Schadsoftware auf Windows Vista verursacht Bluescreen ?

ITSecurity14 · 18.09.2014, 12:14

Zitat:

Zitat von Warlord711

AdwCleaner

Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Akzeptiere die Nutzungsbedingungen.
Klicke auf Suchen und warte, bis der Suchlauf abgeschlossen ist.
Klicke nun auf Löschen.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Sx].txt. (x = fortlaufende Nummer).

Es gibt Probeme mit AdwCleaner.

Nachdem der Suchvorgang abgeschlossen wurde und ich auf den "Löschen"-Butteon clickte, ist nach kurzer Zeit das Programm "eingefroren". D.h. Der "Lösche Ordner"-Vorgang ist stehengeblieben. - Und es taucht wider "Keine Rückmeldung" im Header des Programms auf.

Das erste Suchergebnis ist im nächsten Posting als Anhang zu finden, ist die Zeichenanzahl der TXT-Datei zu gross.

Im Windows Task-Manager belastet das Programm AdwCleaner_3.310.exe die CPU weiterhin.

Siehe dazu Screenshot im Anhang... was tun ?

ITSecurity14 · 18.09.2014, 12:48

Zitat:

Zitat von ITSecurity14

Es gibt Probeme mit AdwCleaner.
Das erste Suchergebnis ist im nächsten Posting als Anhang zu finden, ist die Zeichenanzahl der TXT-Datei zu gross.

Erstes Suchergebnis... vollständig siehe Anhang

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 18/09/2014 um 12:27:09
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : ***
# Gestartet von : C:\Users\***\Desktop\AdwCleaner_3.310.exe
# Option : Suchen

vollständige TXT-Datei im gezippten Anhang.

Abgebrochener Löschvorang

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 18/09/2014 um 12:36:08
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : ***
# Gestartet von : C:\Users\***\Desktop\AdwCleaner_3.310.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\ICQ\ICQToolbar
Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
Ordner Gelöscht : C:\Program Files\BabylonToolbar
Ordner Gelöscht : C:\Program Files\Browser
Ordner Gelöscht : C:\Program Files\HyperCam Toolbar
Ordner Gelöscht : C:\Program Files\iMesh Applications
Ordner Gelöscht : C:\Program Files\NCH Software
Ordner Gelöscht : C:\Program Files\Common Files\Tobit
Ordner Gelöscht : C:\Users\Edition Group\AppData\Local\Winamp Toolbar
Ordner Gelöscht : C:\Users\Edition Group\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Edition Group\AppData\LocalLow\ConduitEngine
Ordner Gelöscht : C:\Users\Edition Group\AppData\LocalLow\Toolbar4
Ordner Gelöscht : C:\Users\Tech-Admin\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Tech-Admin\AppData\Local\eSupport.com
Ordner Gelöscht : C:\Users\Tech-Admin\AppData\Local\iMesh
Ordner Gelöscht : C:\Users\Tech-Admin\AppData\Local\SwvUpdater

Warlord711 · 18.09.2014, 13:08

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Versuch dann nochmal AdwCleaner. Antivirensoftware vorher ausschalten/ Echtzeitschutz deaktivieren.

ITSecurity14 · 18.09.2014, 13:21

Zitat:

Zitat von ITSecurity14

AdwCleaner...

Mit dem zweiten Versuch hat AdwCleaner den Löschvorgang vollständig abgearbeitet... das Ergebnis im Anhang, ist das Logfile mit 143732 Zeichen zu lang (max. Länge erlaubt: 120000 Zeichen).

Code:

ATTFilter

# AdwCleaner v3.310 - Bericht erstellt am 18/09/2014 um 13:50:37
# Aktualisiert 12/09/2014 von Xplode
# Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
# Benutzername : ***
# Gestartet von : C:\Users\***\Desktop\AdwCleaner_3.310.exe
# Option : Löschen

vollständige Datei siehe gezippte TXT im Anhang

ITSecurity14 · 18.09.2014, 14:33

Zitat:

Zitat von Warlord711

Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Hier das Ergebnis der JRT.txt...

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.6 (09.18.2014:1)
OS: Windows Vista (TM) Home Premium x86
Ran by Tech-Admin on 18.09.2014 at 14:29:52,09
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\foxydeal
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{1B6DFA99-430B-42D9-AB94-28F1CBC33C01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303}



~~~ Files

Successfully deleted: [File] "C:\Windows\System32\Tasks\scheduled update for ask toolbar"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Tech-Admin\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Users\Tech-Admin\AppData\Roaming\imeshmediabartb"
Successfully deleted: [Folder] "C:\Users\Tech-Admin\appdata\locallow\imeshmediabartb"
Successfully deleted: [Folder] "C:\Users\Tech-Admin\appdata\locallow\oovoo_chat"
Successfully deleted: [Folder] "C:\Program Files\myfree codec"
Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"



~~~ FireFox

Successfully deleted the following from C:\Users\Tech-Admin\AppData\Roaming\mozilla\firefox\profiles\rouc6goq.default\prefs.js

user_pref("browser.audioFeeds.handlers.application", "C:\\Program Files\\MultiMedia\\iTunes\\V902\\iTunes.exe");
user_pref("shoutcast_toolbar.search.searchtype", "web");
user_pref("yahoo.ytffp.installer.u", "u4id80jcu66q1ovis2e6d5igrezv9ubc");
Successfully deleted the following from C:\Users\Tech-Admin\AppData\Roaming\mozilla\firefox\profiles\9phdwh3i.Default Vista User\prefs.js

user_pref("browser.audioFeeds.handlers.application", "C:\\Program Files\\MultiMedia\\iTunes\\V902\\iTunes.exe");
user_pref("extensions.a126c9ec1e913410f94df6262dd70e04494392a4bd7bd45638bcdba96cf8055b2com29481.29481.internaldb.Resources_resource_155230.value", "%22/**%20todo%3A%20clean%20
user_pref("extensions.toolbar@ask.com.install-event-fired", true);
user_pref("shoutcast_toolbar.search.searchtype", "web");
user_pref("somoto.Var1", "0");
user_pref("somoto.Var10", "0");
user_pref("somoto.Var2", "0");
user_pref("somoto.Var3", "0");
user_pref("somoto.Var4", "0");
user_pref("somoto.Var5", "0");
user_pref("somoto.Var6", "0");
user_pref("somoto.Var7", "0");
user_pref("somoto.Var8", "0");
user_pref("somoto.Var9", "0");
user_pref("somoto.cache.aff_toolbar_settings_xml", "33/19/15/8/114");
user_pref("somoto.cache.feed_xml_0oa3ef8sfae8373e6711fe8fd63kr865", "34/19/15/8/114");
user_pref("somoto.cache.feed_xml_a47a0633kkff8eee8ar5e35d3f1k6f86", "33/19/15/8/114");
user_pref("somoto.cache.feed_xml_d630o373e8sfae876a3efkr811fe8f65", "33/19/15/8/114");
user_pref("somoto.cache.weather_gae", "34/19/15/8/114");
user_pref("somoto.firstlaunch", "0");
user_pref("somoto.guid", "%7B6D52C944-FE88-703C-A4A3-D3E6D9D7E2BC%7D");
user_pref("somoto.old_dnscatch", "chrome://browser-region/locale/region.properties");
user_pref("somoto.old_homepage", "hxxp://news.google.com/");
user_pref("somoto.popupblockedcnt", "335");
user_pref("yahoo.ytffp.installer.u", "u4id80jcu66q1ovis2e6d5igrezv9ubc");
Emptied folder: C:\Users\Tech-Admin\AppData\Roaming\mozilla\firefox\profiles\9phdwh3i.Default Vista User\minidumps [83 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.09.2014 at 15:01:07,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Zitat:

Zitat von Warlord711

Toolbar-Sammler ?

Starte noch einmal FRST.
Ändere keine der Voreinstellungen und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

Hier die Logdatei (FRST.txt) nach AdwCleaner und Junkware Removal Tool...

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Tech-Admin (administrator) on EUFLETZ-MOBILE on 18-09-2014 15:07:30
Running from C:\Users\Tech-Admin\Desktop
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\stacsv.exe
(Logitech Inc.) C:\Program Files\Common Files\Logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
() C:\Program Files\WebDav\BitKinex\bitkinexsvc.exe
() C:\Program Files\Bonkey\wrapper.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(Oracle Corporation) C:\Windows\System32\java.exe
() C:\Program Files\Security\GNU\GnuPG\dirmngr.exe
() C:\Program Files\Streaming\Icecast2\Win32\V232\icecastService.exe
( ) C:\Windows\System32\lxeecoms.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(EMC Corporation) C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Windows\System32\ieconfig_1und1_svc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Bisswanger Software) C:\Program Files\Admin\SMTPAuth\V201\Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Bitvise) C:\Program Files\SSH\Bitvise\WinSSHD\WinSSHD.exe
() C:\Program Files\Backup\Zmanda\WinCommunity\V31\MySQL\bin\mysqld.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(RealNetworks, Inc.) C:\Program Files\Real\realplayer\Update\realsched.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Google Inc.) C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe
(AMD) C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
() C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe
() C:\Program Files\MultiMonitor\Taskbar\V21\MultiMon.exe
() C:\Users\Tech-Admin\CLCL\CLCL.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Program Files\Backup\Zmanda\WinCommunity\V31\bin\ZWCService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Malwarebytes Corporation) C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbamservice.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(SpiderOak) C:\Program Files\SpiderOak\SpiderOak.exe
(SpiderOak) C:\Program Files\SpiderOak\SpiderOak.exe
() C:\Program Files\SpiderOak\windows_dir_watcher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-06-03] (Google)
HKLM\...\Run: [Malwarebytes' Anti-Malware] => C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbamgui.exe [443728 2010-12-20] (Malwarebytes Corporation)
HKLM\...\Run: [lxeemon.exe] => C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2010-05-17] ()
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-06-29] (IDT, Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\realplayer\update\realsched.exe [295072 2013-01-26] (RealNetworks, Inc.)
HKLM\...\Run: [Malwarebytes' Anti-Malware (reboot)] => C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbam.exe [963976 2010-12-20] (Malwarebytes Corporation)
Winlogon\Notify\GoToAssist: C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\.DEFAULT\...\Run: [MySpaceIM] => C:\Program Files\MySpace\IM\MySpaceIM.exe [9555968 2008-12-12] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [uTorrent] => C:\Users\Tech-Admin\AppData\Roaming\uTorrent\uTorrent.exe [1268816 2014-04-09] (BitTorrent Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [googletalk] => C:\Users\amandabackup\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
AppInit_DLLs: profiles\all users\application oepl.dll => profiles\all users\application oepl.dll File Not Found
AppInit_DLLs:  "C:\PROGRA~1\Google\Google Desktop => C:\PROGRA~1\Google\Google Desktop File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MultiMon Taskbar.lnk
ShortcutTarget: MultiMon Taskbar.lnk -> C:\Program Files\MultiMonitor\Taskbar\V21\MultiMon.exe ()
Startup: C:\Users\amandabackup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Edition Group\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Indian E-music\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CLCL.lnk
ShortcutTarget: CLCL.lnk -> C:\Users\Tech-Admin\CLCL\CLCL.exe ()
Startup: C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: SpiderOakOverlay -> {6E1010DC-3571-45DE-9CA2-C5890119BBBE} => C:\Program Files\SpiderOak\shell_extension.dll (SpiderOak)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.1und1.de/links/home
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://eis.esnips.com/page/search/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d
SearchScopes: HKCU - {080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC} URL = hxxp://searchservice.myspace.com/index.cfm?fuseaction=sitesearch.results&qry={searchTerms}&type=Web&orig=IMC-IE
SearchScopes: HKCU - {25477387-2310-45df-933D-E9416D3D0303} URL = hxxp://eis.esnips.com/page/search_provider/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d&q={searchTerms}
SearchScopes: HKCU - {2FAFE781-F201-4552-9DD7-5C2D35091047} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {53876F1A-07C9-4584-98EE-D87F3036DF37} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
SearchScopes: HKCU - {BAE62BB2-C2DF-4F7E-936D-A2390907D653} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {C4E24D76-F674-4E96-9C52-6A2585EF14CF} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
BHO: Lexmark Toolbar -> {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -> C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: FGCatchUrl -> {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} -> C:\Program Files\FlashGet\Version17\jccatch_1.dll (www.flashget.com)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\P-2-P\BitComet\V113\tools\BitCometBHO_1.3.3.2.dll (BitComet)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: NXIECatcher Class -> {83B80A9C-D91A-4F22-8DCF-EA7204039F79} -> C:\Program Files\MultiMedia\NetXfer\NXIEHelper.dll (Xi)
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\D\Skype Portable\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO: eSnipsBHO Class -> {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} -> C:\Program Files\Logia\eSnipsDownloader\eSnipsBHO.dll (Logia Media)
BHO: Lexmark Printable Web -> {D2C5E510-BE6D-42CC-9F61-E4F939078474} -> C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO: 1&&1 Internet AG Browser Configuration by mquadr.at -> {D48FF4B4-E68F-47D1-8E25-81A0F0EEB341} -> C:\Windows\System32\ieconfig_1und1.dll (mquadr.at software engineering und consulting GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SavvyConnect IE Extension -> {E6C6EC35-C04A-42CD-A3A7-4F09FB0F1B76} -> C:\Program Files\Luth Research\SavvyConnectFramework\bin\ieplugin\LuthIEPlugin.dll (Luth Research, LLC)
BHO: FlashGet GetFlash Class -> {F156768E-81EF-470C-9057-481BA8380DBA} -> C:\Program Files\FlashGet\Version17\getflash.dll (www.flashget.com)
Toolbar: HKLM - Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\MultiMedia\NetXfer\NXToolBar.dll (Xi)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
Handler: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files\LizardTech\Express View\expressview.dll (Lizardtech Software)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files\LizardTech\Express View\expressview.dll (Lizardtech Software)
Handler: skyline - {3a4f9195-65a8-11d5-85c1-0001023952c1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\D\Skype Portable\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User
FF NewTab: hxxp://www.google.com
FF DefaultSearchEngine: Google (Web)
FF SearchEngineOrder.1: eSnips Search
FF SelectedSearchEngine: Google (Web)
FF Homepage: hxxp://www.google.com
FF NetworkProxy: "backup.ftp", "119.32.24.214"
FF NetworkProxy: "backup.ftp_port", 8000
FF NetworkProxy: "backup.gopher", "119.32.24.214"
FF NetworkProxy: "backup.gopher_port", 8000
FF NetworkProxy: "backup.socks", "119.32.24.214"
FF NetworkProxy: "backup.socks_port", 8000
FF NetworkProxy: "backup.ssl", "119.32.24.214"
FF NetworkProxy: "backup.ssl_port", 8000
FF NetworkProxy: "ftp", "167.206.203.10"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "gopher", "167.206.203.10"
FF NetworkProxy: "gopher_port", 8080
FF NetworkProxy: "http", "167.206.203.10"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "167.206.203.10"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "167.206.203.10"
FF NetworkProxy: "ssl_port", 8080
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\MultiMedia\iTunes\V902\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Multimedia\Picasa\V3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.0.282 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.0.282 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\V208\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\V208\npvlc.dll (VideoLAN)
FF Plugin HKCU: @phonostar.de/phonostar -> C:\Program Files\Radio\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Tech-Admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Tech-Admin\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\libdivx.dll (The OpenSSL Project, hxxp://www.openssl.org/)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdivx32.dll (DivX,Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdjvu.dll (LizardTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npexview.dll (Lizardtech Software)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ssldivx.dll (The OpenSSL Project, hxxp://www.openssl.org/)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\facebook-profile.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-books.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-news-india.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-web.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\lastfm.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\leo-deu-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\leo-dictionary-de-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\web-search-powered-by-google.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\welt-online-suche.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\wikipedia-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\answers.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\cuil.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\technorati.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\wikipedia_en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\yahoo-de.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\yahoo-en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\facebook-profile.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-books.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-news-india.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-web.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\lastfm.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\leo-deu-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\leo-dictionary-de-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\web-search-powered-by-google.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\welt-online-suche.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\wikipedia-eng.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\esnips.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: Mein Gutscheincode - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2013-07-28]
FF Extension: Add to Search Bar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\add-to-searchbox@maltekraus.de [2010-12-19]
FF Extension: bit.ly preview - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\bitlypreview@jay.ridgeway [2010-01-16]
FF Extension: meebo - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\firefox@meebo.com [2009-06-30]
FF Extension: Google Wave Add-on for Firefox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\google-wave@chad.smith [2010-07-26]
FF Extension: NewTabURL - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\newtaburl@sogame.cat [2011-03-18]
FF Extension: Zorap Plugin - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\npzorap@zorap.com [2009-09-28]
FF Extension: Share Video - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\savevideo@vodpod.com [2010-04-13]
FF Extension: snipi - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\snipi@snipi.com [2010-01-27]
FF Extension: VideoDownloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\videodowloader@videodownloader.net [2009-06-30]
FF Extension: Zotero - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\zotero@chnm.gmu.edu [2011-06-15]
FF Extension: SHOUTcast Radio Toolbar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2009-07-19]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]
FF Extension: Elasticfox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{2204c510-88f3-11db-b606-0800200c9a66} [2010-08-22]
FF Extension: MediaBar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{28D35620-51D9-11DE-9D13-2DB156D89593} [2010-05-09]
FF Extension: AddThis - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2011-02-04]
FF Extension: FEBE - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2010-07-12]
FF Extension: ArchiveFacebook - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2011-06-16]
FF Extension: ChatZilla - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2011-06-01]
FF Extension: Picnik - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{5b1fdac4-a239-4933-9c52-b65a2a720b75} [2011-05-04]
FF Extension: BitComet Video Downloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-07-24]
FF Extension: FoxClocks - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2011-03-26]
FF Extension: Fox!Box - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8} [2011-01-08]
FF Extension: FoxyDeal - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-28]
FF Extension: Add to Amazon Wish List Button - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\amznUWL2@amazon.com.xpi [2011-05-21]
FF Extension: Snip It! Button for eBay - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722}.xpi [2011-05-29]
FF Extension: DownThemAll! - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-11]
FF Extension: Greasemonkey - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2011-05-12]
FF Extension: Mein Gutscheincode - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2013-07-28]
FF Extension: CS Lite - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{00084897-021a-4361-8423-083407a033e0} [2010-05-20]
FF Extension: JonDoFox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593} [2010-05-20]
FF Extension: NoScript - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010-05-20]
FF Extension: DownloadHelper - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-05-20]
FF Extension: Adblock Plus - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-05-20]
FF Extension: ProfileSwitcher - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4} [2010-05-20]
FF Extension: Mein Gutscheincode - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2014-07-26]
FF Extension: bit.ly preview - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\bitlypreview@jay.ridgeway [2010-01-16]
FF Extension: Social Anywhere - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\crossriderapp519@crossrider.com [2014-07-26]
FF Extension: meebo - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firefox@meebo.com [2009-06-30]
FF Extension: Google Wave Add-on for Firefox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\google-wave@chad.smith [2010-07-26]
FF Extension: Zorap Plugin - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\npzorap@zorap.com [2009-09-28]
FF Extension: Share Video - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\savevideo@vodpod.com [2010-04-13]
FF Extension: snipi - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\snipi@snipi.com [2010-01-27]
FF Extension: VideoDownloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\videodowloader@videodownloader.net [2009-06-30]
FF Extension: SHOUTcast Radio Toolbar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2009-07-19]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]
FF Extension: Elasticfox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{2204c510-88f3-11db-b606-0800200c9a66} [2010-08-22]
FF Extension: MediaBar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{28D35620-51D9-11DE-9D13-2DB156D89593} [2010-05-09]
FF Extension: AddThis - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2012-08-27]
FF Extension: FEBE - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-06-22]
FF Extension: ArchiveFacebook - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2012-02-18]
FF Extension: ChatZilla - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2013-07-19]
FF Extension: Picnik - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{5b1fdac4-a239-4933-9c52-b65a2a720b75} [2011-05-04]
FF Extension: Snip It! Button for eBay - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2012-08-29]
FF Extension: BitComet Video Downloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-07-24]
FF Extension: Flash and Video Download - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-08-21]
FF Extension: FoxClocks - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2014-01-29]
FF Extension: Add to Search Bar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\add-to-searchbox@maltekraus.de.xpi [2013-11-14]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\amznUWL2@amazon.com.xpi [2011-05-21]
FF Extension: Firebug - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firebug@software.joehewitt.com.xpi [2012-08-09]
FF Extension: Zemanta - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firefox@zemanta.com.xpi [2014-01-06]
FF Extension: Link Sgf Viewer - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\linksgfviewer@netdexign.ro.xpi [2014-07-07]
FF Extension: NewTabURL - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\newtaburl@sogame.cat.xpi [2011-08-19]
FF Extension: Zotero - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\zotero@chnm.gmu.edu.xpi [2013-04-03]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2012-09-23]
FF Extension: DownThemAll! - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-11]
FF Extension: Fox!Box - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi [2013-11-19]
FF Extension: Greasemonkey - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-25]
FF Extension: Toolbar fuer eBay - C:\Program Files\Mozilla Firefox\extensions\{000E148C-F7A7-445A-9044-93BF6CE09ECB} [2012-06-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-06-30]
FF HKLM\...\Firefox\Extensions: [esnipsxpi@logia.esnips] - C:\Program Files\Logia\eSnipsDownloader\ext
FF Extension: eSnips Downloader Extension - C:\Program Files\Logia\eSnipsDownloader\ext [2010-06-08]
FF HKLM\...\Firefox\Extensions: [{5FE7198A-5950-4068-9FBF-1A60395CC4E9}] - C:\Program Files\Internet Telephony\1und1-Smartphone\Firefox
FF Extension: 1&amp;1 SoftPhone - C:\Program Files\Internet Telephony\1und1-Smartphone\Firefox [2009-12-01]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-26]
FF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] - 
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [Not Found]

