Guten Morgen allerseits,

ich habe heute Morgen wieder mal einen Komplettscan mittels GData durchgeführt, wobei er mir 4 Virenfunde in einem Thunderbird-Profilordner angab:
-W97M.Downloader.CL (EngineA)
-W97M.Dropper.H (EngineA)


Die einzige Warnung, die mir GData in letzter Zeit über eine vermeintliche Bedrohung ausspuckte, war die bei einem angeblich sicheren Download von Audiograbber über chip.de.
(wollte ein paar meiner CDs fürs Autoradio grabben).

Es gibt zwar einige Seiten, die sofort Abhilfe versprechen, meist jedoch mit extrem miserabler Übersetzung und fragwürdiger Herkunft, auf die ich mich dann doch nicht verlassen möchte.
Und da ich ab und an mal in Euren Foren lese und Probleme eigentlich immer mit kompetenter Fachberatung gelöst werden (falls möglich), hoffe ich, dass Ihr mir auch mit diesem Problem helfen könnt.

mfg,
Promor

hi,

Logfile von GDATA bitte.


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Guten Morgen,
hier das Logfile von GData:

Virenprüfung mit G Data InternetSecurity CBE
Version 25.0.1.2 (20.03.2014)
Virensignaturen vom 23.05.2015
Startzeit: 23.05.2015 04:07:51
Engine(s): Engine A (AVA 25.1686), Engine B (GD 25.5138)
Heuristik: Ein
Archive: Ein
Systembereiche: Ein
RootKits prüfen: Ein

Prüfung der Systembereiche...
Prüfung aller im Speicher befindlichen Prozesse und Verweise im Autostart...
Prüfung auf RootKits...
Prüfung aller lokalen Festplatten...
Analyse vollständig durchgeführt: 23.05.2015 05:27:02
    187611 Dateien überprüft
    4 infizierte Dateien gefunden
    0 verdächtige Dateien gefunden


– Archiv: Junk
    Pfad: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.1und1.de
    Status: Virus gefunden
    Virus: W97M.Downloader.CL (Engine A)
Objekt: (message 25)=>[Subject: [SPAM?] RechNr. 24112014-278][Date: Tue, 25 Nov 2014 16:19:27 -0500]=>(MIME part)=>RECHNUNG_vom_24112014.doc
    In Archiv: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.1und1.de\Junk
    Status: Virus gefunden
    Virus: W97M.Downloader.CL

– Archiv: Trash
    Pfad: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.web.de
    Status: Virus gefunden
    Virus: W97M.Dropper.H (Engine A)
Objekt: (message 34)=>[Subject: info][Date: Wed, 25 Mar 2015 22:42:06 -0700]=>(MIME part)=>Informationen_5234.doc
    In Archiv: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.web.de\Trash
    Status: Virus gefunden
    Virus: W97M.Dropper.H

– Archiv: INBOX
    Pfad: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.1und1.de
    Status: Virus gefunden
    Virus: W97M.Downloader.CL (Engine A)
Objekt: (message 172)=>[Subject: [SPAM?] RechNr. 24112014-278][Date: Tue, 25 Nov 2014 16:19:27 -0500]=>(MIME part)=>RECHNUNG_vom_24112014.doc
    In Archiv: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.1und1.de\INBOX
    Status: Virus gefunden
    Virus: W97M.Downloader.CL

– Archiv: Unerw&APw-nscht
    Pfad: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.web.de
    Status: Virus gefunden
    Virus: W97M.Dropper.H (Engine A)
Objekt: (message 505)=>[Subject: info][Date: Wed, 25 Mar 2015 22:42:06 -0700]=>(MIME part)=>Informationen_5234.doc
    In Archiv: C:\Users\Promor\AppData\Roaming\Thunderbird\Profiles\2vq1moxw.default\ImapMail\imap.web.de\Unerw&APw-nscht
    Status: Virus gefunden
    Virus: W97M.Dropper.H

