-B628-4784-BA0F-1B32FB388F12} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EC0861D6-2BA8-4DFE-B80B-66F13F1786E6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EC3C6B09-5AAB-4029-8337-5DC2BE7E0427} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EC9E3D46-0308-4A25-847B-3D709A84F8AC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ECBE4D71-5A0E-41E0-88D7-FAD589532ECA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ECCF532E-1FD5-447B-907F-D7C6C26981EB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ECD25B44-52AB-4C55-B393-CF6069FB56BD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ED326E51-FB4C-483B-8E23-C07D96F2BEAB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{ED48D37D-26B6-4574-ADCD-E21F58A192D7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EDC2448B-7E3B-468C-9EF8-BB965BC9D604} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EE402187-A577-4490-947B-F21BA0211BFC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EE4BCB25-EB53-465E-A220-D7672E0874A3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EE8BDEE1-B86A-44C4-A0F8-7D6D9E9E1B7E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EEE81BAC-FC26-4BC7-8E8F-705F0517E065} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EF06CB70-CD90-4D94-8B18-E9C21B547671} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EF0CCDE3-3284-48B9-A4BA-442ADC1F0F3D} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EF9B0FBB-B967-446A-9CDD-D11F72279033} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{EFF1AAA7-D873-41E8-A4B8-C89B5AB2F362} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F1208BC7-3F46-4968-B865-EA74A85C9027} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F167333B-A024-4440-857C-5DD6CAAF9963} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F1785A93-D279-4B50-93ED-A1CA790F724F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F25DAA1B-5308-4DF7-B68B-43935EB27FB8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F2852C3B-A5AD-4FA4-AFDA-810D1305465C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F2CFADD4-FD5B-4683-B922-CE3CFEA9DF04} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F30771B2-684F-4D7E-9694-298FD162F677} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F312353F-D75F-4E4D-8DF5-4AA103450BFB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F32CD48D-2DA4-4DB6-A2F9-E33DF044A645} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F3643FB1-8BA5-4EED-85CA-1832D4880AB9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F3834B04-91D1-4DB3-A3D5-E777B60A6729} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F39D9AAB-666C-4319-8AA5-251314944F25} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F3BF35CC-3A15-4857-8863-CC4C7597CFD8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F417C066-3D72-4E00-BFE3-CB85792B4B18} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F47225A5-58A9-445A-91C1-8D459D55F3FB} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F4CAA8C6-EF63-4656-AB91-E864C0B97F89} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F524F842-884B-4CB0-B628-74056D5837E9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F5570F41-C88A-4F7F-B23E-8420CDBB930E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F564975B-0D9E-46E7-A352-CACF05BEB751} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F5CED835-67CA-4421-BC82-580C532251A0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F5E9B792-C9F1-4C03-B50A-4AB4469A9776} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F62C3CFB-805F-43F0-853A-740118C182E7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F66018AA-FD66-4A92-B869-89266863CBA1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F66883B8-9050-4896-B36B-F34DEDD29470} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F673DF5F-3E7E-49F6-BF60-6C0221828BF7} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F6A357F3-8FF3-428A-8B43-6385ADDEC6B8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F6CEC4DC-7CAB-4EE7-925F-7FDF7FC0826B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F70F46D8-36AD-4672-8F21-A8C9F8E20651} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F7645807-E434-443D-943C-8A7521EBD373} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F7667910-1AC7-4A1F-BE11-1C8DF0764DEC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F7956825-3214-427C-BD71-CD5CBC533D67} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F7D6DA8A-2FC5-4422-B047-7DD5F1B0BDBD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F81417C0-2023-40E7-9433-EF9BBF70FEB1} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F823CEF7-14E4-490A-BAB4-C0094360F9C0} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F834A8A5-4A7A-4F17-A66B-EF840E345B10} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F870D7D0-70B0-41B9-BF44-22E36EED606E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F8B0F9A9-FCC0-4EED-964F-94B032769673} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F8BC6C6E-C3AA-49AB-B0D6-5081B3F935B9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F8F146D1-4948-4F06-B89B-CB4AFE16EC8E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F8F94348-58D9-4D89-9FAD-A4BB252D074B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F92E39CF-8D8B-4C9F-B746-B512C3FF619E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F93DA53A-B0F9-4374-A5B1-4C3979FD53A9} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F9AA6FC0-8B62-4058-8F1C-1D7A8A5ED8D2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{F9FCB382-B4DA-4C9E-A2C0-F1C53FA94CA2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FA01840F-9EF8-4ACF-AFFD-6DCCBD9D32C2} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FA2C4AF1-129B-4BF1-91F5-EB0B418592DA} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FA6E7D9D-240E-4E67-9B30-0CF837CE4342} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FABEE1BD-8F3B-42A0-B190-B6B8923980D6} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FB1B8C5E-1C5F-46D1-AF5A-821B421C2EC8} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FB3B7F8E-F25C-4A60-904C-4B4198EAC157} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FC360474-D066-4BAD-BA2B-051FAE956E7C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FCA719B0-DCA1-439F-A383-F52E3F9E987C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FCA82228-7175-4887-8541-A7ECC93BAC8E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FD0DC22F-4967-46B1-B396-04E3237ACCDD} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FD10CEB9-F6B5-4FF9-949D-2C3C015654AC} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FD36F648-D5FD-48B3-A1F8-5E5A548E0F9F} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FD785693-255D-473F-8F67-90FAE668722B} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FD793648-A302-4604-BEE5-BD1C7812FA62} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FE5403B9-8915-459B-9EA1-E25A1EE64A0E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FE8CE082-C0FE-4644-A447-F7C508F2CE00} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FE95E6C7-B542-4D4D-AB71-4055375E6D9E} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FEE36EE6-228E-4BDA-A1F1-E6CB302FBE95} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFAB4D25-3662-4F4E-A996-28D0E16F5EE3} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFC01DFD-B511-48C9-84ED-A38920A6A04A} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFC575EF-B452-41BF-89B6-5761A6D3AF8C} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFCFC8F9-A4A1-4276-BD90-B8DE757F3978} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFD6A8E0-27C9-4E68-90DB-A2D0358E9429} Successfully deleted: [Empty Folder] C:\Users\Asja\appdata\local\{FFD89425-8455-47FB-BCEA-896DEF4E0338} ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.09.2014 at 8:45:00,89 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
14.09.2014, 08:32 | #9 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Und zum Schluss nochmal die FRST.txt-Datei und die Addition.txt-Datei: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014 Ran by Asja (administrator) on ASJA-PC on 14-09-2014 08:57:50 Running from C:\Users\Asja\Desktop Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rps.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360sd.exe (Spotify Ltd) C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dropbox, Inc.) C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\safemon\360Tray.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rp.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.) HKLM\...\Run: [ODDPwr] => C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated) HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-06-11] (Acer Incorporated) HKLM\...\Run: [IntelliType Pro] => c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.) HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [287560 2014-04-16] (Qihu 360 Software Co., Ltd.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-05-25] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-04-23] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-21] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Amazon Cloud Player] => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3140608 2014-01-14] () HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Spotify Web Helper] => C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-04] (Spotify Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll (Egis Technology Inc.) ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE415DE415 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files\360\360 Internet Security\safemon\safemon64.dll (Qihu 360 Software Co., Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {1ED48504-8834-11D5-AC75-0008C73FD642} file:///C:/Program%20Files/ProE/proeWildfire%202.0/i486_nt/obj/pvx_install.exe DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - No File Handler-x32: osf-roaming - No CLSID Value - Filter: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter-x32: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default FF SelectedSearchEngine: Ask.com FF SearchEngineOrder.1: Ask.com FF DefaultSearchEngine: Ask.com FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File FF Plugin-x32: @divx.com/DivX OVS Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @microsoft.com/Office on Demand;version=1 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\npofficeondemand.dll (Microsoft Corporation) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR DefaultSearchKeyword: Default -> 68855DBB6EC3D233BEA00A5CE334182A9AFB8947FAC32FDCF6FCE51A275AE701 CHR DefaultSearchURL: Default -> FCC21737ABC4418B2046A24E254EC6568A040E0EE7CE89415630720D5C84A4EB CHR Profile: C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04] CHR Extension: (YouTube) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20] CHR Extension: (Google-Suche) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20] CHR Extension: (AdBlock) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-10-02] CHR Extension: (Stealthy) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2012-03-31] CHR Extension: (Google Wallet) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (360 WebShield Plug-in) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pppagaglfkmlpgobnlenhknilehpmcbo [2014-09-11] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [] CHR HKLM-x32\...\Chrome\Extension: [pppagaglfkmlpgobnlenhknilehpmcbo] - C:\Program Files\360\360 Internet Security\safemon\360webshield.crx [2014-09-11] CHR StartMenuInternet: Google Chrome - C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [310352 2014-04-16] (Qihu 360 Software Co., Ltd.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-21] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-21] (Avira Operations GmbH & Co. KG) R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [821792 2010-06-11] (Acer Incorporated) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] () R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [File not signed] S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed] R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.) R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2011-04-29] () R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] () [File not signed] R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L) R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [File not signed] R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [236360 2014-04-23] (Qihu 360 Software Co., Ltd.) S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) S3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97872 2014-04-21] (Qihu 360 Software Co., Ltd.) R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67664 2014-04-23] (Qihu 360 Software Co., Ltd.) R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305744 2014-04-29] (Qihu 360 Software Co., Ltd.) S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41552 2014-04-29] (Qihu 360 Software Co., Ltd.) R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [304208 2014-05-07] (Qihu 360 Software Co., Ltd.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-03] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-05-27] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-25] (Avira Operations GmbH & Co. KG) R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [180816 2014-04-18] (Qihu 360 Software Co., Ltd.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-14 08:45 - 2014-09-14 08:45 - 00123880 _____ () C:\Users\Asja\Desktop\JRT.txt 2014-09-14 08:34 - 2014-09-14 08:34 - 00000000 ____D () C:\Windows\ERUNT 2014-09-14 08:32 - 2014-09-14 08:32 - 01016261 _____ (Thisisu) C:\Users\Asja\Desktop\JRT.exe 2014-09-13 13:48 - 2014-09-13 13:48 - 00003090 _____ () C:\Users\Asja\Desktop\AdwCleaner[S0].txt 2014-09-13 12:43 - 2014-09-13 13:04 - 00000000 ____D () C:\AdwCleaner 2014-09-13 12:35 - 2014-09-13 12:35 - 01373475 _____ () C:\Users\Asja\Desktop\AdwCleaner_3.310.exe 2014-09-13 12:33 - 2014-08-26 15:57 - 00034579 _____ () C:\Users\Asja\Desktop\Auswertung Audiodateien.xlsx 2014-09-13 12:33 - 2014-08-26 15:54 - 00013146 _____ () C:\Users\Asja\Desktop\Codeliste.xlsx 2014-09-13 12:33 - 2014-08-08 14:36 - 00260996 _____ () C:\Users\Asja\Desktop\Auswertung_Fragebogen_Datei-17-07-13_v2013-08-12_englisch_teilweiseohne42_v2013-09-27.xlsx 2014-09-13 12:32 - 2014-09-13 16:54 - 00000000 ____D () C:\Users\Asja\Desktop\Bachelorarbeit 2014-09-13 10:36 - 2014-09-13 10:36 - 00001143 _____ () C:\Users\Asja\Desktop\mbam.txt 2014-09-13 09:52 - 2014-09-13 09:53 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-13 09:52 - 2014-09-13 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 09:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-13 09:51 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-13 09:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-13 09:50 - 2014-09-13 09:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Asja\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-12 12:48 - 2014-09-12 12:48 - 00029233 _____ () C:\ComboFix.txt 2014-09-12 11:11 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-12 11:11 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-12 11:11 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-12 11:10 - 2014-09-12 12:49 - 00000000 ____D () C:\Qoobox 2014-09-12 11:09 - 2014-09-12 12:09 - 00000000 ____D () C:\Windows\erdnt 2014-09-12 11:07 - 2014-09-12 11:07 - 05577449 ____R (Swearware) C:\Users\Asja\Desktop\ComboFix.exe 2014-09-12 11:04 - 2014-09-12 11:04 - 00000642 _____ () C:\Users\Asja\Documents\Fixlist.txt 2014-09-11 15:11 - 2014-09-11 15:20 - 00046623 _____ () C:\Users\Asja\Desktop\Addition.txt 2014-09-11 15:09 - 2014-09-14 08:58 - 00025355 _____ () C:\Users\Asja\Desktop\FRST.txt 2014-09-11 15:07 - 2014-09-14 08:57 - 00000000 ____D () C:\FRST 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Desktop\FRST64.exe 2014-09-11 11:10 - 2014-09-12 13:02 - 00000000 ____D () C:\ProgramData\360SD 2014-09-11 11:10 - 2014-09-11 14:14 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:10 - 2014-04-23 10:32 - 00067664 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys 2014-09-11 11:10 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys 2014-09-11 11:09 - 2014-09-11 14:17 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:09 - 2014-05-07 11:44 - 00304208 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys 2014-09-11 11:09 - 2014-04-29 08:20 - 00305744 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys 2014-09-11 11:09 - 2014-04-29 05:50 - 00041552 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys 2014-09-11 11:09 - 2014-04-21 08:38 - 00097872 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys 2014-09-11 11:09 - 2014-04-18 08:42 - 00180816 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:03 - 2014-09-11 11:06 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:00 - 2014-09-11 11:02 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:41 - 2014-09-11 10:42 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-10 10:33 - 2014-09-05 04:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 10:33 - 2014-09-05 03:55 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 12:01 - 2014-09-11 10:39 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-03 20:56 - 2009-10-21 15:39 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l101.dll 2014-09-03 20:55 - 2014-09-03 20:56 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:59 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:53 - 2014-09-03 20:59 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-09-03 20:53 - 2009-12-02 00:02 - 00000601 ____N () C:\Windows\hpomdl47.dat 2014-09-03 20:53 - 2009-10-22 16:55 - 00643200 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01408000 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpost_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01175552 _____ (Hewlett-Packard) C:\Windows\system32\hposwia_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 00521216 _____ (Hewlett-Packard Co.) C:\Windows\system32\hposc_p04a.dll 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-21 16:36 - 2014-09-12 13:14 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-21 16:33 - 2014-09-12 13:16 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-14 08:58 - 2014-09-11 15:09 - 00025355 _____ () C:\Users\Asja\Desktop\FRST.txt 2014-09-14 08:57 - 2014-09-11 15:07 - 00000000 ____D () C:\FRST 2014-09-14 08:56 - 2010-09-14 17:18 - 01282790 _____ () C:\Windows\WindowsUpdate.log 2014-09-14 08:45 - 2014-09-14 08:45 - 00123880 _____ () C:\Users\Asja\Desktop\JRT.txt 2014-09-14 08:39 - 2011-01-19 16:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-14 08:38 - 2011-01-20 21:21 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job 2014-09-14 08:34 - 2014-09-14 08:34 - 00000000 ____D () C:\Windows\ERUNT 2014-09-14 08:32 - 2014-09-14 08:32 - 01016261 _____ (Thisisu) C:\Users\Asja\Desktop\JRT.exe 2014-09-14 08:20 - 2012-10-28 17:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-13 16:54 - 2014-09-13 12:32 - 00000000 ____D () C:\Users\Asja\Desktop\Bachelorarbeit 2014-09-13 16:39 - 2011-01-19 16:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-13 16:38 - 2011-01-20 21:21 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job 2014-09-13 13:48 - 2014-09-13 13:48 - 00003090 _____ () C:\Users\Asja\Desktop\AdwCleaner[S0].txt 2014-09-13 13:48 - 2011-03-05 13:21 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-13 13:16 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-13 13:16 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-13 13:08 - 2011-03-05 11:22 - 00000000 ___RD () C:\Users\Asja\Dropbox 2014-09-13 13:08 - 2011-03-05 11:19 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Dropbox 