Chrome: 
=======
CHR CustomProfile: C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan [2013-07-28]
CHR Extension: (Download with DownloadAll) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajffocjdcmpgjmdfdfkdfdbkjafbkcke [2014-06-05]
CHR Extension: (Google Drive) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-10-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-26]
CHR Extension: (Web2PDFConverter) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkanhckocooacphbnclgcndnpfpoppdk [2012-06-29]
CHR Extension: (YouTube) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20]
CHR Extension: (Eidogo) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\chgomcdkpjhhcbobbificlbdnkoaigcg [2014-07-07]
CHR Extension: (Add to Amazon Wish List) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2012-03-28]
CHR Extension: (No Name) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel [2012-03-17]
CHR Extension: (Google Search) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20]
CHR Extension: (Facebook Invite All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eibdjcmcmfggjoiaaoojhicjnkghbkbe [2010-10-19]
CHR Extension: (Related Content by Zemanta) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fejeknoakjeblidffkajbioncodnmhge [2012-07-05]
CHR Extension: (No Name) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiomkimgbpmhibpejnghmmoedaijgdda [2013-07-28]
CHR Extension: (Avira Browser Safety) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2013-12-21]
CHR Extension: (AdBlock) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (PageSpeed Insights (by Google)) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplegfbjlmmehdoakndmohflojccocli [2014-07-24]
CHR Extension: (Picnik Extension for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcifofgaphfkfdcjbdogpamghiihilkl [2011-01-19]
CHR Extension: (Disconnect Search) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmobfennjmjnkdbklhcnnfbhfibedgkk [2013-10-08]
CHR Extension: (Select All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpdbgoknchagchgbgaihbnebmgbdlgfj [2013-05-16]
CHR Extension: (goo.gl URL Shortener) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\iblijlcdoidgdpfknkckljiocdbnlagk [2013-10-21]
CHR Extension: (RealDownloader) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-01-26]
CHR Extension: (Move Your Photos) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\idiebfmmkhaffedkhjhapmagabcadjhc [2012-03-17]
CHR Extension: (Spell Checker for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfpdnkkdgghlpdgldicfgnnnkhdfhocg [2014-06-26]
CHR Extension: (Snip it! button for eBay) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhaoojkpcgaobmnnphdpdokcgdiibblh [2011-05-29]
CHR Extension: (Facebook Invite Them All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jladghljinmlokelojmdmblikkifabea [2013-05-16]
CHR Extension: (Add Facebook Events to Google Calendar™) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdcimpbhnilcgolicdnepifecokinjof [2012-03-17]
CHR Extension: (JDownloader Integration for Google Chrome™) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\laeghehalempfenbefbjbhccjcoakpmm [2014-01-20]
CHR Extension: (SocialBa! ( Publish Sync )) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbnldfdnnhniifjjiakifofhdjangplj [2012-12-23]
CHR Extension: (Capture Webpage Screenshot - FireShot) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2012-09-21]
CHR Extension: (Google Mail Checker) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2012-03-17]
CHR Extension: (FastestFox for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-07-28]
CHR Extension: (Bit.ly Shortener for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\negjghjbfgfmdjpolclpmmjmfeejolld [2012-03-17]
CHR Extension: (Google Wallet) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Extended Share for Google Plus) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oenpjldbckebacipkfbcoppmiflglnib [2012-01-10]
CHR Extension: (Select All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofcnbnhefnmjancehemliplicihbcjjb [2012-05-16]
CHR Extension: (Go Diagram player for 'Life in 19x19') - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogoehegcnmkkpmmpkaejijighfokncdk [2014-06-19]
CHR Extension: (Google Reader) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-09]
CHR Extension: (Gmail) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-20]
CHR Extension: (Avira SafeSearch) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plgjnighgeebiaalpbkmcbbiihegpbbp [2014-08-04]
CHR Extension: (WordPress.com Extension) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnbbfhcegldppmibabepjfjloachnmjb [2012-01-28]
CHR CustomProfile: C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Babylon Chrome OCR) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [2012-06-06]
CHR Extension: (DealPly) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gaiilaahiahdejapggenmdmafpmbipje [2012-06-06]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-06-06]
CHR Extension: (Skype Click to Call) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-06-06]
CHR HKLM\...\Chrome\Extension: [gbamlhhoocminkgbhdepcpgcogfofmko] - C:\Program Files\Luth Research\SavvyConnectFramework\bin\chrome\SavvyConnect.crx [2012-06-19]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\D\Skype Portable\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\TECH-A~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-01]
CHR StartMenuInternet: Google Chrome - C:\Users\Indian E-music\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2009-11-29] (Adobe Systems) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 BitKinex; C:\Program Files\WebDav\BitKinex\bitkinexsvc.exe [32944 2010-07-12] ()
R2 BonkeyService; C:\Program Files\Bonkey\wrapper.exe [204800 2009-09-17] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DirMngr; C:\Program Files\Security\GNU\GnuPG\dirmngr.exe [242176 2009-08-07] () [File not signed]
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [File not signed]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-06-03] (Google)
S2 gupdate1c9fd658f153313; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-05] (Google Inc.)
R2 Icecast-trunk; C:\Program Files\Streaming\Icecast2\Win32\V232\icecastService.exe [417792 2008-05-24] () [File not signed]
S3 LBTServ; C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe [121360 2009-07-20] (Logitech, Inc.)
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
R2 MBAMService; C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbamservice.exe [363344 2010-12-20] (Malwarebytes Corporation)
R2 MSSQL$RADIONOMY536765; C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [4230144 2011-12-16] (Native Instruments GmbH) [File not signed]
S4 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 RetroExpLauncher; C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe [120088 2008-12-11] (EMC Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra\Lite\V2010c\RpcAgentSrv.exe [93336 2009-08-24] (SiSoftware) [File not signed]
S4 SCService; C:\Program Files\Luth Research\SavvyConnectFramework\bin\scservice\SCService.exe [1891328 2012-05-25] () [File not signed]
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 serviceIEConfig; C:\Windows\System32\ieconfig_1und1_svc.exe [1053848 2011-12-15] ()
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
S2 SkypeUpdate; C:\D\Skype Portable\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
R2 SMTPAuth; C:\Program Files\Admin\SMTPAuth\V201\Service.exe [478720 2006-05-31] (Bisswanger Software) [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\STacSV.exe [221266 2009-06-29] (IDT, Inc.)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S3 wampapache; c:\Server\wamp\V20i\bin\apache\apache2.2.11\bin\httpd.exe [24636 2008-12-10] (Apache Software Foundation) [File not signed]
S3 wampmysqld; c:\Server\wamp\V20i\bin\mysql\mysql5.1.36\bin\mysqld.exe [6582912 2009-06-17] ()
R2 WinSSHD; C:\Program Files\SSH\Bitvise\WinSSHD\WinSSHD.exe [5872936 2010-04-10] (Bitvise)
R2 ZWC-MySQL; C:\Program Files\Backup\Zmanda\WinCommunity\V31\MySQL\bin\mysqld.exe [5707096 2010-04-15] ()
R2 ZWCService; C:\Program Files\Backup\Zmanda\WinCommunity\V31\bin\ZWCService.exe [140640 2010-04-15] ()
S2 BroadCamService; "C:\Program Files\NCH Software\BroadCam\broadcam.exe" -service [X]
S2 DelegateService; "C:\Program Files\NCH Software\Delegate\delegate.exe" -service [X]
S2 WebDictateService; "C:\Program Files\NCH Software\WebDictate\webdictate.exe" -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Aspi32; C:\Windows\system32\Drivers\Aspi32.sys [25244 2001-02-01] (Adaptec) [File not signed]
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [83984 2012-02-23] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63816 2013-08-07] (BlueStack Systems)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2011-06-23] (Phoenix Technologies) [File not signed]
S3 genmcmnUSB; C:\Windows\System32\DRIVERS\gflmouhid.sys [6656 2004-04-19] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28560 2009-06-17] (Logitech, Inc.)
S3 LVPr2Mon; C:\Windows\System32\Drivers\LVPr2Mon.sys [25824 2010-05-07] ()
S3 MAUSBRI; C:\Windows\System32\DRIVERS\mausbft8r.sys [135688 2008-05-09] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [20952 2010-12-20] (Malwarebytes Corporation)
S3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [133632 2009-03-06] (Creative Technology Ltd.)
S3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [274048 2009-05-06] (Creative Technology Ltd.)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2004-04-01] (Padus, Inc.) [File not signed]
S3 pgfilter; C:\Program Files\Security\PeerGuardian\Vista2\pgfilter.sys [8192 2007-06-02] () [File not signed]
S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [10070016 2013-04-30] (Advanced Micro Devices, Inc.)
S3 Saffire; C:\Windows\System32\Drivers\Saffire.sys [129376 2010-06-11] (Focusrite A.E.)
S3 SaffireAudio; C:\Windows\System32\drivers\SaffireAudio.sys [28256 2010-06-11] (Focusrite A.E.)
S3 SaffireMidi; C:\Windows\System32\drivers\SaffireMidi.sys [31584 2010-06-11] (Focusrite A.E.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra\Lite\V2010c\WNt500x86\Sandra.sys [23112 2009-08-08] (SiSoftware)
S3 Serial; C:\Windows\System32\DRIVERS\avidXPserial.sys [54272 2004-10-14] () [File not signed]
S3 SPC220NC; C:\Windows\System32\DRIVERS\SPC220NC.SYS [507136 2007-01-09] (PixArt Imaging Inc.)
R0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [File not signed]
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-12-27] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-04] (Avira GmbH)
S2 trackcam; C:\Windows\System32\DRIVERS\trackcam.sys [78152 2009-10-09] (Eagletron Inc.)
R1 VBoxDrv; C:\Windows\System32\DRIVERS\VBoxDrv.sys [123856 2010-03-25] (Sun Microsystems, Inc.)
R3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [99728 2010-03-25] (Sun Microsystems, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [110608 2010-03-25] (Sun Microsystems, Inc.)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [41680 2010-03-25] (Sun Microsystems, Inc.)
S3 WinRing0_1_2_0; D:\RealTemp\WinRing0.sys [14416 2008-07-26] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCD5SRVC{3F6A8B78-EC003E00-05040104}; \??\C:\PROGRA~1\DELLSU~1\HWDiag\bin\PCD5SRVC.pkms [X]
S1 PDIDRV; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-18 15:01 - 2014-09-18 15:01 - 00003992 _____ () C:\Users\Tech-Admin\Desktop\JRT.txt
2014-09-18 14:33 - 2014-09-18 14:33 - 00000010 _____ () C:\Users\Tech-Admin\Desktop\Fixlist.txt
2014-09-18 14:29 - 2014-09-18 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-09-18 14:28 - 2014-09-18 14:28 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT (1).exe
2014-09-18 14:24 - 2014-09-18 14:24 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT.exe
2014-09-18 14:03 - 2014-09-18 14:03 - 00000022 _____ () C:\Windows\S.dirmngr
2014-09-18 12:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-18 12:22 - 2014-09-18 12:22 - 01373475 _____ () C:\Users\Tech-Admin\Desktop\AdwCleaner_3.310.exe
2014-09-18 10:20 - 2014-09-18 10:20 - 00001077 _____ () C:\Users\Tech-Admin\Desktop\Revo Uninstaller.lnk
2014-09-18 10:20 - 2014-09-18 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-18 10:19 - 2014-09-18 10:20 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tech-Admin\Desktop\revosetup95.exe
2014-09-17 16:12 - 2014-09-17 16:16 - 00114469 _____ () C:\Users\Tech-Admin\Desktop\Addition.txt
2014-09-17 16:06 - 2014-09-18 15:08 - 00060741 _____ () C:\Users\Tech-Admin\Desktop\FRST.txt
2014-09-17 15:43 - 2014-09-17 15:44 - 00000642 _____ () C:\Users\Tech-Admin\Desktop\defogger_disable.log
2014-09-17 15:43 - 2014-09-17 15:44 - 00000020 _____ () C:\Users\Tech-Admin\defogger_reenable
2014-09-17 15:22 - 2014-09-17 15:22 - 00187064 _____ () C:\Users\Tech-Admin\Desktop\Extras.Txt
2014-09-17 15:16 - 2014-09-17 15:16 - 00244324 _____ () C:\Users\Tech-Admin\Desktop\OTL.Txt
2014-09-17 13:53 - 2014-09-17 13:53 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\WebTV
2014-09-17 12:41 - 2014-09-18 15:09 - 00000000 ____D () C:\FRST
2014-09-17 12:41 - 2014-09-17 12:41 - 00380416 _____ () C:\Users\Tech-Admin\Desktop\Gmer-19357.exe
2014-09-17 12:40 - 2014-09-17 12:40 - 01097728 _____ (Farbar) C:\Users\Tech-Admin\Desktop\FRST.exe
2014-09-17 12:39 - 2014-09-17 12:39 - 00050477 _____ () C:\Users\Tech-Admin\Desktop\Defogger.exe
2014-09-16 18:26 - 2014-09-16 18:26 - 00028946 _____ () C:\Windows\system32\sfcd2.txt
2014-09-16 18:25 - 2014-09-16 18:25 - 00028946 _____ () C:\Windows\system32\sfcd1.txt
2014-09-16 18:18 - 2014-09-16 18:19 - 00028946 _____ () C:\Windows\system32\sfcd.txt
2014-09-16 18:14 - 2014-09-16 18:15 - 00028946 _____ () C:\Windows\system32\sfcdetails.txt
2014-09-16 14:40 - 2014-09-16 14:40 - 00602112 _____ (OldTimer Tools) C:\Users\Tech-Admin\Desktop\OTL.exe
2014-09-15 19:16 - 2014-09-18 14:02 - 00011836 _____ () C:\Windows\PFRO.log
2014-09-15 12:42 - 2014-09-15 12:42 - 00001245 _____ () C:\Users\Public\Desktop\Data Lifeguard Diagnostic for Windows.lnk
2014-09-13 14:34 - 2014-09-13 14:36 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (2).crx
2014-09-13 14:32 - 2014-09-13 14:32 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (1).crx
2014-09-13 14:29 - 2014-09-13 14:29 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5.crx
2014-09-12 11:21 - 2014-09-12 11:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\Avg2014
2014-09-10 22:31 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 22:31 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 22:31 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 22:31 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 22:31 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 22:31 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 22:31 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 22:31 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 22:31 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-09-10 22:31 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-28 00:53 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 00:53 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-28 00:04 - 2014-08-28 00:04 - 00000932 _____ () C:\Users\Tech-Admin\Desktop\DiskCheckup.lnk
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\Program Files\DiskCheckup
2014-08-21 16:19 - 2014-09-11 10:46 - 00000763 _____ () C:\Users\Tech-Admin\Desktop\Games - Verknüpfung.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-18 15:11 - 2014-09-17 16:06 - 00060741 _____ () C:\Users\Tech-Admin\Desktop\FRST.txt
2014-09-18 15:09 - 2014-09-17 12:41 - 00000000 ____D () C:\FRST
2014-09-18 15:07 - 2014-07-22 05:04 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\SpiderOak
2014-09-18 15:01 - 2014-09-18 15:01 - 00003992 _____ () C:\Users\Tech-Admin\Desktop\JRT.txt
2014-09-18 14:33 - 2014-09-18 14:33 - 00000010 _____ () C:\Users\Tech-Admin\Desktop\Fixlist.txt
2014-09-18 14:29 - 2014-09-18 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-09-18 14:28 - 2014-09-18 14:28 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT (1).exe
2014-09-18 14:24 - 2014-09-18 14:24 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT.exe
2014-09-18 14:22 - 2009-07-06 17:55 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\uTorrent
2014-09-18 14:17 - 2009-06-18 08:14 - 00861598 _____ () C:\Windows\WindowsUpdate.log
2014-09-18 14:10 - 2012-06-02 23:58 - 00000000 ___RD () C:\Users\Tech-Admin\Dropbox
2014-09-18 14:09 - 2012-06-02 23:50 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Dropbox
2014-09-18 14:05 - 2011-06-24 01:42 - 00358301 _____ () C:\ProgramData\lxeescan.log
2014-09-18 14:05 - 2010-03-27 13:12 - 00000439 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-18 14:03 - 2014-09-18 14:03 - 00000022 _____ () C:\Windows\S.dirmngr
2014-09-18 14:02 - 2014-09-15 19:16 - 00011836 _____ () C:\Windows\PFRO.log
2014-09-18 14:02 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 14:02 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 13:59 - 2013-12-18 17:46 - 00000000 ____D () C:\AdwCleaner
2014-09-18 12:36 - 2009-07-01 22:57 - 00000000 ____D () C:\ProgramData\ICQ
2014-09-18 12:23 - 2009-08-20 20:59 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Games
2014-09-18 12:22 - 2014-09-18 12:22 - 01373475 _____ () C:\Users\Tech-Admin\Desktop\AdwCleaner_3.310.exe
2014-09-18 12:09 - 2009-12-20 13:24 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Toolbars
2014-09-18 12:03 - 2009-07-01 03:08 - 00000000 ____D () C:\Program Files\Yahoo!
2014-09-18 11:43 - 2009-07-20 17:45 - 00000000 ____D () C:\Program Files\Dictionary
2014-09-18 11:29 - 2009-08-05 20:14 - 00000000 __SHD () C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\Program Files\Adobe
2014-09-18 11:03 - 2009-07-04 13:39 - 00000000 ____D () C:\Program Files\Admin
2014-09-18 11:00 - 2009-12-08 14:07 - 00000000 ____D () C:\ProgramData\DriverScanner
2014-09-18 10:20 - 2014-09-18 10:20 - 00001077 _____ () C:\Users\Tech-Admin\Desktop\Revo Uninstaller.lnk
2014-09-18 10:20 - 2014-09-18 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-18 10:20 - 2014-09-18 10:19 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tech-Admin\Desktop\revosetup95.exe
2014-09-18 09:50 - 2012-06-02 23:57 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-17 16:16 - 2014-09-17 16:12 - 00114469 _____ () C:\Users\Tech-Admin\Desktop\Addition.txt
2014-09-17 15:44 - 2014-09-17 15:43 - 00000642 _____ () C:\Users\Tech-Admin\Desktop\defogger_disable.log
2014-09-17 15:44 - 2014-09-17 15:43 - 00000020 _____ () C:\Users\Tech-Admin\defogger_reenable
2014-09-17 15:43 - 2009-06-30 18:09 - 00000000 ____D () C:\Users\Tech-Admin
2014-09-17 15:22 - 2014-09-17 15:22 - 00187064 _____ () C:\Users\Tech-Admin\Desktop\Extras.Txt
2014-09-17 15:16 - 2014-09-17 15:16 - 00244324 _____ () C:\Users\Tech-Admin\Desktop\OTL.Txt
2014-09-17 13:53 - 2014-09-17 13:53 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\WebTV
2014-09-17 13:53 - 2009-07-02 10:24 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\MultiMedia
2014-09-17 13:51 - 2009-11-21 23:32 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Office
2014-09-17 13:04 - 2009-07-15 19:10 - 00000000 ____D () C:\Download
2014-09-17 12:46 - 2009-07-25 20:30 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Admin
2014-09-17 12:45 - 2011-06-28 10:40 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Security
2014-09-17 12:42 - 2009-08-20 21:01 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Graphics, DTB
2014-09-17 12:41 - 2014-09-17 12:41 - 00380416 _____ () C:\Users\Tech-Admin\Desktop\Gmer-19357.exe
2014-09-17 12:40 - 2014-09-17 12:40 - 01097728 _____ (Farbar) C:\Users\Tech-Admin\Desktop\FRST.exe
2014-09-17 12:39 - 2014-09-17 12:39 - 00050477 _____ () C:\Users\Tech-Admin\Desktop\Defogger.exe
2014-09-16 19:01 - 2009-07-01 00:11 - 00000000 ____D () C:\ProgramData\pdf995
2014-09-16 18:26 - 2014-09-16 18:26 - 00028946 _____ () C:\Windows\system32\sfcd2.txt
2014-09-16 18:25 - 2014-09-16 18:25 - 00028946 _____ () C:\Windows\system32\sfcd1.txt
2014-09-16 18:19 - 2014-09-16 18:18 - 00028946 _____ () C:\Windows\system32\sfcd.txt
2014-09-16 18:15 - 2014-09-16 18:14 - 00028946 _____ () C:\Windows\system32\sfcdetails.txt
2014-09-16 14:40 - 2014-09-16 14:40 - 00602112 _____ (OldTimer Tools) C:\Users\Tech-Admin\Desktop\OTL.exe
2014-09-16 12:43 - 2010-04-01 01:26 - 00000000 ____D () C:\Program Files\Bonkey
2014-09-16 03:18 - 2009-07-01 00:47 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Skype
2014-09-16 00:05 - 2010-03-25 02:00 - 00000048 _____ () C:\Windows\wpd99.drv
2014-09-15 21:02 - 2013-10-13 10:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-15 21:02 - 2012-04-05 14:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-15 21:02 - 2011-05-21 16:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-15 20:48 - 2009-08-24 20:18 - 00000000 ____D () C:\Windows\Minidump
2014-09-15 18:38 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\PLA
2014-09-15 12:42 - 2014-09-15 12:42 - 00001245 _____ () C:\Users\Public\Desktop\Data Lifeguard Diagnostic for Windows.lnk
2014-09-15 03:56 - 2011-05-12 19:42 - 00108224 _____ () C:\Users\Tech-Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-15 03:51 - 2006-11-02 14:47 - 00428744 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-13 19:03 - 2012-10-06 20:25 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\CrashDumps
2014-09-13 14:36 - 2014-09-13 14:34 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (2).crx
2014-09-13 14:32 - 2014-09-13 14:32 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (1).crx
2014-09-13 14:29 - 2014-09-13 14:29 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5.crx
2014-09-13 02:22 - 2014-06-29 16:30 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\OBS
2014-09-12 22:29 - 2014-06-29 16:29 - 00000000 ____D () C:\Program Files\OBS
2014-09-12 18:13 - 2013-10-09 00:59 - 00000296 _____ () C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000.job
2014-09-12 18:12 - 2013-11-26 21:11 - 00000394 _____ () C:\Windows\Tasks\ReclaimerResumeInstall_Tech-Admin.job
2014-09-12 18:11 - 2010-05-06 21:55 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\vlc
2014-09-12 11:23 - 2013-10-10 00:35 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-12 11:23 - 2013-08-04 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-12 11:23 - 2013-08-04 16:07 - 00000000 ____D () C:\Program Files\Avira
2014-09-12 11:21 - 2014-09-12 11:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\Avg2014
2014-09-12 11:21 - 2012-02-07 17:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-09-11 10:48 - 2014-05-29 12:59 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitKinex
2014-09-11 10:48 - 2013-10-01 18:17 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2014-09-11 10:48 - 2010-06-24 17:35 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RSSeditor
2014-09-11 10:48 - 2009-07-23 17:58 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox
2014-09-11 10:46 - 2014-08-21 16:19 - 00000763 _____ () C:\Users\Tech-Admin\Desktop\Games - Verknüpfung.lnk
2014-09-11 02:36 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-10 21:18 - 2013-08-14 08:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 17:51 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-09-10 17:41 - 2008-01-21 09:16 - 01812310 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 09:14 - 2011-06-24 04:45 - 01695896 _____ () C:\ProgramData\lxeeJSW.log
2014-09-03 09:42 - 2011-06-24 01:47 - 00000000 ____D () C:\ProgramData\LX_cats
2014-08-31 02:55 - 2014-01-27 05:24 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\GoPanda2
2014-08-31 00:49 - 2009-07-23 19:59 - 00000000 ____D () C:\Program Files\Games
2014-08-31 00:49 - 2009-07-01 11:19 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\TeraCopy
2014-08-29 03:44 - 2013-02-09 19:02 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Raga Sampoorna Malkauns
2014-08-28 00:04 - 2014-08-28 00:04 - 00000932 _____ () C:\Users\Tech-Admin\Desktop\DiskCheckup.lnk
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\Program Files\DiskCheckup
2014-08-24 23:29 - 2009-07-05 15:15 - 00000000 ____D () C:\Windows\pss
2014-08-24 22:56 - 2011-02-17 05:45 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Orbit
2014-08-23 03:03 - 2014-08-28 00:53 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 01:26 - 2014-08-28 00:53 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 11:48 - 2012-04-14 13:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-21 15:30 - 2009-07-17 12:25 - 00000000 ____D () C:\Transfer
2014-08-19 13:01 - 2014-02-20 08:51 - 00007160 _____ () C:\Users\Tech-Admin\AppData\Local\d3d9caps.dat

Files to move or delete:
====================
C:\ProgramData\JonDoSetup.paf.exe
C:\Users\Tech-Admin\Firefox Setup 3.5.exe
C:\Users\Tech-Admin\freetype.exe
C:\Users\Tech-Admin\Printdir.bat


Some content of TEMP:
====================
C:\Users\Edition Group\AppData\Local\temp\avgnt.exe
C:\Users\Indian E-music\AppData\Local\temp\WmpPluginSetup_2.1.0.6.exe
C:\Users\Tech-Admin\AppData\Local\temp\avgnt.exe
C:\Users\Tech-Admin\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpdychls.dll
C:\Users\Tech-Admin\AppData\Local\temp\htmlayout.dll
C:\Users\Tech-Admin\AppData\Local\temp\Quarantine.exe
C:\Users\Tech-Admin\AppData\Local\temp\tbooV2.dll
C:\Users\Tech-Admin\AppData\Local\temp\uninstall3165931.exe
C:\Users\Tech-Admin\AppData\Local\temp\uninstall3227411.exe
C:\Users\Tech-Admin\AppData\Local\temp\uninstall3227504.exe
C:\Users\Tech-Admin\AppData\Local\temp\uninstall3227535.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-18 14:25

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Zitat:

Zitat von Warlord711

emptytemp / Fixlog
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Starte nun FRST erneut und klicke den Fix Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Hier der Inhalt der Fixlog-Datei...

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 12-09-2014
Ran by Tech-Admin at 2014-09-18 15:19:27 Run:1
Running from C:\Users\Tech-Admin\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
emptytemp:
*****************

EmptyTemp: => Removed 479.4 MB temporary data.


The system needed a reboot. 

==== End of Fixlog ====

Soll ich AdwCleaner nochmals durchführen ? - Hatte ja unerwartet beim zweiten Versuch geklappt (s.o.), ohne diesen Fix.

ITSecurity14 · 18.09.2014, 19:22

Zitat:

Zitat von Warlord711

Blue Screens in Serie
Dann lass uns erstmal schauen das wir nen klares Bild bekommen, etwaige Schadsoftware entfernen und dann mal schauen was die Bluescreens machen.

Komme gerade an den Rechner zurück. Wie heute morgen, ca. 3-4 Stunden nach dem letzten Hochfahren nun bereits wieder ein Bluescreen... der 4te. Scheint sich zu häufen

Diesmal ist die Meldung fast gleichlautend wie heute morgen (siehe Screenshot im Anhang):

Code:

ATTFilter

Kernel_Stack_Inpage_Error
Stop: 0x00000077 (0xC0000056, 0xC0000056, 0x00000000, 0x22394000)

Wie gehts nun weiter ?