– Der Zugriff auf die folgenden Dateien wurde verweigert:
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagtrack-Listener.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-Application.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDiagLog.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventlog-Security.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTEventLog-System.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTUBPM.etl
C:\Windows\System32\LogFiles\WMI\RtBackup\EtwRTMsMpPsSession7.etl
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\000a23badae2ca81aa776efea5c70d91_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\00a9e91be0dbc04ba2a9b9cd3525faea_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\008563e4d63a4dcd81d9928d6de7c505_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0182100ee03e2501bd7f74d98ff80755_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\036b72329c7a1750f2c98c33a5c7759e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\04ea5b2dcc4515bba7353f7f67d28c2a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\06b4b28fc865f11d0fa20d3ef4347bb1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\02f2469d144f5bdedc9fc328535607d6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\07baf27a31cb15e38d88b7510790e63c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0844e37c1d880254a77149f2ba845caa_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\097c8ea9abcec64aa881ba23edb59609_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\095be7ba82f978c7147f2499065cdca8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\08f0fc8c820f0e87adc33aa52cfd13ef_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\097dbb345a0330b7963551b73383799b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\09e6036235b6161efef31b6200c28e5a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a96658b1573b711f373815eb42f0f1e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b4bb60bcdfd7cb294e9974665f2587c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b58574b0e70b526f9376321b61f4d69_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0a3bde31e06bf443e15db5ffe4f242a4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0bb78a790ee528c15a4e1ee16a02965e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0b79483cc0c8be7c5ee552b112fcc308_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0cc597f741caa570ad586057dbe84ac9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0c7f810e6bc3005c859e2e90d66a9b82_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d11ac0feeb2aa5bb334c89d35bb169f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0d482908840889f418481e1f4da163af_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0daf612783618385553032da94d666d3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0f87aa4c7ff1f8858571c8b371ff4c0c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\0ffa0c49eef822e67fccb7acb3ffae10_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\109f9db18b7d93901352ed127b8669a2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\128b8a6a9c10ad30547e222d0181c612_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\12aaf5ad7cef050f43525ee8d21e3268_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11548c68d6b493fc13689f3af3664160_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\148a94a23089b37c4eecac539f5cc649_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\11994c5aefb539e5dfa60677ce2188b5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\155d7c5281a268e43f4c7e0d6289df24_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\15478da3abe6b4acf044dda2776a8b1b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\13351d2c612d87f3a513e362ed62b49f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\158c3c865fe33fcafc40b2f75278e89f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\18965d3899dce34c54be1925a373d350_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\195accb4191893a7eb42e430d6c723e9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\179432e428e87ba7b4c2415ba35e8a43_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\19bfc4d17892913303c368b0d35a5e90_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1b2408d733a3cfa6bc3f2594f47eea0f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\196539e557ec562d2cedf15b15225e16_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1c643c1eb277cec50af0d90dd3fbe0d5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1e4b2d9bcc974ce5ba47bb6540d6bd45_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1f3eb06f36a808c7495ec3a499c218ba_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1d916b1e76803a46c9f62ce937ea0f90_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\20149e316f4be0282479c14514d6c15c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2306fa05ab10355a94cceca335c011d0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2135bc3a15b5a3b0abdb955fd3c9143b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\1d8d1773da73d0d79ce203740c820d9e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2314c7914f991d38a4b2ead22985dd1e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2385a9d649f67557e7a77f32f269955b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\24d2a1cb261fffbeaecce424908c46ce_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\26efbfc1b892023f4a8de26cdf07c6e5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2656c18f697859dfa9fb9adf3398491c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\25cde5cbf0a0c53a3e9b6cc6aa5937b1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\25df2d8c11585c6efcf575d178a1fc3b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\27a022933d08f894a2ee8e8b5f2ed7b9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\279489c5d121e9172d96db122c308508_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\285a7bde4aaca418e92902cf33872711_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\29a5043ddfd732e8d8d189f471e07954_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2a0229a382c9e0544e6ffb82f67a2431_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2a30575044451717c831242e9146bcc9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\29d0b77a7c95d5759536ebd7c86e36eb_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\29f206d2df9b1fff32f0c9585ad0978d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2b5b8bf4979b6ac0d7ee027351827c22_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2c173c9ccf1684135202a10e21259f62_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2c9ea16b1841b39f6db61e44f05852a6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2c386bf136a0a3ac3236e57493557d80_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2e2ddc37b5f517d351520309de16d083_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2da701b0c68b4469959eaa627d5e13f3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2ebed5c86d2fb3e6c2b8dca087100132_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2fa9e54831fec11b6fa595c15306a185_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2f3c8247c17ac7a6a5a1cb39db64a377_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2f8a6cf1e26a96364901c5e3bfaa1e31_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\2f6a7f170bbdb4a7c62b61355b4dafec_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\323148563511208c3305e5638555818f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\31ed6e088432cea845210344f7c2afb4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3286f61283c694763ba938e6fc9b018d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\320670016b5ca40cb2f0fd10d8a3c296_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\33b80934b7da95a135a576f2acc34151_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\357ec183a12bc22ce00eb7f9df4e49c9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\353ff30cd20f684b8eab5d7ebe685ab5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\382c068390b36a82487fc1138b4a54ca_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\367cce37bd7db9400bdfc8df2007ab97_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\37edb0122bbd70b10aef562e1f700707_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\337e32206cb24c40d90a271d64c8cf27_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3a0cbb84f3e2c6b07be3174a7f4d8efc_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\38ce8ba8bed0fd91c0b83c454010c605_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3a98dd55205cee7627dd71eff1f672fc_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3ab45e54446d348e306bfa3bd5865986_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3cc7f5a31af116563b565817eeda3ff6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3c5a089bdb6bcd86565fbbababc1379a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d0f88ac18709a343b842000d5c6fabf_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3db8ce834e517d4c2624ce5378339f31_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3df8dcc11cac1e10a7a3304828b0de4f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3d4ed46a62619c849098ad31e1d4231f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f3a7bec24094a132d22d3de892e4283_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f859c0a46ae674ea9bfc4e701e1c3fa_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3fb076cf66f8c8249ef07aa9460e7970_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\3f0bfaea08710faff07a4cb5c4bea7ca_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\408c2b3ab9ef8b37bf77f22094684f07_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\403d1f386a49f237185abdd932fe2dda_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\41edffca7f27b1a5edfd2953bd4ab51a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\41d50f5652d44031cfe5bdee59cad92c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\44c265f01ad30266653dfccf942b541b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\45968904ab59484f7426eea1fcdc69e6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\43d3d5dc0deac0d2abac8268d287fd4c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\44dc89ac783efe7dcdc23263ae92ba47_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\46049c1de03a56822b4f7e14d614ee8a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\473f24e1ed4a3681e54be6b00f65a7f9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\481b687a2657106fe1ba981e0a993381_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\49937ebe88166ecd70213179174f5270_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\466795eca6bdd12c14ce96b97aff2e47_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\47b96f86a92b7bc17a0e323f7328c4ec_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\494cc6fb7239e664fc8775e93cf023f3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4a89c3d76b7c5a57a7091b7438de330b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4aa5e04959f0850ba7122e11d1df51d4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4acad571013be721e4476d5daf229f40_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4cc79bd6dbd74ac58e141783e836b7b5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4b86dbaf4a729a08d268885da7063577_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4d479d34ed2e3c5233fb3a2eb345c7af_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4e7b30cdb70bb20acc2d34b6e5d8ad0e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4ea90e95c8ab2555febdbe553b53c45b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4d5b50c78358e1ceefceea018e9cfe85_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4df471ddf8a704c7e551f918bd0deed4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4f0035d89719b53cd08b6dd3057be4eb_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\4fd03f725f88fe2aee4584c681bf152d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5025f685c647dba543bb7a82ac70895e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51187a09cfcee1ec7824a94c23a21dc1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\50fd1e5adcb89e27b11269e89e87bb83_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\525d7536967f0351b9aa35755bd15731_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\52c9471367484b7ed3c270450d8829c9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5242a0b9dcf7cda635ad2b778f503201_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\51d33fc866a64ac277648ff98f3d4e1f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\53831f6b4ff7ceb8c93522d58f5c9032_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\53200f9b45731f66ccac0d34cf89d8f5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5430b851d056be1b3450051da20134c7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5526e911f3de85e54ec4f8aefb19b221_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\542fead0fc8b6c7dbb9c0933544f3200_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\547b6780b18ac3c2e073f8ce9c88e231_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\553a96e53a7f757736e3ad0bd799b2a2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\556c7faf68566a26376b6739cafd1b31_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\555d6d831bde02a33fb0f46bfb657559_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\558a14a97d1e8ed88426d731dfd80fe9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\55e313c17dc5460b873fbf2da07bc8f0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\576653d52d5749c26a474342f2e21e70_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\575d5ab7ac18b195d50681eecba08cc4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\55905f2287d4d5f08bb3948b8bf181b8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\58e4093e62a27d3528253a4b9773a99d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\58a057cfb71329c354e8070171527899_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\582daa03efaefe558485a745a799be10_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\57f16308119dd4f5d83142b16117b0c7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\59d912f1f8a09d733a902cfef7e83850_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\590e3532355c70cb45089d877e4e5d98_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5a165b2bbbfa254e228188aa8ea92bf1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ab315c472d3a103c7ab64e8907e93a8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b0a1594ee9d58da9b5da0118cb6ae2c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5b21ea891a182eb7c25592caa427d058_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5c0116c0db7e34737d73bcf5bb5bf30c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ccc7eef5259b0c6c34042c47a48047d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5ce02cd480b7f9aceccd65c6923c1a61_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5cd2a7a67f9d23550e525d984639a59d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5e48c9446d7ece6dc2d122667a14bde0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5d698e0105934b2d0d8fe1058cdd2da0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5e8c6ee225011e74390d1493b1a412c1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5d43c0ef4a21e85f4c4fc6fbad3690a2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5fa95398ac87b705dee981a46078f4dc_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\600dff04f824dcccf4068266f72a86d0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\60a0abd0dd8b7cc645d2d61cce5f9b3b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\5fb27974c92a04656ae57b6fae7046fa_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\635772c3e8e8c3f23b3f2b587225a22e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\63926eb2b4a1d7a94a0b4a2071e3deb0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\60d6b18230cbcde1c9eed072da294a98_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\642c813866e0f916b96efb9e25ca1f1d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\667209eeaf7b0ab244f82b82a9342f3b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\658a1644208dcc5f2be28c34b380505f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\65504a4a1b202c077995a28eef64d890_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\61613c5e9dd2b47adb119d18b923322a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\66efe0765df398e47867963417115769_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\676810da57b589141beaa253908fab7e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\696d2ca8fca25b3ba4c775de91545bb6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6a11387f9cdcdfe3e7d5c294928b6c9f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6a23bae89721f48096a4e3130ae1fbb5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\67f881b6b3c8b24bf2e81d036409e2da_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6a6cba78308d5b2113678b3920be3120_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d0b7c3236b4e889c12ca2a21b947887_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d41302e6e82269486cb4bc47e7d26bb_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6d91c38c1fd6bdd33baff8cedac4169d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6db6acf2d6bfd6dadc3276424bb5fe02_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\6e7e75040f24f8eb9b149d502fcb17b0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\70d7848335085a3aa3b58b1eacdf8909_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\71f8b08695eedf1111831dea1925f473_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\74a48c9c546ef7d5fbe4f3faa4510131_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\73ba5265376930359426907ee5ffcc89_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\73f1905ab29f985e79cd08f761324eda_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\770f0dcf32b09d61cb70d02d2276588e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\77e835f699285a4735eae6e1523c03b3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\77fae944bd7a09d58a6a932