|
Plagegeister aller Art und deren Bekämpfung: PC immer langsamer,Festplatte lädt dauerhaft. Infektion?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
13.06.2016, 12:16 | #1 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Hallo, seit 14 Tagen reagiert mein PC nur noch sehr träge. Er lädt fast dauerhaft im Hintergrund. Könnte es sich um Malware,bzw Viren handeln? Bitte um Hilfe. Gruß Lexani |
13.06.2016, 13:30 | #2 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Hallo und
__________________Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden? Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520 Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten! Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht! Zudem bitte auch ein Log mit Farbars Tool machen: Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
13.06.2016, 15:08 | #3 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Hallo,
__________________danke für die Hilfe. Avira Antivir hat 3 Viren gefunden,darauf habe ich aber gestern das Antivir gelöscht und neu installiert,um zu schauen ob die verlangsamung an dem Programm selbst lag. Daher habe ich die Funde nicht mehr. Hier das Log von Antimalware,die Funde habe ich gelöscht: Code:
ATTFilter <?xml version="1.0" encoding="UTF-16"?> -<mbam-log> -<header> <date>2016/06/10 23:04:46 +0200</date> <logfile>mbam-log-2016-06-10 (23-04-41).xml</logfile> <isadmin>yes</isadmin> </header> -<engine> <version>2.2.1.1043</version> <malware-database>v2016.06.10.05</malware-database> <rootkit-database>v2016.05.27.01</rootkit-database> <license>free</license> <file-protection>disabled</file-protection> <web-protection>disabled</web-protection> <self-protection>disabled</self-protection> </engine> -<system> <hostname>LEXANI-HP</hostname> <ip>192.168.178.20</ip> <osversion>Windows 7 Service Pack 1</osversion> <arch>x64</arch> <username>Lexani</username> <filesys>NTFS</filesys> </system> -<summary> <type>threat</type> <result>completed</result> <objects>307910</objects> <time>1331</time> <processes>0</processes> <modules>0</modules> <keys>1</keys> <values>2</values> <datas>0</datas> <folders>36</folders> <files>198</files> <sectors>0</sectors> </summary> -<options> <memory>enabled</memory> <startup>enabled</startup> <filesystem>enabled</filesystem> <archives>enabled</archives> <rootkits>disabled</rootkits> <deeprootkit>disabled</deeprootkit> <heuristics>enabled</heuristics> <pup>enabled</pup> <pum>enabled</pum> </options> -<items> -<key> <path>HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}</path> <vendor>PUP.Optional.ICQ</vendor> <action>success</action> <hash>6be211eafc9d2214f637fe99be45a25e</hash> </key> -<value> <path>HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}</path> <valuename>URL</valuename> <vendor>PUP.Optional.ICQ</vendor> <action>success</action> <valuedata>hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd</valuedata> <hash>6be211eafc9d2214f637fe99be45a25e</hash> </value> -<value> <path>HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}</path> <valuename>FaviconURL</valuename> <vendor>PUP.Optional.ICQ</vendor> <action>success</action> <valuedata>hxxp://c.icq.com/favicon.ico</valuedata> <hash>3a131fdcd8c17bbb9d903760d03321df</hash> </value> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\BG</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\CZ</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\DE</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\EN</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\ES</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\FR</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\HE</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\IT</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RU</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\SK</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\ProgramData\ICQ\ICQToolbar\XML\TR</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </folder> -<folder> <path>C:\Program Files (x86)\ICQ6Toolbar</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </folder> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\searchplugins\icqplugin.xml</path> <vendor>PUP.Optional.ICQPlugin</vendor> <action>success</action> <hash>aca152a95445a19569c58c0b49baae52</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\BG\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\BG\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\BG\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\BG\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\CZ\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\CZ\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\CZ\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\CZ\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\EN\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\EN\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\EN\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\EN\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\ES\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\ES\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\ES\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\ES\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\FR\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\FR\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\FR\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\FR\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\HE\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\HE\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\HE\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\HE\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\IT\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\IT\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\IT\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\IT\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RU\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RU\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RU\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\RU\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\SK\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\SK\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\SK\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\SK\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\TR\Configuration.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\TR\OptionDlg.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\TR\RegionalSettings.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\ProgramData\ICQ\ICQToolbar\XML\TR\UserInterface.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>69e417e43168171f9748b0f79c661de3</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\heureka.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\hpprotect.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\hpprotect.xul</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs_ltr.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs_rtl.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jcarousel.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery-1.4.2.min.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery-1.4.4.min.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery.jcarousel.min.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newtab.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\ppc.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow-selected.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow_ltr.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow_rtl.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\icq_logo.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\paging_left.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\paging_right.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_bg_strip.jpg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_shadow_ltr.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_shadow_rtl.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\rs_del.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_button.jpg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_button.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_strip.jpg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\sites_bg_strip.jpg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\hpprotect.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\down_arrow.jpg</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\down_arrow.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>53fa25d6d5c4072fa43ccbdc936f33cd</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\config.xml</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\Icons.bmp</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\icq6Toolbar.ico</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\ICQUnToolbar.exe</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\logo_small.gif</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\ServiceStarter.exe</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\short.wav</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\Version.txt</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\voucher.bmp</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> -<file> <path>C:\Program Files (x86)\ICQ6Toolbar\voucher2.bmp</path> <vendor>PUP.Optional.ICQToolbar</vendor> <action>success</action> <hash>78d53cbf28712d09f8e94661689a45bb</hash> </file> </items> </mbam-log> Hier die FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:12-06-2016 01 durchgeführt von Lexani (Administrator) auf LEXANI-HP (13-06-2016 15:50:46) Gestartet von C:\Users\Lexani\Downloads Geladene Profile: Lexani (Verfügbare Profile: Lexani) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (AMD) C:\Windows\System32\atieclxx.exe (HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe (HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe (Microsoft Corporation) C:\Windows\System32\UI0Detect.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15033976 2015-11-20] (Logitech Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-01] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [67840 2016-05-19] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [814608 2016-04-04] (Avira Operations GmbH & Co. KG) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8722136 2016-06-01] (Piriform Ltd) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\system: [DisableChangePassword] 0 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{98FC677A-F2F8-44F5-BE07-7D9D9117693B}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{C0F67315-F439-40A3-901A-C5E29AEB2F98}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{EC4F6CEB-DDE8-4976-ABB7-E19BA2CCDB46}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000 -> DefaultScope {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-02-17] (HP) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-23] (Oracle Corporation) BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-02-17] (HP) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-23] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default FF NewTab: hxxp://www.google.com/ FF DefaultSearchEngine: ICQ Search FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q= FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Keine Datei] FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-23] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-12] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-12] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.) FF user.js: detected! => C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\user.js [2016-05-28] FF Extension: Noia Fox options - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\NoiaFoxoption@davidvincent.tld.xpi [2016-04-28] FF Extension: Avira Browser Safety - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\abs@avira.com [2016-05-13] FF Extension: ZenMate Security, Privacy & Unblock VPN - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\firefox@zenmate.com.xpi [2016-03-02] FF Extension: Noia 4 Theme Manager - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\Noia4Options@ArisT2.xpi [2014-05-26] [ist nicht signiert] FF Extension: NoiaButtons - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\NoiaButtons@ArisT2_Noia4dev.xpi [2016-05-04] FF Extension: Adblock Plus - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2016-06-11] [ist nicht signiert] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [970656 2016-04-04] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [467016 2016-04-04] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [467016 2016-04-04] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1435704 2016-04-04] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [285176 2016-05-19] (Avira Operations GmbH & Co. KG) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Datei ist nicht signiert] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Datei ist nicht signiert] R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-04-16] (Hewlett-Packard Company) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2015-11-20] (Logitech Inc.) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-04-04] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141920 2016-04-04] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2016-04-04] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [79696 2016-04-04] (Avira Operations GmbH & Co. KG) R1 dvdfabio; C:\Windows\system32\drivers\dvdfabio.sys [9976 2013-11-06] (Fengtao Software Inc.) [Datei ist nicht signiert] S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 lgLowAudio; C:\Windows\System32\drivers\lgLowAudio.sys [26264 2015-11-20] (Logitech Inc.) R3 vdrive; C:\Windows\System32\DRIVERS\vdrive.sys [42232 2013-11-06] (Fengtao Software Inc.) S3 cleanhlp; \??\C:\EEK\bin\cleanhlp64.sys [X] S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 CM_VENDER_CMD; \??\C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-13 15:50 - 2016-06-13 15:51 - 00018838 _____ C:\Users\Lexani\Downloads\FRST.txt 2016-06-13 15:50 - 2016-06-13 15:50 - 00000000 ____D C:\FRST 2016-06-13 15:49 - 2016-06-13 15:49 - 02385408 _____ (Farbar) C:\Users\Lexani\Downloads\FRST64.exe 2016-06-13 13:47 - 2016-06-13 13:47 - 00003432 _____ C:\Windows\System32\Tasks\Avira Browser Safety Updater Task 2016-06-13 13:45 - 2016-04-04 17:07 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2016-06-13 13:45 - 2016-04-04 17:07 - 00141920 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2016-06-13 13:45 - 2016-04-04 17:07 - 00079696 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys 2016-06-13 13:45 - 2016-04-04 17:07 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys 2016-06-13 13:19 - 2016-06-13 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2016-06-13 13:19 - 2016-06-13 13:19 - 00001174 _____ C:\Users\Public\Desktop\Avira Launcher.lnk 2016-06-13 13:17 - 2016-06-13 13:19 - 04630840 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_de_av_575de264933da__ws.exe 2016-06-13 13:11 - 2016-06-13 13:11 - 00000000 ____D C:\Users\Lexani\AppData\Local\{83AEA770-E63C-4E44-801F-5F26C9063631} 2016-06-13 00:44 - 2016-06-13 00:44 - 00263944 _____ C:\Windows\ntbtlog.txt 2016-06-13 00:40 - 2016-06-13 00:40 - 02983904 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_registry_cleaner_de.exe 2016-06-12 17:57 - 2016-06-12 17:58 - 00675242 _____ C:\Users\Lexani\Desktop\registrierung sicherung.reg 2016-06-12 17:55 - 2016-06-12 17:55 - 00002223 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-06-12 17:52 - 2016-06-12 17:52 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-06-12 17:52 - 2016-06-12 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-06-12 17:49 - 2016-06-13 15:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-12 17:49 - 2016-06-13 13:05 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-12 17:49 - 2016-06-12 17:56 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-06-12 17:49 - 2016-06-12 17:56 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-06-12 17:45 - 2016-06-12 17:46 - 06893008 _____ (Piriform Ltd) C:\Users\Lexani\Downloads\ccsetup518.exe 2016-06-11 09:40 - 2016-06-11 19:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-06-09 09:54 - 2016-06-09 09:54 - 00000000 ____D C:\Users\Lexani\AppData\Local\{8CE86685-1148-4827-86BA-36171A448DB2} 2016-06-08 21:12 - 2016-06-08 21:12 - 00000000 ____D C:\Users\Lexani\AppData\Local\{86230106-B6A2-4CB3-B093-BF1D697A3E9C} 2016-06-08 15:48 - 2016-06-08 15:48 - 00180097 _____ C:\Users\Lexani\Downloads\importexporttools-3.2.4.1-sm+tb.xpi 2016-06-08 15:44 - 2016-06-08 15:44 - 00180096 _____ C:\Users\Lexani\Downloads\ImportExportTools-3.2.5.xpi 2016-06-08 15:28 - 2016-06-08 15:32 - 34810488 _____ (Mozilla) C:\Users\Lexani\Downloads\Thunderbird Setup 45.1.1(1).exe 2016-06-08 14:39 - 2016-06-13 13:47 - 00000000 ____D C:\Program Files (x86)\Avira 2016-06-08 14:37 - 2016-06-08 14:38 - 04630840 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_de_avprodl_57580fe603ce0__ws.exe 2016-06-08 10:59 - 2016-06-08 11:02 - 34810488 _____ (Mozilla) C:\Users\Lexani\Downloads\Thunderbird Setup 45.1.1.exe 2016-06-08 09:25 - 2016-06-08 09:25 - 01985486 _____ C:\Users\Lexani\Documents\IMG_20160608_0001.pdf 2016-06-08 08:44 - 2016-06-08 08:44 - 00000000 ____D C:\Users\Lexani\AppData\Local\{B512AABE-66A2-49A2-A38A-1169EE2E198E} 2016-06-07 10:09 - 2016-06-07 10:09 - 00000000 ____D C:\Users\Lexani\AppData\Local\{D8A130BE-2C94-4409-8CA3-1728AA59711E} 2016-06-06 23:41 - 2016-06-06 23:41 - 00000000 ____D C:\Users\Lexani\AppData\Local\{A6026182-22D9-4757-85B2-16DFB4EC46B5} 2016-06-05 12:09 - 2016-06-05 12:09 - 00000000 ____D C:\Users\Lexani\AppData\Local\{E4D080BE-DECF-4FA2-87EF-31B18BD4A3CE} 2016-06-04 11:22 - 2016-06-04 11:22 - 00000000 ____D C:\Users\Lexani\AppData\Local\{363A1B10-C8BA-4F6C-9686-961C3EAD3395} 2016-06-04 11:21 - 2016-06-04 11:21 - 00000000 ____D C:\Users\Lexani\AppData\Local\{1B047656-06DF-45D9-BD74-177E15848AD5} 2016-06-04 11:19 - 2016-06-04 11:20 - 00000000 ____D C:\Users\Lexani\AppData\Local\{4E74FDF6-4B5C-4238-91EC-38A0CBFCABE9} 2016-06-03 09:45 - 2016-06-05 09:25 - 00000000 ____D C:\Users\Lexani\Desktop\Desktop,Bilder etc 2016-06-03 09:32 - 2016-06-03 09:33 - 00000000 ____D C:\Users\Lexani\AppData\Local\{FEBD73D6-0488-4412-B0B5-A741631DE0D1} 2016-06-01 09:38 - 2016-06-01 09:38 - 00000000 ____D C:\Users\Lexani\AppData\Local\{5F701AC5-E527-4377-901F-719B9B756F47} 2016-06-01 09:37 - 2016-06-01 09:37 - 00000000 ____D C:\Users\Lexani\AppData\Local\{CF043179-56E1-4192-B9BD-5732E5BBF610} 2016-06-01 01:30 - 2016-06-01 01:30 - 00000000 ____D C:\Users\Lexani\AppData\Local\{35E4A088-10F6-40FC-8516-06517A61E989} 2016-05-31 15:02 - 2016-05-31 15:02 - 00000000 ____D C:\Users\Lexani\AppData\Local\{CC895758-E079-4B92-853B-E0A0AFAF44EC} 2016-05-31 01:35 - 2016-05-31 01:35 - 00000000 ____D C:\Users\Lexani\AppData\Local\{F1E27E2B-A99A-4650-AB20-1231AF9A1EB2} 2016-05-30 12:58 - 2016-05-30 12:58 - 00000000 ____D C:\Users\Lexani\AppData\Local\{C29068AA-9320-41DE-B557-ABA41DC0807D} 2016-05-30 00:58 - 2016-05-30 00:58 - 00000000 ____D C:\Users\Lexani\AppData\Local\{B970247A-C16F-4D91-8492-558B34A5877E} 2016-05-29 01:40 - 2016-05-29 01:41 - 00000000 ____D C:\Users\Lexani\AppData\Local\{D04BB46F-B52C-415C-86D7-66245078C21A} 2016-05-28 23:48 - 2016-06-10 23:33 - 00000000 ____D C:\ProgramData\ICQ 2016-05-28 23:48 - 2016-05-28 23:49 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\ICQ 2016-05-28 23:44 - 2016-05-28 23:44 - 01473544 _____ C:\Users\Lexani\Downloads\ICQ ProSieben Games Version - CHIP-Installer(1).exe 2016-05-28 23:43 - 2016-05-28 23:43 - 01473544 _____ C:\Users\Lexani\Downloads\ICQ ProSieben Games Version - CHIP-Installer.exe 2016-05-28 23:40 - 2016-05-28 23:42 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2016-05-28 23:34 - 2016-05-28 23:39 - 47404760 _____ C:\Users\Lexani\Downloads\icq_rfrset_ICQ7install_icq7.exe 2016-05-28 23:27 - 2016-05-28 23:27 - 00000000 ____D C:\Users\Lexani\AppData\Local\VS Revo Group 2016-05-28 23:27 - 2016-05-28 23:27 - 00000000 ____D C:\ProgramData\VS Revo Group 2016-05-28 23:26 - 2016-05-28 23:27 - 11374528 _____ (VS Revo Group ) C:\Users\Lexani\Downloads\RevoUninProSetup.exe 2016-05-28 23:25 - 2016-05-28 23:25 - 01473544 _____ C:\Users\Lexani\Downloads\Revo Uninstaller - CHIP-Installer.exe 2016-05-28 23:22 - 2016-05-28 23:22 - 00003294 _____ C:\Windows\System32\Tasks\{E00A36EF-025B-44B7-959C-7B5110EF5F31} 2016-05-28 22:59 - 2016-05-28 23:04 - 47404760 _____ C:\Users\Lexani\Downloads\icq_rfrset.exe 2016-05-27 20:15 - 2016-05-27 20:15 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\27862 2016-05-27 15:41 - 2016-05-27 15:41 - 00000000 ____D C:\Users\Lexani\AppData\Local\{DE8A7E94-6A7E-4FA6-A8A8-B1A285C82108} 2016-05-27 11:52 - 2016-05-27 11:52 - 00000000 ____D C:\Users\Lexani\AppData\Local\{EAC91F06-10F6-48ED-8982-76A15645D1C5} 2016-05-27 01:55 - 2016-05-27 01:55 - 00000000 ____D C:\Users\Lexani\AppData\Local\{4255CCC7-D3C6-4371-BA66-724EF072D6AC} 2016-05-25 15:26 - 2016-05-25 15:26 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\29429 2016-05-25 01:32 - 2016-05-25 01:32 - 00000000 ____D C:\Users\Lexani\AppData\Local\{44EBB0F0-44EE-4E2F-BE06-E00D18CB1F11} 2016-05-24 12:00 - 2016-05-24 12:00 - 00000000 ____D C:\Users\Lexani\AppData\Local\{35B390E3-2462-49A9-963F-9826514729D2} 2016-05-23 01:28 - 2016-05-23 01:28 - 00000000 ____D C:\Users\Lexani\AppData\Local\{B262B0FD-C259-4710-9E74-90AE04DC9FFC} 2016-05-18 01:16 - 2016-05-18 01:16 - 00000000 ____D C:\Users\Lexani\AppData\Local\{9E5150AD-AB8E-426C-8357-BF24F4DD0811} 2016-05-17 01:59 - 2016-05-17 01:59 - 00000000 ____D C:\Users\Lexani\AppData\Local\{37B2EF5B-3DED-4639-BDBF-2EB590083DC6} 2016-05-16 00:17 - 2016-05-16 00:17 - 00000000 ____D C:\Users\Lexani\AppData\Local\{B74D655F-D816-48E4-8EDC-9C927C38D6A0} 2016-05-14 12:53 - 2016-05-14 12:53 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\8847 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-13 15:50 - 2011-11-25 00:23 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\NetSpeedMonitor 2016-06-13 15:15 - 2015-01-18 18:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-13 14:15 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-13 14:15 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-06-13 13:51 - 2014-09-22 19:43 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Avira 2016-06-13 13:44 - 2013-08-05 23:45 - 00000000 ____D C:\ProgramData\Avira 2016-06-13 13:19 - 2014-09-22 17:42 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-13 13:05 - 2011-11-19 17:14 - 00000000 ____D C:\Users\Lexani\AppData\LocalLow\AuthenTec 2016-06-13 13:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-06-13 00:44 - 2014-01-17 14:09 - 06778880 ___SH C:\Users\Lexani\Downloads\Thumbs.db 2016-06-13 00:44 - 2012-01-11 13:43 - 08487936 ___SH C:\Users\Lexani\Desktop\Thumbs.db 2016-06-13 00:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-06-13 00:22 - 2015-07-26 21:40 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForLexani.job 2016-06-12 21:50 - 2015-07-26 21:40 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLexani 2016-06-12 18:08 - 2014-11-10 20:23 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-06-12 18:03 - 2012-06-01 15:10 - 00000000 ____D C:\Users\Lexani\AppData\Local\Google 2016-06-12 17:57 - 2015-12-30 02:06 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\TS3Client 2016-06-12 17:57 - 2014-06-29 14:04 - 00000000 ____D C:\ProgramData\VSO 2016-06-12 17:57 - 2012-03-30 17:59 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Vso 2016-06-12 17:57 - 2011-11-29 15:28 - 00000000 ____D C:\Program Files (x86)\Steam 2016-06-12 17:56 - 2011-11-20 11:21 - 00000000 ____D C:\Users\Lexani\AppData\Local\CrashDumps 2016-06-12 17:55 - 2012-06-01 15:10 - 00000000 ____D C:\Program Files (x86)\Google 2016-06-12 17:52 - 2014-09-22 16:35 - 00000000 ____D C:\Program Files\CCleaner 2016-06-11 19:38 - 2013-12-12 21:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-06-10 23:35 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages 2016-06-08 15:44 - 2012-02-20 06:08 - 00000000 ____D C:\Users\Lexani\AppData\Local\Thunderbird 2016-06-08 09:25 - 2015-10-23 14:31 - 00000000 ____D C:\Blu Ray Label 2016-06-08 08:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2016-06-02 10:23 - 2015-11-02 21:24 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-30 10:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-28 00:19 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2016-05-26 01:32 - 2015-04-04 19:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-26 01:32 - 2015-04-04 19:02 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-25 20:31 - 2014-04-11 12:32 - 00000000 ____D C:\Program Files (x86)\DVDFab 9 2016-05-22 01:26 - 2011-06-21 21:41 - 00710150 _____ C:\Windows\system32\perfh007.dat 2016-05-22 01:26 - 2011-06-21 21:41 - 00154554 _____ C:\Windows\system32\perfc007.dat 2016-05-22 01:26 - 2009-07-14 07:13 - 01649556 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-14 13:01 - 2014-04-11 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 9 ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-04-01 11:40 - 2015-09-29 18:45 - 0007859 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.cat 2012-04-01 11:40 - 2015-09-29 18:45 - 0001167 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.inf 2012-04-01 11:40 - 2015-09-29 18:45 - 0000055 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.log 2012-03-30 17:59 - 2014-02-06 20:54 - 0001057 _____ () C:\Users\Lexani\AppData\Roaming\vso_ts_preview.xml 2012-02-20 16:53 - 2012-02-20 16:53 - 0000094 _____ () C:\Users\Lexani\AppData\Local\fusioncache.dat 2011-11-19 17:22 - 2015-09-26 00:04 - 0007600 _____ () C:\Users\Lexani\AppData\Local\Resmon.ResmonCfg 2013-01-24 00:19 - 2016-03-16 19:36 - 0000040 ___SH () C:\ProgramData\.zreglib Einige Dateien in TEMP: ==================== C:\Users\Lexani\AppData\Local\Temp\avgnt.exe ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-06-07 08:51 ==================== Ende von FRST.txt ============================ |