2014-09-13 13:05 - 2013-11-21 13:33 - 00014026 _____ () C:\Windows\setupact.log 2014-09-13 13:05 - 2010-09-14 17:14 - 00295284 _____ () C:\Windows\PFRO.log 2014-09-13 13:05 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-13 13:04 - 2014-09-13 12:43 - 00000000 ____D () C:\AdwCleaner 2014-09-13 13:04 - 2011-01-19 17:02 - 00000000 ____D () C:\ProgramData\ICQ 2014-09-13 12:35 - 2014-09-13 12:35 - 01373475 _____ () C:\Users\Asja\Desktop\AdwCleaner_3.310.exe 2014-09-13 10:36 - 2014-09-13 10:36 - 00001143 _____ () C:\Users\Asja\Desktop\mbam.txt 2014-09-13 09:53 - 2014-09-13 09:52 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-13 09:52 - 2014-09-13 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-13 09:52 - 2014-09-13 09:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 09:51 - 2014-09-13 09:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Asja\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-12 13:16 - 2014-08-21 16:33 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-09-12 13:14 - 2014-08-21 16:36 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-09-12 13:02 - 2014-09-11 11:10 - 00000000 ____D () C:\ProgramData\360SD 2014-09-12 12:49 - 2014-09-12 11:10 - 00000000 ____D () C:\Qoobox 2014-09-12 12:49 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-12 12:48 - 2014-09-12 12:48 - 00029233 _____ () C:\ComboFix.txt 2014-09-12 12:09 - 2014-09-12 11:09 - 00000000 ____D () C:\Windows\erdnt 2014-09-12 11:43 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-12 11:07 - 2014-09-12 11:07 - 05577449 ____R (Swearware) C:\Users\Asja\Desktop\ComboFix.exe 2014-09-12 11:04 - 2014-09-12 11:04 - 00000642 _____ () C:\Users\Asja\Documents\Fixlist.txt 2014-09-11 15:20 - 2014-09-11 15:11 - 00046623 _____ () C:\Users\Asja\Desktop\Addition.txt 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Desktop\FRST64.exe 2014-09-11 14:17 - 2014-09-11 11:09 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 14:14 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:06 - 2014-09-11 11:03 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:02 - 2014-09-11 11:00 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:54 - 2013-03-20 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-09-11 10:54 - 2013-03-20 14:28 - 00000000 ____D () C:\ProgramData\Avira 2014-09-11 10:54 - 2013-03-20 14:28 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-09-11 10:42 - 2014-09-11 10:41 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:39 - 2014-09-04 12:01 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-11 09:44 - 2014-07-25 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 09:44 - 2014-01-07 19:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 09:19 - 2011-01-24 11:12 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-09 22:03 - 2012-10-28 17:10 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-09 22:03 - 2012-10-28 17:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-09 22:03 - 2011-06-15 09:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-08 14:33 - 2010-09-15 03:09 - 00654400 _____ () C:\Windows\system32\perfh007.dat 2014-09-08 14:33 - 2010-09-15 03:09 - 00130240 _____ () C:\Windows\system32\perfc007.dat 2014-09-08 14:33 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-05 04:01 - 2014-09-10 10:33 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 03:55 - 2014-09-10 10:33 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 11:50 - 2013-01-08 18:28 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-09-03 20:59 - 2014-09-03 20:53 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:59 - 2014-09-03 20:53 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:56 - 2014-09-03 20:55 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-08-28 12:17 - 2013-05-07 18:28 - 00000000 ____D () C:\Users\Asja\Documents\Bewerbungsunterlagen 2014-08-26 15:57 - 2014-09-13 12:33 - 00034579 _____ () C:\Users\Asja\Desktop\Auswertung Audiodateien.xlsx 2014-08-26 15:54 - 2014-09-13 12:33 - 00013146 _____ () C:\Users\Asja\Desktop\Codeliste.xlsx 2014-08-24 20:54 - 2011-01-20 14:01 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Skype 2014-08-24 13:04 - 2011-01-20 01:09 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Liteon 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 13:00 - 2011-01-20 14:01 - 00000000 ____D () C:\ProgramData\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-22 03:15 - 2011-03-08 17:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-22 03:05 - 2013-03-14 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-21 17:14 - 2013-09-10 23:46 - 00000000 ____D () C:\Users\Asja\Desktop\Asja 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-19 08:11 - 2011-03-05 11:20 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} Some content of TEMP: ==================== C:\Users\Asja\AppData\Local\Temp\avgnt.exe C:\Users\Asja\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxmhhlg.dll C:\Users\Asja\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-21 17:37 ==================== End Of Log ============================ Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014 Ran by Asja at 2014-09-14 08:58:46 Running from C:\Users\Asja\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AV: 360 Internet Security (Enabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D} AS: 360 Internet Security (Enabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0} AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) 360 Internet Security (HKLM-x32\...\360 Internet Security) (Version: 4.9.0.4900 - Qihu 360 Software Co., Ltd.) 64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 4.0.7615 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 4.0.7615 - CyberLink Corp.) Hidden Acer Arcade Movie (x32 Version: 9.0.6423 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.63 - NewTech Infosystems) Acer Crystal Eye webcam (HKLM-x32\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 1.0.3.5 - Liteon) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated) Acer GameZone Console (HKLM-x32\...\{58F4D244-314F-4D26-B5EF-C28AB32E22CB}_is1) (Version: 6.1.0.9 - Oberon Media, Inc.) Acer PowerSmart Manager (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.02.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0222.2010 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}) (Version: 1.2.17.05001 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.3.0.422 - Amazon Services LLC) Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.) ATI Catalyst Install Manager (HKLM\...\{F5816A09-786E-C91D-3D99-8A8C92648750}) (Version: 3.0.765.0 - ATI Technologies, Inc.) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira) Backup Manager Basic (x32 Version: 2.0.0.63 - NewTech Infosystems) Hidden Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - ) Canon MP270 series Benutzerregistrierung (HKLM-x32\...\Canon MP270 series Benutzerregistrierung) (Version: - ) Canon MP270 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP270_series) (Version: - ) Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0421.657.10561 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help English (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help French (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help German (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden ccc-core-static (x32 Version: 2010.0421.657.10561 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0421.657.10561 - ATI) Hidden Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKCU\...\Dropbox) (Version: 2.10.28 - Dropbox, Inc.) eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden Eufloria (HKLM-x32\...\Steam App 41210) (Version: - ) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Half-Life (HKLM-x32\...\Steam App 70) (Version: - Valve) Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve) Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve) Harry Potter TM (HKLM-x32\...\{3F50AF3B-8997-4916-0095-99D63DDB785A}) (Version: - ) HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7 (HKLM\...\{014E482A-0C27-47E3-BA82-307E9DCA2F47}) (Version: 14.0 - HP) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation) Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025F0}) (Version: 7.0.250 - Oracle) Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle) Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.290 - Oracle) Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.7 - Acer Inc.) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) MathPlayer (HKLM-x32\...\{32F66A20-7614-11D4-BD11-00104BD3F987}) (Version: 2.2 - Design Science, Inc.) MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office on Demand-Browser-Add-Ons (HKCU\...\Microsoft Office on Demand-Browser-Add-Ons) (Version: 15.0.4551.1512 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 1.1.500.0 - Microsoft Corporation) Hidden Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.0.0 - Electronic Arts) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.212.0 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden Network64 (Version: 140.0.212.000 - Hewlett-Packard) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.630 - NewTech Infosystems) NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6636 - NewTech Infosystems) NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems) Hidden NVIDIA PhysX v8.10.17 (HKLM-x32\...\{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}) (Version: 8.10.17 - NVIDIA Corporation) Optical Drive Power Management (HKLM-x32\...\{AE09C972-EEB2-4DA5-8090-0FCF54576854}) (Version: 1.01.3007 - Acer Incorporated) Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Portal (HKLM-x32\...\Steam App 400) (Version: - Valve) Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve) PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden PTC ProductView Express - Wildfire 2.0 (M270) (HKLM-x32\...