d29903490_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\78476b16a6ea9a0b56245cfeac615c30_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\78b9484c254e7c2d7fe3ebc97626bfda_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\78507e3c5f4018763f7dbb8a23acb3b0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\78cf5ce4d70ffae5ed10534101543e8e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7b247fc519e8dd42c790afb9c627a122_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7c0d11f023afbcc6451179e99591c68b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7c15e1b2e46b7032964d877c096d1891_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\67b063448ad1d241acb44de1de027544_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7a7afe2f4df2c3fd1b704ea2757e62b8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7cd475739d834c552cb6551f160f3693_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7e37121a8a5944e798231be435a67fad_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f2b861a3d44d196e425df94ddc739b2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7cef5cef3a5a07f77d71c1fff3ea4acd_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7f3c1d208c075c9cbeaf0bbd9db5ca6c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\7d7b85163e86ac9a35121e66376d8fa8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8022cd4d722d6808d9ebc3cb617195c6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\817f994d137dad8da80c94689fbe7c49_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\80f836ef20694d7f88bbcc36442bd280_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\82dde0ce162874c36fe1bc6cc56d5001_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8515d6971c6510c638f39f029b521c74_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\85502ccb437c15d4153f6006df28b3a5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\86374ff6dcca1813eded5472cb71b947_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\859d955448a9a2cb6cbc95af5a40bf64_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\82800a84c509770a7d2747766c664c23_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\864efe5661a6f3074c12530eb3aeddad_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\89126cb38bde6b385ac9fb0a68cb3335_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\895c3da360c2e272a39b67eb4e36fbed_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\898607875f4ca110dcde3e4299dbce17_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8a4ee84076f6ab7e68eccffb7824cae0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8c1934092e299303fc95d9dbcd731e2b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8ac745433b22e63c86156cbfb7ffc052_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8bc731cbeb5ad0ffdb657288ebd9e7df_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8e1bff85938e0aa2384f917f51b7986a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8c80ff52ea8602af775fb1f9abdc0ff0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8f41e48c2a277a1971ff6e8a3f13ede6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\8efc466ffb4e5e3005ec83ae8dca3157_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\907160183d9849b9f91d9cb0ff760297_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\91f15d6497284836ca0d426fa8462a00_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9070d4e39beae203351b8f36bcef68a4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\94dab0957615598608a7e53f9c72ec24_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9366318b5aba69edb1cad54dcfc9c943_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\944555dc31331dcfd2ccaf86a91586c7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9591af53ef0c92678abf5bee8fe26746_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9645759af7eea668e8e2f67f64009b72_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\91d9f05991f1751d22ac1af89424ed33_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\97d946b069793fc2a50769423a7c46ec_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\98f0baa2162920a6ed0580389ee9c6cc_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\99ade5b41fb724573725f589757133b6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\996493da5a8208f6b9095185b8024dee_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\98db2239b514cd3a2aedabe30b71b240_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9c0c42154c704e561da089511fe38abc_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9a30ee3a235c280eb10640d3c9ec202c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9c23d85d76bbcb046bb1d82c0932411e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\99f2f1471cedf8aba8d9b55d7c19354d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9d9b33fcf5bc92d7570453088a8d9de1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9e6adcdb41508ae31f7a744c88d5f058_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9dab550eb63b2dca1842c282273ec3a8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9b2c7da7d9d7e7ac5ceec38aa1442f9c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9ed2a9410988830d960993db0cb54b07_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9f40a7cac2f05e776eb5c1789f5314c4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9fc1afc91321d48bea12b0183cb6c55d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9f3982a5a32d822582f8bdc7879723e3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\9ede7cb55025735a4905faeb2761b3a0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a26d420d4c87e0889b80d4e7db82a70e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a341888db4db491828fefe8c111e262a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a09bd606684c66049792f41309e99d7c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a3767ac7a52a344f5b4aa8d4566d4fdf_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a28062d47cb8b054a7ae7f50df5deaa4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a3e9ee0bb85064a9e5ecb07c8f026d7a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a41a16569a60a08a3c38ae8d759f606d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a4f13d325f85c04718a2bdee82b7b82a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a455ac0d302e18a231ad589e7bb0c6d6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a3deaf6f2ea4185a26c57b9218baee58_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a5f5300c9afd72470921f83e2aa65469_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a6347cc48c4681f5d9c50a745d97586d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a53ef139a04a36d2c9bf39a55571ac40_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a6899866a0436aaa271020b9bdb841df_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a8b6cf8a01e67088bc2b010e5b67b2b7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a7d65b0ab8e4a40baea6fcb2bc892a18_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\a794531a1c6030252fa75edddbda2f0f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ac9ccfb653193fa82cec57d9886a5314_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\acb312dc970e5b06b7d466465d96af91_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\acc98538111727f57e94da4ca5d17eac_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\acdc401e006dd9d5b2f8750505717d28_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b290d9f14157e6ea669abf1aab27e656_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b22ff7d90c963d09d9f0ee7498eb51a6_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ae5270c2d0124b449a16d97cfd5cf464_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b37f64a55f6f990a7df51389322e1a60_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b2cf94997546e163d5cc080632f83197_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b4a069b02fd721054e988a18548313d4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b05a81f4156a6eb1d9b835bc16487150_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b510ac95b693b8556c8605d01a90e267_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b54c9d3f2713997f1dedc7a506c0eaf2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b6cbfb92e56a46cfb333d73b49873d8a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b6c8c15f6bf125760ffd0047c22613e5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b4b583ae193cce402145a244965a55f0_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b8577245f9a93717dd7b2c3dc34ec858_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bb81ee333d752a3d49da32d9efba6a2f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bbde5b4a543b5b3a0880180eb0327f7f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\b6d599c5cfe23a52937d3436a39cfeb8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bcb35463ec583a4f90d38d26d8d98113_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bc5712e60b29029269a8165c1a23b603_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bb77728ed924c46143148f189a050c1a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bd7eb74b5218cccc5837735663115182_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c12fcc078c9b4f972a6596718c5ce32e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\bf8f2e53b4cab768f080274f6f2c9676_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\be9d9edaf704621ae02f6138adf9c7bd_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c4c9d4a2de7627ca3d22ac269733663e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c1d4bba6c9af9d866b59823f9705526d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c507ffdc475e9a747bda6471faa13ab2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c68bd6f710c13444a75c7d9897f2bb00_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c69f209211adb8f94641d5c7ee42418e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c9cfa67d4a4c0b255d8ee4beb52970fd_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\caf17a5dccd7be969cd30ac716c41160_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c9725c3304b57b3fc2bf2e0e08db3f57_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cc7a75660d3eb68425c0c38fbf456c00_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cc1e128ea63df438c26fdce0d107405e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ccbbc2eaa770b81fe162b62bf61f3fb1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ce455b19a0dd345bc4e54347413c029f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cdce5bd9cd29ca5859205d816a8e0e7b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ceb0fd1b72fbd3adc908cddbf839175f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cff7be47909a7b371692a4f09a7bee00_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\cedd73f1ef89bf733d811a0e1469ed6c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d15920f849d0abf9f38ed111d85fc343_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d0e2770d56bd9c891dd690e49366153c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d16ddd8e4ab32eacfa89d618d8d96015_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d29c89bfbd0651546c882709e57f65da_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d474b91f22cccd324f0f77afd9eac3fa_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d2edacb8bd3b80cc4f7e546d6c832dbd_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d2b0296f2b1be9e588485b70466c4e38_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d4e6c025b12320f4ec0e41532e8ccfca_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d6ce147d240760671617277418b3c07f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d7089deb1536671fb717b2a0a7d79b92_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d4d49df574d6872e13bab5ccbb296ee9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d7f3ffb2f57397281b4ad8bb9c067345_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\d9ca4c882d47bf9a77ceb089c79daf15_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dacbf2d5fbd6aa84360aef04c9ae63f9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\db86897f1c4b25325d37743bcaf38970_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\c68147afaf90ef59b91b49e97a53470d_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dbbcb4871b191f0b9ac5b2337a8d6c55_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd50d4359b34f4ecc79290f3dcdb97aa_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dc9acdc6ddae5790696603128e81034f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dd7ae03e25ed09b724d3a2d6926d127f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ddf59724b04ac265882024f2232a9843_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\de11b6f81c86a14a0b97e4ef7435554f_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\de3f16bf5842c717889adb77bc84c1d9_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\deced04f89367badc6f2b9e69e5d168c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df060fef64c5061deca5c077d08a6b31_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e05541f3a0b7b218875cd89d7604f8f7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\dfd44f9c5b18cba848b0f2a7dd8a382b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e07e5dffe60364b06b525428dd7b66ec_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\df777ae2ee3aa65cc6727af91239cd77_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0d50d00ae476e5b589ca6e80bdd9937_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0fce6c5353510d2c7a7810a50270b20_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e111f712b4f2ac7e47b1f3a3317a862e_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e24b914b4853ac680181d9aa3c5a3bd4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e09430d3002e98e17f1a32bcf1793afe_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e0ebfd3f759a79eb646a911bbf7ea26c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e34407b1b23ac418089d8c66e22ce2ef_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e3fe34cad600a99127302c4a6371ebc4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e474e6cb7ba1b1419fc10833182e8684_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e57dcb8802799e2da0423c2a369065a3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e513b542d67a5b23f67be37c00ed908b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e34e989e624a84ab0c1980afb6231871_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e656bf614367833161902c3cc056aea2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e595ecb9484ba84f64a149c44e570ece_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e6cafff34083b0a1cc5ff667b6a825e7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e78ed744275471f3d3b5ee263029ec46_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e8566891a787c8fcd0cc3a0ed2ba7d87_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e96df695aea5b56d010c515c91e014b1_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea10fe9fd731f77925e1f906dfa0e084_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\e91f2f7c161dcbebc31706872f669c3a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea5d70fcee0d56c7317a8aeb8c45d126_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea773e7dc785bb062756c9ee6ef98ab4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ea8997cb4a05f40bc5652bcc8b5854dd_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eb3b9c5a9d2eff92c88d35e91f241d94_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\eb7542a66b6d81a111b4e482c3debd6b_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ed11a1b9dfad32fe038da3adb7838019_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ed3d22b43fe31d98e9a6ecd6f3f532c3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ee83668dfaed42635ea2e41bb09cdce3_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ee8a6f04ba9807cccc80c50ce934f92c_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f02300ff3d515328c7774013256f718a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\edbc8d143849344ef84700d8c64c38be_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f0f3b72caa225d324edfb4cd14675290_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f0f9e0603024b708e487a2dc6edc9944_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f67a70c3c33ba60366de5b1c3dfed297_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f72cc86084b97c3eeef8f1f284b1ebbf_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f9059bdd16fc4006603e7067e2756956_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f90a91314b36deb0d02113bb8372f385_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f9a0742e516779b521969f3c3796f477_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f4e086e5d7065983823bea0af2c63559_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fa4958c532d50e4b0916e3838d1dfaa8_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\faac47c70d9b343b28d16ab144ede5db_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\f7f04a559dcd92da09642f8a8b15d65a_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd6dc7f62a37a9a05efb6583ceb1f2f5_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fc8fd9cda6537a2e55ca303ef116ac44_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd08538956bc753f6852483604e07fe4_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe06851902fb4c725271a3adaf30c3ab_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe9d74360d8cfcb9c16ce188d1eec039_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\ff6ce4d383fab9ef16b0d97bc952c8d2_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fe4a7fbf0c9622839f540bb60f6116c7_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\fd5a1cd9373e5c7ad1855363cf8c0661_d17048e4-4be6-4c71-8f69-3d11883d4004
C:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\cfc.flights.json
C:\System Volume Information\MountPointManagerRemoteDatabase
C:\System Volume Information\Syscache.hve.LOG1
C:\System Volume Information\Syscache.hve
C:\System Volume Information\Syscache.hve.LOG2
C:\Users\Promor\AppData\Local\Microsoft\CardSpace\CardSpaceSP2.db.shadow
C:\Users\Promor\AppData\Local\Microsoft\CardSpace\CardSpaceSP2.db