13.06.2016, 15:18 | #4 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Hier die Addition.txt: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:12-06-2016 01 durchgeführt von Lexani (2016-06-13 15:51:21) Gestartet von C:\Users\Lexani\Downloads Windows 7 Home Premium Service Pack 1 (X64) (2011-11-19 15:13:40) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-4220443347-1911150466-1867623769-500 - Administrator - Disabled) ASPNET (S-1-5-21-4220443347-1911150466-1867623769-1004 - Limited - Enabled) Gast (S-1-5-21-4220443347-1911150466-1867623769-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-4220443347-1911150466-1867623769-1002 - Limited - Enabled) Lexani (S-1-5-21-4220443347-1911150466-1867623769-1000 - Administrator - Enabled) => C:\Users\Lexani ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated) Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.) AMD Catalyst Install Manager (HKLM\...\{3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.5.7.0 - SlySoft) AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.17.273 - Avira Operations GmbH & Co. KG) Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG) Avira Launcher (HKLM-x32\...\{761cd2c4-5249-4346-8318-a499d06d2681}) (Version: 1.1.63.21885 - Avira Operations GmbH & Co. KG) Avira Launcher (x32 Version: 1.1.63.21885 - Avira Operations GmbH & Co. KG) Hidden Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.48.61 - Broadcom Corporation) Brother MFL-Pro Suite MFC-J870DW (HKLM-x32\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.) Canon MX920 series Benutzerregistrierung (HKLM-x32\...\Canon MX920 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.) Canon MX920 series On-screen Manual (HKLM-x32\...\Canon MX920 series On-screen Manual) (Version: 7.6.0 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform) CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - ) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard) Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.) Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Hewlett-Packard ACLM.NET v1.1.1.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden HP 3D DriveGuard (HKLM\...\{76785052-9E6A-4403-B06A-929B6BF9D742}) (Version: 4.1.5.1 - Hewlett-Packard Company) HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company) HP Documentation (HKLM-x32\...\{3C5AB11A-2DDB-49E6-9FC0-CFD88A7DDFE4}) (Version: 1.1.0.0 - Hewlett-Packard) HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company) HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company) HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company) HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13231.3673 - Hewlett-Packard Company) HP SimplePass 2011 (HKLM-x32\...\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}) (Version: 5.1.0.495 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}) (Version: 6.0.5.4 - Hewlett-Packard Company) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6329.0 - IDT) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LightScribe System Software (HKLM-x32\...\{10427BCB-0742-43BE-81E2-3920972946F5}) (Version: 1.18.23.1 - LightScribe) Logitech Gaming Software 8.76 (HKLM\...\Logitech Gaming Software) (Version: 8.76.155 - Logitech Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles) NewSoft CD Labeler (HKLM-x32\...\{F8418921-5B66-4732-9CA4-B7112CA241F1}) (Version: 2.00.00 - NewSoft Technology Corporation) Nuance PaperPort 12 (HKLM-x32\...\{869FCC6C-5669-4B0B-827E-2BBAACD88A87}) (Version: 12.1.0006 - Nuance Communications, Inc.) Nuance PDF Viewer Plus (HKLM-x32\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden Scansoft PDF Professional (x32 Version: - ) Hidden Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve) Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) USB Vibration Joystick (HKLM-x32\...\{57496D70-3C5A-4197-9908-128101444B73}) (Version: 2006.01.20 - ) Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0634B703-F954-4200-B336-965BC1AA69DD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-12] (Google Inc.) Task: {07203BCA-BEFC-40D5-B967-8C9F1041919B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated) Task: {1A111124-9535-4573-B16A-3BEDED1AF3C8} - System32\Tasks\{2FC18E24-73FC-49F4-A643-49C0399E1D09} => pcalua.exe -a C:\Users\Lexani\Downloads\sp55098.exe -d C:\Users\Lexani\Downloads Task: {20718612-332C-4437-B6DE-0706E9852B57} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated) Task: {32DC6588-2723-4BC6-9367-96682A88AA48} - System32\Tasks\{E00A36EF-025B-44B7-959C-7B5110EF5F31} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}\ICQ7.exe" -c -runfromtemp -l0x0009 -removeonly Task: {3B0CA477-B0BD-414A-8B39-35B74F870253} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe [2011-06-14] (Hewlett-Packard) Task: {3ECA3385-09D1-4416-AB2B-9CDE1CE49617} - System32\Tasks\{414529B2-929D-4FDE-94F7-5FAF500ECC9B} => C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe Task: {437CFF8F-C7E2-4201-B81C-7DF43FAC5D6C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2012-02-22] (Microsoft) Task: {51585E49-22BF-4568-B77C-04CE891A70A1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [2011-03-22] (Hewlett-Packard Company) Task: {587F6E91-286D-409D-B5BA-F163A42B32D6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.) Task: {721E83F9-3E2E-456F-9461-F25EDCFBC76B} - System32\Tasks\{92390A59-B268-4A49-85DA-2F362321019C} => pcalua.exe -a C:\Users\Lexani\Desktop\sp55098.exe -d C:\Users\Lexani\Desktop Task: {7D6B9A19-A363-4E73-BED4-70360C8E3303} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-01] (Piriform Ltd) Task: {7DD10F7C-20A6-4FB1-BD52-1EFD8B01C016} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-06-21] (Hewlett-Packard Company) Task: {7FB1A5AA-179B-4750-9397-1C085A458C54} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG) Task: {B24A98F3-3CA8-49A7-AEB8-0D6D113361FB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-12] (Google Inc.) Task: {B38458F7-6B83-4670-A83E-8AAE651A6DC2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {C2D88E39-CC9C-4627-88BD-74DC2321AFEC} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {C568217F-1F35-4C7C-BBEB-7B0DA4F43974} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [2011-06-21] (Hewlett-Packard Company) Task: {DBDC90FB-3166-4943-BEAF-7819343E19AC} - System32\Tasks\{14554DD6-7E99-48F8-96B5-2482E2DEB0AB} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.161/de/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {E2E516EC-FB1B-4EEB-9A1D-BF75E085F4AF} - System32\Tasks\{01A1AD2F-39D3-430D-9365-D5F822A78A6F} => C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe Task: {E431741A-8D24-481F-BD4A-8CE91CD783BE} - System32\Tasks\HPCeeScheduleForLexani => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {ECC83520-F12C-4693-9123-B608E1C66EF7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.) Task: {F6E891DD-3E49-4571-B47D-EB8A5274E9B1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {FA67528C-087D-4D3B-B007-3F5FAC4CE951} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-06-21] (Hewlett-Packard Company) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForLexani.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll 2015-11-20 23:41 - 2015-11-20 23:41 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll 2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll 2015-11-20 23:41 - 2015-11-20 23:41 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll 2011-08-18 18:02 - 2011-01-27 18:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2016-06-01 20:15 - 2016-06-01 20:15 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2011-09-30 22:07 - 2011-09-30 22:07 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2011-09-02 10:49 - 2011-09-02 10:49 - 00016384 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Branding\Branding.dll 2015-07-26 19:08 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-07-26 19:08 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-07-26 19:08 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-07-26 19:08 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-07-26 19:08 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2016-05-11 15:33 - 2016-05-11 15:33 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\61a733954a0da9a5988d596c76b2b891\IsdiInterop.ni.dll 2011-08-18 18:01 - 2011-01-13 03:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 7867 mehr Seiten. IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123simsen.com -> www.123simsen.com Da befinden sich 7867 mehr Seiten. ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2014-11-10 21:02 - 00000840 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lexani\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\startupfolder: C:^Users^Lexani^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: AnyDVD => "C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe" MSCONFIG\startupreg: BDRegion => c:\Program Files (x86)\Cyberlink\Shared files\brs.exe MSCONFIG\startupreg: BrHelp => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN MSCONFIG\startupreg: BrMfcWnd => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN MSCONFIG\startupreg: BrStsMon00 => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: ControlCenter4 => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun MSCONFIG\startupreg: DVDFab VDrive => "C:\Program Files (x86)\DVDFab Virtual Drive\vdrive.exe" MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: HP Quick Launch => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe MSCONFIG\startupreg: HPConnectionManager => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe MSCONFIG\startupreg: HPOSD => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7.7\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: IndexSearch => "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe" MSCONFIG\startupreg: ISUSPM => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup MSCONFIG\startupreg: KiesHelper => C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s MSCONFIG\startupreg: KiesPDLR => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" MSCONFIG\startupreg: PaperPort PTD => "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe" MSCONFIG\startupreg: PDF5 Registry Controller => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe MSCONFIG\startupreg: PDFHook => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe MSCONFIG\startupreg: Power2GoExpress => "C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe" MSCONFIG\startupreg: RemoteControl10 => "c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" MSCONFIG\startupreg: RGSC => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" MSCONFIG\startupreg: SpybotPostWindows10UpgradeReInstall => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray64.exe ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{F18EC597-6CC3-45A4-9205-4271898D6187}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{0D76C90D-D1AE-4FC8-A7DE-C9C4BF8570B3}] => (Allow) LPort=2869 FirewallRules: [{5ED80375-8131-4BBB-8002-8D2ADDBF20E1}] => (Allow) LPort=1900 FirewallRules: [{6F8EA42B-2B34-4AA1-A5F6-B4BB499DAC23}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{17EE661E-BDF5-4D4D-A4F2-406D3984D6BD}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{2D333D60-D41D-4108-B835-ECD07E35CB16}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe FirewallRules: [{02627CCC-E72F-4B77-8F44-530F0A065CDC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{98FD5377-1850-4ED8-8FDF-D8C36377D299}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D97CD439-8589-489A-8A0F-8A814A03F0A0}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{9E412C29-F64F-4F82-8244-6CFE3DFF0A23}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{DAED3E9D-C92A-47ED-8FB1-AC77AE30640C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{84D79187-D6A8-4716-B854-AC3B409C4174}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{9ABB79EE-1B58-4A3B-AB02-CC57F58D4985}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{211E5F82-F8AE-45D2-B139-C3298B91FC94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{9A78679E-D3A5-4C8B-90BD-33277C691641}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{B9A14C11-ED05-4188-BC80-BE698ABCEF09}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{E7BA635B-B463-425E-9C1A-243C15A7211C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{EC788BB3-B360-4B43-83CC-6246791C6C02}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{70FBF6DF-CE15-4F3D-ADFD-F53040F6620E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{8F8D879A-F477-4099-8307-7FDE4DEE52CB}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{041968C2-CE8C-42E8-B036-90427140BB0B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{5CF21EE6-3B97-44B7-8A4E-07F00D25DE3E}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [TCP Query User{23828ECA-CAEF-435B-A67F-767EFE7DD546}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{4FA8E15F-8A62-4256-8008-5F9DC4F43DBE}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe FirewallRules: [{75A26AC2-127D-4A71-8787-98819A457935}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{58523F0D-0640-4FF8-8645-FFE0E25B017A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{4BDF3564-3C98-42B0-A276-AB462F9B0CD2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Wiederherstellungspunkte ========================= 05-06-2016 15:12:34 Geplanter Prüfpunkt 07-06-2016 08:26:30 Windows Update 10-06-2016 22:20:10 HPSF Restore Point 10-06-2016 22:58:15 HPSF Restore Point 13-06-2016 00:31:39 Removed Avira Browser Safety ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (06/13/2016 01:05:22 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 01:06:32 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:48:01 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:46:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:36:42 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:34:37 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:23:08 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2016 06:04:24 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2016 05:38:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/12/2016 05:35:36 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Systemfehler: ============= Error: (06/13/2016 12:44:30 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:30 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1068fdPHost{D3DCB472-7261-43CE-924B-0704BD730D5F} Error: (06/13/2016 12:44:30 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1068fdPHost{145B4335-FE2A-4927-A040-7C35AD3180EF} Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:28 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (06/13/2016 12:44:27 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: 1084WSearch{9E175B6D-F52A-11D8-B9A5-505054503030} CodeIntegrity: =================================== Date: 2014-01-08 12:38:04.565 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\igdpmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-01-08 12:38:04.331 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\igdpmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Prozentuale Nutzung des RAM: 30% Installierter physikalischer RAM: 8139.86 MB Verfügbarer physikalischer RAM: 5619.38 MB Summe virtueller Speicher: 16277.9 MB Verfügbarer virtueller Speicher: 12773.67 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:683.28 GB) (Free:564.52 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (RECOVERY) (Fixed) (Total:15.06 GB) (Free:1.61 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 21053EDB) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=683.