\{26B52E64-21C0-4834-8B57-D7B0D5BCB518}) (Version: 2.1.725.0 - PTC) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden R for Windows 3.0.2 (HKLM\...\R for Windows 3.0.2_is1) (Version: 3.0.2 - R Core Team) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6096 - Realtek Semiconductor Corp.) RStudio (HKLM-x32\...\RStudio) (Version: 0.97.551 - RStudio) Runaway, The Dream of the Turtle Demo (HKLM-x32\...\Steam App 7230) (Version: - Pendulo Studios) Scan (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated) Time Gentlemen, Please! - Demo (HKLM-x32\...\Steam App 37410) (Version: - Zombie Cow) Toolbox (x32 Version: 140.0.424.000 - Hewlett-Packard) Hidden Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden Vensim PLE (HKLM-x32\...\Vensim PLE) (Version: - ) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3002 - Acer Incorporated) WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4300 - Broadcom Corporation) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/01/2013 1.0.0.0) (HKLM\...\40A0325FAA3CCB4A2619424F1F22496EB01767A3) (Version: 01/01/2013 1.0.0.0 - Arduino LLC (www.arduino.cc)) World of Goo (HKLM-x32\...\Steam App 22000) (Version: - 2D Boy) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{225F8CFE-1B76-48E6-8E75-62CC471AFA28}\InprocServer32 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\RoamingOfficeActiveX.64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File ==================== Restore Points ========================= 06-09-2014 01:03:20 Windows Update 09-09-2014 10:48:44 Windows Update 11-09-2014 07:17:49 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-09-12 11:42 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0125C851-099F-4070-B7A8-343DDE94D92C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {32CE31F6-CF9C-4FD4-A92F-46D6E2129610} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {5CE1376D-80A6-4D56-9537-D84026334616} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft) Task: {6241BCC4-A95E-449F-B28B-B60C51CE55D5} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2358443310-1148957609-1059146875-1001 Task: {7A9E966C-492D-4BF3-AD60-A74586F690A2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation) Task: {7FAEF226-0770-49D2-8936-0860B1D61AB0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {8372AFBF-C806-4F29-8B26-6BF9381EF4C0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation) Task: {9A6D82DC-4D83-43D8-8B53-578FF75195F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated) Task: {BE812FAD-5649-4FAD-8441-FF96A81EC193} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {BEC7D25E-5E50-4EA6-A13E-F42693D023B9} - System32\Tasks\Amazon Music Helper => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [2014-01-14] () Task: {C2B95837-77FB-4E3B-8404-EAE26B349329} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {C822F4C5-D083-4F88-81F3-EA8FE427235E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E5F569DB-2AAE-4BEC-8043-8D16C3916228} - System32\Tasks\{33C71A51-2E88-4C96-8938-A85CF2E5C06B} => Chrome.exe hxxp://www.skype.com/go/downloading?source=installer&ver=6.0.0.126&LastError=-9 Task: {F85B149D-BB0C-42B3-9698-D55B0120AE06} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-08 18:28 - 2009-02-10 18:01 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2013-12-21 18:22 - 2014-01-14 21:46 - 03140608 _____ () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe 2011-04-29 20:08 - 2011-04-29 20:08 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2010-09-14 17:41 - 2010-02-03 10:37 - 00244904 ____N () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe 2010-03-26 10:41 - 2010-03-26 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-14 17:17 - 2010-09-14 17:17 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll 2010-05-25 02:16 - 2010-05-25 02:16 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2010-05-25 02:09 - 2010-05-25 02:09 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2014-09-13 13:07 - 2014-09-13 13:07 - 00043008 _____ () c:\users\asja\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpxmhhlg.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Asja\AppData\Roaming\Dropbox\bin\libcef.dll 2010-07-02 14:00 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll 2013-01-12 15:14 - 2013-01-12 15:14 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll 2010-07-02 13:24 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: High Definition Audio-Controller Description: High Definition Audio-Controller Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: HDAudBus Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== System errors: ============= Microsoft Office Sessions: ========================= Error: (03/29/2011 11:20:32 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2792 seconds with 840 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-09-12 11:31:07.992 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-09-12 11:31:07.789 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-09-04 11:58:59.422 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:08:43.308 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:03:42.866 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:06:29.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:02:34.876 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:47.033 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.780 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.230 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz Percentage of memory in use: 43% Total physical RAM: 3766.69 MB Available physical RAM: 2137.86 MB Total Pagefile: 7531.51 MB Available Pagefile: 5229.02 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:321.16 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 545C63FA) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Liebe Grüße |
14.09.2014, 15:11 | #10 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiertESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.09.2014, 18:58 | #11 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Hi, hier schonmal die Text-Datei vom ESET Online Scanner: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.7623 # api_version=3.0.2 # EOSSerial=b1c428d1743afb448be3a0b8aaeecb9a # engine=20148 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=true # unsafe_checked=false # antistealth_checked=true # utc_time=2014-09-14 05:35:09 # local_time=2014-09-14 07:35:09 (+0100, Mitteleuropäische Sommerzeit) # country="Germany" # lang=1031 # osver=6.1.7600 NT # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 29713 162345959 0 0 # compatibility_mode_1='360 Internet Security' # compatibility_mode=16386 16777213 100 100 11600 49441516 0 0 # scanned=234104 # found=1 # cleaned=0 # scan_time=11243 sh=0422D77AE97B56DEF1247012A38B2C66C9430AC1 ft=0 fh=0000000000000000 vn="möglicherweise unbekannter Virus NewHeur_PE Virus" ac=I fn="C:\Users\Asja\AppData\Local\Downloaded Installations\{7711CD4B-AC81-44E1-9224-50A8ABDC6A9D}\MSN Star Check.msi" |
14.09.2014, 19:03 | #12 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert ok
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.09.2014, 19:09 | #13 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert hier die Text-DAtei des Security Checks: Code:
ATTFilter Results of screen317's Security Check version 0.99.87 Windows 7 x64 (UAC is disabled!) Out of date service pack!! ``````````````Antivirus/Firewall Check:`````````````` 360 Internet Security WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Java(TM) 6 Update 29 Java 7 Update 25 Java version out of Date! Adobe Flash Player 15.0.0.152 Adobe Reader 10.1.11 Adobe Reader out of Date! Google Chrome 37.0.2062.103 Google Chrome 37.0.2062.120 ````````Process Check: objlist.exe by Laurent```````` Symantec Norton Online Backup NOBuAgent.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-09-2014 Ran by Asja (administrator) on ASJA-PC on 14-09-2014 20:04:46 Running from C:\Users\Asja\Desktop Platform: Windows 7 Home Premium (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 8 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rps.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe (AMD) C:\Windows\System32\atieclxx.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe (NTI, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe (Acer Incorporated) C:\Program Files\Acer\Optical Drive Power Management\ODDPWR.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\itype.exe (Microsoft Corporation) C:\Program Files\Microsoft Device Center\ipoint.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Spotify Ltd) C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Dropbox, Inc.) C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360sd.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (CyberLink Corp.) C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\360rp.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe (Qihu 360 Software Co., Ltd.) C:\Program Files\360\360 Internet Security\safemon\360Tray.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Cisco Systems\VPN Client\vpngui.exe (Intel Corporation) C:\Windows\System32\igfxext.exe (Intel Corporation) C:\Windows\System32\igfxsrvc.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775072 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-04-22] (Realtek Semiconductor) HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [320000 2009-04-09] (AlcorMicro Co., Ltd.) HKLM\...\Run: [ODDPwr] => C:\Program Files\Acer\Optical Drive Power Management\ODDPwr.exe [223264 2010-04-22] (Acer Incorporated) HKLM\...\Run: [mwlDaemon] => C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1842472 2009-09-17] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-06-11] (Acer Incorporated) HKLM\...