– Die folgenden Dateien sind Passwortgeschützt:
C:\Program Files (x86)\PDF Architect 2\localization\de\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\en\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\es\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\fr\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\it\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\ja\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\pt\messages.dat
C:\Program Files (x86)\PDF Architect 2\localization\ru\messages.dat
C:\Windows\Installer\2761a5.msi
C:\ProgramData\PDF Architect 2\Installation\statistic.xml
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cache-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Cookie-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DoubleClick-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\DownloadSponsor-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Internet Explorer-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0003.zip
C:\ProgramData\PDF Architect 2\Installation\pdf-architect-startup-2.1.6.19758.msi
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Macromedia.FlashPlayer.Cookies-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MediaPlex-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Direct3D-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectDraw-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectDraw-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectDraw-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectDraw-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectInput-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectInput-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectInput-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS DirectInput-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Management Console-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\MS Regedit-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Statcounter-0005.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Verlauf-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Verlauf-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Verlauf-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Verlauf-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Explorer-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Verlauf-0004.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Explorer-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Explorer-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Explorer-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Media SDK-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows.OpenWith-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows Media SDK-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows.OpenWith-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows.OpenWith-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\Windows.OpenWith-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\WinRAR-0000.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\WinRAR-0001.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\WinRAR-0002.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\WinRAR-0003.zip
C:\ProgramData\Spybot - Search & Destroy\Quarantine\WinRAR-0004.zip
C:\ProgramData\Trend Micro Installer\TTi_8.0_MR_Full_1427567532\SupportTool\32bit\TISTool\32bit.7z
C:\ProgramData\Trend Micro Installer\TTi_8.0_MR_Full_1427567532\SupportTool\64bit\TISTool\64bit.7z
C:\Users\Promor\AppData\Local\Abelssoft\.data
C:\Users\Promor\AppData\Roaming\TERA\launcher\live\6d953efd0d9388f0e18e3c9b51f403d6c640ac3b.patchmanifest
C:\Users\Promor\AppData\Roaming\TERA\launcher\live\dd574d2235ef17149bdaf442e3e1350df08eb36b.patchmanifest
C:\Users\Promor\AppData\Roaming\TERA\launcher\live\downloader.bundle
C:\Users\Promor\AppData\Roaming\TERA\launcher\live\launcher.bundle
C:\Users\Promor\AppData\Roaming\TERA\launcher\live\patcher.bundle
         