ITSecurity14 · 19.09.2014, 02:24

Zitat:

Zitat von Warlord711

Die Proxy Settings stammen aus Firefox.

Hallo, Timo !

Was muss ich hier tun ? - Ich verwende sehr selten Firefox, hauptsächlich Google Chrome. Möchte aber nicht, dass damit ein Hintertürchen für den Abgriff von Daten offen bleibt. :-)

Gute & schlechte Neuigkeiten :-)

... mit dem täglichen Update der Anti-Malware database hat Malwarebytes am Donnerstag Abend auch ein Update der Software selbst erzwungen.

Mit der Neuinstallation und einer neuen Database habe ich zunächst einen Schnellscan durchgführt. Im Ergebnis wurden knapp 600 Bedrohungen festgestellt. Der Laie wundert sich. Ich vermute, dass die neue Software eine sensiblere Heuristik verwendet. Das System war also nicht Malware frei, wie mit dem gestrigen Scan angenommen. Vielleicht sind darauf die neuen BlueScreens zurückzuführen (?).

Leider lieferte zu dem neuen Ergebnis Malwarebytes kein Logfile. Im Einzelnen handelt es sich um Befalle von ...

1. Registry Key (5x)

- Pup.Optional.DealPly.A
- Pup.Optoinal.BabylonToolbar.A
- Pup.Optoinal.weDownload.A
- Pup.Optoinal.PriceGong.A

2. Registry Data (3x)

- Pup.Optoinal.SnapDo.A

3. Folders und Files (allesamt in Firefox)

- Pup.Optoinal.CrossRider.A
- Pup.Optoinal.Babylon.A
- Pup.Optoinal.CrossFire.A

Ich werde nun einen umfassenderen Threat Scan durchführen. - Und hoffe, dass ich davon morgen früh ein Logfile erhalte. Ich liefere dann auch nochmals ein FRST.txt und Additions.txt Ergebnis.

Warlord711 · 19.09.2014, 08:24

https://www.malwarebytes.org/support...istory_AL.html

Schau mal unter C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \Logs

ITSecurity14 · 19.09.2014, 13:26

Zitat:

Zitat von Warlord711

https://www.malwarebytes.org/support/guides/mbam/History_AL.html

Schau mal unter C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \Logs

Scheint irgendein Problem mit C++ zu sein. Ich musste mehrere Versuche starten, bis ein Scan Log file abgespeichert wurde. Es geht nur im XML-Format. Beim Exportieren in Ascii-Format (TXT) stürzt das Programm immer wieder ab. Im Menü History Log wird leider nichts angezeigt (siehe Screenshot)

Ich lege daher die beiden XML-Logfiles der bisherigen scans im Anhang als gezippte Datei bei. Ich weiss nicht, wie ich dieses File in TXT konvertieren kann ?

Mit dem letzten umfassenden Threat Scan wurden nochmals 100 Infektionen entdeckt. Hier die Kurzübersicht:

1.) Typ: Registry Key...

Pup.Optional.Snapdo.T (Internet Explorer)
Pup.Optoinal.SearchProtect.A (Internet Explorer)
Pup.Optoinal.Babylon.A (Internet Explorer)
Pup.Optoinal.CondultTB.A (Microsoft Windows)
Pup.Optoinal.BestToolbar.A (Microsoft Windows u. Internet Explorer)
Pup.Optional.FrostwireTB.A (Microsoft Windows)

2.) Typ: Value

Pup.Optoinal.BestToolbar.A (Internet Explorer)
Pup.Optional.FrostwireTB.A (Internet Explorer)

3.) Typ: File

Pup.Optoinal.ExpressFiles.A
Pup.Optoial.OpenCandy
Trojan.Downloader.ns
Pup.OOptoinal.Softonic
Pup.Optoinal.Softonic.A

4.) Typ: Folder

Pup.Optional.CrossRider.A (alle in Firefox - Extensions)
---
Alle Ergebnisse sind in den Quarantäne-Ordner der neuen Software-Version verschoben worden. Dort liegen nun 1173 ausgelagerte DATA- und QUAR-Files. Soll ich diese löschen ?

Im Folgenden die neuen FRST.txt und Additions.txt.

ITSecurity14 · 19.09.2014, 14:09

Zitat:

Zitat von ITSecurity14

Im Folgenden die FRST.txt und Additions.txt.

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2014
Ran by Tech-Admin (administrator) on *** on 19-09-2014 14:28:36
Running from C:\Users\***\Desktop
Platform: Microsoft® Windows Vista™ Home Premium  Service Pack 2 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\stacsv.exe
(Logitech Inc.) C:\Program Files\Common Files\Logishrd\LVMVFM\UMVPFSrv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE
() C:\Program Files\WebDav\BitKinex\bitkinexsvc.exe
() C:\Program Files\Bonkey\wrapper.exe
(BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe
(Oracle Corporation) C:\Windows\System32\java.exe
() C:\Program Files\Security\GNU\GnuPG\dirmngr.exe
() C:\Program Files\Streaming\Icecast2\Win32\V232\icecastService.exe
( ) C:\Windows\System32\lxeecoms.exe
(Malwarebytes Corporation) C:\Program Files\Anti-Malware\Malwarebytes\ENG\V2021012\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Anti-Malware\Malwarebytes\ENG\V2021012\ Malwarebytes Anti-Malware \mbamservice.exe
() C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe
(RealNetworks, Inc.) C:\Program Files\Real\realplayer\Update\realsched.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Google Inc.) C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe
(AMD) C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe
() C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe
() C:\Program Files\MultiMonitor\Taskbar\V21\MultiMon.exe
() C:\Users\Tech-Admin\CLCL\CLCL.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(EMC Corporation) C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Windows\System32\ieconfig_1und1_svc.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Bisswanger Software) C:\Program Files\Admin\SMTPAuth\V201\Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Fookes Holding Ltd) C:\Program Files\Office\Text\NoteTab Light\V612\NoteTab.exe
(Malwarebytes Corporation) C:\Program Files\Anti-Malware\Malwarebytes\ENG\V2021012\ Malwarebytes Anti-Malware \mbam.exe
(SpiderOak) C:\Program Files\SpiderOak\SpiderOak.exe
(SpiderOak) C:\Program Files\SpiderOak\SpiderOak.exe
() C:\Program Files\SpiderOak\windows_dir_watcher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [55824 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-06-03] (Google)
HKLM\...\Run: [Malwarebytes' Anti-Malware] => C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbamgui.exe [443728 2010-12-20] (Malwarebytes Corporation)
HKLM\...\Run: [lxeemon.exe] => C:\Program Files\Lexmark Pro700 Series\lxeemon.exe [770728 2010-05-17] ()
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-04] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [458844 2009-06-29] (IDT, Inc.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM\...\Run: [Avira Systray] => C:\Program Files\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\realplayer\update\realsched.exe [295072 2013-01-26] (RealNetworks, Inc.)
HKLM\...\Run: [Malwarebytes' Anti-Malware (reboot)] => C:\Program Files\Anti-Malware\Malwarebytes\ENG\V15011100\mbam.exe [963976 2010-12-20] (Malwarebytes Corporation)
Winlogon\Notify\GoToAssist: C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\.DEFAULT\...\Run: [MySpaceIM] => C:\Program Files\MySpace\IM\MySpaceIM.exe [9555968 2008-12-12] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\Run: [uTorrent] => C:\Users\Tech-Admin\AppData\Roaming\uTorrent\uTorrent.exe [1268816 2014-04-09] (BitTorrent Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [uTorrent] => C:\Users\Tech-Admin\AppData\Roaming\uTorrent\uTorrent.exe [1268816 2014-04-09] (BitTorrent Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [uTorrent] => C:\Users\Tech-Admin\AppData\Roaming\uTorrent\uTorrent.exe [1268816 2014-04-09] (BitTorrent Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [1&1 EasyLogin] => C:\Program Files\Admin\1&1\1&1 EasyLogin\EasyLogin.exe [1070592 2014-03-19] (1&1 Internet AG)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Google Update] => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [SightSpeed] => C:\Program Files\Dell Video Chat\DellVideoChat.exe [4823928 2008-12-18] (Dell Inc. and SightSpeed Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [googletalk] => C:\Users\Edition Group\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [1&1 EasyLogin] => C:\Program Files\Admin\1&1\1&1 EasyLogin\EasyLogin.exe [1070592 2014-03-19] (1&1 Internet AG)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [SightSpeed] => C:\Program Files\Dell Video Chat\DellVideoChat.exe [4823928 2008-12-18] (Dell Inc. and SightSpeed Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [googletalk] => C:\Users\Edition Group\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [1&1 EasyLogin] => C:\Program Files\Admin\1&1\1&1 EasyLogin\EasyLogin.exe [1070592 2014-03-19] (1&1 Internet AG)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Google Update] => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-12-14] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [SightSpeed] => C:\Program Files\Dell Video Chat\DellVideoChat.exe [4823928 2008-12-18] (Dell Inc. and SightSpeed Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [googletalk] => C:\Users\Edition Group\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [HydraVisionDesktopManager] => C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [393216 2012-11-16] (AMD)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Google Update] => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-02] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [googletalk] => C:\Users\Indian E-music\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-02] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [googletalk] => C:\Users\Indian E-music\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Google Update] => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-07-02] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [googletalk] => C:\Users\Indian E-music\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [googletalk] => C:\Users\amandabackup\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [googletalk] => C:\Users\amandabackup\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Google Update] => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [133104 2009-07-01] (Google Inc.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [Skype] => C:\D\Skype Portable\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [googletalk] => C:\Users\amandabackup\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\Run: [dradio-RecorderTimer] => C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe [41472 2012-04-03] ()
HKU\S-1-5-21-3709790226-3666169162-3011628283-1004-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\...\MountPoints2: {b2386454-f3cb-11de-a32d-002219f45723} - H:\wubi.exe --cdmenu
AppInit_DLLs: profiles\all users\application oepl.dll => profiles\all users\application oepl.dll File Not Found
AppInit_DLLs:  "C:\PROGRA~1\Google\Google Desktop => C:\PROGRA~1\Google\Google Desktop File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MultiMon Taskbar.lnk
ShortcutTarget: MultiMon Taskbar.lnk -> C:\Program Files\MultiMonitor\Taskbar\V21\MultiMon.exe ()
Startup: C:\Users\amandabackup\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Edition Group\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
ShortcutTarget: Dell Dock.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Indian E-music\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CLCL.lnk
ShortcutTarget: CLCL.lnk -> C:\Users\Tech-Admin\CLCL\CLCL.exe ()
Startup: C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll (Google)
ShellIconOverlayIdentifiers: SpiderOakOverlay -> {6E1010DC-3571-45DE-9CA2-C5890119BBBE} => C:\Program Files\SpiderOak\shell_extension.dll (SpiderOak)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.1und1.de/links/home
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://eis.esnips.com/page/search/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d
SearchScopes: HKCU - {080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC} URL = hxxp://searchservice.myspace.com/index.cfm?fuseaction=sitesearch.results&qry={searchTerms}&type=Web&orig=IMC-IE
SearchScopes: HKCU - {25477387-2310-45df-933D-E9416D3D0303} URL = hxxp://eis.esnips.com/page/search_provider/?client_uuid=bda82ac0-85c3-4b48-b0d2-41fde8d1391d&q={searchTerms}
SearchScopes: HKCU - {2FAFE781-F201-4552-9DD7-5C2D35091047} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {53876F1A-07C9-4584-98EE-D87F3036DF37} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
SearchScopes: HKCU - {BAE62BB2-C2DF-4F7E-936D-A2390907D653} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {C4E24D76-F674-4E96-9C52-6A2585EF14CF} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
BHO: Lexmark Toolbar -> {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -> C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO: FGCatchUrl -> {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} -> C:\Program Files\FlashGet\Version17\jccatch_1.dll (www.flashget.com)
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\P-2-P\BitComet\V113\tools\BitCometBHO_1.3.3.2.dll (BitComet)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: NXIECatcher Class -> {83B80A9C-D91A-4F22-8DCF-EA7204039F79} -> C:\Program Files\MultiMedia\NetXfer\NXIEHelper.dll (Xi)
BHO: Windows Live Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\D\Skype Portable\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO: eSnipsBHO Class -> {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} -> C:\Program Files\Logia\eSnipsDownloader\eSnipsBHO.dll (Logia Media)
BHO: Lexmark Printable Web -> {D2C5E510-BE6D-42CC-9F61-E4F939078474} -> C:\Program Files\Lexmark Printable Web\bho.dll ()
BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO: 1&&1 Internet AG Browser Configuration by mquadr.at -> {D48FF4B4-E68F-47D1-8E25-81A0F0EEB341} -> C:\Windows\System32\ieconfig_1und1.dll (mquadr.at software engineering und consulting GmbH)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: SavvyConnect IE Extension -> {E6C6EC35-C04A-42CD-A3A7-4F09FB0F1B76} -> C:\Program Files\Luth Research\SavvyConnectFramework\bin\ieplugin\LuthIEPlugin.dll (Luth Research, LLC)
BHO: FlashGet GetFlash Class -> {F156768E-81EF-470C-9057-481BA8380DBA} -> C:\Program Files\FlashGet\Version17\getflash.dll (www.flashget.com)
Toolbar: HKLM - Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKLM - NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Program Files\MultiMedia\NetXfer\NXToolBar.dll (Xi)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_11-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_45-windows-i586.cab
Handler: jpip - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files\LizardTech\Express View\expressview.dll (Lizardtech Software)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler: sidlet - {B92DD248-E3D5-4A92-B311-C9B841681455} - C:\Program Files\LizardTech\Express View\expressview.dll (Lizardtech Software)
Handler: skyline - {3a4f9195-65a8-11d5-85c1-0001023952c1} - C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\D\Skype Portable\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
ShellExecuteHooks:  - {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  No File [ ]
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [152864] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User
FF NewTab: hxxp://www.google.com
FF DefaultSearchEngine: Google (Web)
FF SearchEngineOrder.1: eSnips Search
FF SelectedSearchEngine: Google (Web)
FF Homepage: hxxp://www.google.com
FF NetworkProxy: "backup.ftp", "119.32.24.214"
FF NetworkProxy: "backup.ftp_port", 8000
FF NetworkProxy: "backup.gopher", "119.32.24.214"
FF NetworkProxy: "backup.gopher_port", 8000
FF NetworkProxy: "backup.socks", "119.32.24.214"
FF NetworkProxy: "backup.socks_port", 8000
FF NetworkProxy: "backup.ssl", "119.32.24.214"
FF NetworkProxy: "backup.ssl_port", 8000
FF NetworkProxy: "ftp", "167.206.203.10"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "gopher", "167.206.203.10"
FF NetworkProxy: "gopher_port", 8080
FF NetworkProxy: "http", "167.206.203.10"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "167.206.203.10"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "167.206.203.10"
FF NetworkProxy: "ssl_port", 8080
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\MultiMedia\iTunes\V902\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Multimedia\Picasa\V3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6 -> C:\Program Files\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @real.com/nppl3260;version=16.0.0.282 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.0 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.0.282 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\V208\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\V208\npvlc.dll (VideoLAN)
FF Plugin HKCU: @phonostar.de/phonostar -> C:\Program Files\Radio\dradio-Recorder\npphonostarDetectNP.dll No File
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Tech-Admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Tech-Admin\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\libdivx.dll (The OpenSSL Project, hxxp://www.openssl.org/)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdivx32.dll (DivX,Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npDivxPlayerPlugin.dll (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdjvu.dll (LizardTech)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npexview.dll (Lizardtech Software)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ssldivx.dll (The OpenSSL Project, hxxp://www.openssl.org/)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Tech-Admin\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\facebook-profile.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-books.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-news-india.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\google-web.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\lastfm.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\leo-deu-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\leo-dictionary-de-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\web-search-powered-by-google.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\welt-online-suche.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\searchplugins\wikipedia-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\answers.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\cuil.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-de.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\google-en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick---deutsch.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\ixquick.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-eng-ger.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-esp-ale.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\leo-fra-all.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\metager2.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\technorati.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\wikipedia_en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\yahoo-de.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\searchplugins\yahoo-en.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\facebook-profile.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-books.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-news-india.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\google-web.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\lastfm.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\leo-deu-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\leo-dictionary-de-eng.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\web-search-powered-by-google.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\welt-online-suche.xml
FF SearchPlugin: C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\searchplugins\wikipedia-eng.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\esnips.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2013-07-28]
FF Extension: Add to Search Bar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\add-to-searchbox@maltekraus.de [2010-12-19]
FF Extension: bit.ly preview - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\bitlypreview@jay.ridgeway [2010-01-16]
FF Extension: meebo - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\firefox@meebo.com [2009-06-30]
FF Extension: Google Wave Add-on for Firefox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\google-wave@chad.smith [2010-07-26]
FF Extension: NewTabURL - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\newtaburl@sogame.cat [2011-03-18]
FF Extension: Zorap Plugin - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\npzorap@zorap.com [2009-09-28]
FF Extension: Share Video - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\savevideo@vodpod.com [2010-04-13]
FF Extension: snipi - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\snipi@snipi.com [2010-01-27]
FF Extension: VideoDownloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\videodowloader@videodownloader.net [2009-06-30]
FF Extension: Zotero - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\zotero@chnm.gmu.edu [2011-06-15]
FF Extension: SHOUTcast Radio Toolbar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2009-07-19]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]
FF Extension: Elasticfox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{2204c510-88f3-11db-b606-0800200c9a66} [2010-08-22]
FF Extension: MediaBar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{28D35620-51D9-11DE-9D13-2DB156D89593} [2010-05-09]
FF Extension: AddThis - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2011-02-04]
FF Extension: FEBE - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2010-07-12]
FF Extension: ArchiveFacebook - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2011-06-16]
FF Extension: ChatZilla - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2011-06-01]
FF Extension: Picnik - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{5b1fdac4-a239-4933-9c52-b65a2a720b75} [2011-05-04]
FF Extension: BitComet Video Downloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-07-24]
FF Extension: FoxClocks - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2011-03-26]
FF Extension: Fox!Box - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8} [2011-01-08]
FF Extension: FoxyDeal - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D} [2013-07-28]
FF Extension: Add to Amazon Wish List Button - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\amznUWL2@amazon.com.xpi [2011-05-21]
FF Extension: Snip It! Button for eBay - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722}.xpi [2011-05-29]
FF Extension: DownThemAll! - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-11]
FF Extension: Greasemonkey - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\rouc6goq.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2011-05-12]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2013-07-28]
FF Extension: CS Lite - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{00084897-021a-4361-8423-083407a033e0} [2010-05-20]
FF Extension: JonDoFox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{437be45a-4114-11dd-b9ab-71d256d89593} [2010-05-20]
FF Extension: NoScript - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232} [2010-05-20]
FF Extension: DownloadHelper - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2010-05-20]
FF Extension: Adblock Plus - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010-05-20]
FF Extension: ProfileSwitcher - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\JonDoFox\Extensions\{fa8476cf-a98c-4e08-99b4-65a69cb4b7d4} [2010-05-20]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\126c9ec1-e913-410f-94df-6262dd70e044@94392a4b-d7bd-4563-8bcd-ba96cf8055b2.com [2014-07-26]
FF Extension: bit.ly preview - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\bitlypreview@jay.ridgeway [2010-01-16]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\crossriderapp519@crossrider.com [2014-07-26]
FF Extension: meebo - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firefox@meebo.com [2009-06-30]
FF Extension: Google Wave Add-on for Firefox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\google-wave@chad.smith [2010-07-26]
FF Extension: Zorap Plugin - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\npzorap@zorap.com [2009-09-28]
FF Extension: Share Video - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\savevideo@vodpod.com [2010-04-13]
FF Extension: snipi - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\snipi@snipi.com [2010-01-27]
FF Extension: VideoDownloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\videodowloader@videodownloader.net [2009-06-30]
FF Extension: SHOUTcast Radio Toolbar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{12e4c684-c03e-4e4d-85bc-0c065e7a9489} [2009-07-19]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010-04-27]
FF Extension: Elasticfox - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{2204c510-88f3-11db-b606-0800200c9a66} [2010-08-22]
FF Extension: MediaBar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{28D35620-51D9-11DE-9D13-2DB156D89593} [2010-05-09]
FF Extension: AddThis - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{3e0e7d2a-070f-4a47-b019-91fe5385ba79} [2012-08-27]
FF Extension: FEBE - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2014-06-22]
FF Extension: ArchiveFacebook - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{53A03D43-5363-4669-8190-99061B2DEBA6} [2012-02-18]
FF Extension: ChatZilla - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2} [2013-07-19]
FF Extension: Picnik - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{5b1fdac4-a239-4933-9c52-b65a2a720b75} [2011-05-04]
FF Extension: Snip It! Button for eBay - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{aab35b56-0206-4472-9993-9cb5c09bb722} [2012-08-29]
FF Extension: BitComet Video Downloader - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB} [2009-07-24]
FF Extension: Flash and Video Download - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2014-08-21]
FF Extension: FoxClocks - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1} [2014-01-29]
FF Extension: Add to Search Bar - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\add-to-searchbox@maltekraus.de.xpi [2013-11-14]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\amznUWL2@amazon.com.xpi [2011-05-21]
FF Extension: Firebug - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firebug@software.joehewitt.com.xpi [2012-08-09]
FF Extension: Zemanta - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\firefox@zemanta.com.xpi [2014-01-06]
FF Extension: Link Sgf Viewer - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\linksgfviewer@netdexign.ro.xpi [2014-07-07]
FF Extension: NewTabURL - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\newtaburl@sogame.cat.xpi [2011-08-19]
FF Extension: Zotero - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\zotero@chnm.gmu.edu.xpi [2013-04-03]
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{4093c4de-454a-4329-8aff-c6b0b123c386}.xpi [2012-09-23]
FF Extension: DownThemAll! - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2011-05-11]
FF Extension: Fox!Box - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{df4e4df5-5cb7-46b0-9aef-6c784c3249f8}.xpi [2013-11-19]
FF Extension: Greasemonkey - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-25]
FF Extension: Toolbar fuer eBay - C:\Program Files\Mozilla Firefox\extensions\{000E148C-F7A7-445A-9044-93BF6CE09ECB} [2012-06-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-06-30]
FF HKLM\...\Firefox\Extensions: [esnipsxpi@logia.esnips] - C:\Program Files\Logia\eSnipsDownloader\ext
FF Extension: eSnips Downloader Extension - C:\Program Files\Logia\eSnipsDownloader\ext [2010-06-08]
FF HKLM\...\Firefox\Extensions: [{5FE7198A-5950-4068-9FBF-1A60395CC4E9}] - C:\Program Files\Internet Telephony\1und1-Smartphone\Firefox
FF Extension: 1&amp;1 SoftPhone - C:\Program Files\Internet Telephony\1und1-Smartphone\Firefox [2009-12-01]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-26]
FF HKCU\...\Firefox\Extensions: [eliteproxyswitcher@my-proxy.com] - 
FF Extension: No Name - C:\Users\Tech-Admin\AppData\Roaming\Mozilla\Firefox\Profiles\9phdwh3i.Default Vista User\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [Not Found]