\Run: [IntelliType Pro] => c:\Program Files\Microsoft Device Center\itype.exe [1464928 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft Device Center\ipoint.exe [2004584 2012-06-26] (Microsoft Corporation) HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2184520 2009-03-24] (CANON INC.) HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.) HKLM\...\Run: [360sd] => C:\Program Files\360\360 Internet Security\360sdrun.exe [287560 2014-04-16] (Qihu 360 Software Co., Ltd.) HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation) HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.) HKLM-x32\...\Run: [SuiteTray] => C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] => C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation) HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-05-25] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [MDS_Menu] => C:\Program Files (x86)\Acer Arcade Deluxe\MediaShow Espresso\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [ArcadeMovieService] => C:\Program Files (x86)\Acer Arcade Deluxe\Arcade Movie\ArcadeMovieService.exe [124136 2010-04-23] (CyberLink Corp.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1815976 2014-01-27] (Valve Corporation) HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Amazon Cloud Player] => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [3140608 2014-01-14] () HKU\S-1-5-21-2358443310-1148957609-1059146875-1001\...\Run: [Spotify Web Helper] => C:\Users\Asja\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-09-04] (Spotify Ltd) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ShellIconOverlayIdentifiers: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll (Egis Technology Inc.) ShellIconOverlayIdentifiers-x32: egisPSDP -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x86\psdprotect.dll (Egis Technology Inc.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=aspire_4820tg&r=27360111m006l0423z1j5t57j1j196 StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE415DE415 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: SafeMon Class -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> C:\Program Files\360\360 Internet Security\safemon\safemon64.dll (Qihu 360 Software Co., Ltd.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: DivX HiQ -> {593DDEC6-7468-4cdd-90E1-42DADAA222E9} -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File DPF: HKLM-x32 {1ED48504-8834-11D5-AC75-0008C73FD642} file:///C:/Program%20Files/ProE/proeWildfire%202.0/i486_nt/obj/pvx_install.exe DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: osf-roaming - {C57E9882-B128-4E07-BA2D-FF83B8989C76} - No File Handler-x32: osf-roaming - No CLSID Value - Filter: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - No File Filter-x32: application/xhtml+xml - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: application/xhtml+xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=iso-8859-1 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Filter-x32: text/xml; charset=utf-8 - {32F66A26-7614-11D4-BD11-00104BD3F987} - C:\Program Files (x86)\Design Science\MathPlayer\MathMLMimer.dll (Design Science, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Asja\AppData\Roaming\Mozilla\Firefox\Profiles\704478yu.default FF SelectedSearchEngine: Ask.com FF SearchEngineOrder.1: Ask.com FF DefaultSearchEngine: Ask.com FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll () FF Plugin: @java.com/DTPlugin,version=10.45.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.) FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll No File FF Plugin-x32: @divx.com/DivX OVS Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll No File FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin HKCU: @microsoft.com/Office on Demand;version=1 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\npofficeondemand.dll (Microsoft Corporation) FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft) FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\html5video FF HKLM-x32\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\wpa Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR DefaultSearchKeyword: Default -> 68855DBB6EC3D233BEA00A5CE334182A9AFB8947FAC32FDCF6FCE51A275AE701 CHR DefaultSearchURL: Default -> FCC21737ABC4418B2046A24E254EC6568A040E0EE7CE89415630720D5C84A4EB CHR Profile: C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-04] CHR Extension: (YouTube) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20] CHR Extension: (Google-Suche) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20] CHR Extension: (AdBlock) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-10-02] CHR Extension: (Stealthy) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\ieaebnkibonmpbhdaanjkmedikadnoje [2012-03-31] CHR Extension: (Google Wallet) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (360 WebShield Plug-in) - C:\Users\Asja\AppData\Local\Google\Chrome\User Data\Default\Extensions\pppagaglfkmlpgobnlenhknilehpmcbo [2014-09-11] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [] CHR HKLM-x32\...\Chrome\Extension: [pppagaglfkmlpgobnlenhknilehpmcbo] - C:\Program Files\360\360 Internet Security\safemon\360webshield.crx [2014-09-11] CHR StartMenuInternet: Google Chrome - C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 360rp; C:\Program Files\360\360 Internet Security\360rps.exe [310352 2014-04-16] (Qihu 360 Software Co., Ltd.) R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [821792 2010-06-11] (Acer Incorporated) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2009-02-10] () R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [File not signed] S3 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2009-05-14] (Hewlett-Packard) [File not signed] R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation) R2 NTISchedulerSvc; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2010-04-17] (NTI, Inc.) R2 ODDPwrSvc; C:\Program Files\Acer\Optical Drive Power Management\ODDPWRSvc.exe [171040 2010-04-22] (Acer Incorporated) S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2009-05-14] (Hewlett-Packard) [File not signed] R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2011-04-29] () R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] () [File not signed] R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated) S3 scan; C:\Program Files\360\360 Internet Security\scan.dll [423144 2013-02-20] (S.C. BitDefender S.R.L) R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [File not signed] R2 ZhuDongFangYu; C:\Program Files\360\360 Internet Security\deepscan\QHActiveDefense.exe [236360 2014-04-23] (Qihu 360 Software Co., Ltd.) S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R3 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [97872 2014-04-21] (Qihu 360 Software Co., Ltd.) R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [67664 2014-04-23] (Qihu 360 Software Co., Ltd.) R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [305744 2014-04-29] (Qihu 360 Software Co., Ltd.) R3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [41552 2014-04-29] (Qihu 360 Software Co., Ltd.) R1 360fsflt; C:\Windows\System32\DRIVERS\360FsFlt.sys [304208 2014-05-07] (Qihu 360 Software Co., Ltd.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [180816 2014-04-18] (Qihu 360 Software Co., Ltd.) R3 CVPNDRVA; C:\Windows\system32\Drivers\CVPNDRVA.sys [304784 2010-03-23] () S3 catchme; \??\C:\ComboFix\catchme.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-14 19:59 - 2014-09-14 19:59 - 00854417 _____ () C:\Users\Asja\Desktop\SecurityCheck.exe 2014-09-14 16:20 - 2014-09-14 16:20 - 02347384 _____ (ESET) C:\Users\Asja\Desktop\esetsmartinstaller_deu.exe 2014-09-14 08:45 - 2014-09-14 09:16 - 00123880 _____ () C:\Users\Asja\Desktop\JRT.txt 2014-09-14 08:34 - 2014-09-14 08:34 - 00000000 ____D () C:\Windows\ERUNT 2014-09-14 08:32 - 2014-09-14 08:32 - 01016261 _____ (Thisisu) C:\Users\Asja\Desktop\JRT.exe 2014-09-13 13:48 - 2014-09-13 13:48 - 00003090 _____ () C:\Users\Asja\Desktop\AdwCleaner[S0].txt 2014-09-13 12:43 - 2014-09-13 13:04 - 00000000 ____D () C:\AdwCleaner 2014-09-13 12:35 - 2014-09-13 12:35 - 01373475 _____ () C:\Users\Asja\Desktop\AdwCleaner_3.310.exe 2014-09-13 12:33 - 2014-08-26 15:57 - 00034579 _____ () C:\Users\Asja\Desktop\Auswertung Audiodateien.xlsx 2014-09-13 12:33 - 2014-08-26 15:54 - 00013146 _____ () C:\Users\Asja\Desktop\Codeliste.xlsx 2014-09-13 12:33 - 2014-08-08 14:36 - 00260996 _____ () C:\Users\Asja\Desktop\Auswertung_Fragebogen_Datei-17-07-13_v2013-08-12_englisch_teilweiseohne42_v2013-09-27.xlsx 2014-09-13 12:32 - 2014-09-13 16:54 - 00000000 ____D () C:\Users\Asja\Desktop\Bachelorarbeit 2014-09-13 10:36 - 2014-09-13 10:36 - 00001143 _____ () C:\Users\Asja\Desktop\mbam.txt 2014-09-13 09:52 - 2014-09-13 09:53 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-13 09:52 - 2014-09-13 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:52 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 09:51 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-09-13 09:51 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-09-13 09:51 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-09-13 09:50 - 2014-09-13 09:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Asja\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-12 12:48 - 2014-09-12 12:48 - 00029233 _____ () C:\ComboFix.txt 2014-09-12 11:11 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-09-12 11:11 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-09-12 11:11 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-09-12 11:11 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-09-12 11:10 - 2014-09-12 12:49 - 00000000 ____D () C:\Qoobox 2014-09-12 11:09 - 2014-09-12 12:09 - 00000000 ____D () C:\Windows\erdnt 2014-09-12 11:07 - 2014-09-12 11:07 - 05577449 ____R (Swearware) C:\Users\Asja\Desktop\ComboFix.exe 