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=15.1 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=103 MB) - (Type=0C) ==================== Ende von Addition.txt ============================ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 10.06.2016 Suchlaufzeit: 23:04 Protokolldatei: ttttt.txt Administrator: Ja Version: 2.2.1.1043 Malware-Datenbank: v2016.06.10.05 Rootkit-Datenbank: v2016.05.27.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Lexani Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 307910 Abgelaufene Zeit: 22 Min., 11 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 1 PUP.Optional.ICQ, HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}, In Quarantäne, [6be211eafc9d2214f637fe99be45a25e], Registrierungswerte: 2 PUP.Optional.ICQ, HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}|URL, hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd, In Quarantäne, [6be211eafc9d2214f637fe99be45a25e] PUP.Optional.ICQ, HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6552C7DD-90A4-4387-B795-F8F96747DE19}|FaviconURL, hxxp://c.icq.com/favicon.ico, In Quarantäne, [3a131fdcd8c17bbb9d903760d03321df] Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Ordner: 36 PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\BG, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\CZ, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\DE, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\EN, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\ES, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\FR, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\HE, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\IT, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RU, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\SK, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\TR, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], Dateien: 198 PUP.Optional.ICQPlugin, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\searchplugins\icqplugin.xml, In Quarantäne, [aca152a95445a19569c58c0b49baae52], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\BG\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\BG\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\BG\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\BG\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\CZ\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\CZ\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\CZ\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\CZ\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\EN\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\EN\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\EN\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\EN\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\ES\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\ES\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\ES\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\ES\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\FR\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\FR\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\FR\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\FR\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\HE\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\HE\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\HE\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\HE\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\IT\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\IT\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\IT\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\IT\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RU\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RU\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RU\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\RU\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\SK\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\SK\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\SK\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\SK\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\TR\Configuration.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\TR\OptionDlg.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\TR\RegionalSettings.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\ProgramData\ICQ\ICQToolbar\XML\TR\UserInterface.xml, In Quarantäne, [69e417e43168171f9748b0f79c661de3], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome.manifest, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\install.rdf, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newTab.html, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\about.xul, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\autocomplete.xml, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\exitobserver.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\globals.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\heureka.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\highlight.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\hpprotect.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\hpprotect.xul, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs_ltr.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtabs_rtl.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\icqtoolbar.xul, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jcarousel.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery-1.4.2.min.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery-1.4.4.min.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\jquery.jcarousel.min.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\localfileupdate.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\menu-button.xml, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\newtab.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\options.xul, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsegamesxml.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\parsemenuxml.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\peoplesearch.xul, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\ppc.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\prefutils.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\search.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\splitter.xml, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\statistics.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\tabcontext.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\utilities.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\voucher.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\zoom.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow-selected.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow_ltr.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\arrow_rtl.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgLarge.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\bgSmall.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonBlue.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\buttonGreen.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\icq_logo.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\paging_left.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\paging_right.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_bg_strip.jpg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_shadow_ltr.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\recent_shadow_rtl.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\rs_del.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\searchLogo.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_button.jpg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_button.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\search_bg_strip.jpg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\content\img\sites_bg_strip.jpg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\bg\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\cs\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\de\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\en-US\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\es\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\fr\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\he\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\it\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\ru\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\sk\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\hpprotect.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\icq_locale.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\itb_options.dtd, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\locale\tr\options.properties, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\about.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\abt.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ain.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\ang.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\default.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dis.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\down_arrow.jpg, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\down_arrow.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\dropmarker.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\hide.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\icons.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\logo_small.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_r.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\more_vouchers_y.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\options.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\peoplesearch.css, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\chrome\skin\voucher_bg_y.png, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\components\ITB_History.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\prefs.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\defaults\preferences\user.js, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\manifest.mf, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.rsa, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\META-INF\zigbert.sf, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.gif, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.src, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}\search_engine\icqplugin.xml, In Quarantäne, [53fa25d6d5c4072fa43ccbdc936f33cd], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\config.xml, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\Icons.bmp, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\icq6Toolbar.ico, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\ICQUnToolbar.exe, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\logo_small.gif, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\ServiceStarter.exe, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\short.wav, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\Version.txt, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\voucher.bmp, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], PUP.Optional.ICQToolbar, C:\Program Files (x86)\ICQ6Toolbar\voucher2.bmp, In Quarantäne, [78d53cbf28712d09f8e94661689a45bb], Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
13.06.2016, 15:24 | #5 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Bitte Avira deinstallieren. Das Teil empfehlen wir schon seit Jahren aus mehreren Gründen nicht mehr. Ein Grund ist ne rel. hohe Fehlalarmquote, der zweite Hauptgrund ist, dass die immer noch mit ASK zusammenarbeiten (Avira Suchfunktion geht über ASK). Auch andere Freewareanbieter wie AVG, Avast oder Panda sprangen auf diesen Zug auf; so was ist bei Sicherheitssoftware einfach inakzeptabel. Vgl. Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog Gib Bescheid wenn Avira weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!