Chrome: 
=======
CHR CustomProfile: C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (No Name) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan [2013-07-28]
CHR Extension: (Download with DownloadAll) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajffocjdcmpgjmdfdfkdfdbkjafbkcke [2014-06-05]
CHR Extension: (Google Drive) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-10-20]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-06-26]
CHR Extension: (Web2PDFConverter) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkanhckocooacphbnclgcndnpfpoppdk [2012-06-29]
CHR Extension: (YouTube) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-20]
CHR Extension: (Eidogo) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\chgomcdkpjhhcbobbificlbdnkoaigcg [2014-07-07]
CHR Extension: (Add to Amazon Wish List) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2012-03-28]
CHR Extension: (No Name) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cknebhggccemgcnbidipinkifmmegdel [2012-03-17]
CHR Extension: (Google Search) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-20]
CHR Extension: (Facebook Invite All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eibdjcmcmfggjoiaaoojhicjnkghbkbe [2010-10-19]
CHR Extension: (Related Content by Zemanta) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fejeknoakjeblidffkajbioncodnmhge [2012-07-05]
CHR Extension: (Avira Browser Safety) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2013-12-21]
CHR Extension: (AdBlock) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-04-13]
CHR Extension: (PageSpeed Insights (by Google)) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gplegfbjlmmehdoakndmohflojccocli [2014-07-24]
CHR Extension: (Picnik Extension for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hcifofgaphfkfdcjbdogpamghiihilkl [2011-01-19]
CHR Extension: (Disconnect Search) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmobfennjmjnkdbklhcnnfbhfibedgkk [2013-10-08]
CHR Extension: (Select All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hpdbgoknchagchgbgaihbnebmgbdlgfj [2013-05-16]
CHR Extension: (goo.gl URL Shortener) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\iblijlcdoidgdpfknkckljiocdbnlagk [2013-10-21]
CHR Extension: (RealDownloader) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-01-26]
CHR Extension: (Move Your Photos) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\idiebfmmkhaffedkhjhapmagabcadjhc [2012-03-17]
CHR Extension: (Spell Checker for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfpdnkkdgghlpdgldicfgnnnkhdfhocg [2014-06-26]
CHR Extension: (Snip it! button for eBay) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhaoojkpcgaobmnnphdpdokcgdiibblh [2011-05-29]
CHR Extension: (Facebook Invite Them All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\jladghljinmlokelojmdmblikkifabea [2013-05-16]
CHR Extension: (Add Facebook Events to Google Calendar™) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdcimpbhnilcgolicdnepifecokinjof [2012-03-17]
CHR Extension: (JDownloader Integration for Google Chrome™) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\laeghehalempfenbefbjbhccjcoakpmm [2014-01-20]
CHR Extension: (SocialBa! ( Publish Sync )) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbnldfdnnhniifjjiakifofhdjangplj [2012-12-23]
CHR Extension: (Capture Webpage Screenshot - FireShot) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2012-09-21]
CHR Extension: (Google Mail Checker) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2012-03-17]
CHR Extension: (FastestFox for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmffncokckfccddfenhkhnllmlobdahm [2013-07-28]
CHR Extension: (Bit.ly Shortener for Chrome) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\negjghjbfgfmdjpolclpmmjmfeejolld [2012-03-17]
CHR Extension: (Google Wallet) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-21]
CHR Extension: (Extended Share for Google Plus) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\oenpjldbckebacipkfbcoppmiflglnib [2012-01-10]
CHR Extension: (Select All) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofcnbnhefnmjancehemliplicihbcjjb [2012-05-16]
CHR Extension: (Go Diagram player for 'Life in 19x19') - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogoehegcnmkkpmmpkaejijighfokncdk [2014-06-19]
CHR Extension: (Google Reader) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjjhlfkghdhmijklfnahfkpgmhcmfgcm [2012-08-09]
CHR Extension: (Gmail) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-20]
CHR Extension: (Avira SafeSearch) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\plgjnighgeebiaalpbkmcbbiihegpbbp [2014-08-04]
CHR Extension: (WordPress.com Extension) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnbbfhcegldppmibabepjfjloachnmjb [2012-01-28]
CHR CustomProfile: C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Babylon Chrome OCR) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dhkplhfnhceodhffomolpfigojocbpcb [2012-06-06]
CHR Extension: (DealPly) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gaiilaahiahdejapggenmdmafpmbipje [2012-06-06]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2012-06-06]
CHR Extension: (Skype Click to Call) - C:\Users\Tech-Admin\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2012-06-06]
CHR HKLM\...\Chrome\Extension: [gbamlhhoocminkgbhdepcpgcogfofmko] - C:\Program Files\Luth Research\SavvyConnectFramework\bin\chrome\SavvyConnect.crx [2012-06-19]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2012-11-29]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\D\Skype Portable\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-10-02]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\TECH-A~1\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-01]
CHR StartMenuInternet: Google Chrome - C:\Users\Indian E-music\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2009-11-29] (Adobe Systems) [File not signed]
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-04] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1021008 2014-08-04] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
R2 BitKinex; C:\Program Files\WebDav\BitKinex\bitkinexsvc.exe [32944 2010-07-12] ()
R2 BonkeyService; C:\Program Files\Bonkey\wrapper.exe [204800 2009-09-17] () [File not signed]
S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [393032 2013-08-07] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [384840 2013-08-07] (BlueStack Systems, Inc.)
R2 DirMngr; C:\Program Files\Security\GNU\GnuPG\dirmngr.exe [242176 2009-08-07] () [File not signed]
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [File not signed]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-06-03] (Google)
S2 gupdate1c9fd658f153313; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-05] (Google Inc.)
R2 Icecast-trunk; C:\Program Files\Streaming\Icecast2\Win32\V232\icecastService.exe [417792 2008-05-24] () [File not signed]
S3 LBTServ; C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe [121360 2009-07-20] (Logitech, Inc.)
S2 lxeeCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeeserv.exe [193192 2010-04-14] (Lexmark International, Inc.)
R2 lxee_device; C:\Windows\system32\lxeecoms.exe [598696 2010-04-14] ( )
R2 MBAMScheduler; C:\Program Files\Anti-Malware\Malwarebytes\ENG\V2021012\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Anti-Malware\Malwarebytes\ENG\V2021012\ Malwarebytes Anti-Malware \mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 MSSQL$RADIONOMY536765; C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [4230144 2011-12-16] (Native Instruments GmbH) [File not signed]
S4 Radio.fx; C:\Program Files\Tobit Radio.fx\Server\rfx-server.exe [3673944 2011-11-18] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 RetroExpLauncher; C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe [120088 2008-12-11] (EMC Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra\Lite\V2010c\RpcAgentSrv.exe [93336 2009-08-24] (SiSoftware) [File not signed]
S4 SCService; C:\Program Files\Luth Research\SavvyConnectFramework\bin\scservice\SCService.exe [1891328 2012-05-25] () [File not signed]
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 serviceIEConfig; C:\Windows\System32\ieconfig_1und1_svc.exe [1053848 2011-12-15] ()
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3064000 2012-10-02] (Skype Technologies S.A.)
R2 SMTPAuth; C:\Program Files\Admin\SMTPAuth\V201\Service.exe [478720 2006-05-31] (Bisswanger Software) [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_559ad4ac\STacSV.exe [221266 2009-06-29] (IDT, Inc.)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S3 wampapache; c:\Server\wamp\V20i\bin\apache\apache2.2.11\bin\httpd.exe [24636 2008-12-10] (Apache Software Foundation) [File not signed]
S3 wampmysqld; c:\Server\wamp\V20i\bin\mysql\mysql5.1.36\bin\mysqld.exe [6582912 2009-06-17] ()
S2 WinSSHD; C:\Program Files\SSH\Bitvise\WinSSHD\WinSSHD.exe [5872936 2010-04-10] (Bitvise)
S2 ZWC-MySQL; C:\Program Files\Backup\Zmanda\WinCommunity\V31\MySQL\bin\mysqld.exe [5707096 2010-04-15] ()
S2 ZWCService; C:\Program Files\Backup\Zmanda\WinCommunity\V31\bin\ZWCService.exe [140640 2010-04-15] ()
S2 BroadCamService; "C:\Program Files\NCH Software\BroadCam\broadcam.exe" -service [X]
S2 DelegateService; "C:\Program Files\NCH Software\Delegate\delegate.exe" -service [X]
S2 WebDictateService; "C:\Program Files\NCH Software\WebDictate\webdictate.exe" -service [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Aspi32; C:\Windows\system32\Drivers\Aspi32.sys [25244 2001-02-01] (Adaptec) [File not signed]
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [83984 2012-02-23] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-03] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-05-22] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-10-07] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [63816 2013-08-07] (BlueStack Systems)
S3 DrvAgent32; C:\Windows\system32\Drivers\DrvAgent32.sys [23456 2011-06-23] (Phoenix Technologies) [File not signed]
S3 genmcmnUSB; C:\Windows\System32\DRIVERS\gflmouhid.sys [6656 2004-04-19] ()
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28560 2009-06-17] (Logitech, Inc.)
S3 LVPr2Mon; C:\Windows\System32\Drivers\LVPr2Mon.sys [25824 2010-05-07] ()
S3 MAUSBRI; C:\Windows\System32\DRIVERS\mausbft8r.sys [135688 2008-05-09] (Avid Technology, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [110296 2014-09-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
S3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [133632 2009-03-06] (Creative Technology Ltd.)
S3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [274048 2009-05-06] (Creative Technology Ltd.)
R3 pfc; C:\Windows\System32\drivers\pfc.sys [10368 2004-04-01] (Padus, Inc.) [File not signed]
S3 pgfilter; C:\Program Files\Security\PeerGuardian\Vista2\pgfilter.sys [8192 2007-06-02] () [File not signed]
S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [10070016 2013-04-30] (Advanced Micro Devices, Inc.)
S3 Saffire; C:\Windows\System32\Drivers\Saffire.sys [129376 2010-06-11] (Focusrite A.E.)
S3 SaffireAudio; C:\Windows\System32\drivers\SaffireAudio.sys [28256 2010-06-11] (Focusrite A.E.)
S3 SaffireMidi; C:\Windows\System32\drivers\SaffireMidi.sys [31584 2010-06-11] (Focusrite A.E.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra\Lite\V2010c\WNt500x86\Sandra.sys [23112 2009-08-08] (SiSoftware)
S3 Serial; C:\Windows\System32\DRIVERS\avidXPserial.sys [54272 2004-10-14] () [File not signed]
S3 SPC220NC; C:\Windows\System32\DRIVERS\SPC220NC.SYS [507136 2007-01-09] (PixArt Imaging Inc.)
R0 speedfan; C:\Windows\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [File not signed]
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2009-12-27] (Duplex Secure Ltd.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-04] (Avira GmbH)
S2 trackcam; C:\Windows\System32\DRIVERS\trackcam.sys [78152 2009-10-09] (Eagletron Inc.)
R1 VBoxDrv; C:\Windows\System32\DRIVERS\VBoxDrv.sys [123856 2010-03-25] (Sun Microsystems, Inc.)
R3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp.sys [99728 2010-03-25] (Sun Microsystems, Inc.)
R3 VBoxNetFlt; C:\Windows\System32\DRIVERS\VBoxNetFlt.sys [110608 2010-03-25] (Sun Microsystems, Inc.)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [41680 2010-03-25] (Sun Microsystems, Inc.)
S3 WinRing0_1_2_0; D:\RealTemp\WinRing0.sys [14416 2008-07-26] (OpenLibSys.org)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCD5SRVC{3F6A8B78-EC003E00-05040104}; \??\C:\PROGRA~1\DELLSU~1\HWDiag\bin\PCD5SRVC.pkms [X]
S1 PDIDRV; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 04:08 - 2014-09-19 11:45 - 00000022 _____ () C:\Windows\S.dirmngr
2014-09-19 01:21 - 2014-09-19 01:21 - 00001448 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-19 01:21 - 2014-09-19 01:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware  (V2.0.2.1012)
2014-09-19 01:21 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-09-19 01:21 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-09-19 01:14 - 2014-09-19 01:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tech-Admin\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-09-19 01:13 - 2014-09-19 01:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tech-Admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-18 22:53 - 2014-09-18 22:53 - 00001872 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-09-18 22:53 - 2014-09-18 22:53 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-18 15:01 - 2014-09-18 15:01 - 00003992 _____ () C:\Users\Tech-Admin\Desktop\JRT.txt
2014-09-18 14:29 - 2014-09-18 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-09-18 14:28 - 2014-09-18 14:28 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT (1).exe
2014-09-18 14:24 - 2014-09-18 14:24 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT.exe
2014-09-18 12:32 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-09-18 12:22 - 2014-09-18 12:22 - 01373475 _____ () C:\Users\Tech-Admin\Desktop\AdwCleaner_3.310.exe
2014-09-18 10:20 - 2014-09-18 10:20 - 00001077 _____ () C:\Users\Tech-Admin\Desktop\Revo Uninstaller.lnk
2014-09-18 10:20 - 2014-09-18 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-18 10:19 - 2014-09-18 10:20 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tech-Admin\Desktop\revosetup95.exe
2014-09-17 16:12 - 2014-09-17 16:16 - 00114469 _____ () C:\Users\Tech-Admin\Desktop\Addition.txt
2014-09-17 16:06 - 2014-09-19 14:28 - 00077040 _____ () C:\Users\Tech-Admin\Desktop\FRST.txt
2014-09-17 15:43 - 2014-09-17 15:44 - 00000642 _____ () C:\Users\Tech-Admin\Desktop\defogger_disable.log
2014-09-17 15:43 - 2014-09-17 15:44 - 00000020 _____ () C:\Users\Tech-Admin\defogger_reenable
2014-09-17 15:22 - 2014-09-17 15:22 - 00187064 _____ () C:\Users\Tech-Admin\Desktop\Extras.Txt
2014-09-17 15:16 - 2014-09-17 15:16 - 00244324 _____ () C:\Users\Tech-Admin\Desktop\OTL.Txt
2014-09-17 13:53 - 2014-09-17 13:53 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\WebTV
2014-09-17 12:41 - 2014-09-19 14:30 - 00000000 ____D () C:\FRST
2014-09-17 12:41 - 2014-09-17 12:41 - 00380416 _____ () C:\Users\Tech-Admin\Desktop\Gmer-19357.exe
2014-09-17 12:40 - 2014-09-17 12:40 - 01097728 _____ (Farbar) C:\Users\Tech-Admin\Desktop\FRST.exe
2014-09-17 12:39 - 2014-09-17 12:39 - 00050477 _____ () C:\Users\Tech-Admin\Desktop\Defogger.exe
2014-09-16 18:26 - 2014-09-16 18:26 - 00028946 _____ () C:\Windows\system32\sfcd2.txt
2014-09-16 18:25 - 2014-09-16 18:25 - 00028946 _____ () C:\Windows\system32\sfcd1.txt
2014-09-16 18:18 - 2014-09-16 18:19 - 00028946 _____ () C:\Windows\system32\sfcd.txt
2014-09-16 18:14 - 2014-09-16 18:15 - 00028946 _____ () C:\Windows\system32\sfcdetails.txt
2014-09-16 14:40 - 2014-09-16 14:40 - 00602112 _____ (OldTimer Tools) C:\Users\Tech-Admin\Desktop\OTL.exe
2014-09-15 19:16 - 2014-09-18 15:32 - 00030938 _____ () C:\Windows\PFRO.log
2014-09-15 12:42 - 2014-09-15 12:42 - 00001245 _____ () C:\Users\Public\Desktop\Data Lifeguard Diagnostic for Windows.lnk
2014-09-13 14:34 - 2014-09-13 14:36 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (2).crx
2014-09-13 14:32 - 2014-09-13 14:32 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (1).crx
2014-09-13 14:29 - 2014-09-13 14:29 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5.crx
2014-09-12 11:21 - 2014-09-12 11:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\Avg2014
2014-09-10 22:31 - 2014-08-15 16:51 - 12363264 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 22:31 - 2014-08-15 16:42 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 22:31 - 2014-08-15 16:42 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 22:31 - 2014-08-15 16:37 - 01137664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 22:31 - 2014-08-15 16:37 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 22:31 - 2014-08-15 16:36 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 22:31 - 2014-08-15 16:35 - 01802240 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 22:31 - 2014-08-15 16:35 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 22:31 - 2014-08-15 16:35 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 22:31 - 2014-08-15 16:34 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 22:31 - 2014-08-15 16:34 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-09-10 22:31 - 2014-08-15 16:34 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-08-28 00:53 - 2014-08-23 03:03 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 00:53 - 2014-08-23 01:26 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-28 00:04 - 2014-08-28 00:04 - 00000932 _____ () C:\Users\Tech-Admin\Desktop\DiskCheckup.lnk
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\Program Files\DiskCheckup
2014-08-21 16:19 - 2014-09-11 10:46 - 00000763 _____ () C:\Users\Tech-Admin\Desktop\Games - Verknüpfung.lnk

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 14:31 - 2014-09-17 16:06 - 00077040 _____ () C:\Users\Tech-Admin\Desktop\FRST.txt
2014-09-19 14:30 - 2014-09-17 12:41 - 00000000 ____D () C:\FRST
2014-09-19 14:27 - 2014-07-22 05:04 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\SpiderOak
2014-09-19 14:24 - 2011-05-15 15:46 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-09-19 14:18 - 2012-10-06 20:25 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\CrashDumps
2014-09-19 13:44 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 13:44 - 2006-11-02 14:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 11:57 - 2012-06-02 23:58 - 00000000 ___RD () C:\Users\Tech-Admin\Dropbox
2014-09-19 11:53 - 2009-06-18 08:14 - 00888458 _____ () C:\Windows\WindowsUpdate.log
2014-09-19 11:52 - 2009-07-06 17:55 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\uTorrent
2014-09-19 11:50 - 2010-03-27 13:12 - 00000439 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-09-19 11:49 - 2012-06-02 23:50 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Dropbox
2014-09-19 11:47 - 2011-06-24 01:42 - 00359529 _____ () C:\ProgramData\lxeescan.log
2014-09-19 11:45 - 2014-09-19 04:08 - 00000022 _____ () C:\Windows\S.dirmngr
2014-09-19 02:19 - 2009-07-01 00:47 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Skype
2014-09-19 01:31 - 2010-03-12 16:27 - 00000000 ____D () C:\Backup
2014-09-19 01:21 - 2014-09-19 01:21 - 00001448 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-09-19 01:21 - 2014-09-19 01:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware  (V2.0.2.1012)
2014-09-19 01:21 - 2009-08-27 03:26 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-19 01:14 - 2014-09-19 01:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tech-Admin\Downloads\mbam-setup-2.0.2.1012 (1).exe
2014-09-19 01:13 - 2014-09-19 01:13 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Tech-Admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-09-18 22:53 - 2014-09-18 22:53 - 00001872 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-09-18 22:53 - 2014-09-18 22:53 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-09-18 22:53 - 2013-02-01 12:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-18 22:53 - 2011-05-05 16:15 - 00000000 ____D () C:\Program Files\Skype
2014-09-18 22:53 - 2009-07-04 15:50 - 00000000 ____D () C:\ProgramData\Skype
2014-09-18 15:32 - 2014-09-15 19:16 - 00030938 _____ () C:\Windows\PFRO.log
2014-09-18 15:01 - 2014-09-18 15:01 - 00003992 _____ () C:\Users\Tech-Admin\Desktop\JRT.txt
2014-09-18 14:29 - 2014-09-18 14:29 - 00000000 ____D () C:\Windows\ERUNT
2014-09-18 14:28 - 2014-09-18 14:28 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT (1).exe
2014-09-18 14:24 - 2014-09-18 14:24 - 01016830 _____ (Thisisu) C:\Users\Tech-Admin\Desktop\JRT.exe
2014-09-18 13:59 - 2013-12-18 17:46 - 00000000 ____D () C:\AdwCleaner
2014-09-18 12:36 - 2009-07-01 22:57 - 00000000 ____D () C:\ProgramData\ICQ
2014-09-18 12:23 - 2009-08-20 20:59 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Games
2014-09-18 12:22 - 2014-09-18 12:22 - 01373475 _____ () C:\Users\Tech-Admin\Desktop\AdwCleaner_3.310.exe
2014-09-18 12:09 - 2009-12-20 13:24 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Toolbars
2014-09-18 12:03 - 2009-07-01 03:08 - 00000000 ____D () C:\Program Files\Yahoo!
2014-09-18 11:43 - 2009-07-20 17:45 - 00000000 ____D () C:\Program Files\Dictionary
2014-09-18 11:29 - 2009-08-05 20:14 - 00000000 __SHD () C:\ProgramData\{55A29068-F2CE-456C-9148-C869879E2357}
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\ProgramData\Adobe
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-09-18 11:18 - 2009-06-18 13:33 - 00000000 ____D () C:\Program Files\Adobe
2014-09-18 11:03 - 2009-07-04 13:39 - 00000000 ____D () C:\Program Files\Admin
2014-09-18 11:00 - 2009-12-08 14:07 - 00000000 ____D () C:\ProgramData\DriverScanner
2014-09-18 10:20 - 2014-09-18 10:20 - 00001077 _____ () C:\Users\Tech-Admin\Desktop\Revo Uninstaller.lnk
2014-09-18 10:20 - 2014-09-18 10:20 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-09-18 10:20 - 2014-09-18 10:19 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Tech-Admin\Desktop\revosetup95.exe
2014-09-18 09:50 - 2012-06-02 23:57 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-17 16:16 - 2014-09-17 16:12 - 00114469 _____ () C:\Users\Tech-Admin\Desktop\Addition.txt
2014-09-17 15:44 - 2014-09-17 15:43 - 00000642 _____ () C:\Users\Tech-Admin\Desktop\defogger_disable.log
2014-09-17 15:44 - 2014-09-17 15:43 - 00000020 _____ () C:\Users\Tech-Admin\defogger_reenable
2014-09-17 15:43 - 2009-06-30 18:09 - 00000000 ____D () C:\Users\Tech-Admin
2014-09-17 15:22 - 2014-09-17 15:22 - 00187064 _____ () C:\Users\Tech-Admin\Desktop\Extras.Txt
2014-09-17 15:16 - 2014-09-17 15:16 - 00244324 _____ () C:\Users\Tech-Admin\Desktop\OTL.Txt
2014-09-17 13:53 - 2014-09-17 13:53 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\WebTV
2014-09-17 13:53 - 2009-07-02 10:24 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\MultiMedia
2014-09-17 13:51 - 2009-11-21 23:32 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Office
2014-09-17 13:04 - 2009-07-15 19:10 - 00000000 ____D () C:\Download
2014-09-17 12:46 - 2009-07-25 20:30 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Admin
2014-09-17 12:45 - 2011-06-28 10:40 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Security
2014-09-17 12:42 - 2009-08-20 21:01 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Graphics, DTB
2014-09-17 12:41 - 2014-09-17 12:41 - 00380416 _____ () C:\Users\Tech-Admin\Desktop\Gmer-19357.exe
2014-09-17 12:40 - 2014-09-17 12:40 - 01097728 _____ (Farbar) C:\Users\Tech-Admin\Desktop\FRST.exe
2014-09-17 12:39 - 2014-09-17 12:39 - 00050477 _____ () C:\Users\Tech-Admin\Desktop\Defogger.exe
2014-09-16 19:01 - 2009-07-01 00:11 - 00000000 ____D () C:\ProgramData\pdf995
2014-09-16 18:26 - 2014-09-16 18:26 - 00028946 _____ () C:\Windows\system32\sfcd2.txt
2014-09-16 18:25 - 2014-09-16 18:25 - 00028946 _____ () C:\Windows\system32\sfcd1.txt
2014-09-16 18:19 - 2014-09-16 18:18 - 00028946 _____ () C:\Windows\system32\sfcd.txt
2014-09-16 18:15 - 2014-09-16 18:14 - 00028946 _____ () C:\Windows\system32\sfcdetails.txt
2014-09-16 14:40 - 2014-09-16 14:40 - 00602112 _____ (OldTimer Tools) C:\Users\Tech-Admin\Desktop\OTL.exe
2014-09-16 12:43 - 2010-04-01 01:26 - 00000000 ____D () C:\Program Files\Bonkey
2014-09-16 00:05 - 2010-03-25 02:00 - 00000048 _____ () C:\Windows\wpd99.drv
2014-09-15 21:02 - 2013-10-13 10:14 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-15 21:02 - 2012-04-05 14:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-09-15 21:02 - 2011-05-21 16:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-09-15 20:48 - 2009-08-24 20:18 - 00000000 ____D () C:\Windows\Minidump
2014-09-15 18:38 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\PLA
2014-09-15 12:42 - 2014-09-15 12:42 - 00001245 _____ () C:\Users\Public\Desktop\Data Lifeguard Diagnostic for Windows.lnk
2014-09-15 03:56 - 2011-05-12 19:42 - 00108224 _____ () C:\Users\Tech-Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2014-09-15 03:51 - 2006-11-02 14:47 - 00428744 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-13 14:36 - 2014-09-13 14:34 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (2).crx
2014-09-13 14:32 - 2014-09-13 14:32 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5 (1).crx
2014-09-13 14:29 - 2014-09-13 14:29 - 00109458 _____ () C:\Users\Tech-Admin\Downloads\SgfViewer-1.5.crx
2014-09-13 02:22 - 2014-06-29 16:30 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\OBS
2014-09-12 22:29 - 2014-06-29 16:29 - 00000000 ____D () C:\Program Files\OBS
2014-09-12 18:13 - 2013-10-09 00:59 - 00000296 _____ () C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000.job
2014-09-12 18:12 - 2013-11-26 21:11 - 00000394 _____ () C:\Windows\Tasks\ReclaimerResumeInstall_Tech-Admin.job
2014-09-12 18:11 - 2010-05-06 21:55 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\vlc
2014-09-12 11:23 - 2013-10-10 00:35 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-12 11:23 - 2013-08-04 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-12 11:23 - 2013-08-04 16:07 - 00000000 ____D () C:\Program Files\Avira
2014-09-12 11:21 - 2014-09-12 11:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\Avg2014
2014-09-12 11:21 - 2012-02-07 17:21 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-09-11 10:48 - 2014-05-29 12:59 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitKinex
2014-09-11 10:48 - 2013-10-01 18:17 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2014-09-11 10:48 - 2010-06-24 17:35 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RSSeditor
2014-09-11 10:48 - 2009-07-23 17:58 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JonDoFox
2014-09-11 10:46 - 2014-08-21 16:19 - 00000763 _____ () C:\Users\Tech-Admin\Desktop\Games - Verknüpfung.lnk
2014-09-11 02:36 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-09-10 21:18 - 2013-08-14 08:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 17:51 - 2006-11-02 12:24 - 98758480 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-09-10 17:41 - 2008-01-21 09:16 - 01812310 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 09:14 - 2011-06-24 04:45 - 01695896 _____ () C:\ProgramData\lxeeJSW.log
2014-09-03 09:42 - 2011-06-24 01:47 - 00000000 ____D () C:\ProgramData\LX_cats
2014-08-31 02:55 - 2014-01-27 05:24 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Local\GoPanda2
2014-08-31 00:49 - 2009-07-23 19:59 - 00000000 ____D () C:\Program Files\Games
2014-08-31 00:49 - 2009-07-01 11:19 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\TeraCopy
2014-08-29 03:44 - 2013-02-09 19:02 - 00000000 ____D () C:\Users\Tech-Admin\Desktop\Raga Sampoorna Malkauns
2014-08-28 00:04 - 2014-08-28 00:04 - 00000932 _____ () C:\Users\Tech-Admin\Desktop\DiskCheckup.lnk
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiskCheckup
2014-08-28 00:04 - 2014-08-28 00:04 - 00000000 ____D () C:\Program Files\DiskCheckup
2014-08-24 23:29 - 2009-07-05 15:15 - 00000000 ____D () C:\Windows\pss
2014-08-24 22:56 - 2011-02-17 05:45 - 00000000 ____D () C:\Users\Tech-Admin\AppData\Roaming\Orbit
2014-08-23 03:03 - 2014-08-28 00:53 - 00297984 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 01:26 - 2014-08-28 00:53 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 11:48 - 2012-04-14 13:16 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-08-21 15:30 - 2009-07-17 12:25 - 00000000 ____D () C:\Transfer

Files to move or delete:
====================
C:\ProgramData\JonDoSetup.paf.exe
C:\Users\Tech-Admin\Firefox Setup 3.5.exe
C:\Users\Tech-Admin\freetype.exe
C:\Users\Tech-Admin\Printdir.bat


Some content of TEMP:
====================
C:\Users\Tech-Admin\AppData\Local\temp\avgnt.exe
C:\Users\Tech-Admin\AppData\Local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpvydb5l.dll
C:\Users\Tech-Admin\AppData\Local\temp\SkypeSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-19 12:01

==================== End Of Log ============================

--- --- ---

--- --- ---

ITSecurity14 · 19.09.2014, 14:12

Zitat:

Zitat von ITSecurity14

Im Folgenden die FRST.txt und Additions.txt.