FRST ist eben fertig geworden:
FRST.txt:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2015 01
Ran by Promor (administrator) on PROMOR-PC on 23-05-2015 08:12:17
Running from C:\Users\Promor\Downloads
Loaded Profiles: Promor (Available Profiles: Promor)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(BioWare) C:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GdBgInx64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\DOLBY PCEE4\pcee4.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
() C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Marek Jasinski) C:\Program Files (x86)\FreeCommander XE\FreeCommander.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe [167960 2011-03-30] (Intel Corporation)
HKLM-x32\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe [391704 2011-03-30] (Intel Corporation)
HKLM-x32\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe [418840 2011-03-30] (Intel Corporation)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM-x32\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2588968 2010-11-12] (ELAN Microelectronics Corp.)
HKLM-x32\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832 2011-03-10] (Realtek Semiconductor)
HKLM-x32\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1796200 2011-02-22] (Acer Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2585744 2015-03-13] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-09-14] (Intel Corporation)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-02-15] (NTI Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1081424 2011-03-14] (Dritek System Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] => C:\Dolby PCEE4\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [GDFirewallTray] => C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe [1724728 2013-12-19] (G Data Software AG)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-18\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [175880 2015-04-09] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [154256 2015-04-09] (NVIDIA Corporation)
Startup: C:\Users\Promor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ClocX - Verknüpfung.lnk [2014-08-19]
ShortcutTarget: ClocX - Verknüpfung.lnk -> C:\Program Files (x86)\ClocX\ClocX.exe (No File)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1070041627-3669085680-166679229-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer.msn.com/
HKU\S-1-5-21-1070041627-3669085680-166679229-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-14] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-14] (Oracle Corporation)
BHO: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll [2014-11-07] (DVDVideoSoft Ltd.)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: DVDVideoSoft IE Extension -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll [2014-11-11] (DVDVideoSoft Ltd.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-16] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-14] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-16] ()
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\searchplugins\conanwiki-de.xml [2015-03-15]
FF SearchPlugin: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\searchplugins\folgt---twitch.xml [2015-05-11]
FF SearchPlugin: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\searchplugins\league-of-legends-wiki-en.xml [2015-02-25]
FF SearchPlugin: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\searchplugins\minecraft-wiki-de.xml [2014-10-29]
FF SearchPlugin: C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\searchplugins\proxerme.xml [2015-03-04]
FF Extension: Add Bookmark Here ² - C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\Extensions\abhere2@moztw.org.xpi [2014-08-28]
FF Extension: Add to Search Bar - C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\Extensions\add-to-searchbox@maltekraus.de.xpi [2014-12-13]
FF Extension: Personas Plus - C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\Extensions\personas@christopher.beard.xpi [2014-08-27]
FF Extension: Adblock Plus - C:\Users\Promor\AppData\Roaming\Mozilla\Firefox\Profiles\h2jqwauk.default-1409145912818\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-08-27]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-09]
FF HKU\S-1-5-21-1070041627-3669085680-166679229-1001\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-11-15]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [2244728 2014-02-12] (G Data Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [914552 2013-12-19] (G Data Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [2723400 2014-03-25] (G Data Software AG)
R2 DAUpdaterSvc; C:\Spiele\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [25832 2009-12-15] (BioWare)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [2992760 2014-01-30] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [700024 2014-02-03] (G Data Software AG)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148560 2015-03-13] (NVIDIA Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [257344 2011-02-15] (NTI Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1706128 2015-03-13] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21833360 2015-03-13] (NVIDIA Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-09-05] (Disc Soft Ltd)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [57344 2014-08-17] (G Data Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [135168 2014-08-17] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [68608 2014-08-17] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [64000 2014-08-17] (G Data Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [106272 2014-08-20] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [65024 2014-08-17] (G Data Software AG)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
S3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [39168 2014-05-27] (SteelSeries Corporation)
U2 TMAgent; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-23 08:12 - 2015-05-23 08:12 - 00019482 _____ () C:\Users\Promor\Downloads\FRST.txt
2015-05-23 08:00 - 2015-05-23 08:00 - 00380416 _____ () C:\Users\Promor\Downloads\Gmer-19357.exe
2015-05-23 07:55 - 2015-05-23 08:12 - 00000000 ____D () C:\FRST
2015-05-23 07:54 - 2015-05-23 07:54 - 02108416 _____ (Farbar) C:\Users\Promor\Downloads\FRST64.exe
2015-05-23 07:54 - 2015-05-23 07:54 - 00000544 _____ () C:\Users\Promor\Desktop\defogger_disable.log
2015-05-23 07:54 - 2015-05-23 07:54 - 00000168 _____ () C:\Users\Promor\defogger_reenable
2015-05-23 07:53 - 2015-05-23 07:53 - 00050477 _____ () C:\Users\Promor\Downloads\Defogger.exe
2015-05-23 07:16 - 2015-05-23 07:16 - 02347384 _____ (ESET) C:\Users\Promor\Downloads\esetsmartinstaller_deu.exe
2015-05-23 07:16 - 2015-05-23 07:16 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-05-23 07:08 - 2015-05-23 07:10 - 00000000 ____D () C:\Users\Promor\AppData\Roaming\WinPatrol
2015-05-23 07:08 - 2015-05-23 07:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2015-05-23 06:23 - 2015-05-23 06:24 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-23 06:23 - 2015-04-14 09:37 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-23 06:23 - 2015-04-14 09:37 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-23 06:23 - 2015-04-14 09:37 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-23 06:12 - 2015-05-23 06:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-05-23 06:12 - 2015-05-23 06:23 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-05-22 14:43 - 2015-05-23 04:01 - 00000000 ____D () C:\Program Files\ClocX
2015-05-22 13:41 - 2015-05-22 13:44 - 277494581 _____ () C:\Users\Promor\Downloads\[AMALGAM]Kiniro_Mosaic_S2_07[1280x720][x264][HD].rar
2015-05-22 13:40 - 2015-05-22 13:53 - 231594205 _____ () C:\Users\Promor\Downloads\[AMALGAM]Conan_777[1280x720][x264][HD].rar
2015-05-21 13:45 - 2015-05-21 14:56 - 00000000 ____D () C:\Users\Promor\Downloads\Diablo 2
2015-05-20 16:25 - 2015-05-23 04:01 - 00000000 ____D () C:\Users\Promor\AppData\Local\CDex
2015-05-20 16:25 - 2015-05-20 16:25 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-18 19:42 - 2015-05-18 19:42 - 00000000 ____D () C:\Users\Promor\AppData\Roaming\com.playsaurus.heroclicker
2015-05-16 13:11 - 2015-05-23 06:33 - 00004204 _____ () C:\Users\Promor\Documents\Database.kdb
2015-05-15 11:34 - 2015-05-15 11:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-14 03:01 - 2015-05-01 15:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 03:01 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 18:12 - 2015-05-05 03:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 18:12 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 18:12 - 2015-04-22 04:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 18:12 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 18:12 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 18:12 - 2015-04-21 19:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 18:12 - 2015-04-21 19:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 18:12 - 2015-04-21 18:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 18:12 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 18:12 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 18:12 - 2015-04-21 18:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 18:12 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 18:12 - 2015-04-21 18:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 18:12 - 2015-04-21 18:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 18:12 - 2015-04-21 18:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 18:12 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 18:12 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 18:12 - 2015-04-21 18:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 18:12 - 2015-04-21 18:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 18:12 - 2015-04-21 18:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 18:12 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 18:12 - 2015-04-21 18:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 18:12 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-05-13 18:12 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 18:12 - 2015-04-21 18:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 18:12 - 2015-04-21 18:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 18:12 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 18:12 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-05-13 18:12 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-05-13 18:12 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 18:12 - 2015-04-21 18:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 18:12 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 18:12 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-05-13 18:12 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 18:12 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 18:12 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-05-13 18:12 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-05-13 18:12 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-05-13 18:12 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 18:12 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-05-13 18:12 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-05-13 18:12 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 18:12 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 18:12 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-05-13 18:12 - 2015-04-21 17:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 18:12 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 18:12 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-05-13 18:12 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 18:12 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-05-13 18:12 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 18:12 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 18:12 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 18:12 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 18:12 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 18:12 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 18:12 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-05-13 18:12 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 18:12 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 18:12 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 18:12 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 18:12 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 18:12 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 18:12 - 2015-04-18 05:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 18:12 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 18:11 - 2015-04-20 05:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 18:11 - 2015-04-20 05:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 18:11 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 18:11 - 2015-04-20 04:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 18:11 - 2015-04-13 05:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 18:11 - 2015-04-08 05:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 18:11 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-05-13 06:41 - 2015-05-23 04:01 - 00000000 ____D () C:\Users\Promor\AppData\Roaming\KeePass