__________________ Logfiles bitte immer in CODE-Tags posten |
13.06.2016, 15:53 | #6 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? So,Avira ist vollständig deinstalliert. |
14.06.2016, 10:15 | #7 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Malwarebytes Anti-Rootkit (MBAR) Downloade dir bitte Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers Lesestoff: Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ Logfiles bitte immer in CODE-Tags posten |
14.06.2016, 11:36 | #8 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion?Code:
ATTFilter Malwarebytes Anti-Rootkit BETA 1.9.3.1001 www.malwarebytes.org Database version: main: v2016.06.14.01 rootkit: v2016.05.27.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18314 Lexani :: LEXANI-HP [administrator] 14.06.2016 12:02:52 mbar-log-2016-06-14 (12-02-52).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 306523 Time elapsed: 30 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) |
14.06.2016, 11:37 | #9 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
__________________ Logfiles bitte immer in CODE-Tags posten |
14.06.2016, 12:40 | #10 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? ADW Cleaner: Code:
ATTFilter # AdwCleaner v5.119 - Bericht erstellt am 14/06/2016 um 12:46:54 # Aktualisiert am 30/05/2016 von Xplode # Datenbank : 2016-06-13.1 [Server] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64) # Benutzername : Lexani - LEXANI-HP # Gestartet von : C:\Users\Lexani\Downloads\AdwCleaner_5.119.exe # Option : Löschen # Unterstützung : hxxp://toolslib.net/forum ***** [ Dienste ] ***** ***** [ Ordner ] ***** [-] Ordner gelöscht : C:\Users\Lexani\AppData\Local\PackageAware ***** [ Dateien ] ***** ***** [ DLLs ] ***** ***** [ WMI ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Wert gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] [-] Schlüssel gelöscht : HKCU\Software\OCS [-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\ICQ\ICQToolbar [-] Schlüssel gelöscht : HKLM\SOFTWARE\ICQ\ICQToolbar [-] Schlüssel gelöscht : HKLM\SOFTWARE\Mail.Ru [-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Daten wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search] [-] Daten wiederhergestellt : HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main [Start Page] [-] Daten wiederhergestellt : HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main [ICQ Search] [-] Schlüssel gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SearchAnonymizer ***** [ Internetbrowser ] ***** [-] [C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\prefs.js] gelöscht : user_pref("icqtoolbar.showPc", false); ************************* :: "Tracing" Schlüssel gelöscht :: Proxy Einstellungen zurückgesetzt :: Winsock Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C1].txt - [2025 Bytes] - [14/06/2016 12:46:54] C:\AdwCleaner\AdwCleaner[S1].txt - [2134 Bytes] - [14/06/2016 12:44:57] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [2171 Bytes] ########## JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.6 (04.25.2016) Operating System: Windows 7 Home Premium x64 Ran by Lexani (Administrator) on 14.06.2016 at 12:51:09,19 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 673 Successfully deleted: C:\ProgramData\esellerate (Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{001AAACD-E4F8-464B-AE28-50030C3AB15F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{006F700A-CB09-4B71-B018-9EC40D725D22} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{00A9099B-B028-436B-96A8-8550D6CD4725} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{00EA99E7-BE34-464F-8A6E-9924484706C4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{02261DBD-CB1F-48E1-8583-2AA318B91737} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{024358E7-DE4E-46B7-9215-69BEBAEF51A5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{02B3B9F9-7964-496F-AB08-608034A4FCAE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{02B7E1E8-E29A-4111-90BA-D649CA918889} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{02CB48B6-EF13-4EFB-8960-B2C42E8725F9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0308AD8E-E535-43C3-9835-01665B4669B6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0372A23D-FE09-4265-B582-6FFADEF4A265} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{03EDA192-5BD9-4106-9064-F2B874C287C7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{04325821-901C-49A2-8435-7800841B91D8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{04408F0B-AC94-4354-B19A-C847E4F2B833} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{048089CC-D6AE-4F14-9697-59A950A8DEE1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{048782B8-E5CD-427B-AF09-2936C3D22F28} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{04A13533-13D2-4C47-A1E5-8808B3FB6BCF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{04AC5A12-0068-4107-BB6C-6D44DB438919} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{04DCAA8A-082D-4FC4-92C0-299BACD5E072} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{052215BD-C588-48BC-91DB-507A061985E9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{055D0FC2-18BF-43AC-BC4A-053CC3A16CAF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{05D16E83-5D15-4672-B4C2-644808F10D97} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{06606544-168B-44AC-B3D5-E049192A0606} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{087B1D29-AE72-4DBF-ADA4-DE2404DB75EB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{088FA222-0B07-4B99-8A93-81C48EB5EEEB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{08AB27F8-EF48-4A57-BFFD-E206C9034076} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{096C8442-7C48-4120-9403-D1CE0D623D55} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{09C563B1-84AB-4A98-A6ED-FE75A3B6782E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0A4ABF0F-772D-4137-93CE-1C21CB5932C9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0AAFAC33-2212-4D60-B97A-381358D87F48} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0AFDEF13-B2E6-4D81-8B9A-4CEFADA6556A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0B28C34E-9291-4A8E-A5B2-1268C75FE9B4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0BDB712C-F419-4339-AB06-A8E7D71CF966} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0C6FF4C6-EFCD-426A-A5DC-898E0721AE5A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0D0E8128-69C0-4609-8652-5357C25A3868} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0DCABDCF-E003-4932-A528-A77104708F7C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0F0F9033-4D35-4F10-911A-598A955EC962} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0F78D125-7EE2-4301-8CAE-8E592954C7EC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0FB166C7-81B1-4596-90AD-227AA2030ED9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{0FEAC0FB-F11C-4CA7-9240-EE2098320C9C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{107822BD-C801-46D1-80AC-8267EFE41227} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{11A59D9F-44FE-4A00-9407-93C6DE2B45BC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{11B4AB5E-766B-4325-A964-A31489000E7F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1264AE77-AC95-46FE-8D55-24B9CC2757A1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{127552B7-6F68-4D23-A2AE-4F275C2A9717} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1290461B-061F-4446-90D6-53B33254161F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1309BAEE-41E2-42DB-A31F-483E4CDD21FD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{13881903-D311-4AF9-879C-804A1999D11D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{13AAF5AF-A08F-47CF-A776-8FC7613E53CB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{13B73C70-2247-4698-9ABA-2DADC1E4AD66} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{14EF7739-25F0-4D7D-9031-A9694F06B478} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{151AF9E4-F02A-47EC-BC6F-E3021AC80E2C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{15DEABF2-BF2D-4159-89C5-542C7FFCDCA4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{167C7AA7-CA0B-402E-98B7-F715AADAAEBA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1719C32D-571E-4C8F-B609-394B1CEF9CD7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{17FC66BC-3774-49A9-BEEF-AA8DFA02034B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{181362E4-2315-477E-A069-AEC625171E10} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{18216017-AA05-44F7-AAAF-FA1E2CA2A674} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1957D9F0-6638-4F71-B57D-0BFE12133D18} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{195F9217-E5A8-413C-AFE6-30B6F9776DA4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1AABF3D4-2936-4E5C-A47F-50133A3E8F34} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B047656-06DF-45D9-BD74-177E15848AD5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B4278A0-DE4A-4682-A09E-F6B9EDB0BD3C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B6738B9-D813-4DA2-8D19-468E5512D239} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B864955-0CA6-4D3E-8BB1-5241EBAC86FF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B889FFF-1697-4AE3-AA45-7A000B21ECF1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1B8ACCDC-2810-4EF5-A750-5C42CFF5F534} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1BC2AA24-2C8F-443E-A6D6-DFD1FD4235AE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1C4681F2-1370-4387-BFA1-3C9B6558892E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1CB03749-C62C-4D06-AE83-77ADD4DBB199} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1D123AD5-FD54-41A2-ABD3-8422A40473FF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1D6ED8FD-82D2-460B-A32A-024606C40AA8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1EAFF3E3-9B72-4220-923A-89EC56410CCD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1ED95AF6-0BDF-4656-A05C-DDAFFCF20467} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{1F63813D-2BC1-48AA-BCDE-B57D0493A46F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{20255838-EE10-49B6-B86B-F0B57C5CEDB0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2072ACA3-9C73-4026-9718-34EFBE70415D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{20885B3B-B2D2-4D76-870A-E0DB1ED064D7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{212147EA-B84F-4764-9D26-A4ACE3341D79} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2160092C-1FF8-4C3F-A977-448C7D2FAD1A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{22B04D8C-3A2E-419D-B643-3F3B167D95AC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{22C41357-7DCB-4891-9470-BAE83F1E9C15} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{22CBE1E7-4692-4FCA-888D-0E668C2E4865} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{23E25B70-900F-4C76-9C5E-D7A4EFFD4377} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{23F3CAA7-0C42-4660-A0CC-819B2882671E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2584EA0D-795D-4E9D-9CBB-F2127A75A726} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{26544103-F69C-4B27-8724-E35F7A7DB638} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2687E84F-D6C8-4ADB-804A-21CD769E142D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{28088C8B-A87D-4212-BD65-F7524A210C05} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{283F019B-DD34-44D7-97B1-F347A7D627CE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{287F1B73-2291-49C6-B803-95BC96523FEC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2944C366-5FBF-4389-8F14-278682E3505B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2A0E2A6F-92BA-4644-9B39-AE8E2311C120} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2AC057F4-B33F-452A-8238-C332FD8859F3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2AD17EE9-AA02-4361-BE76-909A0184BEAC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2AE6652C-122E-4371-970B-0AB109F64901} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2AEE3108-89BE-4FCB-9CB4-EBE6976E7873} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2BD1049E-17F6-4A41-A6DD-ABA781DC6468} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2C386D7C-CF7C-44C9-9BD0-506C37D2CF88} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2C4D841A-9878-4BC1-A6D7-47F0C91A2EC5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2CCAD834-AC00-43C4-870E-2001D1B71A44} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2D0E9A1C-004E-4B9E-A1BC-C66CFCEC0EBC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2D64033B-161C-4065-939E-1D4F655E6E5D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2D7F203F-901E-4A10-A4F1-CEE118B8FADB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2E02CE35-7D90-48BC-A14A-39BD3BAE9DF4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2E635C1A-2A94-4A0D-AA6A-AC9CCF8D45A0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2EA09E95-7048-4450-8C73-6B5919AB5432} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2F6436BA-740A-4B42-931C-46614026947B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{2F72FBFA-FE00-4EA3-B5EE-94ACB066F57E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{303DB7A1-A153-4F75-81C3-9A95834AD943} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3080AADA-9FF8-4EEE-9055-38008F57ED0C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{30822875-B2C7-4CE0-84B7-B61489C7FE8A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{30F9A5AD-161A-4BE5-AA34-F157D896ED8F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{317E0E4E-FC70-4919-8C3A-350A99A3F4BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{31DED27B-1388-4B10-9CDD-C8CBDCA20750} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{32701079-B264-47F4-82C9-8E435CFFAF68} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{337B7F96-BF78-44F6-AD24-6241B1A4202C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{33EB8E0A-BF1C-4F0A-A68C-20D0EB17BB06} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{342F05D8-2220-4162-9F7C-23CE17B19638} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3473BCC0-7DCC-428E-B750-BBFDA21D6386} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{35760E68-8034-4050-A4D8-85AB0683A5D1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{35B390E3-2462-49A9-963F-9826514729D2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{35DADC3B-3BE6-4E66-B5BF-EAA7CF449E52} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{35E4A088-10F6-40FC-8516-06517A61E989} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{36202321-14C7-4061-9FD4-DB9F3005D996} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