2014-09-12 11:04 - 2014-09-12 11:04 - 00000642 _____ () C:\Users\Asja\Documents\Fixlist.txt 2014-09-11 15:11 - 2014-09-14 08:59 - 00038478 _____ () C:\Users\Asja\Desktop\Addition.txt 2014-09-11 15:09 - 2014-09-14 20:05 - 00025050 _____ () C:\Users\Asja\Desktop\FRST.txt 2014-09-11 15:07 - 2014-09-14 20:04 - 00000000 ____D () C:\FRST 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Desktop\FRST64.exe 2014-09-11 11:10 - 2014-09-14 15:32 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-11 11:10 - 2014-09-12 13:02 - 00000000 ____D () C:\ProgramData\360SD 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:10 - 2014-04-23 10:32 - 00067664 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AvFlt.sys 2014-09-11 11:10 - 2013-12-06 14:03 - 00022584 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\efimon.sys 2014-09-11 11:09 - 2014-09-11 14:17 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:09 - 2014-05-07 11:44 - 00304208 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360FsFlt.sys 2014-09-11 11:09 - 2014-04-29 08:20 - 00305744 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Box64.sys 2014-09-11 11:09 - 2014-04-29 05:50 - 00041552 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360Camera64.sys 2014-09-11 11:09 - 2014-04-21 08:38 - 00097872 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\360AntiHacker64.sys 2014-09-11 11:09 - 2014-04-18 08:42 - 00180816 _____ (Qihu 360 Software Co., Ltd.) C:\Windows\system32\Drivers\BAPIDRV64.SYS 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:03 - 2014-09-11 11:06 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:00 - 2014-09-11 11:02 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:41 - 2014-09-11 10:42 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-10 10:33 - 2014-09-05 04:01 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-10 10:33 - 2014-09-05 03:55 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 12:01 - 2014-09-11 10:39 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-03 20:56 - 2009-10-21 15:39 - 00138752 _____ (Hewlett-Packard Company) C:\Windows\system32\hpf3l101.dll 2014-09-03 20:55 - 2014-09-03 20:56 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:59 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:53 - 2014-09-03 20:59 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-09-03 20:53 - 2009-12-02 00:02 - 00000601 ____N () C:\Windows\hpomdl47.dat 2014-09-03 20:53 - 2009-10-22 16:55 - 00643200 _____ (Hewlett-Packard) C:\Windows\system32\hpzids40.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01408000 _____ (Hewlett-Packard Co.) C:\Windows\system32\hpost_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 01175552 _____ (Hewlett-Packard) C:\Windows\system32\hposwia_p04b.dll 2014-09-03 20:53 - 2009-09-11 09:44 - 00521216 _____ (Hewlett-Packard Co.) C:\Windows\system32\hposc_p04a.dll 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-21 16:36 - 2014-09-12 13:14 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-21 16:33 - 2014-09-12 13:16 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-14 20:05 - 2014-09-11 15:09 - 00025050 _____ () C:\Users\Asja\Desktop\FRST.txt 2014-09-14 20:04 - 2014-09-11 15:07 - 00000000 ____D () C:\FRST 2014-09-14 20:03 - 2012-10-28 17:10 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-14 19:59 - 2014-09-14 19:59 - 00854417 _____ () C:\Users\Asja\Desktop\SecurityCheck.exe 2014-09-14 19:39 - 2011-01-19 16:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-14 19:38 - 2011-01-20 21:21 - 00001116 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job 2014-09-14 19:05 - 2013-11-21 13:33 - 00014250 _____ () C:\Windows\setupact.log 2014-09-14 19:05 - 2010-09-14 17:18 - 01299991 _____ () C:\Windows\WindowsUpdate.log 2014-09-14 16:39 - 2011-01-19 16:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-14 16:38 - 2011-01-20 21:21 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job 2014-09-14 16:20 - 2014-09-14 16:20 - 02347384 _____ (ESET) C:\Users\Asja\Desktop\esetsmartinstaller_deu.exe 2014-09-14 15:32 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360safe 2014-09-14 11:20 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-14 11:20 - 2009-07-14 06:45 - 00015568 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-09-14 11:13 - 2011-03-05 11:22 - 00000000 ___RD () C:\Users\Asja\Dropbox 2014-09-14 11:12 - 2011-03-05 13:21 - 00000000 ____D () C:\Program Files (x86)\Steam 2014-09-14 11:12 - 2011-03-05 11:19 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Dropbox 2014-09-14 11:09 - 2010-09-14 17:14 - 00303026 _____ () C:\Windows\PFRO.log 2014-09-14 11:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-14 10:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF 2014-09-14 09:16 - 2014-09-14 08:45 - 00123880 _____ () C:\Users\Asja\Desktop\JRT.txt 2014-09-14 08:59 - 2014-09-11 15:11 - 00038478 _____ () C:\Users\Asja\Desktop\Addition.txt 2014-09-14 08:34 - 2014-09-14 08:34 - 00000000 ____D () C:\Windows\ERUNT 2014-09-14 08:32 - 2014-09-14 08:32 - 01016261 _____ (Thisisu) C:\Users\Asja\Desktop\JRT.exe 2014-09-13 16:54 - 2014-09-13 12:32 - 00000000 ____D () C:\Users\Asja\Desktop\Bachelorarbeit 2014-09-13 13:48 - 2014-09-13 13:48 - 00003090 _____ () C:\Users\Asja\Desktop\AdwCleaner[S0].txt 2014-09-13 13:04 - 2014-09-13 12:43 - 00000000 ____D () C:\AdwCleaner 2014-09-13 13:04 - 2011-01-19 17:02 - 00000000 ____D () C:\ProgramData\ICQ 2014-09-13 12:35 - 2014-09-13 12:35 - 01373475 _____ () C:\Users\Asja\Desktop\AdwCleaner_3.310.exe 2014-09-13 10:36 - 2014-09-13 10:36 - 00001143 _____ () C:\Users\Asja\Desktop\mbam.txt 2014-09-13 09:53 - 2014-09-13 09:52 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-09-13 09:52 - 2014-09-13 09:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-09-13 09:52 - 2014-09-13 09:51 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-09-13 09:51 - 2014-09-13 09:51 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-09-13 09:51 - 2014-09-13 09:50 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Asja\Downloads\mbam-setup-2.0.2.1012.exe 2014-09-12 13:16 - 2014-08-21 16:33 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Spotify 2014-09-12 13:14 - 2014-08-21 16:36 - 00000000 ____D () C:\Users\Asja\AppData\Local\Spotify 2014-09-12 13:02 - 2014-09-11 11:10 - 00000000 ____D () C:\ProgramData\360SD 2014-09-12 12:49 - 2014-09-12 11:10 - 00000000 ____D () C:\Qoobox 2014-09-12 12:49 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-09-12 12:48 - 2014-09-12 12:48 - 00029233 _____ () C:\ComboFix.txt 2014-09-12 12:09 - 2014-09-12 11:09 - 00000000 ____D () C:\Windows\erdnt 2014-09-12 11:43 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-09-12 11:07 - 2014-09-12 11:07 - 05577449 ____R (Swearware) C:\Users\Asja\Desktop\ComboFix.exe 2014-09-12 11:04 - 2014-09-12 11:04 - 00000642 _____ () C:\Users\Asja\Documents\Fixlist.txt 2014-09-11 15:06 - 2014-09-11 15:06 - 02105856 _____ (Farbar) C:\Users\Asja\Desktop\FRST64.exe 2014-09-11 14:17 - 2014-09-11 11:09 - 00000000 _RSHD () C:\360SANDBOX 2014-09-11 11:10 - 2014-09-11 11:10 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\360SD 2014-09-11 11:09 - 2014-09-11 11:09 - 00000978 _____ () C:\Users\Public\Desktop\360 Internet Security.lnk 2014-09-11 11:09 - 2014-09-11 11:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Internet Security 2014-09-11 11:06 - 2014-09-11 11:06 - 00000000 ____D () C:\Program Files\360 2014-09-11 11:06 - 2014-09-11 11:03 - 238003336 _____ (Qihu 360 Software Co., Ltd.) C:\Users\Asja\Downloads\360is_4.9.0.4900D.exe 2014-09-11 11:02 - 2014-09-11 11:00 - 166267560 _____ (AVG Technologies) C:\Users\Asja\Downloads\avg_free_x64_all_2015_5315a8160.exe 2014-09-11 10:54 - 2014-09-11 10:54 - 00003124 _____ () C:\Windows\System32\Tasks\{E0C95AAC-A537-4415-B07D-E53A465B6D2B} 2014-09-11 10:42 - 2014-09-11 10:41 - 04755688 _____ (Avira Operations GmbH & Co. KG) C:\Users\Asja\Downloads\avira_de_av___ws.exe 2014-09-11 10:39 - 2014-09-04 12:01 - 00000000 ____D () C:\ProgramData\UrukNoko 2014-09-11 10:08 - 2014-09-11 10:08 - 06823609 _____ () C:\Users\Asja\Documents\Dokumente.zip 2014-09-11 09:44 - 2014-07-25 15:40 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-09-11 09:44 - 2014-01-07 19:18 - 00000000 ____D () C:\Windows\system32\MRT 2014-09-11 09:19 - 2011-01-24 11:12 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-09-09 22:03 - 2012-10-28 17:10 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-09-09 22:03 - 2012-10-28 17:10 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-09-09 22:03 - 2011-06-15 09:50 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-09-08 14:33 - 2010-09-15 03:09 - 00654400 _____ () C:\Windows\system32\perfh007.dat 2014-09-08 14:33 - 2010-09-15 03:09 - 00130240 _____ () C:\Windows\system32\perfc007.dat 2014-09-08 14:33 - 2009-07-14 07:13 - 01498742 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-09-05 04:01 - 2014-09-10 10:33 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-09-05 03:55 - 2014-09-10 10:33 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-09-04 11:50 - 2013-01-08 18:28 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-09-03 20:59 - 2014-09-03 20:53 - 00172007 _____ () C:\Windows\hpoins47.dat 2014-09-03 20:59 - 2014-09-03 20:53 - 00000811 _____ () C:\ProgramData\hpzinstall.log 2014-09-03 20:56 - 2014-09-03 20:55 - 00000000 ____D () C:\Program Files (x86)\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\ProgramData\HP 2014-09-03 20:53 - 2014-09-03 20:53 - 00000000 ____D () C:\Program Files\HP 2014-08-28 12:17 - 2013-05-07 18:28 - 00000000 ____D () C:\Users\Asja\Documents\Bewerbungsunterlagen 2014-08-26 15:57 - 2014-09-13 12:33 - 00034579 _____ () C:\Users\Asja\Desktop\Auswertung Audiodateien.xlsx 2014-08-26 15:54 - 2014-09-13 12:33 - 00013146 _____ () C:\Users\Asja\Desktop\Codeliste.xlsx 2014-08-24 20:54 - 