2015-05-13 06:39 - 2015-05-13 06:39 - 00001107 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass.lnk
2015-05-13 06:39 - 2015-05-13 06:39 - 00000000 ____D () C:\Program Files (x86)\KeePass Password Safe
2015-05-10 14:04 - 2015-05-10 14:04 - 00000000 ____D () C:\Windows\SysWOW64\NV
2015-05-10 14:04 - 2015-05-10 14:04 - 00000000 ____D () C:\Windows\system32\NV
2015-05-10 14:00 - 2015-04-08 23:30 - 06841488 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 03478344 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 01047696 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 00936264 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2015-05-10 14:00 - 2015-04-08 23:30 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 00075080 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2015-05-10 14:00 - 2015-04-08 19:52 - 04336074 _____ () C:\Windows\system32\nvcoproc.bin
2015-05-10 13:59 - 2015-04-09 02:58 - 00078480 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2015-05-10 13:59 - 2015-04-09 02:58 - 00066704 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 17176128 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 14617288 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 12689592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2015-05-10 13:53 - 2015-04-09 02:58 - 03317344 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2015-05-10 13:53 - 2015-04-09 02:58 - 00031376 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvpciflt.sys
2015-05-10 13:53 - 2015-04-09 02:58 - 00029329 _____ () C:\Windows\system32\nvinfo.pb
2015-05-08 13:57 - 2015-04-27 21:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-08 13:57 - 2015-04-27 21:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-08 13:57 - 2015-04-27 21:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-08 13:57 - 2015-04-27 21:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-05-08 13:57 - 2015-04-27 21:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-05-08 13:57 - 2015-04-27 21:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-08 13:57 - 2015-04-27 21:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-08 13:57 - 2015-04-27 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-08 13:57 - 2015-04-27 21:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-08 13:57 - 2015-04-27 21:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-05-08 13:57 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-05-08 13:57 - 2015-04-27 21:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-05-08 13:57 - 2015-04-27 21:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-05-08 13:57 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-05-08 13:57 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-05-08 13:57 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-05-08 13:57 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-05-08 13:57 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-05-08 13:57 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-05-08 13:57 - 2015-04-27 21:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-05-08 13:57 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-05-08 13:57 - 2015-04-27 21:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-05-08 13:57 - 2015-04-27 21:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-05-08 13:57 - 2015-04-27 21:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-05-08 13:57 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-05-08 13:57 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-05-08 13:57 - 2015-04-27 21:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-05-08 13:57 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-05-08 13:57 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 20:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-08 13:57 - 2015-04-27 19:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-05-08 13:57 - 2015-04-27 19:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-05-08 13:57 - 2015-04-27 19:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-05-08 13:57 - 2015-04-27 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-05-08 13:57 - 2015-03-14 05:21 - 01632768 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-05-08 13:57 - 2015-03-14 05:21 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2015-05-08 13:57 - 2015-03-14 05:04 - 01372160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-05-08 13:57 - 2015-03-14 05:04 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2015-05-08 13:57 - 2015-01-29 05:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-08 13:57 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-08 13:56 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe
2015-05-08 13:56 - 2015-02-18 09:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-08 13:53 - 2015-03-04 06:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-08 13:53 - 2015-03-04 06:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-08 13:53 - 2015-03-04 06:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-08 13:53 - 2015-03-04 06:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-08 13:53 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll
2015-05-08 13:53 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll
2015-05-08 13:53 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-03 11:36 - 2015-05-03 11:36 - 00001395 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-05-03 11:36 - 2015-05-03 11:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2015-05-03 11:36 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2015-05-02 11:27 - 2015-05-23 07:44 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-02 11:27 - 2015-05-16 12:55 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-26 11:15 - 2015-04-26 11:16 - 00000400 ____H () C:\Windows\br.bin
2015-04-26 10:56 - 2015-04-26 11:53 - 00000000 ____D () C:\ProgramData\BeckRecherche 2010
2015-04-26 10:54 - 2009-03-31 06:55 - 00050200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-SQLAgent$RECHERCHE2009-sqlagtctr10.1.2531.0.dll
2015-04-26 10:47 - 2015-04-26 11:51 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-23 07:54 - 2014-08-17 23:26 - 00000000 ____D () C:\Users\Promor
2015-05-23 07:00 - 2014-10-12 11:26 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy 2
2015-05-23 06:36 - 2014-08-18 08:44 - 00000000 ____D () C:\Spiele
2015-05-23 06:28 - 2009-07-14 06:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-23 06:28 - 2009-07-14 06:45 - 00024400 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-23 06:25 - 2014-08-17 22:27 - 02033648 _____ () C:\Windows\WindowsUpdate.log
2015-05-23 06:20 - 2015-04-02 13:09 - 00003764 _____ () C:\Windows\PFRO.log
2015-05-23 06:20 - 2015-03-14 16:33 - 00021129 _____ () C:\Windows\setupact.log
2015-05-23 06:20 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-23 04:01 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-05-23 04:01 - 2015-04-05 03:00 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-23 04:01 - 2015-04-03 11:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74
2015-05-23 04:01 - 2015-04-03 11:14 - 00000000 ____D () C:\Program Files (x86)\DOSBox-0.74
2015-05-23 04:01 - 2014-11-30 10:14 - 00000000 ____D () C:\Users\Promor\AppData\Roaming\vlc
2015-05-23 04:01 - 2014-09-05 20:38 - 00000000 ____D () C:\Users\Promor\AppData\Roaming\Battle.net
2015-05-23 04:01 - 2014-08-20 15:49 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-23 04:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2015-05-21 13:31 - 2014-09-15 18:42 - 00007604 _____ () C:\Users\Promor\AppData\Local\resmon.resmoncfg
2015-05-21 13:23 - 2014-09-05 20:38 - 00000000 ____D () C:\Users\Promor\AppData\Local\Battle.net
2015-05-18 16:20 - 2014-08-18 08:21 - 00699440 _____ () C:\Windows\system32\perfh007.dat
2015-05-18 16:20 - 2014-08-18 08:21 - 00149548 _____ () C:\Windows\system32\perfc007.dat
2015-05-18 16:20 - 2009-07-14 07:13 - 01619700 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-16 12:55 - 2015-02-18 07:40 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-16 12:55 - 2015-02-18 07:40 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-16 12:54 - 2014-09-01 20:00 - 00000000 ____D () C:\Users\Promor\AppData\Local\Adobe
2015-05-16 12:52 - 2014-08-17 23:49 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-14 16:50 - 2014-08-18 15:39 - 00000000 ____D () C:\Users\Promor\Documents\Techniker-Studium
2015-05-14 04:39 - 2014-08-21 13:15 - 00000000 ___RD () C:\Users\Promor\Downloads\Amalgam
2015-05-14 04:24 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-05-14 03:35 - 2009-07-14 06:45 - 00294880 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 03:14 - 2014-08-18 02:37 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 03:06 - 2014-08-18 02:37 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 03:47 - 2014-08-22 17:28 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-12 18:06 - 2014-09-05 20:40 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
2015-05-12 18:01 - 2014-09-05 20:38 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2015-05-10 14:04 - 2014-10-23 19:17 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-10 14:00 - 2014-08-17 22:40 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2015-05-10 14:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2015-05-10 13:59 - 2014-08-18 09:55 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-05-10 13:59 - 2014-08-17 22:40 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-05-09 04:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-03 11:36 - 2014-10-12 11:26 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2015-05-03 11:27 - 2014-11-05 21:53 - 00000547 _____ () C:\Windows\wininit.ini
2015-05-02 11:46 - 2015-03-15 19:47 - 00014346 _____ () C:\Users\Promor\Documents\Spritverbrauch Passat.ods
2015-04-26 10:54 - 2014-08-18 00:48 - 01830426 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2015-04-26 10:37 - 2014-09-05 11:48 - 00000000 ____D () C:\Users\Promor\Images