{36395DAF-6978-4BA5-9498-B1F20D9DD6AC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{363A1B10-C8BA-4F6C-9686-961C3EAD3395} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{36ACC20D-38A0-43A6-B2CD-C454626AE38C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{36AF6CB6-5D1D-444D-86F2-53E1CF5A8844} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{376B8BD0-EA0D-4D10-87D9-D85CA8338FE1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{37B2EF5B-3DED-4639-BDBF-2EB590083DC6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{38326568-2913-4613-BB9E-B1CF59A862A1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{38351FB3-D46E-4E7E-85B5-FB528AF33A51} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3861F289-0D88-4972-A49E-825770DB39F6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3B1B3A3A-4765-4261-86FF-E364AF457B3D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3BAB74D0-C783-42E9-90EC-38D37BCC4778} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3BEACE38-1337-44C3-8964-B03A7FA4D836} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3C272977-968A-4497-8E88-9604C9AEF53F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3C5B72FA-E0BD-4E77-B182-7FD4D16C007D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3CAFA7BC-5D42-465D-99D4-8E96AB26DB0F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3CCB4D00-833D-46A2-9C6C-E08EB1F40C20} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3DFCF9CD-F1A2-49D8-B02F-64BEE65116B1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3E910040-5DA1-4D00-B710-CBCDF4F0A61F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3ECCAC9C-45EF-4425-AA87-EEC55B316746} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3F0B7AC7-8CCC-419C-B603-D4D3EBFE9039} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{3F73A0B7-41D2-4371-AE1F-BDDEE29F9650} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4151FB12-022E-4EAD-8AB3-34E8F4D25730} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{41A2A5A5-2F83-40E7-AE76-DBF7E4BD4F12} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{41E36AA2-91AD-4823-8747-09DDF90137F2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4255CCC7-D3C6-4371-BA66-724EF072D6AC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{429708E1-CEF4-4001-9205-58766617B3BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{42CCC166-6D83-42CE-BB56-9CE4FB01705F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{42D27FD9-99D9-4049-9D8C-9AAF7F8EC189} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{433C054E-5865-4ECD-A648-58D211D75EE5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{43A3748D-3699-4F6A-8544-1215F5E858B8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{43CB7878-C224-4BE3-AA3F-C2747B3A6C22} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{44D2A6FC-AFD2-466F-9761-7535AC75A7C6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{44EBB0F0-44EE-4E2F-BE06-E00D18CB1F11} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{458E22AF-E187-484E-801B-69DA9CDE1688} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{461EEB41-AF9B-4C7A-91E2-4486CF90FAA6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{467568F6-C613-4C68-8B5C-E14402E482DD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{46AD5B4A-0246-4888-ACEB-417D4A268150} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{46FE2104-764F-4286-BA77-CF88CFFA6A3B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{472B908F-3B30-4FAC-B9FD-1008820B7387} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{472DF2F5-D108-4B77-A950-7D69204142E3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4762B523-2F9C-4D86-BDC4-7FFFADBED240} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4781A3EA-6231-44DF-93F9-DA80416C2610} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{481A4D0C-5B7B-4DF4-96C6-DDA6CD8F4CD0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{482057D0-B86B-433C-BA0C-86C61762663E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{48AE16A5-DC97-4FBE-87D1-C1DEE68B0FA6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{496AED97-F32B-4A15-969E-613D5B6F9116} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{496E299C-476F-4830-91F3-C203E55F512A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{496EF22E-38F2-4D20-92CC-D10BF728F56A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4A8DAAA3-A734-48A5-A869-DE9F174105DB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4AC4B0CF-4969-4189-B088-79C461477A76} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4AF0F9C5-E348-47A4-A5BD-186BFA7538D1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4B986C31-D8AA-474B-8D81-D8B81FD5EDC8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4BB292DF-F91D-40F1-B737-DDD95768DFE7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4C077896-42F3-4A76-B72F-EC656EB70D74} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4C45288A-5643-46B3-AAD6-969DC5EB616A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4C948B19-7723-4450-94A2-7EF77730A870} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4D089FAD-A0B4-4A9D-9585-0D60C75095DF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4D47756F-2B29-4EFF-873A-616A0DBE7392} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4D57276B-68D1-44F1-AD6D-F8E1524F9788} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4D7E40E8-1F17-4E1B-9F5D-C3EAEFE28D5F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4D8125E1-0723-450F-9A05-689E460831F9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4E330B9E-6C43-47E5-8885-C1A0CA2F6450} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4E74FDF6-4B5C-4238-91EC-38A0CBFCABE9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4E7D27B3-6CFD-4204-ACEE-C81A769BE86C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4F37F7EA-9815-489D-8B62-68FC099ED9EE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4F4AD53C-F103-47C6-8AC1-D4EE35B7E1E1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4F7284E4-830E-4DCA-9FCF-F66C0737EDE8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4F8AB137-6E09-4092-9637-C0B6B6C0B121} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{4FDD6A56-6878-464C-85EB-984D7167151D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{501A6475-C4BD-4A8E-9187-B3D902FB2439} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{507BCDEE-6F9E-4E11-A89D-9901C58D7B8E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{50857DB8-F775-4BE3-93A5-826EF73E4D3A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{50954DEC-8382-4AD1-8572-D03E43A42B13} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{50A66BA9-83F5-4507-BCDE-7B3EC2EE0975} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{50DC0DF9-5F48-4D52-AE34-0D91D9EA1A65} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{516F5C2F-794D-404C-85C3-3C8735036BE3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{51A19A21-9A60-4587-B8DF-3BB18A10BFD1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5246D7A6-D452-4D05-9E4B-2B12D720B4C3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{52B39A63-84B2-4C12-8167-293BA44930A8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5373C44B-6233-400D-8592-FB93A05CFEE4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{53F48720-A0FB-40E7-9436-466C21434484} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{54173331-BCC4-4DB4-A836-48C7968CBFE4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{542C6380-DA8D-4F90-90A4-64243BB95613} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{54600F83-A21D-420A-8090-3C9B360FC0B2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{54B1D14D-843C-4D37-8510-1A6ABBDB134B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{55178563-6C96-442E-9E52-B036421ACAC0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{55836513-C1B2-4B44-AB59-1C60BB44D358} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{55F1EF2E-D246-442C-827A-BDA93B1DFB07} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{568786B2-7D0F-4CB3-913F-5600645F326A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{56F39C58-EBDD-4AE2-B0A0-3262CA56E24B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{57828630-9E09-43A1-B0F1-FC5EA19DB2B4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{586C7C28-92F7-4CAC-8F0C-D8EC5293C8C8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5872A9C8-4066-439A-94B3-2690A29FEE73} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{58919E51-FF75-4C5B-84DE-6E019B348F40} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{58D60E4E-20D3-43B1-9F59-215C3B3712BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{592BCD0A-6335-4D6D-B0D4-356D11A0FA30} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{595D6F1A-DF22-4427-B9ED-AA605F8B6681} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{59767003-79C3-401B-A6E3-91F7E030CD6F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{59BE94BA-5A68-4BC6-A933-ED4CB1B00287} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{59D46104-19AF-4C61-8E72-2F424B8AF811} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5A4E2F95-E506-45F6-8E57-5A96D71753B8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5B980655-2BC5-4857-936D-EF3C13B0242A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5BBDD96B-CBDE-4566-8E9F-A554400CB95B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5C0BCACF-06E7-4D0C-ABB2-8623DBF1BE78} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5C495CFD-E558-4324-BF31-D5EF400E8742} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5D192069-769F-43AB-9166-5931D1EF6349} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5D7FEA79-0B11-4E32-A931-41530595DB18} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5E460716-099D-4C56-A174-0BB490E95DA5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5F2E7332-2F78-44B3-ABAB-91D62992EB9B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5F309AD9-9AE7-4701-B34A-26869FF806FE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5F5BEDBF-A627-4E2E-BEE4-4CCF85DF3714} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5F701AC5-E527-4377-901F-719B9B756F47} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{5F850E0E-A002-4767-8596-22CC2801C2C1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{607709A4-33D1-4A8F-8947-EDD189C52934} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{608C8381-C592-444D-8FBC-94FE8297039F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{60BD589B-519D-45AD-A036-A530B9AA7DC0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{60D43522-99DA-4A29-94E9-ED169704912E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{60FA5666-ED90-4E96-AC3E-B22404CAEE35} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{60FB0649-5674-43BE-912D-6F4BB6CF3163} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6107AF31-59E0-4FE2-8C46-46B7E0D1AA70} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{61315DBE-C297-4849-8766-BE52FF34EE76} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6202C239-B3FA-43F3-AF45-213FA263F453} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{62A08EEE-7405-4A4E-8BBC-562EBBD0F262} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{632D0122-7920-41DB-949E-AA60D26D3446} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{634E37C9-D917-441A-90A0-81C79D9FB858} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6369D524-1505-4874-850E-43AD8B8EAB10} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{638C722B-9D39-4CE0-9080-973C7093F95F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6396056C-9E70-454A-91A8-7EEB06231033} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{63AC4BDC-FB1A-4FA2-8E09-56AE2517A513} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{63EC3A72-8A18-4019-AF42-64C3A9C17054} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{64795762-04AA-47DF-A241-4FF546ECE1DC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{648B70FF-67DE-4F07-B7AA-263D902C239F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{657B4F15-953B-4753-ADAB-839014A671C2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{657DEE10-D887-4C12-BCCE-2B03F85AD059} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{65BA457E-5B06-4D78-AB74-DBAD99815B17} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{65C4676F-EC32-4BC4-BB51-4A48954396A3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{66326EE4-EDC1-4393-AE6B-F5649E66D7CC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{668D1BAF-B780-44BF-B604-BC6A34719CE4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{67784D15-74E6-45B1-AC2E-F6D0E934FB5D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{678BA640-62AE-4368-9AA2-4F9C135DB31A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{67D57100-D38B-4DDC-8817-B64780090453} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6900C904-CDD6-4459-AA21-9CDC6AC77C58} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6A41FE7D-42F0-4C67-8A47-75FF5D19BE8B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6AE8F2BB-732C-4B2E-90AE-AAB7D746AD7A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6AEA66C8-AAB2-4B63-9F07-E92E391C2A34} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6B8372B1-E47B-41B9-ADE4-C0B3E6D33D58} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6BB94162-BE32-4AD0-8112-C4A896EF9E3D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6BE31BAB-4B3A-4B9E-BECC-3376DA72409B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6C474FFB-45A8-4789-920A-268215117B8E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6C5F8206-247F-40BE-BC68-EFBBDEF3F6C7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6CF4571B-8E22-4FC9-BE55-657CF8C84977} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6D0C77F7-4E08-4231-8F96-852D4BB9F82F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6D1FF2F0-CAC6-4A6C-8252-25F534A75CF7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6D538E3C-3DF4-496D-AAB4-88BD56AE6F6B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6E18D14F-57C3-4965-863F-93A1472625DC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6E7EEF06-51FD-4197-9F4B-1C6764B88510} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6EDD3E70-D357-4648-89F8-FDF632FB0E17} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6EE0D6C5-BD87-43CD-94C3-95D681F34D45} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6F5AB81C-7128-4382-9C9B-103EEDD7B495} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6FBB6352-45E7-48A6-A368-E9AC7727EC59} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{6FED9409-79D7-4741-9703-19C86E016E76} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{706DD02E-2294-4ED6-93F3-C61FC28D2EEC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