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 12-09-2014
Ran by Tech-Admin at 2014-09-19 15:04:55
Running from C:\Users\Tech-Admin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKCU\...\uTorrent) (Version: 3.4.1.30740 - BitTorrent Inc.)
1&1 EasyLogin (HKLM\...\1&1 EasyLogin) (Version:  - )
1&1 SoftPhone (HKLM\...\1&1 SoftPhone) (Version: 2.60.1179 - 1&1 Internet AG)
1und1 Internet Explorer Add-On (HKLM\...\1und1 Internet Explorer Add-On) (Version:  - 1&1 Internet AG)
1und1 Internet Explorer Add-On (Version: 1.0 - 1&1 Internet AG) Hidden
Å¸ÀÌÁª¹ÙµÏ (HKLM\...\Å¸ÀÌÁª¹ÙµÏ) (Version:  - )
ABBYY FineReader 6.0 Sprint (HKLM\...\{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}) (Version: 6.00.2146.41621 - ABBYY Software House)
ACID Pro 7.0 (HKLM\...\{F7FD5E5E-3F0C-4931-AA1B-EAB838BC02DB}) (Version: 7.0.713 - Sony)
Acoolsoft PPT to Video Free 3.2.3 (HKLM\...\Acoolsoft PPT to Video Free_is1) (Version: 3.2.3 - Acoolsoft Software)
Acoustica Effects Pack (HKLM\...\Acoustica Effects Pack) (Version: 1.0 - Acoustica, Inc)
Acoustica Mixcraft 4.5 (HKLM\...\Acoustica Mixcraft 4.5) (Version:  - Acoustica)
Acrobat.com (HKLM\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 2.1.0.0 - Adobe Systems Incorporated)
Acrobat.com (Version: 2.1.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.5.0.1060 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.5.0.1060 - Adobe Systems Incorporated) Hidden
Adobe Audition 1.5 (HKLM\...\{86EF9FC4-F209-4520-B7E1-C7FF0EEBDFFF}) (Version: 1.5 - Adobe Systems)
Adobe Audition 3.0 (Version: 3.0 - Adobe Systems Incorporated) Hidden
Adobe Digital Editions (HKLM\...\Digital Editions) (Version:  - )
Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.3.133 - Adobe Systems, Inc.)
Advanced Audio FX Engine (HKLM\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Aglare All to MP3 AAC AC3 AMR Converter 7.1 (HKLM\...\Aglare All to MP3 AAC AC3 AMR Converter_is1) (Version:  - Aglare Software, Inc.)
Amazon Cloud Drive (HKLM\...\{8F112D98-2829-4907-B8DC-13B5568C72D6}) (Version: 0.8.10.1 - Amazon.com)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version:  - Amazon)
AMD APP CPU SDK Runtime (Version: 2.8.1016.5 - Advanced Micro Devices Inc.) Hidden
AMD APP SDK Developer (Version: 2.8.1016.5 - Advanced Micro Devices Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden
AMD APP SDK Samples (Version: 2.8.1016.5 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{1F897E00-83A6-4133-54E1-58F8D35E61C2}) (Version: 8.0.881.0 - Advanced Micro Devices, Inc.)
Ant Renamer (HKLM\...\Ant Renamer 2_is1) (Version: 2.10.0 - Ant Software)
Any Video Converter 5.5.5 (HKLM\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
AoA Audio Extractor (HKLM\...\{D1725D54-279A-40C5-A70D-23C1785DB920}_is1) (Version:  - AoAMedia.com)
Apple Application Support (HKLM\...\{EE6097DD-05F4-4178-9719-D3170BF098E8}) (Version: 1.4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}) (Version: 3.2.0.47 - Apple Inc.)
Apple Software Update (HKLM\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)
Ashampoo Burning Studio 6 FREE (HKLM\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.7.7 - ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 9.21 (HKLM\...\Ashampoo Burning Studio 9_is1) (Version: 9.2.1 - ashampoo GmbH & Co. KG)
Ashampoo WinOptimizer 2008 (HKLM\...\Ashampoo WinOptimizer 2008) (Version:  - ashampoo GmbH & Co. KG)
ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Astronomers Digital Clock 3.3.2 (HKLM\...\ST6UNST #2) (Version:  - )
AudibleManager (HKLM\...\AudibleManager) (Version: 4759644.48.2147348480.4759644 - Audible, Inc.)
Avid Free DV (HKLM\...\{BAD26CB5-035A-495E-83B8-92215B6DA3DE}) (Version: 1.6.1 - )
Avidemux 2.5 (HKLM\...\Avidemux 2.5) (Version: 2.5.1.5249 - )
Avira (HKLM\...\{70e83cd8-4bd5-4039-ab5a-6b94a8abb641}) (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG)
Avira (Version: 1.1.21.25162 - Avira Operations GmbH & Co. KG) Hidden
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira)
AVM FRITZ!fax für FRITZ!Box (HKLM\...\FRITZ! 2.0) (Version:  - )
aXppt (HKLM\...\{7BB7ADA1-78B7-486A-A2A8-D89F9AD655EF}) (Version: 1.00.0000 - aXflip)
BanglaWord v1.9.0 (HKLM\...\BanglaWord v1.9.0) (Version:  - )
Bauskript Software 2013-11 Standard (HKLM\...\Bauskript Software 2013-11 Standard) (Version: 2013-11 Standard - Bauskript Software)
BeatportDownloader (HKLM\...\BeatportDownloader.EE670286545758FAB4A69D4439CF6054F83E0AC2.1) (Version: 1.003 - Beatport LLC)
BeatportDownloader (Version: 1.003 - Beatport LLC) Hidden
Best Free Image Converter 4.7.7 (HKLM\...\{BA9D29BF-1AB9-4710-AD7C-731FEB21A86C}_is1) (Version:  - zxt2007.com)
Beyond Compare Version 3.3.7 (HKCU\...\BeyondCompare3_is1) (Version:  - Scooter Software)
Bhuvan 1.0 (HKLM\...\{E93DBD89-5FAD-4127-8D64-13C0827B8C22}_is1) (Version:  - ISRO)
BIAS Sound Soap DX VST v1.12 (HKLM\...\BIAS Sound Soap DX VST v1.12) (Version:  - )
BIAS SoundSoap Pro (HKLM\...\{EC79AFD0-B9B6-4114-BBD1-BD7BDFFF0A26}) (Version: 2.0.1 - BIAS, Inc.)
Bing Bar (HKLM\...\{B4089055-D468-45A4-A6BA-5A138DD715FC}) (Version: 7.0.850.0 - Microsoft Corporation)
BitComet 1.13 (HKLM\...\BitComet) (Version: 1.13 - ~RnySmile~)
BitKinex (HKLM\...\{A7CE3C9E-78B4-4855-8D24-5CDF498E31F9}) (Version: 3.2.3 - Barad-Dur, LLC.)
Bitvise Tunnelier 4.32 (remove only) (HKLM\...\Tunnelier) (Version:  - )
Bitvise WinSSHD 5.15 (remove only) (HKLM\...\WinSSHD) (Version:  - )
Blender (remove only) (HKLM\...\Blender) (Version:  - )
BlueStacks App Player (HKLM\...\BlueStacks App Player) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM\...\{7E6316CA-5ED0-4EF9-9920-A92115E286B7}) (Version: 0.7.17.916 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}) (Version: 2.0.3.0 - Apple Inc.)
Bonkey (HKLM\...\Bonkey) (Version:  - )
Boxoft PPT To EXE 1.1 (HKLM\...\Boxoft PPT To EXE_is1) (Version:  - Boxoft Solution)
BroadCam Video Streaming Server (HKLM\...\BroadCam) (Version:  - NCH Software)
Broadcom Gigabit NetLink Controller (HKLM\...\{9AF0B106-56F1-461B-A270-95BC1682E282}) (Version: 11.22.02 - Broadcom Corporation)
CameraHelperMsi (Version: 13.31.1038.0 - Logitech) Hidden
Camtasia Studio 8 (HKLM\...\{B1F8F5EB-75E2-40C3-9A50-7907F1C910F1}) (Version: 8.0.3.994 - TechSmith Corporation)
CastRipper 2.9.6.000 2007.06.09 (HKLM\...\CastRipper_is1) (Version:  - Mini-stream Software, Inc.)
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
Catalyst Control Center Core Implementation (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center Graphics Full Existing (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center Graphics Full New (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center Graphics Light (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Vista (Version: 2008.1114.2149.39131 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2008.1114.2149.39131 - ATI Technologies, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2009.0625.1812.30825 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Chinese Standard (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Chinese Traditional (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Danish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Dutch (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help English (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Finnish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help French (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help German (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Italian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Japanese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Korean (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Norwegian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Portuguese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Russian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Spanish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2008.1114.2148.39131 - ATI) Hidden
CCC Help Swedish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2008.1114.2149.39131 - ATI) Hidden
ccc-utility (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Ccount (HKLM\...\Ccount) (Version: 2.3 - )
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
CGoban 3 (HKCU\...\CGoban 3) (Version:  - KGS Online)
Collectorz.com Music Collector (HKLM\...\Collectorz.com Music Collector) (Version:  - )
Comodo SecureEmail 2.5.0.31 (HKLM\...\SecureEmail 2.5.0.31) (Version: 2.5.0.31 - COMODO CA)
Compatibility Pack für 2007 Office System (HKLM\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Contact Converter (HKLM\...\Contact Converter) (Version:  - )
Convert XLS (HKLM\...\Convert XLS_is1) (Version:  - Softinterface, Inc.)
CPUID CPU-Z 1.57.1 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
Daniusoft MP3 WAV Converter(Build 2.3.1.0) (HKLM\...\Daniusoft MP3 WAV Converter_is1) (Version:  - Daniusoft Software)
Data Lifeguard Diagnostic for Windows (HKLM\...\{75B61CF0-B8A8-46E2-8709-C4A79898AC1D}) (Version: 1.17 - Western Digital Corporation)
Data Lifeguard Diagnostic for Windows 1.27 (HKLM\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
DC-Bass Source 1.1.1 (HKLM\...\DC-Bass Source) (Version:  - )
Debugging Tools for Windows (x86) (HKLM\...\{300A2961-B2B5-4889-9CB9-5C2A570D08AD}) (Version: 6.11.1.404 - Microsoft Corporation)
Debut Video Capture Software (HKLM\...\Debut) (Version:  - NCH Software)
Dell DataSafe Online (HKLM\...\{13766F76-6C8C-4E57-A9F3-3212D1C6E0D1}) (Version: 1.1.0023 - Dell, Inc.)
Dell Dock (HKLM\...\{F6CB42B9-F033-4152-8813-FF11DA8E6A78}) (Version: 1.0.0 - Dell)
Dell Driver Download Manager - 1  (HKCU\...\f031ef6ac137efc5) (Version: 2.0.0.0 - Dell Inc.)
Dell Driver Download Manager (HKCU\...\309a46b1dc89b774) (Version: 1.0.0.0 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{3138EAD3-700B-4A10-B617-B3F8096EE30D}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 14.0.2.0 - Synaptics Incorporated)
Dell Video Chat (HKLM\...\Dell Video Chat) (Version: 6.0 (6567) - SightSpeed Inc.)
Dell Webcam Central (HKLM\...\Dell Webcam Central) (Version: 1.02.06 - Creative Technology Ltd)
Dell-eBay (HKLM\...\{B935C985-A17F-484B-8470-09E4FC27DC26}) (Version: 1.00.0000 - Dell)
DFX for Winamp (HKLM\...\DFX for Winamp) (Version: 9.203.0.0 - Power Technology)
DiskCheckup v3.2 (HKLM\...\DiskCheckup_is1) (Version: 3.2.1000 - PassMark Software)
DivX Codec (HKLM\...\{7B63B2922B174135AFC0E1377DD81EC2}) (Version: 6.9.1 - DivX, Inc.)
DivX Converter (HKLM\...\{B13A7C41581B411290FBC0395694E2A9}) (Version: 7.1.0 - DivX, Inc.)
DivX Player (HKLM\...\{8ADFC4160D694100B5B8A22DE9DCABD9}) (Version: 7.2.0 - DivX, Inc.)
DivX Plus DirectShow Filters (HKLM\...\DivX Plus DirectShow Filters) (Version:  - DivX, Inc.)
DivX Web Player (HKLM\...\{B7050CBDB2504B34BC2A9CA0A692CC29}) (Version: 1.5.0 - DivX,Inc.)
Dorgem 2.1.0 (HKLM\...\Dorgem_is1) (Version:  - Frank Fesevur)
dradio-Recorder Version 3.02.6 (HKLM\...\dradio-Recorder_is1) (Version:  - )
Drago 4.21 (HKLM\...\Drago_is1) (Version:  - Gilles Arcas-Luque)
Driver Whiz (HKLM\...\{97BBECCF-B1FD-4010-8D4B-EFC9E3CCEECF}) (Version: 8.0.1 - Driver Whiz)
DriverAgent by eSupport.com (HKLM\...\DriverAgent.exe) (Version:  - )
Dropbox (HKCU\...\Dropbox) (Version: 2.10.30 - Dropbox, Inc.)
E.M. PowerPoint Video Converter 3.20 (HKLM\...\E.M. PowerPoint Video Converter_is1) (Version:  - EffectMatrix, Inc.)
Easy WebTV And Radio 2.5 (HKLM\...\{83BC9997-97FE-46C5-9050-4C226017741A}_is1) (Version:  - Digit-A)
EasyCalendarMaker Evaluation (HKLM\...\EasyCalendarMaker Evaluation_is1) (Version:  - EasyCalendarMaker)
EBRclock (HKLM\...\EBRclock_is1) (Version:  - EBRaudio)
Einklang TRIAL (HKLM\...\{F43179A9-E88C-43C6-ADE1-162D0DD29BC7}) (Version: 0.0.0.1 - Eisenberg)
Elite Proxy Switcher 1.07E (HKLM\...\Elite Proxy Switcher_is1) (Version:  - hxxp://www.my-proxy.com)
erLT (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Excelsior JET 7.2 Evaluation (HKLM\...\Excelsior_0) (Version:  - )
Exif wMarker v1.4.0 (HKLM\...\{C288965E-48FB-472B-AF93-6DAFA2383629}_is1) (Version:  - Gianpaolo Bottin)
Express Burn (HKLM\...\ExpressBurn) (Version:  - NCH Software)
Express Delegate (HKLM\...\Delegate) (Version:  - NCH Software)
Express Dictate (HKLM\...\Express) (Version:  - NCH Software)
Express Scribe (HKLM\...\Scribe) (Version:  - NCH Software)
Ezvid (HKLM\...\{F96D619D-99D6-4C9C-A393-0CD22DE1CA66}_is1) (Version: 0.8.9.5 - Ezvid, inc.)
f4 2012 (HKLM\...\f42012) (Version:  - audiotranskription.de)
Fast Track Ultra 8R (HKLM\...\{EA26983C-5A88-4A83-973D-D9596C6733F6}) (Version: 5.10.00.5098v3 - M-Audio)
FileBoss 2.515 (HKLM\...\FileBoss 2.5_is1) (Version: 2.515 - The Utility Factory)
FL Studio 9 (HKLM\...\FL Studio 9) (Version:  - Image-Line)
FLAC 1.2.1a (remove only) (HKLM\...\FLAC) (Version: 1.2.1a - Xiph.org)
FlashBoot 2.0f (HKLM\...\FlashBoot_is1) (Version:  - Mikhail Kupchik)
FlashGet 1.9.6.1073 (HKLM\...\FlashGet) (Version: 1.9.6.1073 - hxxp://www.FlashGet.com)
FlashGet(JetCar) (HKLM\...\FlashGet(JetCar)) (Version:  - )
Flickr Drive Shell Extension (HKLM\...\FlickrDrive) (Version:  - viksoe.dk)
FlickrDown (HKLM\...\FlickrDown) (Version: 2.43 - Greggman)
FormatFactory 2.96 (HKLM\...\FormatFactory) (Version: 2.96 - Free Time)
Free Music Zilla (HKLM\...\Free Music Zilla_is1) (Version:  - FreeMusicZilla.com)
Free RAR Extract Frog (HKLM\...\Free RAR Extract Frog) (Version: 1.80 - Philipp Winterberg)
Free RM to MP3 Converter 1.12 (HKLM\...\Free RM to MP3 Converter_is1) (Version:  - Jodix Technologies Ltd.)
Free Video to Flash Converter version 4.2 (HKLM\...\Free Video to Flash Converter_is1) (Version:  - DVDVideoSoft Limited.)
FreeCommander 2009.02a (HKLM\...\FreeCommander_is1) (Version: 2009.02 - Marek Jasinski)
freenet SMS (HKLM\...\{7D3F5F18-7F7A-4826-87E4-315BBDB45E80}) (Version: 1.6 - freenet.de GmbH)
FrontlineSMS 1.6.16.1 (HKLM\...\FrontlineSMS_0) (Version:  - )
GIMP 2.6.8 (HKLM\...\WinGimp-2.0_is1) (Version:  - )
GIMPshop 2.2.8 (HKLM\...\GIMPshop) (Version: 2.2.8 - The GIMP team (hack by Scott Moschella))
Gitabitan Archive (HKLM\...\ST6UNST #1) (Version:  - )
GnuWin32: Bzip2-1.0.5 (HKLM\...\Bzip2-1.0.5_is1) (Version: 1.0.5 - GnuWin32)
GoGui (HKLM\...\GoGui) (Version: 1.4.9 - )
Google App Engine (HKLM\...\{AE010304-007D-11DD-A3C1-001636EEECBD}) (Version: 1.3.4.0 - Google Inc.)
Google Books Downloader version 2.2 (HKLM\...\{216729B6-014A-F413-814F-F17F74FBA113}_is1) (Version: 2.2 - GBOOKSDOWNLOADER.COM)
Google Chrome (HKCU\...\Google Chrome) (Version: 37.0.2062.120 - Google Inc.)
Google Desktop (HKLM\...\Google Desktop) (Version: 5.9.1005.12335 - Google)
Google Drive (HKLM\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google SketchUp 8 (HKLM\...\{D22002ED-EE2A-4CB1-A63D-430E62A2E8D8}) (Version: 3.0.4811 - Google, Inc.)
Google Talk (remove only) (HKCU\...\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk) (Version:  - )
Google Talk Plugin (HKLM\...\{C1E3DFE7-4EAD-3E9E-A826-E06055BA5921}) (Version: 5.4.2.18903 - Google)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Google Updater (HKLM\...\Google Updater) (Version: 2.4.2432.1652 - Google Inc.)
GooReader (HKLM\...\{967D005B-0006-4D46-8FC5-92CCA18ED156}) (Version: 1.8.0 - GooReader)
GoPanda2 (HKLM\...\{5BA97D0D-3A91-448E-976C-0BF6F7AA0B3F}) (Version: 2.2.0 - PANDANET Inc.)
Gorgy-Timing Ledi (HKLM\...\Gorgy-Timing Ledi) (Version:  - )
GoToAssist 8.0.0.514 (HKLM\...\GoToAssist) (Version:  - )
GoToMeeting 5.2.0.952 (HKCU\...\GoToMeeting) (Version: 5.2.0.952 - CitrixOnline)
GOWrite 2 version 2.3.48 (HKLM\...\GOWrite2_is1) (Version: 2.3.48 - Lauri Paatero)
Gpg4win (2.0.0) (HKLM\...\GPG4Win) (Version: 2.0.0 - The Gpg4win Project)
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.05) (Version: 9.05 - Artifex Software Inc.)
GPL Ghostscript 8.70 (HKLM\...\GPL Ghostscript 8.70) (Version:  - )
GPL Ghostscript 8.71 (HKLM\...\GPL Ghostscript 8.71) (Version:  - )
Graboid Video 1.65 (HKLM\...\Graboid Video) (Version: 1.65 - Graboid Inc.)
GSview 4.9 (HKLM\...\GSview 4.9) (Version:  - )
Hard Disk Low Level Format Tool 2.36 build 1181 (HKLM\...\Hard Disk Low Level Format Tool_is1) (Version:  - HDDGURU)
Hardcore (HKLM\...\Hardcore) (Version:  - Image-Line)
HiJackThis (HKLM\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HijackThis 2.0.2 (HKLM\...\HijackThis) (Version: 2.0.2 - TrendMicro)
HydraVision (Version: 4.2.234.0 - Advanced Micro Devices, Inc.) Hidden
HyperCam 2 (HKLM\...\HyperCam 2) (Version:  - )
Icecast 2.3.2 (HKLM\...\Icecast2 Win32_is1) (Version:  - )
ICQ6.5 (HKLM\...\{60DE4033-9503-48D1-A483-7846BD217CA9}) (Version: 6.5 - ICQ)
IdeaTalent Data Tracking Apps v3.0 (HKCU\...\aafc2ed2430c4b99) (Version: 3.0.0.0 - IdeaTalent LLC)
IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6217.0 - IDT)
IL Download Manager (HKLM\...\IL Download Manager) (Version:  - Image-Line)
iLike Sidebar (HKLM\...\{CB8E2137-EE2E-4A97-A154-0562A3DD12AB}) (Version: 1.2.17 - iLike)
ImTOO Convert PowerPoint to Video Free (HKLM\...\ImTOO Convert PowerPoint to Video Free) (Version: 1.1.1.20120601 - ImTOO)
InFlac 1.1.1 (HKLM\...\InFlac) (Version: 1.1.1 - Michael Facquet)
Integrated Webcam Driver (1.04.01.0601)   (HKLM\...\Creative OA008) (Version: 1.04.01.0601 - Creative Technology Ltd.)
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) IPP Run-Time Installer 5.2 for Windows* on IA-32 (HKLM\...\{38F48AED-66D8-464C-993E-C7296C7A199B}) (Version: 5.2.0.2 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Driver (HKLM\...\{261F2A97-EF19-44F7-8040-78DC574CD22A}) (Version: 12.00.4000 - Intel(R) Corporation)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
Internet-Radio Player Version 2.01.5 (HKLM\...\Internet-Radio Player_is1) (Version:  - )
Iomega Product Registration (HKLM\...\{90FF23FE-0E1B-40DF-A22E-B4C0372E5936}) (Version: 7.24.0000 - Iomega Corporation)
Iomega StorCenter (HKLM\...\Iomega StorCenter) (Version: 2.1.0.0 - EMC)
iPhone Configuration Utility (HKLM\...\{FA54AFB1-5745-4389-B8C1-9F7509672ED1}) (Version: 2.1.0.163 - Apple Inc.)
Ipswitch WS_FTP LE (HKLM\...\{B3A31EEE-7C65-4EE6-BB0D-5549FD2D67B9}) (Version: 6.00 - )
IrfanView (remove only) (HKLM\...\IrfanView) (Version:  - )
iSpring Free 6 (HKLM\...\{594A6CDC-27E8-4E2D-BCD3-CC8B95A4351E}) (Version: 6.1.0 - iSpring Solutions Inc.)
iTunes (HKLM\...\{350FB27C-CF62-4EF3-AF9D-70FF313FE221}) (Version: 10.0.0.68 - Apple Inc.)
jahPlayer (HKLM\...\jahPlayer) (Version:  - )
Jahshaka (HKLM\...\Jahshaka) (Version:  - )
Japanese Fonts Support For Adobe Reader 9 (HKLM\...\{AC76BA86-7AD7-5760-0000-900000000003}) (Version: 9.0.0 - Adobe Systems Incorporated)
Java 7 Update 67 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (Version: 2.1.67.1 - Oracle, Inc.) Hidden
JavaFX 2.1.1 (HKLM\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
JDownloader (HKLM\...\JDownloader) (Version:  - AppWork UG (haftungsbeschränkt))
jetAudio Basic VX (HKLM\...\{DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A}) (Version: 8.0.11 - COWON)
Jing (HKLM\...\{49E5F021-4DA5-41A3-A893-0A9564D30264}) (Version: 2.3.10089 - TechSmith Corporation)
JonDo (HKLM\...\JonDoUninstall) (Version:  - )
Junk Mail filter update (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Karen's Directory Printer (HKLM\...\Karen's Directory Printer) (Version: 5.3.0.2 - Karen Kenworthy)
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
Kiwix 0.9 rc2 (HKLM\...\Kiwix) (Version: 0.9 rc2 - Kiwix)
K-Lite Codec Pack 4.0.0 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 4.0.0 - )
Laid Back Radio (HKLM\...\MediaCenter2.0AE88B12B5A3B4B6C92EE55F2106C4381D1A58DB.1) (Version: v1.3 - UNKNOWN)
Laid Back Radio (Version: 1.3 - UNKNOWN) Hidden
Last.fm 1.5.4.27091 (HKLM\...\LastFM_is1) (Version:  - Last.fm)
Lernout & Hauspie TruVoice American English TTS Engine (HKLM\...\tv_enua) (Version:  - )
Levelator (HKLM\...\Levelator_is1) (Version:  - The Conversations Network)
Lexmark Printable Web (HKLM\...\{D2C5E510-BE6D-42CC-9F61-E4F939078474}) (Version: 1.0.0.0 - )
Lexmark Pro700 Series (HKLM\...\Lexmark Pro700 Series) (Version:  - Lexmark International, Inc.)
Lexmark Toolbar (HKLM\...\{1017A80C-6F09-4548-A84D-EDD6AC9525F0}) (Version: 4.13.37.0 - )
Lexmark Tools for Office (HKLM\...\{10812DE7-2E57-4740-B226-6B3BE34AF9D7}) (Version: 1.29.0.0 - )
LingvoSoft Talking Dictionary 2006 (English<->Bengali) for Windows (HKLM\...\LingvoSoft Talking Dictionary 2006 (English<->Bengali) for Windows) (Version:  - )
Lion 3.0.3 (HKLM\...\Lion_is1) (Version:  - www.schleinzer.com)
Live 6.0.7 (HKLM\...\Live 6.0.7) (Version:  - )
Live 8.0.9 (HKLM\...\Live 8.0.9) (Version:  - )
Live! Cam Avatar Creator (HKLM\...\{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}) (Version: 4.6.2303.1 - Creative Technology Ltd)
Livestation (HKLM\...\{295CC650-E4D0-11DE-8A39-0800200C9A66}) (Version: 3.1.0 - Livestation)
Livestream for Producers (HKLM\...\{53466613-9260-4814-AE66-7F3A3FA978D3}) (Version: 0.0.64 - Livestream)
Livestream Procaster (HKLM\...\{60147180-8370-44BC-9BBD-E554D86F0BA3}) (Version: 20.0.65 - Procaster)
LizardTech DjVu Control (HKLM\...\{105CFC7C-6992-11D5-BD9D-000102C10FD8}) (Version:  - )
Lizardtech Express View Browser Plug-in (HKLM\...\{9CD8FC8E-A1CA-4634-96BC-CD6B2D4797CC}) (Version:  - )
LizardTech GeoViewer (HKCU\...\602272bddadc0877) (Version: 4.0.2.2587 - LizardTech)
Logitech SetPoint (HKLM\...\{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}) (Version: 4.80 - Logitech)
Logitech Webcam Software (HKLM\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.0 - Logitech Inc.)
Lotus Notes (HKLM\...\Lotus Notes) (Version:  - )
LWS Facebook (Version: 13.31.1038.0 - Logitech) Hidden
LWS Gallery (Version: 13.31.1038.0 - Logitech) Hidden
LWS Help_main (Version: 13.31.1044.0 - Logitech) Hidden
LWS Launcher (Version: 13.31.1038.0 - Logitech) Hidden
LWS Motion Detection (Version: 13.30.1395.0 - Logitech) Hidden
LWS Pictures And Video (Version: 13.31.1038.0 - Logitech) Hidden
LWS Twitter (Version: 13.30.1346.0 - Logitech) Hidden
LWS Video Mask Maker (Version: 13.30.1379.0 - Logitech) Hidden
LWS VideoEffects (Version: 13.30.1379.0 - Logitech) Hidden
LWS Webcam Software (Version: 13.31.1038.0 - Logitech) Hidden
LWS WLM Plugin (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (Version: 13.31.1038.0 - Logitech) Hidden
MAGIX Video easy SE (HKLM\...\MAGIX_MSI_Video_easy_SE) (Version: 1.0.4.1 - MAGIX AG)
MAGIX Video easy SE (Version: 1.0.4.1 - MAGIX AG) Hidden
Malwarebytes' Anti-Malware (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version:  - Malwarebytes Corporation)
Malwarebytes Anti-Malware version 2.0.2.1012 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
ManyCam 2.4 (remove only) (HKLM\...\ManyCam) (Version: 2.4.69 - ManyCam LLC)
MediaFire Express (beta) (HKLM\...\MediaFire Express (beta) 0.10.0.2892) (Version: 0.10.0.2892 - MediaFire)
MediaMonkey 4.0 (HKLM\...\MediaMonkey_is1) (Version: 4.0 - Ventis Media Inc.)
MediaMonkey Script: ExternalTools v1.3 (HKLM\...\MediaMonkey Script: ExternalTools v1.3_is1) (Version: 1.3 - SteegyCorp)
Meebo Notifier (HKCU\...\Meebo Notifier) (Version: 0.99 - Meebo, Inc)
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - deu) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 Language Pack SP1 - deu (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Expression Encoder 4 (HKLM\...\Encoder_4.0.4276.0) (Version: 4.0.4276.0 - Microsoft Corporation)
Microsoft Expression Encoder 4 (Version: 4.0.4276.0 - Microsoft Corporation) Hidden
Microsoft Expression Encoder 4 Screen Capture Codec (HKLM\...\{64C12304-7010-43F3-A25B-BDC38DE41E46}) (Version: 4.0.4276.0 - Microsoft Corporation)
Microsoft GIF Animator (HKLM\...\GIF Animator) (Version:  - )
Microsoft Office 2000 Standard (HKLM\...\{00020407-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2816 - Microsoft Corporation)
Microsoft Office Excel Viewer (HKLM\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (English) (HKLM\...\{95120000-00AF-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office PowerPoint Viewer 2007 (German) (HKLM\...\{95120000-00AF-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Robocopy GUI (HKLM\...\{107C666F-63C5-4263-8D40-8B9CFB5FED08}) (Version: 1.0.0 - Microsoft)
Microsoft Server Speech Recognition Language - TELE (en-GB) (HKLM\...\{E0D13850-F97C-4B30-9F05-862299CE8DA5}) (Version: 11.0.7400.335 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Speech Recognition Engine 4.0 (English) (HKLM\...\MSCSR) (Version:  - )
Microsoft SQL Server 2005 (HKLM\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (RADIONOMY536765) (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) (Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Native Client (HKLM\...\{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{E7084B89-69E0-46B3-A118-8F99D06988CD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Sync Framework Runtime Native v1.0 (x86) (HKLM\...\{8A74E887-8F0F-4017-AF53-CBA42211AAA5}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Sync Framework Services Native v1.0 (x86) (HKLM\...\{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}) (Version: 1.0.1215.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ Run Time  Lib Setup (HKLM\...\{AAF4238F-7C29-451D-9925-C753271A5728}) (Version: 1.0.0 - Microsoft)
Microsoft Works (HKLM\...\{39D0E034-1042-4905-BECB-5502909FCB7C}) (Version: 9.7.0621 - Microsoft Corporation)
Mini-stream RM-MP3 Converter 2.7.3.700 2006.09.29 (HKLM\...\Mini-stream RM-MP3 Converter_is1) (Version:  - Mini-stream Software, Inc.)
Miranda IM 0.8.10 (HKLM\...\Miranda IM) (Version:  - )