==================== Files in the root of some directories =======

2014-08-17 23:48 - 2014-08-17 23:48 - 0000000 _____ () C:\Users\Promor\AppData\Roaming\gdfw.log
2014-08-17 23:48 - 2014-08-17 23:48 - 0000779 _____ () C:\Users\Promor\AppData\Roaming\gdscan.log
2014-09-15 18:51 - 2014-09-15 18:52 - 0010689 _____ () C:\Users\Promor\AppData\Local\HWVendorDetection.log
2014-09-15 18:42 - 2015-05-21 13:31 - 0007604 _____ () C:\Users\Promor\AppData\Local\resmon.resmoncfg
2014-08-17 22:51 - 2014-08-17 22:53 - 0015625 _____ () C:\ProgramData\ArcadeDeluxe5.log
2011-04-06 12:36 - 2010-03-02 23:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe
2014-08-18 01:19 - 2014-08-18 01:20 - 0000032 _____ () C:\ProgramData\PS.log

Some files in TEMP:
====================
C:\Users\Promor\AppData\Local\Temp\NVI2_29.DLL
C:\Users\Promor\AppData\Local\Temp\_TinDel.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-14 01:15

==================== End of log ============================
         

und letztendlich noch die addition.txt

Addition.txt:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-05-2015 01
Ran by Promor at 2015-05-23 08:13:33
Running from C:\Users\Promor\Downloads
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1070041627-3669085680-166679229-500 - Administrator - Disabled)
Gast (S-1-5-21-1070041627-3669085680-166679229-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1070041627-3669085680-166679229-1002 - Limited - Enabled)
Promor (S-1-5-21-1070041627-3669085680-166679229-1001 - Administrator - Enabled) => C:\Users\Promor

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: G Data InternetSecurity CBE (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G Data InternetSecurity CBE (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
FW: G Data Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.85 - NTI Corporation)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3006 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3002 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3004 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.1130.2010 - Acer Incorporated)
Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3005 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
Backup Manager V3 (x32 Version: 3.0.0.85 - NTI Corporation) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Broadcom Card Reader Driver Installer (HKLM\...\{4710662C-8204-4334-A977-B1AC9E547819}) (Version: 14.6.1.2 - Broadcom Corporation)
Broadcom Gigabit NetLink Controller (HKLM\...\{C91DCB72-F5BB-410D-A91A-314F5D1B4284}) (Version: 14.6.1.2 - Broadcom Corporation)
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )
CanoScan LiDE 110 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_cnq2414) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.03 - Piriform)
Clicker Heroes (HKLM-x32\...\Steam App 363970) (Version:  - )
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.7000.4 - Dolby Laboratories Inc)
Dragon Age Redesigned© (HKU\S-1-5-21-1070041627-3669085680-166679229-1001\...\Dragon Age Redesigned©) (Version:  - )
Dragon Age Redesigned© Wynne (HKU\S-1-5-21-1070041627-3669085680-166679229-1001\...\Dragon Age Redesigned© Wynne) (Version:  - )
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05 - Electronic Arts, Inc.)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
ETDWare PS/2-X64 8.0.6.0_WHQL (HKLM\...\Elantech) (Version: 8.0.6.0 - ELAN Microelectronic Corp.)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free Studio version 6.4.0.1111 (HKLM-x32\...\Free Studio_is1) (Version: 6.4.0.1111 - DVDVideoSoft Ltd.)
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)
G Data InternetSecurity CBE (HKLM-x32\...\{85203592-3610-4FB9-AA11-15B2255B5A12}) (Version: 25.0.1.2 - G Data Software AG)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotogràfica del Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie foto Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Grim Legends - The Forsaken Bride - Collectors Edition (HKLM-x32\...\Grim Legends - The Forsaken Bride - Collectors Edition_EN_is1) (Version: 1.0 - Artifex Mundi sp. z o.o.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3006 - Acer Incorporated)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KeePass Password Safe 1.29 (HKLM-x32\...\KeePass Password Safe_is1) (Version: 1.29 - Dominik Reichl)
K-Lite Mega Codec Pack 11.0.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.0.0 - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.4 - Acer Inc.)
Logon Screen (HKLM\...\{1730D13B-7517-4321-A88B-64627CF67CDC}_is1) (Version:  - Daniel Rebelo)
Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla)
Mozilla Thunderbird 31.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.0 (x86 de)) (Version: 31.0 - Mozilla)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.53.2 - Black Tree Gaming)
NVIDIA GeForce Experience 2.2.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.2.2 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.51.17865 - pdfforge GmbH)
PDF Architect 2 Create Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 Edit Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDF Architect 2 View Module (x32 Version: 2.1.6.19758 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.1 - pdfforge)
PerfectSphere (HKU\S-1-5-21-1070041627-3669085680-166679229-1001\...\ce2965ae71956536) (Version: 1.0.0.0 - Cameron MacFarland)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Pošta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6329 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden
SHIELD Streaming (Version: 4.0.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 17.12.8 - NVIDIA Corporation) Hidden
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Starbound (HKLM-x32\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
SteelSeries Engine (HKLM\...\SteelSeries Engine) (Version: 2.8.450.22786 - SteelSeries)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.0.82.0 - Intel)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3102 - Acer Incorporated)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Почта Windows Live (x32 Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden
Фотоальбом Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Фотогалерия на Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
גלריית התמונות של Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
بريد Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
معرض صور Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

19-05-2015 16:07:53 Windows Update
20-05-2015 16:24:32 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
20-05-2015 16:34:16 Windows Update
23-05-2015 03:56:24 Wiederherstellungsvorgang
23-05-2015 04:08:40 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0F39D18E-1920-432D-BC8E-037937584DA6} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {142B0141-141B-46AC-A505-6016A493F1D7} - System32\Tasks\Logon Screen SkipUAC => C:\Program Files\Logon Screen\Logon Screen.exe [2015-02-15] (Daniel Rebelo)
Task: {21BE71E0-F334-43C0-BA65-5D474B2CD5E4} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {25FF205C-18A9-4790-A2D0-9E860B10C0E4} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {2A8723B5-0484-44B9-92AB-3821EC354EBC} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-03-25] (Microsoft Corporation)
Task: {344D9158-625F-4395-A531-BCC12B03A19C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {3625FE72-BC72-4487-8E68-C9509E2DEF40} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {59F07807-705F-4471-8865-118DEF7FB177} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.)
Task: {836AAACB-5CC3-4C30-B9F4-DB5865A85854} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)
Task: {9A427A63-1DC2-4F92-863E-0E375BA37FC9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-02-19] (Piriform Ltd)
Task: {9B98963C-42FE-4675-8E3C-4F05FC6CFE19} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
Task: {B56F5967-DC13-4602-B7FB-26EA7826487A} - System32\Tasks\{C9A7BAE8-0B3D-42E4-964D-9E7ED9CEF2AB} => pcalua.exe -a C:\BlueByte\Siedler3\s3new160.exe -d C:\BlueByte\Siedler3
Task: {B852B8B8-7F28-48E4-8ED9-F2679EC36E90} - System32\Tasks\{92F3EB48-ADAB-4F24-9CA7-E502C8314D67} => pcalua.exe -a C:\Spiele\Siedler3Gold\SETUPS3.EXE -d C:\Spiele\Siedler3Gold
Task: {C503C56D-F296-408F-BA9A-4A90DAD25790} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-03-25] (Microsoft Corporation)
Task: {D4358965-4A66-4CB5-9E29-680CFC6D38B0} - System32\Tasks\{CBAF8083-2FA5-4623-A45D-A34B4BDC92DB} => pcalua.exe -a C:\Spiele\Siedler3Gold\s3new160.exe -d C:\Spiele\Siedler3Gold
Task: {D73B5268-C0D4-4CDC-89D2-8CAF447966CD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {E4B043AE-A11D-412F-B610-033DF3AF4EDA} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (Whitelisted) ==============

2015-05-10 13:53 - 2015-04-09 02:58 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2015-05-10 14:00 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2011-04-06 13:14 - 2011-03-26 02:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2013-12-19 04:42 - 2013-12-19 04:42 - 00350840 ____N () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2015-05-23 07:16 - 2014-06-26 07:44 - 00358144 _____ () C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2015-05-10 13:53 - 2015-04-09 02:58 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2011-02-15 20:37 - 2011-02-15 20:37 - 00465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-02-15 20:36 - 2011-02-15 20:36 - 01081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-02-15 20:37 - 2011-02-15 20:37 - 00125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2015-05-03 11:36 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2015-05-03 11:36 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2015-05-03 11:36 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2015-05-03 11:36 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2015-05-03 11:36 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-10-16 15:52 - 2014-10-16 15:52 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\ba8588c3319d63350220ec2ac3eb2c36\IsdiInterop.ni.dll
2011-04-06 12:30 - 2010-09-14 03:28 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1070041627-3669085680-166679229-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Promor\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1