{70FB5DFF-4F44-42CD-B759-593A2604D8D7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{711A1B9F-7DFB-4B3F-856D-4359E63F5E25} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7165A026-C342-4F59-A62F-11E9A669E9F1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{71DC4EAE-E687-4E4E-9286-75F846220DFD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{71EE415C-4F53-4CF3-997F-899B350DD2AB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{725BB8D1-A2D6-49DB-8B30-1A7F8AA1A5FB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7279C014-E4F1-417B-A0E7-00142E03A826} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{72E56299-6ED4-4F3B-9FB3-978E5DE68EF4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7374CBDB-7AC4-4127-9689-D297356D8B62} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7381C3B3-F149-40B1-BE9E-57006A31838A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{74DA5C51-E329-433D-B3A9-AA17E3C5AAA8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{75070341-C909-41A0-9490-84F12A57D02B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{759ED6E9-9B96-4434-93D4-8EE92BD99C2D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{75EAB6A0-7ED9-4595-A9A3-D7CA744B78F6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7614D330-4319-4E06-A7A3-B08E9529263D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{770AB9DE-BA74-41B4-9AF8-3C3F6F2E3D4A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{772A3804-B371-443B-AC62-796CEEAFFED4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{77434F23-655D-41E3-BB2C-8BF0CF15F737} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{779B110E-A0AF-45F5-AD72-D276D5E101BD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{77E80570-D415-4253-8739-ACD44877DBE5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7817B82A-BBC4-4FCC-90F9-538F58594379} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{786B9945-95E4-4538-BC26-EA4AD9A979A9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7912C853-DBD0-4AA8-8EFA-74C9B91E46B4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{79A27157-0A93-460A-A280-F34EF5208500} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{79C73291-F299-48CC-9334-A319F2694976} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{79DE4CED-771E-467F-8CB7-D21BD7F474D1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7A1F999C-7AAE-45C9-941C-C54DC393DA52} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7A4BDDB7-8AA8-4DCD-B6C9-DE69DB76F453} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7A4E7D30-1CB4-4F0A-9892-D020EFC41F65} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7A77CC5C-A467-4E85-A3F1-CBB14D7C66E1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7ABF7DC3-B54E-4DCB-AC5A-38D52E74D3EE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7B8B9B29-27F8-4866-ABCF-22C73C2BAA96} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7BB4FC26-A59F-42B6-B5BB-91F1CDE21E7C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7D25FE8A-179B-4362-AD85-1A35874FC94A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7EA2967E-9330-494E-9638-F75F305E6B5F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{7FCC1364-B42A-4600-9334-213E01EDE964} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{82187E5E-AC0B-4A6D-BAD1-318F2F4B208D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{832A2A8D-8567-40D9-BFD5-C56D769D2040} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8367B21F-34CE-4809-BAA1-9B3237DC5864} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{836E32E4-A6CC-4116-901B-06AE0A8848AE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{83712ADE-78D2-4550-8BEB-46CB8DCE7A8B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{839C0CA2-EB14-401B-829C-CA1AC8E07ED4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{83AEA770-E63C-4E44-801F-5F26C9063631} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{83E5BB40-5049-4B62-8F84-DB69EC1D731D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{841A0EE8-F906-4A26-A66D-80B29A2FAC3A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{841ED59E-1703-4E68-A7E6-033F3E781278} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{848435A8-F165-4E6C-804D-96A5882270CC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{84BB662A-287A-40BE-AB15-1A08E794573C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8528781D-24BC-4654-8CE5-68047875127A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{85D59457-7160-4946-94A0-1CD0EFD7D29D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{86230106-B6A2-4CB3-B093-BF1D697A3E9C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8666EB09-F9F2-4623-B4B1-AB1C66C80EF7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{87555E69-D187-4F06-AC41-46E29F7DDE65} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{875C97DD-84CA-451F-9F08-A2EF68C5152B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{884A4B88-ED1B-4594-B6D1-7EDE16E7A91C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{88B2F48C-CB91-4C9E-BC55-C47B32ECDEAF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8907143F-CB39-46F9-802C-F21F9FB8D9AE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{895D7DDE-B74C-4690-8AE0-00EF24C85D7E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{895E9584-7E8C-4089-A498-A00EBD59F6F6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{89C8B6C8-0CDE-4FB6-8FD4-951C0EAFB405} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8A16F651-A56E-4F98-B625-F4E612D28D8C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8B3D1340-E72F-4832-A734-9C9F07C2A353} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8B8DF879-C6AB-4C6D-A45A-BB436B94A711} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8BC8B05A-FE2D-4EE4-8C79-FC12204D9AAD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8C1255F8-B4ED-4E3B-AC11-617BA71C0CA8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8CE86685-1148-4827-86BA-36171A448DB2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8D04DE6D-5300-4407-BB54-8EA420110F5F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8D0C9237-CAA3-4A73-8444-0EAFFAD21F51} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8D17DA66-BC5B-4CFE-BF63-D1D949E6A5B5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8D74DC3A-5D91-4BA6-8B91-01DF416D745C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8E34F8C8-E69B-43AE-8EBA-BDFEDC9E3396} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8E3D79DA-B625-4935-8BCB-1F5EB9B84F0A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8E73B1C6-9389-40B0-BA43-DB72FD02D9B8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8ED065D2-B764-474C-BB95-4D1CAA7FF935} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8F3CA0CC-EF16-4495-9BA7-277D8D675B4F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8F47FECD-7865-4B51-8248-F2C7F8144B23} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8F48A52A-69CF-4DC1-A7BB-ADF63F4B5899} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{8FC46AB3-94EC-45BD-A481-6FF3866246C1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{903A1DD4-2A91-4E0D-AB5B-318D0E1F1F63} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{909A46C7-8688-43DC-8995-39D39E1C3022} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{90BD3E8E-4D3C-40C5-B875-4D7BF3E02679} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{918AE8C4-C507-4A39-A34F-E2ED3F8ECF78} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{91D2A609-45D8-4AC6-AE2A-29372619E429} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{92536F73-4D71-4384-B5A8-234DC7FFD8B4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9273F261-94DC-4EF8-BE54-646651519821} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{92BE9E38-8D2F-4852-80D2-0457CB0E3FED} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{933D0B66-12DF-4CE7-8018-566519F3E51E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{948BBA05-BBC6-4EE4-AD70-1E66293F1A42} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9527BB38-F06F-4C0E-AFC2-C107C4A42D12} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{962ACF3B-B1B7-40D3-9E0A-B24A907ED122} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{968BDE0B-80EB-4534-844A-EB3688FF9AE6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{96BDD953-DD15-4B1F-8975-8159083F637B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{97673B4F-6DEF-4AD4-A8CF-A1A6EDDDACD0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{98F32761-C1CC-4B17-951F-ECDAF442B7E3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{98F7A062-E112-4EC4-8115-2B90D0015244} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{99028074-C46E-4F44-800E-439142B6C76E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{99039A72-0135-4172-B5A2-11A4F6FA7225} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{993E8D3D-A5E2-4793-8975-312716EBBB90} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9A2CA092-5120-4D91-912C-C76D407F8035} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9A3F96D5-F3FD-4B15-B28B-10794C073093} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9AB2D424-2A87-4D15-BF5F-885276DE68FD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9ACB2CEA-ED20-4C7D-BD1D-4D32694D793E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9BE65C45-9168-4C5D-A49D-132A0FBA76B2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9D870BCF-A432-4E34-9C10-8A592088E4A2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9DABAAFF-C235-4BA5-A9A8-0F10985DD2D4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9E5150AD-AB8E-426C-8357-BF24F4DD0811} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9E9139EB-267B-4906-BBE7-C4871ACF858E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9EE9A319-41ED-429D-ADD0-C55B095FE934} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9F2EBF69-B18F-4230-830D-77E2E15EA969} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{9F771DEE-202C-47C3-928E-68BFB46AE2E0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A1103BDE-61A7-4503-BE48-D956AF7A0A20} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A12606E9-34D0-46B2-85C1-3BE7535AC9F1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A1670395-EA29-4D7C-BA8E-2D117545F6CB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A1811C36-DF3A-4A2F-9E35-3B871792F897} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A1BA4BEC-D47E-4A7D-AA56-8658619C08A5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A1EF1616-DF5F-4D33-9DF9-5D532E54FB03} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A29D2A33-EB8A-4B17-918C-B01C089DBACE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A349AD44-9121-4518-90C1-DC4882E9373F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A361F142-0D6C-4618-B8A0-36A2C940118E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A411BAC6-D29D-4C6A-ADDE-0BBA80D526A9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A6026182-22D9-4757-85B2-16DFB4EC46B5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A6ED4488-3180-424B-A79B-D40DDEE232D8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A76E60F8-0204-4553-8F4F-96F6641F897F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A7BBF168-7FC1-4419-A089-B86761FEEA6D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A7CF7FC3-EEBB-4C36-8C94-8BE2A1ECFD14} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A82B076E-38A1-4AFA-B1D3-75771B9E2F7D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A872CB1C-15EE-4151-8CD1-DD4962F2D162} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A8EF4D2E-1CFE-4422-93B3-933C4CE2A045} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A908392E-BF16-4664-8D82-6CF855C1AD71} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A92009A0-F51C-4DBC-B02E-3C6DB505CC94} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A93D1E4C-4BE9-4E60-AD78-54886375C73B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A9939BED-3C02-4D35-A432-F62568D9AB2C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A9C1076C-C70F-4FDE-810A-5A8CFD73EED9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A9CE2C59-8703-44EF-9351-F4A633CCAC98} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A9FF0A17-20F3-44DE-A2C1-635A4D7AEABD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{A9FFE37C-B6DD-4860-940D-21CC8ADFCC26} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AA69F51E-83C0-46F4-981A-E6E39F8DB922} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AAF860B2-6616-40BE-A6A8-C7A45528EE5B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AB6A3493-5F7A-488B-BDEA-681B4A176EA8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AC652093-5176-49FD-B5C1-93A59DB61A46} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{ADB1AE0F-9404-40E8-A51D-CB490F6E4A1F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AE050076-C586-4EE5-BFC9-E9682207B11E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AE296345-1055-415E-BC0D-901122919933} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AEB351D4-8AC2-46EF-82F7-FA32F7E52158} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AEF889C5-EA5A-42FD-A388-F2AB04FC9686} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{AFA36D8C-2F00-4CE4-823C-1CC7108BB4E7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B0B5B660-9F61-4FD6-B838-CF17C56389AA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B2048CF4-2A99-4BEC-A200-EB72B3818B91} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B25E0A43-1CE2-40CA-8341-9F74B5199294} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B262B0FD-C259-4710-9E74-90AE04DC9FFC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B28975D2-2533-4F4D-A4E2-2CF6933332BF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B363DFD7-0AAC-465F-8739-A17BC784DA65} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B45016FD-F296-4C1F-8051-6257AC9EFBCC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B512AABE-66A2-49A2-A38A-1169EE2E198E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B52C8E95-B2CD-41C6-9968-2DDECD3AEBB3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B5336E1D-3CD3-409E-8D61-FB84DAAF8C99} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B5B6A64B-C8C5-4111-99F3-9C43EB3902AC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B600E81D-5EF1-4EAE-BEBC-59F8414D8EF1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B61AF18B-B3E1-4031-8A43-1D718362EB1D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B63E3FD9-B7AF-48E4-AB94-1F34373E72C3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B68C8B09-C633-4EF1-8C36-72DF4FD8CE5B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B6D23E92-8392-4692-8456-9FF3675D70CE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B74D655F-D816-48E