Miro (HKLM\...\Miro) (Version: 2.5.2 - Participatory Culture Foundation)
MobileMe Control Panel (HKLM\...\{51F96AEC-D902-4434-A0DC-B9692A21AE7C}) (Version: 3.0.0.101 - Apple Inc.)
Moyea PPT to Video Converter Edu Edition version 2.4.0.62 (HKLM\...\{DB42E4CA-B6B5-4D15-A3CB-2391F24DFF9F}_is1) (Version:  - Moyea Software)
Moyea PPT to Video Converter version 1.4.3.36 (HKLM\...\{21CA58E1-3C5F-4893-A753-EB296503073D}_is1) (Version:  - Moyea Software)
MozBackup 1.4.9 (HKLM\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla ActiveX Control v1.7.7 (HKLM\...\Mozilla ActiveX Control v1.7.7) (Version:  - )
Mozilla Firefox 12.0 (x86 en-US) (HKLM\...\Mozilla Firefox 12.0 (x86 en-US)) (Version: 12.0 - Mozilla)
Mozilla Firefox 16.0.1 (x86 de) (HKLM\...\Mozilla Firefox 16.0.1 (x86 de)) (Version: 16.0.1 - Mozilla)
Mozilla Firefox 31.0 (x86 de) (HKLM\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MP3 Skype Recorder (HKLM\...\{1F1C4668-7767-4109-9B5E-19AD056F2CA0}) (Version: 1.9.0 - Alexander Nikiforov)
MP3 Skype Recorder (HKLM\...\{FDC699AC-3035-41DA-A4C4-C5D9BEB16E2B}) (Version: 1.10.1 - Alexander Nikiforov)
MSVCRT (Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
msxml4 (HKLM\...\{5AE3D9F1-9E9E-4015-8787-E22705AA32C5}) (Version: 1.0.0 - Default Company Name)
MultiBit 0.5.15 (HKLM\...\MultiBit 0.5.15) (Version: 0.5.15 - )
MultiGo Version 4 (HKLM\...\MultiGo 4_is1) (Version:  - )
MultiMon TaskBar 2.1 (HKLM\...\MultiMon TaskBar_is1) (Version:  - MediaChance)
MusicBrainz Picard (HKLM\...\MusicBrainz Picard) (Version: 0.12.1 - MusicBrainz)
MusicIP Mixer 1.8.1 (HKLM\...\MusicIP Mixer_is1) (Version:  - MusicIP)
MyFreeCodec (HKCU\...\MyFreeCodec) (Version:  - )
MySpaceIM (HKLM\...\MySpaceIM) (Version: 1.0.789.0 - MySpace.com)
Native Instruments Controller Editor (HKLM\...\Native Instruments Controller Editor) (Version:  - Native Instruments)
Native Instruments Controller Editor (Version: 1.4.5.910 - Native Instruments) Hidden
Native Instruments Service Center (HKLM\...\Native Instruments Service Center) (Version:  - Native Instruments)
Native Instruments Service Center (Version: 2.3.2.926 - Native Instruments) Hidden
Native Instruments Traktor 2 (HKLM\...\Native Instruments Traktor 2) (Version:  - Native Instruments)
Native Instruments Traktor 2 (Version: 2.5.1.13951 - Native Instruments) Hidden
NCH Toolbox (HKLM\...\ToolBox) (Version:  - NCH Software)
NDTV Play (HKCU\...\1439330804.www.ndtv.com) (Version:  - www.ndtv.com)
Nero 7 Essentials (HKLM\...\{46532C8D-D707-4D35-B1C1-04811B8F1031}) (Version: 7.03.0669 - Nero AG)
neroxml (Version: 1.0.0 - Nero AG) Hidden
Netscape (7.2) (HKLM\...\Netscape (7.2)) (Version:  - )
Netscape Navigator (9.0.0.6) (HKLM\...\Netscape Navigator (9.0.0.6)) (Version: 9.0.0.6 (en-US) - Netscape)
NetTransport 2.96c.620 (HKLM\...\{78D2B9D0-E680-4295-9830-6B23397B4746}_is1) (Version:  - Xi)
NirSoft BlueScreenView (HKLM\...\NirSoft BlueScreenView) (Version:  - )
NirSoft ShellExView (HKLM\...\NirSoft ShellExView) (Version:  - )
NoteTab Light 6 (Remove only) (HKLM\...\NoteTab Light 6_is1) (Version: 6.12 - Fookes Holding Ltd)
Octoshape add-in for Adobe Flash Player (HKCU\...\Octoshape add-in for Adobe Flash Player) (Version:  - )
oDesk Team (HKCU\...\oDVT) (Version:  - oDesk Corporation)
OGA Notifier 2.0.0048.0 (Version: 2.0.0048.0 - Microsoft Corporation) Hidden
ooVoo (HKLM\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 2.9.0105 - ooVoo LLC.)
Opal-Convert Excel VCF - LITE  (HKLM\...\{70C18651-FB2E-4FA5-872D-AF28CB7238A0}) (Version:  - Skytopia)
Open Broadcaster Software (HKLM\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM\...\OpenAL) (Version:  - )
OpenLibraries (HKLM\...\OpenLibraries) (Version:  - )
OpenOffice.org 3.1 (HKLM\...\{E6B87DC4-2B3D-4483-ADFF-E483BF718991}) (Version: 3.1.9420 - OpenOffice.org)
OpenSSL 0.9.8k Light (32-bit) (HKLM\...\OpenSSL Light (32-bit)_is1) (Version:  - OpenSSL Win32 Installer Team)
Opera 11.50 (HKLM\...\Opera 11.50.1074) (Version: 11.50.1074 - Opera Software ASA)
Paltalk Messenger (HKLM\...\PalTalk8.2) (Version: 10.0 - AVM Software Inc.)
Panasonic ByteFM 1.1 (HKLM\...\Panasonic ByteFM) (Version: 1.1 - Panasonic ByteFM Player)
PANDA-glGo (HKLM\...\glGo) (Version: 1.4 - PANDANET Inc.)
PandoraRecovery (Remove Only) (HKLM\...\PandoraRecovery) (Version:  - )
Pd-0.41.4-extended (HKLM\...\pd_is1) (Version:  - pure-data.org)
PDF To JPG Converter 2.0.2 (HKLM\...\PDF To JPG Converter_is1) (Version:  - PDF To JPG Converter)
Pdf995 (HKLM\...\Pdf995) (Version:  - )
PdfEdit995 (HKLM\...\PdfEdit995) (Version:  - )
PDFill PDF Editor with FREE Writer and Free Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 7.0 - PlotSoft LLC)
pdfsam (HKLM\...\pdfsam) (Version: 2.0.0 - )
PeerGuardian 2.0 (HKLM\...\PeerGuardian_is1) (Version: 2.1.0.2 - Methlabs Productions)
Personal Renamer (HKCU\...\1527f7fbf849ce3b) (Version: 2.3.4.0 - Personal Renamer)
Philips Intelligent Agent (HKLM\...\Philips Intelligent Agent_is1) (Version: 2.1 - Philips)
Philips SPC220NC Webcam (HKLM\...\{6CC0CB79-C873-404A-820B-248934D04191}) (Version: 1.0.0.0 - Philips)
phonostar-Player Version 2.01.4 (HKLM\...\phonostarRadioPlayer_is1) (Version:  - )
Photo to Sketch 4.0 (HKLM\...\{42CC40A6-332E-4F53-8FB8-BD6D77D764FB}_is1) (Version:  - Thinker Software, Inc.)
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.6 - Google, Inc.)
picture-shark 1.0 (HKLM\...\%ProgramName%) (Version:  - )
plist Editor for Windows 1.0.2 (HKLM\...\plist Editor for Windows) (Version: 1.0.2 - VOWSoft,Ltd.)
PoiZone (HKLM\...\PoiZone) (Version:  - Image-Line)
Powerbullet Presenter  1.43 (HKLM\...\Powerbullet Presenter_is1) (Version: 1.43 - DDD Pty Ltd)
Powerbullet Presenter (HKLM\...\Powerbullet Presenter free v1.35_is1) (Version:  - DDD Pty Ltd)
PowerDVD (HKLM\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: 8.1 - Dell)
PPT To Video Scout (HKLM\...\PPT To Video Scout_is1) (Version: 2.48.36 - ByteScout)
PresenterSoft PowerVideoMaker 2.0.1 (HKLM\...\PowerVideoMaker for PowerPoint 2000_is1) (Version: 2.0.1 - Presentersoft)
Prism Video Converter (HKLM\...\Prism) (Version:  - NCH Software)
progeCAD 2009 Smart! ENG (HKLM\...\progeCAD 2009 Smart! ENG) (Version:  - )
PublicWare Music Archive (HKLM\...\PublicWare Music Archive) (Version:  - PublicWare)
Python 2.6.5 (HKLM\...\{4723f199-fa64-4233-8e6e-9fccc95a18ee}) (Version: 2.6.5150 - Python Software Foundation)
qGo 1.5.4-r2 (HKLM\...\qGo_is1) (Version:  - Emmanuel Béranger & Johannes Mesa & Peter Strempel)
QuickSet (HKLM\...\{C4972073-2BFE-475D-8441-564EA97DA161}) (Version: 9.2.13 - Dell Inc.)
QuickTime (HKLM\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Radio Toolbox (HKLM\...\Radio Toolbox) (Version: 1.1.1 - www.radiotoolbox.com)
RadioManager (HKLM\...\{9D40BCD5-AF1B-4B24-8743-A22BBDAEFDAA}) (Version: 1.4.0 - Radionomy)
RadLight MPC DirectShow Filter (remove only) (HKLM\...\RadLight MPC DirectShow Filter) (Version:  - )
RealDownloader (Version: 1.3.0 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
ReBirth ModPacker (HKLM\...\ReBirth ModPacker) (Version:  - )
ReBirth RB-338 2.0 (HKLM\...\ReBirth RB-338 2.0) (Version:  - )
Retrospect Express HD 2.5 (HKLM\...\{BCC57687-98A2-4C4C-B0F8-BC6B6F52D4E3}) (Version: 2.5.125 - EMC)
Revo Uninstaller 1.95 (HKLM\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Riva FLV Encoder 2.0 (HKLM\...\Riva FLV Encoder 2.0_is1) (Version: 2.00.0005 - Rothenberger & Partner)
Roxio Creator Audio (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Copy (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Data (Version: 3.7.0 - Roxio) Hidden
Roxio Creator DE (HKLM\...\{09760D42-E223-42AD-8C3E-55B47D0DDAC3}) (Version: 10.1 - Roxio)
Roxio Creator DE (Version: 3.7.0 - Roxio) Hidden
Roxio Creator Tools (Version: 3.7.0 - Roxio) Hidden
Roxio Express Labeler 3 (Version: 3.2.1 - Roxio) Hidden
Roxio Update Manager (Version: 6.0.0 - Roxio) Hidden
RSSeditor (HKLM\...\{92652096-6C27-447C-8007-CCE18C940844}) (Version: 0.09.0000 - DAX Softwareentwicklung)
RustemSoft XML Converter (HKLM\...\XMLConverter) (Version:  - )
RustemSoft XMLFox Freeware XML editor (HKLM\...\XMLFox) (Version:  - )
Safari (HKLM\...\{E56D39F8-2A9F-44B4-B068-A72E45A073E6}) (Version: 4.31.9.1 - Apple Inc.)
Saffire MixControl 2.2 (HKLM\...\Saffire PRO 40_is1) (Version: 2.2 - Focusrite Audio Engineering Ltd.)
Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.)
Samsung Kies (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.43.0 - SAMSUNG Electronics Co., Ltd.)
SavvyConnect (HKLM\...\{21593B51-6838-41A1-A420-7283B4E02A33}) (Version: 3.3.3401 - Luth Research)
Sawer (HKLM\...\Sawer) (Version:  - Image-Line)
SC UniPad 1.20 (HKLM\...\SC_UniPad_is1) (Version: 1.20 - Sharmahd Computing)
SCANIA Truck Driving Simulator 1.5.0 (HKLM\...\SCANIA Truck Driving Simulator) (Version: 1.5.0 - SCS Software)
Schoener Fernsehen 0.0.0.1 (HKLM\...\Schoener Fernsehen) (Version: 0.0.0.1 - © schoener-fernsehen.com)
Screencast-O-Matic (HKCU\...\Screencast-O-Matic) (Version:  - Screencast-O-Matic)
Scribd Uploader (HKLM\...\{2A32B22B-BC13-4D68-951C-413CE3989A09}) (Version: 1.2.1 - scribd Inc)
Scribus 1.3.7 (HKLM\...\Scribus 1.3.7) (Version: 1.3.7 - The Scribus Team)
Scroll Mouse (HKLM\...\KYE) (Version: 7.09.00 - KYE Systems Corp.)
SDP Downloader (HKLM\...\{B547CB8D-549A-436E-97B5-E79F911B11E2}) (Version: 2.3.0 - SDP Multimedia)
SeaTools for Windows (HKLM\...\{98613C99-1399-416C-A07C-1EE1C585D872}) (Version: 1.2.0.7 - Seagate Technology)
Shoshi English to Bangla Dictionary 1.2 (HKLM\...\Shoshi English to Bangla Dictionary) (Version: 1.2 - PicoTech)
SHOUTcast DNAS (remove only) (HKLM\...\SCDNAS) (Version:  - )
SHOUTcast DSP Plug-in v2 (HKLM\...\SHOUTcast) (Version:  - )
SHOUTcast Source DSP 1.9.1 (remove only) (HKLM\...\SHOUTcastDSP) (Version:  - )
Sigel Beschriftungs-Software für Überweisung und Lastschrift (HKLM\...\Sigel Beschriftungs-Software für Überweisung und Lastschrift) (Version:  - )
Signature995 (HKLM\...\Signature995) (Version:  - )
Silverlight Client for Facebook (HKCU\...\2630906826.www.silverlight.net) (Version:  - www.silverlight.net)
simfy (HKLM\...\Simfy) (Version: 1.3.0 - simfy GmbH)
simfy (Version: 1.3.0 - simfy GmbH) Hidden
SimpleOCR 3.1 (HKLM\...\SimpleOCR 3.1) (Version:  - )
SiSoftware Sandra Lite 2010c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2296}_is1) (Version: 16.26.2010.1 - SiSoftware)
SIW version 2010.04.28 (HKLM\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2010.04.28 - Topala Software Solutions)
Skins (Version: 2008.1114.2149.39131 - ATI) Hidden
Skype Click to Call (HKLM\...\{B6CF2967-C81E-40C0-9815-C05774FEF120}) (Version: 6.3.11079 - Skype Technologies S.A.)
Skype™ 6.20 (HKLM\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.20.104 - Skype Technologies S.A.)
SmartDraw 2014 (HKLM\...\SmartDraw 2014) (Version:  - SmartDraw, LLC)
SMTPAuth 2.01 (HKLM\...\SMTPAuth) (Version: 2.01 - Bisswanger Software)
SocialSafe (HKLM\...\com.1minus1.socialsafe.D675411CF670AA3EFAC13BDD847989BEDE2115E2.1) (Version: 1.2.395 - Social Safe Limited)
SocialSafe (Version: 1.2.395 - Social Safe Limited) Hidden
Some PDF to HTML Converter 1.5 (HKLM\...\Some PDF to HTML Converter_is1) (Version:  - SomePDF.com)
Some PDF to Txt Converter 1.5 (HKLM\...\Some PDF to Txt Converter_is1) (Version:  - SomePDF.com)
Sony Noise Reduction Plug-In 2.0h (HKLM\...\{06A1BE8A-4CA4-4A39-B9E4-E815AA8FE05C}) (Version: 2.0.451 - Sony)
Sound Byte 4.1.0 (HKLM\...\Sound Byte_is1) (Version:  - Black Cat Systems)
SpeedFan (remove only) (HKLM\...\SpeedFan) (Version:  - )
SpiderOak (HKLM\...\{7D322C10-2585-4125-9A11-DFB51291FB32}) (Version: 5.1.6.10102 - SpiderOak)
Spotify (HKLM\...\Spotify) (Version: 0.5.1 - )
Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.2.25 - Safer-Networking Ltd.)
Stereo Tool 3.55 (HKLM\...\Stereo Tool) (Version:  - )
StreamDown (HKLM\...\StreamDown v6.4_is1) (Version:  - CocSoft)
StreamDown 6.6.0.0 (HKLM\...\{FAC4B147-046E-4759-B4BF-E8A496568121}_is1) (Version:  - CoCSoft, Inc.)
StreamDown 6.8.0.0 (HKLM\...\{78F2282B-9AC8-49AA-B34F-6FD68E8E4362}_is1) (Version:  - CoCSoft Computing, Inc.)
Streamripper (Remove only) (HKLM\...\Streamripper) (Version:  - )
StreamTransport version: 1.0.2.2171 (HKLM\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
Sun VirtualBox (HKLM\...\{948B09C2-16EF-41DC-8E24-5C90B9D8360F}) (Version: 3.1.6 - Sun Microsystems, Inc.)
SUPER © Version 2010.bld.38 (May 2, 2010) (HKLM\...\SUPER ©) (Version: Version 2010.bld.38 (May 2, 2010) - eRightSoft)
SuperNZB v3.2.1 (HKLM\...\SuperNZB_is1) (Version:  - )
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synfig Core (HKLM\...\synfig) (Version: 0.61.05 - )
Synfig Studio (HKLM\...\synfigstudio) (Version: 0.62.01 - )
Taurus CalendarMaker v1.1.0 (HKLM\...\{AE109AFD-8E01-4515-BF60-4536353F86F0}) (Version: 1.01.0000 - Taurus Software and Consulting)
TeraCopy 2.12 (HKLM\...\TeraCopy_is1) (Version:  - Code Sector Inc.)
TerraExplorer (HKLM\...\TerraExplorer) (Version: 5.1.2 - Skyline Software Systems, Inc.)
TheLastRipper 1.4 (HKLM\...\TheLastRipper) (Version: 1.4 - TheLastRipper developer team)
Times Reader (HKLM\...\com.nyt.timesreader.78C54164786ADE80CB31E1C5D95607D0938C987A.1) (Version: 2.053 - The New York Times Company)
Times Reader (Version: 2.053 - The New York Times Company) Hidden
TokBox Desktop Client (HKLM\...\TokBox-Desktop.140E496FAF651FC6D79F73D360E855D4667C7B11.1) (Version: 1.2.12 - TokBox)
TokBox Desktop Client (Version: 1.2.12 - TokBox) Hidden
Total Commander (Remove or Repair) (HKLM\...\Totalcmd) (Version: 7.50a - Ghisler Software GmbH)
Toxic Biohazard (HKLM\...\Toxic Biohazard) (Version:  - Image-Line)
TUGZip 3.5 (HKLM\...\TUGZip_is1) (Version:  - Christian Kindahl)
TuxGuitar (HKLM\...\{03534DA5-2F88-4B8E-A978-849B979E1B8F}) (Version: 1.2 - Herac)
TygemBaduk Remove (HKLM\...\Tygem Baduk) (Version:  - )
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (HKLM\...\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707) (Version: 1 - Microsoft Corporation)
Userfeedback Desktop Client (HKLM\...\Userfeedback Desktop Client) (Version: 1.0.18 - www.userfeedbackhq.com)
VC80CRTRedist - 8.0.50727.4053 (Version: 1.1.0 - DivX, Inc) Hidden
Vegas Movie Studio Platinum 9.0 (HKLM\...\{DA507A38-4B2A-40C0-90AC-E30AAA0B757C}) (Version: 9.0.85 - Sony)
VidBlaster (HKCU\...\VidBlaster) (Version:  - )
VideoPad Video Editor (HKLM\...\VideoPad) (Version:  - NCH Software)
VirtualDJ Home FREE (HKLM\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
Visitenkarten in 2 Minuten (HKLM\...\Visitenkarten in 2 Minuten) (Version:  - )
Vista Codec Package (HKLM\...\{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}) (Version: 5.4.9.5 - Shark007)
Vista Visual Master (HKLM\...\VistaVisualMaster) (Version:  - )
Visual C++ 9.0 CRT (x86) WinSXS MSM (Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.3 (HKLM\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VodBurner (HKLM\...\{656957B8-41DB-4E43-AAA1-B128C2213D50}) (Version: 1.0.1 - Netralia)
WampServer 2.0 (HKLM\...\WampServer 2_is1) (Version:  - Romain Bourdon (Roms))
WAV MP3 Converter v3.9 build 972 (HKLM\...\{A4A14B15-F25D-44F8-8483-291C1DF7C548}_is1) (Version:  - Hoo Technologies)
WBaduk (HKLM\...\{C0608AE3-FAFD-4702-A79C-67CC6A2F71B7}) (Version:  - )
WDR RadioRecorder (HKLM\...\Tobit Radio.fx Server 1) (Version:  - Tobit.Software)
Web Dictate (HKLM\...\WebDictate) (Version:  - NCH Software)
Webinaria 2.0 (HKLM\...\Webinaria_is1) (Version:  - Charlwood eMarketing)
WebShot (HKLM\...\WebShot_is1) (Version:  - Nathan Moinvaziri)
Winamp (remove only) (HKLM\...\Winamp) (Version: 5.552  - Nullsoft, Inc)
WinDjView 1.0.3 (HKLM\...\WinDjView) (Version: 1.0.3 - Andrew Zhezherun)
Windows Live Anmelde-Assistent (HKLM\...\{52B97218-98CB-4B8B-9283-D213C85E1AA4}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Call (Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 14.0.8091.0730 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Player Firefox Plugin (HKLM\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR archiver (HKLM\...\WinRAR archiver) (Version:  - )
wList 2.0 (HKLM\...\wList) (Version: 2.0 - SharkTime Software)
Wondershare MobileGo for Android ( Version 4.5.0 ) (HKLM\...\{1E04C795-7359-4E05-8A0E-5644F777AA08}_is1) (Version: 4.5.0 - Wondershare)
Xilisoft PowerPoint to Video Converter Free (HKLM\...\Xilisoft PowerPoint to Video Converter Free) (Version: 1.1.1.20120601 - Xilisoft)
X-Lite 4 (HKLM\...\{1156777B-3307-4E6B-8EF5-10ED8E43D48B}) (Version: 45.7.1236 - CounterPath Corporation)
XPS Viewer (HKLM\...\{37C6566A-42BA-472B-AA79-9AF83F9446ED}) (Version: 1.0.0 - Software Imaging, Oxford, UK)
xuggle-xuggler (HKLM\...\xuggle-xuggler) (Version: 3.4.1012 - Xuggle)
Yahoo! Messenger (HKLM\...\Yahoo! Messenger) (Version:  - Yahoo! Inc.)
Yahoo! Software Update (HKLM\...\Yahoo! Software Update) (Version:  - )
YouTube Downloader 2.5.2 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version:  - BienneSoft)
Zattoo 3.3.4 Beta (HKLM\...\Zattoo) (Version: 3.3.4 Beta - Zattoo Inc.)
Zattoo Live TV (HKCU\...\6d7aa3e3bf931c56) (Version: 1.0.0.41 - Zattoo Europa AG)
Zattoo4 4.0.5 (HKLM\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)
ZebSpeech 3.0.0 Update (BETA) (HKLM\...\ZebSpeech_is1) (Version:  - ZebSoft (Danish Zeb))
Zmanda Client for Windows Community Edition (HKLM\...\InstallShield_{89409EE8-4ABE-46BF-B55C-72013EF020DE}) (Version: 3.1 - Zmanda)
Zmanda Client for Windows Community Edition (Version: 3.1 - Zmanda) Hidden
天頂の囲碁 4 (HKLM\...\ZenithGo4J_is1) (Version: 4.0.1 - Mynavi)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{00b4dc13-2522-4595-b069-f55a263b5224}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{0507EEDE-3AE7-49c7-BF37-0EB4A62D8638}\localserver32 -> C:\Users\Tech-Admin\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{10DD084E-A5AE-456F-A3BE-DA67EBE6B090}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{12439433-F20A-4A58-9F95-DF33262717C6}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{15B6FEE5-5FB3-4071-AC1F-7AEDC0E2A6BB}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{1BCA4635-F1FC-44C8-B829-48229AEB32E3}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\MSCOMCT2.OCX (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{222C0F35-3D78-4570-9F6D-BAEE289D0304}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\MSCOMCT2.OCX (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{29DCD339-D184-469B-8BFB-199A2CCF014E}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{2DBCDA9F-1248-400B-A382-A56D71BF7B15}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{2EEAB6D0-491E-4962-BBA1-FF1CCA6D4DD0}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{33b07fd4-5917-43e1-968d-4c79231836bf}\localserver32 -> C:\Users\Tech-Admin\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{345446AC-B638-40B4-BBE5-4098028AA14B}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3506CDB7-8BC6-40C0-B108-CEA0B9480130}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3755D805-2E56-4A74-BD0F-13C7493A35C8}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\UScreenCapture.ax (Unreal Streaming Technologies Group.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{38911D8E-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{38911D90-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\InprocServer32 -> C:\Windows\system32\comct332.ocx (Microsoft Corporation )
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{39125640-8D80-11DC-A2FE-C5C455D89593}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Google Talk Plugin\googletalkax.dll (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3A4F9190-65A8-11D5-85C1-0001023952C1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3a4f9191-65a8-11d5-85c1-0001023952c1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3a4f9192-65a8-11d5-85c1-0001023952c1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3a4f9193-65a8-11d5-85c1-0001023952c1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3a4f9194-65a8-11d5-85c1-0001023952c1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3a4f9195-65a8-11d5-85c1-0001023952c1}\InprocServer32 -> C:\Program Files\Skyline\TerraExplorer\TerraExplorerX.dll (Skyline software systems Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3D3E7C1B-79A7-4CC7-8925-41FA813E9913}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{3E01D8E0-A72B-4C9F-99BD-8A6E7B97A48D}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{4052D303-74C5-49EA-BC6B-66099C8D4007}\InprocServer32 -> C:\Program Files\Google\Google Desktop Search\GoogleDesktopAPI2.dll (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{42FE718B-A148-41D6-885B-01A0AFAE8723}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{452CCB69-6A95-4370-9E5A-B3EFB06A7651}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{48E59293-9880-11CF-9754-00AA00C00908}\InprocServer32 -> C:\Windows\system32\msinet.ocx (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{4B42750B-57A1-47E7-B340-8EAE0E3126A4}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{52071016-E648-4D3B-B57E-2B46CC993CE0}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{5792FC7D-5E1D-4F1A-BD4F-A7A50F92BC6E}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{57FA2D12-D22D-490A-805A-5CB48E84F12A}\InprocServer32 -> C:\Program Files\Admin\Beyond Compare\V3\BCShellEx.dll (Scooter Software)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Chrome\Application\37.0.2062.120\delegate_execute.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{5E541E71-A474-4EAD-8FCB-24D400D023B7}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\MSCOMCT2.OCX (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{61F8FAF0-82D0-407C-AE97-31441483AE40}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{6AC51E9C-7947-4B46-A978-0AD601C4EFC9}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{6FA10A39-4760-4C94-A210-2398848618EC}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{7ACDC5B4-76A1-4BDF-918D-6962FCABBAD3}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{7B030003-037D-490D-9169-A4F391B3D831}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{830690FC-BF2F-47A6-AC2D-330BCB402664}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Program Files\Citrix\GoToMeeting\952\G2MOutlookAddin.dll (Citrix Online, a division of Citrix Systems, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{89DD2F9D-C325-48BF-A615-96BD039BBC83}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{9017071A-2E34-4C3A-9BBB-688CBB5A9FF2}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{9D073235-D787-497D-8D1F-929559F1C621}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{A6435C17-FF74-4788-A503-60E27B0A6D4D}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{A7DF2611-D752-4C9F-A90A-B56F18485EE9}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{A8109DB9-88E0-42FE-98EA-8A12BE5394C6}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{A8F086C3-2497-4229-82FE-586F2D326F95}\localserver32 -> C:\Users\Tech-Admin\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{A983C9EC-D73E-4364-B89B-ACD1E405674F}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{AB9F4455-E591-4132-A386-0B91EAEDB96C}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Google Talk Plugin\o1dax.dll (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{B09AC3FF-0D5D-41C6-A34E-7C3F58A3127C}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\InprocServer32 -> C:\Windows\system32\MSCOMCT2.OCX (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{B0FE88F0-C92F-46D6-878F-31599BEA944C}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{C513B782-0AB5-4E93-A9ED-B20C2D5C4ED6}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{CC461FC3-C9BE-41FB-8E47-E0115CBC01CC}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{CD26AE0C-4361-4E98-A817-B00AF1A5A456}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{D26B1D42-9C42-4E7B-BB73-86384C4B4345}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{d33f3ced-d7d5-44f1-a9fe-6927dabb1934}\localserver32 -> C:\Users\Tech-Admin\AppData\Roaming\Google\Google Talk\googletalk.exe (Google)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{D42D63C8-2780-4B13-8DA9-65977993A6B2}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{DD0E8ED5-1494-4B87-A35C-39F6ED4B1153}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{DD938677-E6BD-4F36-AF7D-28E10F1D29DE}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\UScreenCapture.ax (Unreal Streaming Technologies Group.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{E1BC9147-C3E3-4E8A-8304-5E6B5C1C0774}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\GoogleUpdateOnDemand.exe (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Local\Google\Update\1.3.24.15\psuser.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{F278D870-7AF7-4957-96EE-E6AC72D0B109}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{F3188CF3-EF22-4C5B-92CB-605964761C3B}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Tech-Admin\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FC2C83DF-37CA-44AB-9AC0-BDF1B88765AB}\InprocServer32 -> C:\Program Files\MultiMedia\Webinaria\RmBkFilter.dll ()
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32 -> C:\Windows\system32\MSCOMCT2.OCX (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3709790226-3666169162-3011628283-1000_Classes\CLSID\{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}\InprocServer32 -> C:\Program Files\Skype\Mp3Recorder\V11\Skype4Com.dll (Skype Technologies)