==================== MSCONFIG/TASK MANAGER Error getting ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: SteelSeries Engine => C:\Program Files\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{6E7F0282-320B-4A28-912C-2063B3B942AC}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{AD8A6F6E-A646-42D5-A2FD-61A6F9CF7DD1}] => (Allow) LPort=2869
FirewallRules: [{A0BE558E-616C-4229-BB74-4F7BC3821DF3}] => (Allow) LPort=1900
FirewallRules: [{2B9CF7D8-C987-42D6-A0BD-6954CA361EAA}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{4D13EB54-3C44-4DF1-A131-2E1F7D0BCA52}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{559CFEB1-8A38-4218-AE30-14078F3B954B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B2180FE6-607A-414E-ACA8-C60038EBA970}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{AAAE6630-1110-4197-A2D3-F646C289340B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{78D1A6F5-1CF7-41CA-9F9B-422D84C45680}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{A46A06E7-2966-44AB-BA45-805B3C84CA81}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{333B5E13-37CE-4473-A142-E39EE4CD507C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{A077B7A4-7938-432B-8974-C2978BF494D3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{96E74033-1944-4153-8E97-83AA66FE03B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{E503D177-1BDB-4E8C-ADB5-100B4C57F085}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9289D1E2-11F9-42F2-9FDA-7058D716E076}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17D53A24-AF21-4174-B82F-2A0FFC1A3FD0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{795FB85F-6A5B-4A78-8B2E-5DEDD50FFB1C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A147E983-1147-4BD0-86D0-CE53ACA1AB9A}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{35879690-7172-4650-AC94-CE62B53CC3DF}] => (Allow) C:\Program Files (x86)\DVDVideoSoft\Free Torrent Download\FreeTorrentDownload.exe
FirewallRules: [{D2F69C02-915E-4BF6-99EB-6490998A5165}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B0A2707D-CC52-4F36-B1E3-C97006C8AA5D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{044DB9F6-B51D-4037-85CB-FA50B33AFBC6}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{F70BA770-A210-45CF-A4CE-7736C128ADA7}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{A304908C-4B31-4233-8873-AA9CE67720F6}] => (Allow) C:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{9E8F6B23-C8E6-4F87-80ED-704F930C6554}] => (Allow) C:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{3532A016-10FC-4783-BA68-8E3556CF4B4A}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{CC9AE4E1-BB68-49AA-BF94-3E05E34AEED6}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{862D8DFE-DD55-4FFB-BFF7-FA6369D77F27}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{07A62487-3541-43B3-AA04-7181424C4E59}] => (Allow) C:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{63A1482D-3D43-4E61-89E6-AA5C22B440ED}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe
FirewallRules: [{900A8B51-5533-4FD9-B8FC-C073634174E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\xchat\xchat.exe] => Enabled:XChat IRC Client
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (05/23/2015 07:16:48 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.

Error: (05/23/2015 07:16:44 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifest.

Error: (05/23/2015 06:21:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 04:02:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 03:37:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 02:41:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm firefox.exe, Version 38.0.1.5611 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1b20

Startzeit: 01d0947f6eff18e7

Endzeit: 149

Anwendungspfad: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

Berichts-ID: 6919c2a1-00e4-11e5-af69-b870f491f227

Error: (05/22/2015 02:49:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm ClocX.exe, Version 1.6.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: cf4

Startzeit: 01d0948d7fb603ab

Endzeit: 13

Anwendungspfad: C:\Program Files\ClocX\ClocX.exe

Berichts-ID: 0907e453-0081-11e5-af69-b870f491f227

Error: (05/22/2015 00:49:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/21/2015 00:07:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/20/2015 03:42:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (05/23/2015 06:20:48 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "MBAMService" ist vom Dienst "MBAMProtector" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%2

Error: (05/23/2015 06:20:44 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "MBAMProtector" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (05/23/2015 04:06:33 AM) (Source: iaStor) (EventID: 9) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (05/18/2015 07:14:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (05/18/2015 07:14:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (05/18/2015 06:03:51 AM) (Source: iaStor) (EventID: 9) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (05/17/2015 00:41:19 AM) (Source: iaStor) (EventID: 9) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.

Error: (05/12/2015 06:48:26 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Diagnostics Tracking Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/12/2015 04:04:30 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Diagnostics Tracking Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (05/10/2015 03:28:02 PM) (Source: iaStor) (EventID: 9) (User: )
Description: Das Gerät \Device\Ide\iaStor0 hat innerhalb der Fehlerwartezeit nicht geantwortet.


Microsoft Office:
=========================
Error: (05/23/2015 07:16:48 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifestC:\Users\Promor\Downloads\esetsmartinstaller_deu.exe

Error: (05/23/2015 07:16:44 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_fa381d5f175bfb52.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18807_none_41e554362bd82458.manifestC:\Users\Promor\Downloads\esetsmartinstaller_deu.exe

Error: (05/23/2015 06:21:08 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 04:02:29 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 03:37:47 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/23/2015 02:41:22 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe38.0.1.56111b2001d0947f6eff18e7149C:\Program Files (x86)\Mozilla Firefox\firefox.exe6919c2a1-00e4-11e5-af69-b870f491f227

Error: (05/22/2015 02:49:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: ClocX.exe1.6.0.0cf401d0948d7fb603ab13C:\Program Files\ClocX\ClocX.exe0907e453-0081-11e5-af69-b870f491f227

Error: (05/22/2015 00:49:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/21/2015 00:07:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (05/20/2015 03:42:59 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2014-09-05 11:16:22.334
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-05 11:16:22.184
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\atksgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-05 11:16:21.944
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-09-05 11:16:21.804
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\drivers\lirsgt.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2630QM CPU @ 2.00GHz
Percentage of memory in use: 35%
Total physical RAM: 8043.86 MB
Available physical RAM: 5220.07 MB
Total Pagefile: 16085.93 MB
Available Pagefile: 12574.22 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:683.54 GB) (Free:532.53 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 0DDF1515)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683.5 GB) - (Type=07 NTFS)

==================== End of log ============================
         

Danke schonmal im Voraus für die schnelle Antwort um diese Uhrzeit

Sieht gut aus, nur paar Mails in Thunderbird.

Lade Dir bitte von hier Emsisoft Emergency Kit herunter.

• Bitte installiere das Programm in den vorgegebenen Pfad.
• Starte das Programm durch Doppelklick der Desktopverknüpfung.
• Das EEK ist nach dem Laden der Malwaresignaturen für den Scan bereit.
• Folge nun bitte der bebilderten Bildanleitung zu Emergency Kit, entferne alle Funde und poste am Ende des Scans bzw. der Bereinigung das Log.
  

Guten Morgen,
hier die Protokolle vom EEK:

Emsisoft Emergency Kit - Version 9.0
Quarantäne-Protokoll

Datum	Quelle	Vorgang	Fund	
24.05.2015 04:51:46	C:\Users\Promor\AppData\Local\pdfforge	Infektion gelöscht	Application.AppInstall (A)
         

Emsisoft Emergency Kit - Version 9.0
Letztes Update: 23.05.2015 21:19:01
Benutzerkonto: Promor-PC\Promor

Scan-Einstellungen:

Scan Methode: Detail-Scan
Objekte: Rootkits, Speicher, Traces, C:\

PUPs-Erkennung: An
Archiv-Scan: An
ADS Scan: An
Dateitypen-Filter: Aus
Erweitertes Caching: An
Direkter Festplattenzugriff: Aus

Scan-Beginn:	23.05.2015 21:19:42
C:\Users\Promor\AppData\Roaming\pdfforge 	gefunden: Application.AppInstall (A)
C:\Users\Promor\AppData\Local\pdfforge 	gefunden: Application.AppInstall (A)

Gescannt	247375
Gefunden	2

Scan-Ende:	23.05.2015 23:27:14
Scan-Zeit:	2:07:32


Gelöscht	0
         

sieht auch gut aus

Puuh, dann bin ich ja beruhigt.

Hatte schon meine Externe bereit, um die wichtigen Daten zu sichern (viele sinds zwar nicht, ein Verlust ist dennoch immer schmerzhaft).
Hoffentlich bleib ich fürs nächste von solchen Störenfrieden verschont.

Dann danke ich Dir nochmal für deine frühe Hilfe (ist samstagmorgens um 7 Uhr ja keine Selbstverständlichkeit) und wünsche Dir noch nen schönen Abend.

mfg,
Promor

Gern Geschehen