2011-01-20 14:01 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Skype 2014-08-24 13:04 - 2011-01-20 01:09 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Liteon 2014-08-24 13:00 - 2014-08-24 13:00 - 00000000 ____D () C:\Users\Asja\AppData\Local\Skype 2014-08-24 13:00 - 2011-01-20 14:01 - 00000000 ____D () C:\ProgramData\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ___RD () C:\Program Files (x86)\Skype 2014-08-24 12:59 - 2014-08-24 12:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-08-24 12:53 - 2013-03-14 11:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-08-22 03:15 - 2011-03-08 17:45 - 00000000 ____D () C:\ProgramData\Microsoft Help 2014-08-22 03:05 - 2013-03-14 11:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-08-21 17:14 - 2013-09-10 23:46 - 00000000 ____D () C:\Users\Asja\Desktop\Asja 2014-08-21 16:35 - 2014-08-21 16:35 - 00001803 _____ () C:\Users\Asja\Desktop\Spotify.lnk 2014-08-21 16:35 - 2014-08-21 16:35 - 00001789 _____ () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2014-08-19 08:11 - 2011-03-05 11:20 - 00000000 ____D () C:\Users\Asja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-08-19 07:59 - 2014-08-19 07:59 - 00000000 _____ () C:\Users\Asja\AppData\Local\{AD922264-E2DD-408D-A317-291A178A19A4} Some content of TEMP: ==================== C:\Users\Asja\AppData\Local\Temp\avgnt.exe C:\Users\Asja\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0xwsu1.dll C:\Users\Asja\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-21 17:37 ==================== End Of Log ============================ --- --- --- Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014 Ran by Asja at 2014-09-14 20:06:11 Running from C:\Users\Asja\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: 360 Internet Security (Disabled - Up to date) {2B66EE1E-E5C8-C2F7-648F-4E55AC68D37D} AS: 360 Internet Security (Disabled - Up to date) {90070FFA-C3F2-CD79-5E3F-7527D7EF99C0} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version: - Microsoft) 360 Internet Security (HKLM-x32\...\360 Internet Security) (Version: 4.9.0.4900 - Qihu 360 Software Co., Ltd.) 64 Bit HP CIO Components Installer (Version: 6.2.2 - Hewlett-Packard) Hidden Acer Arcade Deluxe (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 4.0.7615 - CyberLink Corp.) Acer Arcade Deluxe (x32 Version: 4.0.7615 - CyberLink Corp.) Hidden Acer Arcade Movie (x32 Version: 9.0.6423 - CyberLink Corp.) Hidden Acer Backup Manager (HKLM-x32\...\InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}) (Version: 2.0.0.63 - NewTech Infosystems) Acer Crystal Eye webcam (HKLM-x32\...\{51F026FA-5146-4232-A8BA-1364740BD053}) (Version: 1.0.3.5 - Liteon) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated) Acer GameZone Console (HKLM-x32\...\{58F4D244-314F-4D26-B5EF-C28AB32E22CB}_is1) (Version: 6.1.0.9 - Oberon Media, Inc.) Acer PowerSmart Manager (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.02.3004 - Acer Incorporated) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0222.2010 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3001 - Acer Incorporated) Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.8.0.870 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 3.8.0.870 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated) Adobe Reader X (10.1.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.11 - Adobe Systems Incorporated) Alcor Micro USB Card Reader (HKLM-x32\...\InstallShield_{5A22D889-FBDD-4AE8-86EC-089D45FC133E}) (Version: 1.2.17.05001 - Alcor Micro Corp.) Alcor Micro USB Card Reader (x32 Version: 1.2.17.05001 - Alcor Micro Corp.) Hidden Amazon Cloud Player (HKCU\...\Amazon Amazon Cloud Player) (Version: 2.3.0.422 - Amazon Services LLC) Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.23 - Atheros Communications Inc.) ATI Catalyst Install Manager (HKLM\...\{F5816A09-786E-C91D-3D99-8A8C92648750}) (Version: 3.0.765.0 - ATI Technologies, Inc.) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) Backup Manager Basic (x32 Version: 2.0.0.63 - NewTech Infosystems) Hidden Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: - ) Canon MP Navigator EX 3.0 (HKLM-x32\...\MP Navigator EX 3.0) (Version: - ) Canon MP270 series Benutzerregistrierung (HKLM-x32\...\Canon MP270 series Benutzerregistrierung) (Version: - ) Canon MP270 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP270_series) (Version: - ) Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: - ) Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version: - ) Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version: - ) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0421.657.10561 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0421.657.10561 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0421.657.10561 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help English (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help French (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help German (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0421.0656.10561 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0421.0656.10561 - ATI) Hidden ccc-core-static (x32 Version: 2010.0421.657.10561 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0421.657.10561 - ATI) Hidden Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dropbox (HKCU\...\Dropbox) (Version: 2.10.28 - Dropbox, Inc.) eSobi v2 (HKLM-x32\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden Eufloria (HKLM-x32\...\Steam App 41210) (Version: - ) Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden Half-Life (HKLM-x32\...\Steam App 70) (Version: - Valve) Half-Life 2 (HKLM-x32\...\Steam App 220) (Version: - Valve) Half-Life 2: Lost Coast (HKLM-x32\...\Steam App 340) (Version: - Valve) Harry Potter TM (HKLM-x32\...\{3F50AF3B-8997-4916-0095-99D63DDB785A}) (Version: - ) HP Photosmart Wireless B110 All-In-One Driver 14.0 Rel. 7 (HKLM\...\{014E482A-0C27-47E3-BA82-307E9DCA2F47}) (Version: 14.0 - HP) Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.00.01.1002 - Intel Corporation) Java 7 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417025F0}) (Version: 7.0.250 - Oracle) Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle) Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle) Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle) Java(TM) 6 Update 29 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216027FF}) (Version: 6.0.290 - Oracle) Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.7 - Acer Inc.) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) MathPlayer (HKLM-x32\...\{32F66A20-7614-11D4-BD11-00104BD3F987}) (Version: 2.2 - Design Science, Inc.) MediaShow Espresso (x32 Version: 5.5.1403_23691 - CyberLink Corp.) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Home and Student 2007 (HKLM-x32\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation) Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office on Demand-Browser-Add-Ons (HKCU\...\Microsoft Office on Demand-Browser-Add-Ons) (Version: 15.0.4551.1512 - Microsoft Corporation) Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation) Microsoft-Maus- und Tastatur-Center (Version: 1.1.500.0 - Microsoft Corporation) Hidden Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.0.0 - Electronic Arts) Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.212.0 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden Network64 (Version: 140.0.212.000 - Hewlett-Packard) Hidden Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) NTI Backup Now 5 (HKLM-x32\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.630 - NewTech Infosystems) NTI Backup Now Standard (x32 Version: 5.1.2.630 - NewTech Infosystems) Hidden NTI Media Maker 8 (HKLM-x32\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6636 - NewTech Infosystems) NTI Media Maker 8 (x32 Version: 8.0.12.6636 - NewTech Infosystems) Hidden NVIDIA PhysX v8.10.17 (HKLM-x32\...\{E4D15328-8C89-484B-B9AA-F5BE9EA6D01C}) (Version: 8.10.17 - NVIDIA Corporation) Optical Drive Power Management (HKLM-x32\...\{AE09C972-EEB2-4DA5-8090-0FCF54576854}) (Version: 1.01.3007 - Acer Incorporated) Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Portal (HKLM-x32\...\Steam App 400) (Version: - Valve) Portal 2 (HKLM-x32\...\Steam App 620) (Version: - Valve) PS_AIO_07_B110_SW_Min (x32 Version: 140.0.142.000 - Hewlett-Packard) Hidden PTC ProductView Express - Wildfire 2.0 (M270) (HKLM-x32\...\{26B52E64-21C0-4834-8B57-D7B0D5BCB518}) (Version: 2.1.725.0 - PTC) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden R for Windows 3.0.2 (HKLM\...\R for Windows 3.0.2_is1) (Version: 3.0.2 - R Core Team) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6096 - Realtek Semiconductor Corp.) RStudio (HKLM-x32\...\RStudio) (Version: 0.97.551 - RStudio) Runaway, The Dream of the Turtle Demo (HKLM-x32\...\Steam App 7230) (Version: - Pendulo Studios) Scan (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.) Spotify (HKCU\...\Spotify) (Version: 0.9.12.10.g89b2a4fc - Spotify AB) Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.6.0 - Synaptics Incorporated) Time Gentlemen, Please! - Demo (HKLM-x32\...\Steam App 37410) (Version: - Zombie Cow) Toolbox (x32 Version: 140.0.424.000 - Hewlett-Packard) Hidden Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2473228) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft) Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft) Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version: - Microsoft) Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version: - Microsoft) Update für Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.4053 (x32 Version: 1.1.0 - DivX, Inc) Hidden Vensim PLE (HKLM-x32\...