==================== Restore Points  =========================

18-09-2014 09:38:17 Revo Uninstaller's restore point - CCleaner
18-09-2014 09:41:23 Revo Uninstaller's restore point - Babylon
18-09-2014 09:48:18 Revo Uninstaller's restore point - ICQ Toolbar
18-09-2014 09:53:17 Revo Uninstaller's restore point - ooVoo_Chat Toolbar
18-09-2014 09:57:03 Revo Uninstaller's restore point - SHOUTcast Radio Toolbar
18-09-2014 10:00:35 Revo Uninstaller's restore point - Toolbar fuer eBay
18-09-2014 10:02:24 Revo Uninstaller's restore point - Yahoo! Toolbar

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2006-11-02 12:23 - 2009-08-28 02:47 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {04E7E02B-4897-499E-878C-3A1B4190CD7F} - System32\Tasks\Microsoft\Windows\Tcpip\WSHReset => C:\Windows\system32\netsh.exe [2006-11-02] (Microsoft Corporation)
Task: {11C2B486-29DE-4728-942E-8EF4412B98BF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1001UA => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)
Task: {16C80833-5DC5-4AE1-BDD0-8F5C2D355E49} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)
Task: {1A709B27-B3F7-4028-BFC0-C68B237AF016} - System32\Tasks\Google Updater and Installer => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2009-07-01] (Google Inc.)
Task: {1C2EB942-03D4-481C-BC3B-EC76B9EA4C99} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {1CC81347-6204-4B83-900C-01E02F50F067} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {2E13C137-B522-4F8D-9118-07B1AE32928B} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {302693D2-DA7B-4022-BC0D-D61B25FEEBB6} - System32\Tasks\1-Click Maintenance => C:\Program Files\TuneUp Utilities 2009\OneClickStarter.exe
Task: {30C4F7F1-9476-4B5C-815B-ECEBBCABB8B7} - \Scheduled Update for Ask Toolbar No Task File <==== ATTENTION
Task: {320124A7-D70F-41DE-A9D1-D5E8E19D5D91} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: {340427B0-CB01-4E81-898F-C90089A37B67} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1001Core => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe [2011-12-14] (Google Inc.)
Task: {384F5E4C-85B9-425C-9114-3AA7BB3FCD1E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe
Task: {3BCDF251-CA5C-4045-A1FC-8FCEF9FBDC93} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {41C04135-6D48-45F1-85C6-3130044686E5} - System32\Tasks\SDMsgUpdate (Local) => C:\Program Files\Design\SmartDraw\2014\Messages\SDNotify.exe [2012-08-13] ()
Task: {44980BEE-7809-44A9-AC24-D6E578A3B7DF} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\system32\RacAgent.exe [2008-01-21] (Microsoft Corporation)
Task: {5A9FF803-B059-424A-9DA4-33F765449BC6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1000Core => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2009-07-01] (Google Inc.)
Task: {5C33195C-476C-4578-81EB-7AA56898228F} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {6F5D897B-A418-4CB3-B8E1-1736DDCE65BF} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {720DB58D-120F-45C5-8E7F-312C7EC4FC21} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3709790226-3666169162-3011628283-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {77702B32-1542-4691-AAFA-256FF291C88C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-05] (Google Inc.)
Task: {79DFB7FC-7681-486E-90B0-DA840ED8002B} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3709790226-3666169162-3011628283-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {832F144F-5701-4446-A81D-A0ABCF18AF7C} - System32\Tasks\Google Software Updater => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-09-16] (Google)
Task: {86D00AF7-CD37-4746-BCC2-5AE8029A95EA} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {8970B5ED-6F47-46D9-9DF9-31DAE53C4A56} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {8C20AE5E-7A07-4EBB-9CF2-75691AD3B7E2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1002Core => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-02] (Google Inc.)
Task: {8C5D9285-7F7B-4728-B242-2490C67F08EE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-05] (Google Inc.)
Task: {A8293F1C-9FE5-46C6-88B7-2184F80A1C96} - System32\Tasks\Real Networks Scheduler => c:\program files\real\realplayer\Update\realsched.exe [2013-01-26] (RealNetworks, Inc.)
Task: {A98E5F52-E1F9-4AE5-96FB-1471A27BF02F} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {AAD6A90D-65DA-436B-942B-FC0C5747E82F} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {AB56532F-5646-4A01-A2FB-D57E3051F9EB} - System32\Tasks\{6C567008-14F8-48DC-B000-F6C6DFF11115} => Firefox.exe hxxp://ui.skype.com/ui/0/5.5.0.119.259/en/abandoninstall?page=tsPlugin&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;userlevelpresent
Task: {C6C7CF5A-9912-467D-B13D-1D9B43401367} - System32\Tasks\{A06E302D-B805-4829-915D-5CE61709ACF7} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.136.259&amp;LastError=404
Task: {C85EE099-24BA-4532-AAAD-471D1F54DD36} - System32\Tasks\SDMsgUpdate (TE) => C:\Program Files\Design\SmartDraw\2014\Messages\SDNotify.exe [2012-08-13] ()
Task: {D142C0C1-D0F1-4035-92B5-A15AB9E3AD37} - System32\Tasks\Java Update Scheduler => C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25] (Oracle Corporation)
Task: {D41E6AF5-518B-4C95-AD97-585954A4AC2D} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3709790226-3666169162-3011628283-1000 => C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {D61F9A07-83FD-454A-AA12-FFD3262A60D0} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1000UA => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe [2009-07-01] (Google Inc.)
Task: {E5150B95-F9B4-4D5D-95A2-7EC1ACBA95F8} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\system32\gatherWirelessInfo.vbs [2008-01-21] ()
Task: {EE941B0C-741E-4E8C-91A5-ED8F3B7F5006} - System32\Tasks\Microsoft\Windows\WindowsCalendar\Reminders - Tech-Admin => C:\Program Files\Windows Calendar\WinCal.exe [2009-04-11] (Microsoft Corporation)
Task: {FBD5D990-F3DB-45D3-B846-9C5805626E7D} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1002UA => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe [2011-07-02] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\Express FilesUpdate.job => C:\Program Files\ExpressFiles\EFUpdater.exe <==== ATTENTION
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf8f54f3844fff.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1000Core1cf8b235e711820.job => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1000UA.job => C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1001Core1cefac5f324a04f.job => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1001UA.job => C:\Users\Edition Group\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1002Core.job => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3709790226-3666169162-3011628283-1002UA.job => C:\Users\Indian E-music\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3709790226-3666169162-3011628283-1000.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\ReclaimerResumeInstall_Tech-Admin.job => C:\Users\Tech-Admin\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.02\agent\rnupgagent.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\SDMsgUpdate (Local).job => C:\PROGRA~1\Design\SmartDraw\2014\Messages\SDNotify.exe
Task: C:\Windows\Tasks\SDMsgUpdate (TE).job => C:\PROGRA~1\Design\SmartDraw\2014\Messages\SDNotify.exe