\Vensim PLE) (Version: - ) VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN) Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3002 - Acer Incorporated) WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.4300 - Broadcom Corporation) Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Family Safety (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/01/2013 1.0.0.0) (HKLM\...\40A0325FAA3CCB4A2619424F1F22496EB01767A3) (Version: 01/01/2013 1.0.0.0 - Arduino LLC (www.arduino.cc)) World of Goo (HKLM-x32\...\Steam App 22000) (Version: - 2D Boy) ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{225F8CFE-1B76-48E6-8E75-62CC471AFA28}\InprocServer32 -> C:\Users\Asja\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\RoamingOfficeActiveX.64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Asja\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2358443310-1148957609-1059146875-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Asja\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File ==================== Restore Points ========================= 06-09-2014 01:03:20 Windows Update 09-09-2014 10:48:44 Windows Update 11-09-2014 07:17:49 Windows Update ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-09-12 11:42 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {0125C851-099F-4070-B7A8-343DDE94D92C} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {32CE31F6-CF9C-4FD4-A92F-46D6E2129610} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {5CE1376D-80A6-4D56-9537-D84026334616} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft) Task: {6241BCC4-A95E-449F-B28B-B60C51CE55D5} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2358443310-1148957609-1059146875-1001 Task: {7A9E966C-492D-4BF3-AD60-A74586F690A2} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation) Task: {7FAEF226-0770-49D2-8936-0860B1D61AB0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {8372AFBF-C806-4F29-8B26-6BF9381EF4C0} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation) Task: {9A6D82DC-4D83-43D8-8B53-578FF75195F0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated) Task: {BE812FAD-5649-4FAD-8441-FF96A81EC193} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {BEC7D25E-5E50-4EA6-A13E-F42693D023B9} - System32\Tasks\Amazon Music Helper => C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe [2014-01-14] () Task: {C2B95837-77FB-4E3B-8404-EAE26B349329} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-19] (Google Inc.) Task: {C822F4C5-D083-4F88-81F3-EA8FE427235E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2358443310-1148957609-1059146875-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe Task: {E5F569DB-2AAE-4BEC-8043-8D16C3916228} - System32\Tasks\{33C71A51-2E88-4C96-8938-A85CF2E5C06B} => Chrome.exe hxxp://www.skype.com/go/downloading?source=installer&ver=6.0.0.126&LastError=-9 Task: {F85B149D-BB0C-42B3-9698-D55B0120AE06} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001Core.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2358443310-1148957609-1059146875-1001UA.job => C:\Users\Asja\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2013-01-08 18:28 - 2009-02-10 18:01 - 00116104 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE 2013-12-21 18:22 - 2014-01-14 21:46 - 03140608 _____ () C:\Users\Asja\AppData\Local\Amazon Cloud Player\Amazon Music Helper.exe 2011-04-29 20:08 - 2011-04-29 20:08 - 00075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2010-09-14 17:41 - 2010-02-03 10:37 - 00244904 ____N () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe 2010-03-26 10:41 - 2010-03-26 10:41 - 00016384 ____R () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2010-09-14 17:17 - 2010-09-14 17:17 - 00270336 _____ () C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CrossDisplay.Graphics.Dashboard\1.0.0.0__90ba9c70f846762e\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2010-03-23 14:26 - 2010-03-23 14:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll 2010-05-25 02:16 - 2010-05-25 02:16 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2010-05-25 02:09 - 2010-05-25 02:09 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2014-09-14 11:11 - 2014-09-14 11:11 - 00043008 _____ () c:\users\asja\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp0xwsu1.dll 2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Asja\AppData\Roaming\Dropbox\bin\libcef.dll 2010-07-02 14:00 - 2009-05-20 08:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll 2013-01-12 15:14 - 2013-01-12 15:14 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll 2010-07-02 13:24 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2005-09-21 04:57 - 2005-09-21 04:57 - 04325376 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\qt-mt335.dll 2014-09-11 14:45 - 2014-09-04 05:01 - 01098056 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.120\libglesv2.dll 2014-09-11 14:45 - 2014-09-04 05:01 - 00174408 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.120\libegl.dll 2014-09-11 14:45 - 2014-09-04 05:01 - 08577864 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.120\pdf.dll 2014-09-11 14:45 - 2014-09-04 05:01 - 00331592 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.120\ppGoogleNaClPluginChrome.dll 2014-09-11 14:45 - 2014-09-04 05:01 - 01660232 _____ () C:\Users\Asja\AppData\Local\Google\Chrome\Application\37.0.2062.120\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) ==================== Faulty Device Manager Devices ============= Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f} Manufacturer: HP Service: StillCam Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (09/14/2014 07:55:05 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (09/14/2014 07:09:49 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm chrome.exe, Version 37.0.2062.120 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 13e4 Startzeit: 01cfcffc79dcd9ea Endzeit: 39 Anwendungspfad: C:\Users\Asja\AppData\Local\Google\Chrome\Application\chrome.exe Berichts-ID: e94ce784-3c31-11e4-8512-d809bc56b0d6 Error: (09/14/2014 04:24:52 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (09/14/2014 04:24:49 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (09/14/2014 04:21:17 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (09/14/2014 04:21:11 PM) (Source: SideBySide) (EventID: 80) (User: ) Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest3. Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_fa62ad231704eab7.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd.manifest. Error: (09/14/2014 09:43:50 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm 360sd.exe, Version 4.9.0.4901 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 10f8 Startzeit: 01cfcf42d0f18323 Endzeit: 104 Anwendungspfad: C:\Program Files\360\360 Internet Security\360sd.exe Berichts-ID: d7eaebcc-3be2-11e4-9d17-babb289809d5 System errors: ============= Error: (09/14/2014 06:47:26 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht. Error: (09/14/2014 05:21:18 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst ShellHWDetection erreicht. Error: (09/14/2014 11:14:36 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Der Dienst "HP Network Devices Support" wurde nicht richtig gestartet. Error: (09/14/2014 11:10:53 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (09/14/2014 09:46:30 AM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Microsoft Office Sessions: ========================= Error: (03/29/2011 11:20:32 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: ) Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 2792 seconds with 840 seconds of active time. This session ended with a crash. CodeIntegrity Errors: =================================== Date: 2014-09-12 11:31:07.992 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-09-12 11:31:07.789 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-09-04 11:58:59.422 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:08:43.308 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-08-24 13:03:42.866 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:06:29.851 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:02:34.876 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:47.033 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.780 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. Date: 2014-07-08 21:01:46.230 Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\dsound.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz Percentage of memory in use: 62% Total physical RAM: 3766.69 MB Available physical RAM: 1425.14 MB Total Pagefile: 7531.51 MB Available Pagefile: 4633.98 MB Total Virtual: 8192 MB Available Virtual: 8191.84 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:321.74 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 545C63FA) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452.7 GB) - (Type=07 NTFS) ==================== End Of Log ============================ Nochmals vielen vielen Dank für die Hilfe!!! Liebe Grüße |
15.09.2014, 12:49 | #14 |
/// the machine /// TB-Ausbilder | Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Java und Adobe udpaten. Windows updaten, da fehlt ein ganzes Servicepack!!
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.09.2014, 11:12 | #15 |
| Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert Java und Adobe habe ich aktualisiert, aber wenn ich unter Systemsteuerung -> Windows update gehe, dann wird mir angezeigt, dass keine wichtigen Updates zur Verfügung stehen. Nur ein optionales Update für Windows Live Essentials. Liebe Grüße |
Themen zu Avira Free Antivirus - Dieses Programm wurde durch eine Gruppenrichtline blockiert |
andere, anderen, angezeigt, angriffe, antivirus, avira, avira blockiert, blockiert, datei, deinstalliere, fehlermeldung, free, große, gruppenrichtline, gruppenrichtlinie, gruppenrichtlinie blockiert, interne, internet, nicht mehr, nichts, phishing, problem, programm, quarantäne, security, sofort, versucht, öffnen |