==================== Loaded Modules (whitelisted) =============

2011-06-24 01:40 - 2009-11-26 01:08 - 00049152 _____ () C:\Windows\System32\LXEEPMON.DLL
2011-06-24 01:39 - 2009-01-13 08:15 - 04485120 _____ () C:\Windows\System32\LXEEOEM.DLL
2011-06-26 11:56 - 2009-11-26 08:07 - 00032768 _____ () C:\Program Files\Lexmark Pro700 Series\ipcmt.dll
2009-07-01 00:11 - 2009-07-01 00:11 - 00051716 _____ () C:\Windows\System32\pdf995mon.dll
2011-07-27 22:45 - 2009-06-19 04:58 - 00157696 _____ () C:\Windows\system32\spool\PRTPROCS\W32X86\lxeedrpp.dll
2011-06-24 03:57 - 2009-05-18 15:29 - 00819200 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeeptpc.dll
2011-06-24 03:57 - 2009-11-04 08:14 - 00165376 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeedrui.dll
2011-06-24 03:57 - 2009-06-07 19:40 - 00167936 _____ () C:\Windows\system32\spool\DRIVERS\W32X86\3\lxeePRPR.DLL
2010-07-12 22:30 - 2010-07-12 22:30 - 00032944 _____ () C:\Program Files\WebDav\BitKinex\bitkinexsvc.exe
2010-06-19 09:57 - 2010-06-19 09:57 - 00081920 _____ () C:\Program Files\WebDav\BitKinex\zlib1.dll
2010-06-19 17:44 - 2010-06-19 17:44 - 00274432 _____ () C:\Program Files\WebDav\BitKinex\libtidy.dll
2009-09-17 23:19 - 2009-09-17 23:19 - 00204800 _____ () C:\Program Files\Bonkey\wrapper.exe
2009-09-04 21:40 - 2003-09-02 14:15 - 00057344 _____ () C:\Program Files\MultiMonitor\Taskbar\V21\shellhook.dll
2014-03-11 05:00 - 2014-03-11 05:00 - 00100352 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32api.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00110080 _____ () C:\Program Files\SpiderOak\shell_extension_lib\pywintypes27.dll
2014-03-11 05:01 - 2014-03-11 05:01 - 00396800 _____ () C:\Program Files\SpiderOak\shell_extension_lib\pythoncom27.dll
2014-03-11 05:00 - 2014-03-11 05:00 - 00015872 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32trace.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00108544 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32security.pyd
2014-03-11 05:03 - 2014-03-11 05:03 - 00382464 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32com.shell.shell.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00049664 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32evtlog.pyd
2014-06-01 14:17 - 2014-06-01 14:17 - 00087552 _____ () C:\Program Files\SpiderOak\shell_extension_lib\_ctypes.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00119808 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32file.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00024064 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32pipe.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00018432 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32event.pyd
2014-06-01 14:17 - 2014-06-01 14:17 - 00713216 _____ () C:\Program Files\SpiderOak\shell_extension_lib\_hashlib.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00036864 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32process.pyd
2014-03-11 05:00 - 2014-03-11 05:00 - 00167936 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32gui.pyd
2014-03-11 05:03 - 2014-03-11 05:03 - 00099328 _____ () C:\Program Files\SpiderOak\shell_extension_lib\win32com.propsys.propsys.pyd
2009-07-25 13:43 - 2007-09-03 16:24 - 00609120 _____ () C:\Program Files\Ashampoo\WinOptimizer 2008\ContextHandler.dll
2010-12-11 22:31 - 2010-03-15 12:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2009-08-03 15:21 - 2006-05-14 13:03 - 00655360 _____ () C:\Program Files\FileFormat\TUGZip\V3500\TzShell.dll
2009-08-03 15:21 - 2008-02-02 23:08 - 01722368 _____ () C:\Program Files\FileFormat\TUGZip\V3500\Plugins\TzArchive10.tgp
2009-08-03 15:21 - 2007-03-12 23:34 - 00162304 _____ () C:\Windows\system32\ztvunrar36.dll
2009-08-03 15:21 - 2005-02-17 23:15 - 00077824 _____ () C:\Program Files\FileFormat\TUGZip\V3500\Plugins\TzImage10.tgp
2009-07-01 11:19 - 2009-06-22 00:26 - 00305664 _____ () C:\Program Files\TeraCopy\V201\TeraCopyExt.dll
2014-04-13 17:54 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-04-13 17:54 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2009-08-07 19:16 - 2009-08-07 19:16 - 00654336 _____ () C:\Program Files\Security\GNU\GnuPG\gpgex.dll
2009-09-17 23:19 - 2009-09-17 23:19 - 00081920 _____ () C:\Program Files\Bonkey\wrapper.dll
2009-08-07 19:19 - 2009-08-07 19:19 - 00242176 _____ () C:\Program Files\Security\GNU\GnuPG\dirmngr.exe
2009-08-07 19:14 - 2009-08-07 19:14 - 00206336 _____ () C:\Program Files\Security\GNU\GnuPG\libksba-8.dll
2009-08-07 19:12 - 2009-08-07 19:12 - 00045568 _____ () C:\Program Files\Security\GNU\GnuPG\libgpg-error-0.dll
2009-08-07 19:10 - 2009-08-07 19:10 - 00038400 _____ () C:\Program Files\Security\GNU\GnuPG\libw32pth-0.dll
2009-08-07 19:15 - 2009-08-07 19:15 - 00598016 _____ () C:\Program Files\Security\GNU\GnuPG\libgcrypt-11.dll
2010-06-17 22:48 - 2008-05-24 15:02 - 00417792 _____ () C:\Program Files\Streaming\Icecast2\Win32\V232\icecastService.exe
2010-06-17 22:48 - 2006-02-26 17:46 - 00073728 _____ () C:\Program Files\Streaming\Icecast2\Win32\V232\zlib1.dll
2010-06-17 22:48 - 2008-02-08 17:00 - 00930816 _____ () C:\Program Files\Streaming\Icecast2\Win32\V232\libxml2.dll
2010-06-17 22:48 - 2008-02-08 17:46 - 00161792 _____ () C:\Program Files\Streaming\Icecast2\Win32\V232\libxslt.dll
2010-06-17 22:48 - 2004-06-22 08:08 - 00053300 _____ () C:\Program Files\Streaming\Icecast2\Win32\V232\pthreadVSE.dll
2011-06-26 11:49 - 2010-05-17 15:52 - 00770728 _____ () C:\Program Files\Lexmark Pro700 Series\lxeemon.exe
2011-06-26 11:49 - 2010-04-01 19:23 - 00389120 _____ () C:\Program Files\Lexmark Pro700 Series\lxeescw.dll
2011-06-24 03:57 - 2009-05-27 14:16 - 00192512 _____ () C:\Windows\system32\spool\drivers\w32x86\3\lxeedatr.dll
2011-06-26 11:49 - 2010-04-01 19:24 - 01159168 _____ () C:\Program Files\Lexmark Pro700 Series\lxeeDRS.dll
2011-06-26 11:49 - 2009-03-10 07:43 - 00155648 _____ () C:\Program Files\Lexmark Pro700 Series\lxeecaps.dll
2011-06-24 01:25 - 2009-02-20 04:48 - 00299008 _____ () C:\Windows\system32\lxeesm.dll
2011-06-24 01:25 - 2009-02-20 04:48 - 00023552 _____ () C:\Windows\system32\lxeesmr.dll
2014-09-18 15:39 - 2014-08-27 15:00 - 00052472 _____ () C:\Users\Tech-Admin\AppData\Local\temp\avgnt.exe\Avira.OE.ExtApi.dll
2014-08-27 15:00 - 2014-08-27 15:00 - 00139056 _____ () C:\Program Files\Avira\My Avira\Avira.OE.NativeCore.dll
2010-01-25 12:33 - 2012-04-03 17:14 - 00041472 _____ () C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe
2010-07-10 19:18 - 2009-10-07 15:42 - 00061440 _____ () C:\Windows\system32\wintab32.dll
2009-09-04 21:40 - 2005-11-09 15:34 - 00294912 _____ () C:\Program Files\MultiMonitor\Taskbar\V21\MultiMon.exe
2012-06-30 17:42 - 2012-06-30 17:42 - 00089600 _____ () C:\Users\Tech-Admin\CLCL\CLCL.exe
2012-06-30 17:42 - 2012-06-30 17:42 - 00012800 _____ () C:\Dokumente und Einstellungen\Tech-Admin\Eigene Dateien\CLCL\tool_utl.dll
2012-06-30 17:42 - 2012-06-30 17:42 - 00011776 _____ () C:\Dokumente und Einstellungen\Tech-Admin\Eigene Dateien\CLCL\tool_find.dll
2012-11-29 21:31 - 2012-11-29 21:31 - 00038608 _____ () C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
2014-04-13 17:54 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll
2014-04-13 17:54 - 2013-05-16 10:55 - 00161112 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-04-13 17:54 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2011-12-15 09:34 - 2011-12-15 09:34 - 01053848 _____ () C:\Windows\System32\ieconfig_1und1_svc.exe
2009-12-16 11:42 - 2009-12-16 11:42 - 00167936 _____ () C:\Program Files\Lexmark\Pro700 Series\lxeemicro.dll
2010-04-01 17:24 - 2010-04-01 17:24 - 01159168 _____ () C:\Program Files\Lexmark\Pro700 Series\lxeedrs.dll
2009-03-10 05:43 - 2009-03-10 05:43 - 00155648 _____ () C:\Program Files\Lexmark\Pro700 Series\lxeecaps.dll
2014-08-27 15:00 - 2014-08-27 15:00 - 00066864 _____ () C:\Program Files\Avira\My Avira\Avira.OE.AvConnectorNative.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:20087FC5
AlternateDataStreams: C:\ProgramData\TEMP:527DAC91
AlternateDataStreams: C:\ProgramData\TEMP:8CE646EE
AlternateDataStreams: C:\ProgramData\TEMP:8E236DBE
AlternateDataStreams: C:\ProgramData\TEMP:C8B8CEBD

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist => ""="Service"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: ASKUpgrade => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: gupdate1c9fd658f153313 => 2
MSCONFIG\Services: gusvc => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: mcmscsvc => 2
MSCONFIG\Services: McNASvc => 2
MSCONFIG\Services: McODS => 3
MSCONFIG\Services: McProxy => 2
MSCONFIG\Services: MpfService => 2
MSCONFIG\Services: MSK80Service => 2
MSCONFIG\Services: Radio.fx => 2
MSCONFIG\Services: SCService => 2
MSCONFIG\Services: YahooAUService => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^MobileGo Service.lnk => C:\Windows\pss\MobileGo Service.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Orbit.lnk => C:\Windows\pss\Orbit.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^PalTalk.lnk => C:\Windows\pss\PalTalk.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Tech-Admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Tech-Admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Firefox 3.5 (ENG).lnk => C:\Windows\pss\Firefox 3.5 (ENG).lnk.Startup
MSCONFIG\startupfolder: C:^Users^Tech-Admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Miranda IM.lnk => C:\Windows\pss\Miranda IM.lnk.Startup
MSCONFIG\startupreg: 1&1 EasyLogin => C:\Program Files\Admin\1&1\1&1 EasyLogin\EasyLogin.exe
MSCONFIG\startupreg: ApnTBMon => "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: BitComet => "C:\Program Files\P-2-P\BitComet\V113\BitComet.exe" /tray
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: ccleaner => "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
MSCONFIG\startupreg: Delegate => "C:\Program Files\NCH Software\Delegate\delegate.exe" -logon
MSCONFIG\startupreg: dradio-RecorderTimer => "C:\Program Files\Radio\dradio-Recorder\phonostarTimer.exe"
MSCONFIG\startupreg: ehTray.exe => C:\Windows\ehome\ehTray.exe
MSCONFIG\startupreg: EzPrint => "C:\Program Files\Lexmark Pro700 Series\ezprint.exe"
MSCONFIG\startupreg: Google Update => "C:\Users\Tech-Admin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: googletalk => C:\Users\Tech-Admin\AppData\Roaming\Google\Google Talk\googletalk.exe /autostart
MSCONFIG\startupreg: HydraVisionDesktopManager => "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"
MSCONFIG\startupreg: IAAnotif => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
MSCONFIG\startupreg: iLike => C:\Program Files\iLike\1.2.17\ilikesidebar.exe /checkforupdate
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\MultiMedia\iTunes\V8\iTunesHelper.exe"
MSCONFIG\startupreg: KiesPreload => C:\Program Files\Admin\Mobile\S2Admin\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Admin\Mobile\S2Admin\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: Lexmark Pro700 Series Fax Server => "C:\Program Files\Lexmark Pro700 Series\fm3032.exe" /s
MSCONFIG\startupreg: LWS => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: MediaFire Tray => "C:\Users\Tech-Admin\AppData\Local\MediaFire Express\mf_systray.exe" --boot-start
MSCONFIG\startupreg: Meebo Notifier => "C:\Users\Tech-Admin\AppData\Local\Meebo\Meebo Notifier\MeeboNotifier.exe" /startup
MSCONFIG\startupreg: Messenger (Yahoo!) => "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
MSCONFIG\startupreg: Monitor => C:\Windows\Philips\SPC220NC\Monitor.exe
MSCONFIG\startupreg: MP3 Skype Recorder => C:\Program Files\Skype\Mp3Recorder\V11\MP3 Skype Recorder.exe
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: MySpaceIM => C:\Program Files\MySpace\IM\MySpaceIM.exe
MSCONFIG\startupreg: NeroFilterCheck => C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
MSCONFIG\startupreg: PeerGuardian => C:\Program Files\Security\PeerGuardian\Vista2\pg2.exe
MSCONFIG\startupreg: PhonostarTimer => C:\Program Files\phonostar\V2014\ps_timer.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\MultiMedia\Quicktime\V762\QTTask.exe" -atboottime
MSCONFIG\startupreg: SavvyConnectMenu => "C:\Program Files\Luth Research\SavvyConnectFramework\bin\scui\SavvyConnectUI.exe" -a
MSCONFIG\startupreg: SightSpeed => "C:\Program Files\Dell Video Chat\DellVideoChat.exe" -bootmode
MSCONFIG\startupreg: Skype => "C:\D\Skype Portable\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SMTPAuth => C:\Program Files\Admin\SMTPAuth\V201\SMTPAuth.exe
MSCONFIG\startupreg: Speech Recognition => "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
MSCONFIG\startupreg: SpiderOak => C:\Program Files\SpiderOak\SpiderOak.exe --windows_startup
MSCONFIG\startupreg: StartCCC => "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray.exe
MSCONFIG\startupreg: TkBellExe => "C:\Program Files\Real\realplayer\update\realsched.exe"  -osboot
MSCONFIG\startupreg: uTorrent => "C:\Users\Tech-Admin\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
MSCONFIG\startupreg: WebDictate => "C:\Program Files\NCH Software\WebDictate\webdictate.exe" -logon
MSCONFIG\startupreg: WinampAgent => "C:\Program Files\Winamp\V5552-ENG\winampa.exe"
MSCONFIG\startupreg: WinSSHD Activation State Checker => "C:\Program Files\SSH\Bitvise\WinSSHD\WinsshdActStateCheck.exe"
MSCONFIG\startupreg: Wondershare Helper Compact => "C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
MSCONFIG\startupreg: X-Lite => "C:\Program Files\VoIP\CounterPath\XLite\X-Lite.exe"

==================== Faulty Device Manager Devices =============

Name: Integrated Webcam
Description: Integrated Webcam
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Creative Technology Ltd.
Service: OA008Vid
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/19/2014 02:18:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung mbam.exe, Version 1.0.0.532, Zeitstempel 0x53518532, fehlerhaftes Modul MSVCR100.dll, Version 10.0.40219.325, Zeitstempel 0x4df2be1e, Ausnahmecode 0x40000015, Fehleroffset 0x0008d6fd,
Prozess-ID 0xf30, Anwendungsstartzeit mbam.exe0.

Error: (09/19/2014 00:20:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung mbam.exe, Version 1.0.0.532, Zeitstempel 0x53518532, fehlerhaftes Modul MSVCR100.dll, Version 10.0.40219.325, Zeitstempel 0x4df2be1e, Ausnahmecode 0x40000015, Fehleroffset 0x0008d6fd,
Prozess-ID 0x11f4, Anwendungsstartzeit mbam.exe0.

Error: (09/19/2014 00:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung mbam.exe, Version 1.0.0.532, Zeitstempel 0x53518532, fehlerhaftes Modul MSVCR100.dll, Version 10.0.40219.325, Zeitstempel 0x4df2be1e, Ausnahmecode 0x40000015, Fehleroffset 0x0008d6fd,
Prozess-ID 0xecc, Anwendungsstartzeit mbam.exe0.

Error: (09/19/2014 00:10:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Fehlerhafte Anwendung mbam.exe, Version 1.0.0.532, Zeitstempel 0x53518532, fehlerhaftes Modul MSVCR100.dll, Version 10.0.40219.325, Zeitstempel 0x4df2be1e, Ausnahmecode 0x40000015, Fehleroffset 0x0008d6fd,
Prozess-ID 0xc84, Anwendungsstartzeit mbam.exe0.

Error: (09/19/2014 11:48:47 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/19/2014 11:48:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2014 04:10:46 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/19/2014 04:09:56 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2014 02:37:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".

Error: (09/19/2014 02:37:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"1".
Die abhängige Assemblierung "rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.
Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".


System errors:
=============
Error: (09/19/2014 11:54:57 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Windows Media Player-NetzwerkfreigabedienstUPnP-Gerätehost%%1058

Error: (09/19/2014 11:52:54 AM) (Source: ipnathlp) (EventID: 1233) (User: )
Description: ICS_IPV6 konnte den IPv6-Stapel nicht konfigurieren.

Error: (09/19/2014 11:48:48 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: BlueStacks Android Service%%1064

Error: (09/19/2014 11:48:24 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: ZWC ServiceZWC-MySQL%%1053

Error: (09/19/2014 11:48:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: ZWC-MySQL%%1053

Error: (09/19/2014 11:48:24 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000ZWC-MySQL

Error: (09/19/2014 11:48:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Windows Search%%1053

Error: (09/19/2014 11:48:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000Windows Search

Error: (09/19/2014 11:48:15 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: WinSSHD%%1053

Error: (09/19/2014 11:48:15 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: 30000WinSSHD


Microsoft Office Sessions:
=========================
Error: (09/19/2014 02:18:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdf3001cfd3f3b23ccfef

Error: (09/19/2014 00:20:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fd11f401cfd3f2de310f4f

Error: (09/19/2014 00:16:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdecc01cfd3f2866ca53f

Error: (09/19/2014 00:10:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: mbam.exe1.0.0.53253518532MSVCR100.dll10.0.40219.3254df2be1e400000150008d6fdc8401cfd3ee730a13ff

Error: (09/19/2014 11:48:47 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/19/2014 11:48:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2014 04:10:46 AM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (09/19/2014 04:09:56 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2014 02:37:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe

Error: (09/19/2014 02:37:34 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="&#x2a;",type="win32",version="1.0.0.0"C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe


CodeIntegrity Errors:
===================================
  Date: 2014-09-19 15:08:20.966
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:08:20.056
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:08:19.185
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:08:18.180
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:15.904
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:15.137
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:14.367
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:13.624
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mwac.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:12.476
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-09-19 15:04:11.737
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\mbamchameleon.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz
Percentage of memory in use: 62%
Total physical RAM: 3035.93 MB
Available physical RAM: 1128.14 MB
Total Pagefile: 7535.93 MB
Available Pagefile: 5499.82 MB
Total Virtual: 2047.88 MB
Available Virtual: 1934.21 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:451.07 GB) (Free:6.36 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:14.65 GB) (Free:1.25 GB) NTFS
Drive y: () (Network) (Total:78.13 GB) (Free:2.49 GB) 

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 3FBE4D3F)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=14.6 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=451.1 GB) - (Type=07 NTFS)

==================== End Of Log ============================

ITSecurity14 · 20.09.2014, 14:45

Zitat:

Zitat von ITSecurity14

Bluescreens ohne Ende.

Gestern und heute wieder Bluescreens (siehe Screenshot im Anhang), Nr. 5 und 6:

19.09.2014 (11:41 Uhr)...

Code:

ATTFilter

Kernel_Stack_Inpage_Error
Stop: 0x00000077 (0xC0000056, 0xC0000056, 0x00000000, 0x1F884000)

20.09.2014 (15:06 Uhr)...

Code:

ATTFilter

Kern el_Stack_Inpage_Error
Stop: 0x00000077 (0xC0000056, 0xC0000056, 0x00000000, 0x1EEBA000)

Ist ziemlich nervig und verunsichernd... können wir das bald abstellen ?

Warlord711 · 20.09.2014, 16:48

Mach mal :

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

ITSecurity14 · 20.09.2014, 22:17

Zitat:

Zitat von Warlord711

aswMBR

OK, werd ich am Sonntag machen und liefern :-)

Ich habe heute das Progrramm SpyBot mit einer Malware-Suche durchlaufen lasseen... Das Tool hat 101 Ereignisse geliefert, davon ein Ergebnis, das immer noch Somoto mit Registry-Eintrag als hohes Risiko einstuft (siehe Screenshot im Anhang).

Das ScanLog von SpyBot...

Code:

ATTFilter

Search results from Spybot - Search & Destroy

20.09.2014 22:46:40
Scan took 07:08:37.
101 items found.

Delta.Toolbar: [SBI $04AEAE14] User settings (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3709790226-3666169162-3011628283-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow

Delta.Toolbar: [SBI $0760E887] User settings (Registry Value, nothing done)
  HKEY_USERS\S-1-5-21-3709790226-3666169162-3011628283-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome

Somoto.BetterInstaller: [SBI $B8A7F4F7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sdp

Somoto.BetterInstaller: [SBI $B8A7F4F7] Root class (Registry Key, nothing done)
  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\sdp

Ask.MyGlobalSearch: [SBI $9FA3D6C1] User settings (Registry Key, nothing done)
  HKEY_USERS\.DEFAULT\Software\AskToolbar

Ask.MyGlobalSearch: [SBI $9FA3D6C1] User settings (Registry Key, nothing done)
  HKEY_USERS\S-1-5-18\Software\AskToolbar

Alle 101 Ergebnisse sind wegen der Überlänge des Logfiles in der gezippten txt-Datei im Anhang einsehbar.

Ich habe nichts von Spybot löschen lassen. Das System ist noch in dem Dir bekannten Zustand.

ITSecurity14 · 21.09.2014, 10:45

Zitat:

Zitat von Warlord711

Mach mal :

Downloade dir bitte

aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung)
Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten".
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. (Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen )
Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS-Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort.

Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung

Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).

Das Ergebnis "Quickscan" mit dem Logfile aswMBR.txt

Code:

ATTFilter

aswMBR version 1.0.1.2041 Copyright(c) 2014 AVAST Software
Run date: 2014-09-21 03:05:05
-----------------------------
03:05:05.399    OS Version: Windows 6.0.6002 Service Pack 2
03:05:05.401    Number of processors: 2 586 0x170A
03:05:05.404    ComputerName: EUFLETZ-MOBILE  UserName: Tech-Admin
03:05:11.792    Initialize success
03:05:11.792    VM: initialized successfully
03:05:11.808    VM: Intel CPU supported 
03:05:15.210    VM: disk I/O iaStor.sys
03:06:32.611    AVAST engine defs: 14092001
03:06:49.388    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
03:06:49.397    Disk 0 Vendor: WDC_WD50 01.0 Size: 476940MB BusType: 3
03:06:50.822    Disk 0 MBR read successfully
03:06:50.833    Disk 0 MBR scan
03:06:50.850    Disk 0 Windows VISTA default MBR code
03:06:50.860    Disk 0 Partition 1 00     DE Dell Utility Dell 8.0       39 MB offset 63
03:06:50.912    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS        15000 MB offset 80325
03:06:51.137    Disk 0 Partition 3 80 (A) 07    HPFS/NTFS NTFS       461899 MB offset 30800325
03:06:51.289    Disk 0 scanning sectors +976771120
03:06:52.490    Disk 0 scanning C:\Windows\system32\drivers
03:08:01.544    Service scanning
03:09:24.645    Modules scanning
03:10:23.426    Disk 0 trace - called modules:
03:10:23.644    ntkrnlpa.exe CLASSPNP.SYS disk.sys iaStor.sys halmacpi.dll 
03:10:23.660    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x875a2300]
03:10:23.676    3 CLASSPNP.SYS[8b7ae8b3] -> nt!IofCallDriver -> \Device\Ide\IAAStorageDevice-1[0x85559028]
03:10:28.200    AVAST engine scan C:\Windows
03:10:45.391    AVAST engine scan C:\Windows\system32
03:22:46.236    AVAST engine scan C:\Windows\system32\drivers
03:23:36.764    AVAST engine scan C:\Users\Tech-Admin
03:50:45.420    File: C:\Users\Tech-Admin\AppData\Local\VirtualStore\Program Files\Dictionary\Eng-Hindi\Dictionary.$$A  **INFECTED** Win32:Trojan-gen
03:50:45.560    File: C:\Users\Tech-Admin\AppData\Local\VirtualStore\Program Files\Dictionary\Eng-Hindi\Dictionary.$$B  **INFECTED** Win32:Trojan-gen
07:12:56.214    AVAST engine scan C:\ProgramData
08:04:29.366    Scan finished successfully
11:38:26.631    Disk 0 MBR has been saved successfully to "C:\Users\Tech-Admin\Desktop\MBR.dat"
11:38:26.646    The log file has been saved successfully to "C:\Users\Tech-Admin\Desktop\aswMBR.txt"
11:39:28.414    Disk 0 MBR has been saved successfully to "Y:\Admin\aswMBR\MBR.dat"
11:39:28.445    The log file has been saved successfully to "Y:\Admin\aswMBR\aswMBR-21092014-1.txt"

19.09.2014, 08:24	#23
Warlord711 /// TB-Ausbilder	Schadsoftware auf Windows Vista verursacht Bluescreen ? https://www.malwarebytes.org/support...istory_AL.html Schau mal unter C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \Logs __________________ Lerne, zurück zu schlagen und unterstütze uns! TB Akademie \| Spende \| Lob & Kritik

Schadsoftware auf Windows Vista verursacht Bluescreen ?

Log-Analyse und Auswertung: Schadsoftware auf Windows Vista verursacht Bluescreen ?