4-8EDC-9C927C38D6A0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B781EF98-F9A6-444C-ADC8-64140EEEE4B1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B9251F98-0837-4527-97D6-ACE63911F757} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B934851D-48C9-4798-9B35-E5E79F046ADA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{B970247A-C16F-4D91-8492-558B34A5877E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BA24A4E6-0B82-43C2-A35E-4BC396597A83} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BA48B5BD-4577-448E-B829-3695B2C96B76} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BAEECF63-92BB-4295-829D-E1CFDE4D5B0E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BB102148-2AC1-417F-BE94-AB57A4917C02} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BB4B3BCA-30EB-4CA6-9833-38B9F92549D6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BB4B7891-6FCA-4896-BB89-CDD4E87DDE95} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BBCFCC02-078A-4215-9183-EF85A2065EE4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BC1BA23F-D17D-48D3-B294-4FB80E063E2D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BC23743A-4AA5-4277-91DC-E59BCBA26540} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BC4A19D3-A301-4741-819A-7377ECEE5DAF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BC583735-F19A-4142-A109-AD26321EA728} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BC94C8FC-94D5-4757-8272-DBDB860AF247} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BD35A807-03B7-4852-AFDB-3F3091453945} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BDAAD0E5-21AE-4722-9567-CB467E10AA26} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BDB71161-857E-4E7F-BAC3-152837F8C34A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BDEE746A-10EE-42C0-AF36-B68519C77262} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BE6B7F44-EDEA-467C-B241-B74CA3F84D7D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BEF3ED75-4A04-4A2E-B2EA-7DEBB7769961} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BF55587F-6903-41B2-B97C-2827EC6DBCA9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BF78B912-C998-4060-B6D1-D44F9F679CBD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BF9EE9BA-29A3-4C05-A39D-A2EDBA31DFAE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BFD0A9CA-0EB1-485F-8E02-8A767C8A69D3} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{BFD406AF-5919-405F-9931-14685F76E98B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C03D9D4C-F030-4FEF-8DDF-612D3A80BA9C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C0B99350-0FB6-4B41-8F46-B468BFDF28E8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C0EEA8B9-A609-4EC9-8BAE-C7B0B0F7F708} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C12856DB-29FE-494F-9D18-DE08EC474C2B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C13AC42A-8F0C-4D3A-8D48-96AC26A7E6E1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C29068AA-9320-41DE-B557-ABA41DC0807D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C2B72D9C-BCF0-46B1-884D-6C071FF7F5DB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C33B2E6C-F3D3-46A1-AB94-6649CD66027C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C355244F-580C-4FF6-9E69-5DF934E806AA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C3DEBAC0-5966-4996-A3D5-2DA961CF56CF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C4B20906-C06F-4E70-AF86-2976239BD9BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C62D45DC-EA86-409B-8899-C7ABEB8498BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C6300331-C13D-4C43-B9E9-6D9CEE9826C4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C64992F3-F0CF-435F-875E-0CFF9B86CF92} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C665895F-5751-4C50-B0DF-B94411EEB798} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C6DB17D0-4ECD-4F3D-B4F4-E3FEBCFDD8A1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C806589E-00DC-4918-9D91-C10C3840C08C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C8373B0F-50E6-4043-B386-49EB0D4086A2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C8544D17-DC6D-42FE-8CA8-F8FFC60DA7C8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C89B248F-8801-4432-A82B-15D907355111} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{C96B3920-43C7-4402-A829-1059BDBEBA40} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CAE4C93F-F132-4BAF-8E6B-AB24FE5A7A12} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CAE6938D-6891-43C4-81AF-E2C5821447A2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CB01F06C-D9CE-47F2-9CD5-F549CF9CC576} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CB8B1062-558A-40E8-939D-622DD25F0604} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CBBD0730-9176-4808-B81A-FBBAE446E741} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CC895758-E079-4B92-853B-E0A0AFAF44EC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CC9B3ECF-7640-44D8-B0FF-43AB4D2DAACF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CC9E8057-8B1A-41A5-91C4-CE308C6C1B8E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CC9F23B7-48CD-4FBA-BF59-4B4A3D4216B0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CD239FAD-8A60-408F-B7A4-9469EC40C1A7} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CDB75248-38EE-4696-9837-DC63AF0ADE48} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CDDCC386-6852-4D65-BDBA-96E238ACA5C1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CE119731-71DC-4ADA-AE38-89F85AD9C4FB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{CF043179-56E1-4192-B9BD-5732E5BBF610} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D04BB46F-B52C-415C-86D7-66245078C21A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D189C007-9A24-4138-97AF-72B68B439BB5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D25F7301-D1F3-4B58-919B-E7381880F127} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D26622FD-08CA-45A6-9623-C97A50EFFDAD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D28B16C8-4D8E-4294-9C1A-DF0891136F35} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D2B672EC-C80B-4281-B88F-CA544ABD1FF6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D3074EE4-4BED-4DD9-B369-568188B47718} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D335683A-70AD-4B6F-98CC-56D09E1A7234} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D34A69A0-A988-411B-A9C9-36BBBB2712F9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D3531F68-B4C9-4134-AD45-9E474A20FB3B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D357ED11-1B79-4C68-A0A0-2E4F1AC4C500} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D396CFD4-5B2E-4EC6-97DF-99C602661B8D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D3F374D2-A27E-41BF-B228-5FDC70067E5D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D3F3BC41-CBFE-445D-A50E-24BBFD579FC5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D40DEEF8-F198-4B73-B8DF-3D1EBF0C61ED} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D44BEB9A-7AC6-4584-BF09-3F26C8120001} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D48E5886-012A-4215-9CEC-52D4080CF046} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D4D20EB1-0EF8-4DD3-8099-4C7E9C8B9D08} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D4DA6485-6E30-44D7-8EB3-21F4CFEF14A0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D5CA50F6-95FB-4F36-AAF5-D8C5D84E0292} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D623FAA7-6836-4333-B77B-C923BEFBE878} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D6313670-E180-414A-BF39-65972F1E46F1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D6F40D6C-CADB-422F-AF85-B6CF3D9DBA0A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D739A414-E919-473D-9771-2203D6C6DC4C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D74D3513-5FFF-48A5-9827-0E7A19749E64} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D79A1482-9161-48AA-94CA-601AA8CD00DE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D7AE7C72-DDE1-4EB8-A9D1-5FFFEA3D3425} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D8445247-5D15-4090-82CA-E522C420D7D2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D845EDA2-46D9-46BE-911F-228E3D2FC7A6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D87ADB71-2B60-4998-AD73-DF8669A418A8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D8A130BE-2C94-4409-8CA3-1728AA59711E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D8E4F9CB-69C5-459F-A83C-42F01617B9CE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D9585482-3BCB-4561-A9E6-D7D00542838B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{D958A54A-8069-4015-A4EA-041482A71BC9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DA684CCF-3654-429B-9658-F8FC4F9F6397} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DA8755A6-7365-4953-89DE-3A17CA3CD172} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DAA199B6-116B-4299-9393-25239FA58177} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DB0FF96B-14EE-4B5C-864A-5997BB939C5B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DB202A3F-3284-4DB1-B3F3-260D4DC7A2E1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DBD43D3B-66D9-47FD-B012-0ABA9579BD08} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DC19E822-BC72-4ED1-BDAF-BB3142A1FBB8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DC84C399-63CC-4299-B518-D9FD5BEA75AD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DCF4F0B7-4EBA-45D2-8582-B87995235C76} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DE00FC47-0649-426D-A6F8-1E4346ECC6DC} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DE6CC44F-E60B-4BE6-B417-A8DE74379323} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DE8A7E94-6A7E-4FA6-A8A8-B1A285C82108} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DE917CC5-1706-4959-9251-5BE2D6C0A039} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{DF8EEABD-E921-4B81-A05D-F0E3097154DA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E05690F5-B88C-423C-A9BD-AFFA89EB1AD6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E15A5CEC-94AA-4A78-8FF2-3EA5269CA606} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E1DE8BFB-4063-44D0-A5DF-5533223C8F8C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E2D6C439-98D2-4E89-B465-5653AE56365D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E38F0AF0-F3EB-442A-8F2F-BBEEEC62A552} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E42486D3-89B4-4582-8FDC-A10777ACDEE6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E4482742-0F73-4C19-9CCC-A9BB01478B8E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E4D080BE-DECF-4FA2-87EF-31B18BD4A3CE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E5527D1D-0520-4A35-BCC1-E67542B4513E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E5748532-2B97-4532-BA70-FCC46AD45FBE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E576FC5E-C428-4D8A-A83F-403FB2CA1519} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E5E5A4A8-85B6-46C8-8594-6329F6CDCC8A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E5FD84F4-14AD-4EB8-AC13-75B39E41427C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E6E35E4C-270A-4264-A3E6-ABD840D5B15E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E7177637-A714-41CC-98A2-02EABF979DF8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E73E2CA4-1095-4188-915B-F2D3AF2C3E7E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E7443A23-64B6-44C2-95A5-753F5A5557C8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E7592743-FB7D-483A-A27E-6C950CC109B2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E7DA8C46-5ABC-4FC5-88DB-8516DE76F271} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E809F347-BF8C-45A8-961B-9B1BC5C19046} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E8319064-38D9-4660-A4AE-798ECB42130B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E84D05D3-7906-4559-AE95-778414D91A46} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E86E5D3A-2D28-4D93-915E-7B42216E9B37} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E870B5F3-84C7-46EE-A198-28C8950230D8} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E8A91D9A-E631-462A-9BD8-FD44973BF605} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{E977944E-E86F-4F3C-B160-D3525AF35275} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EA6AE19F-410C-4339-AB7B-C9DB0F06306E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EA919973-F789-40A9-84ED-5B172F2CD116} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EAC91F06-10F6-48ED-8982-76A15645D1C5} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EB5A36B5-BE57-4409-9881-E5B710D99DF0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EB6E424A-6EF2-459E-8D92-26560315B99C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EB7DD07C-9587-48F9-97DC-510898566591} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EB7FA5F8-60A0-4A2C-A691-148C0EBDA9B0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EB858945-886C-45BD-8720-7EA099F0B822} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EBA2C250-2BBF-4ADA-9D8D-551EF4061A27} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EC0BFE54-BBD9-4169-A85F-35AA250A27FF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EC29ADF8-8753-4F19-95D3-B9A84CC3262C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EC65E84E-C4E0-4C83-86B7-A2F0E574C693} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EC727D6C-04F0-494C-82C2-77EBB0F537B6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{ED612582-F047-42A4-BCE3-7FCD4EFD3968} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EDF96F31-C01F-4CD7-A6F5-CE0D663D167F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EE592036-29AB-40EE-AD68-5F67C4C1EEEB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EE5D177A-FF83-4BF9-9064-5AAB1DAD7395} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EE93F1E5-3094-477F-9CE7-4E6518E4C6F0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EF16138D-58BC-4F51-A5B7-080830B016C1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EF870FC8-261E-418C-A46B-5AFDFA5A0148} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EF9E0D42-9730-4BBF-B85B-7801EA229D91} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{EFDC319E-00DE-4BD9-989E-0D587E81E172} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F00D8388-D657-4DBF-B7B2-BE79F77C768A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F06F7D97-9126-4134-AB59-B906D420CEF0} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F12CB140-60D0-4709-9A05-A3B4466FAE8C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F14236B0-5FEB-4685-9934-26ABCF553033} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F1E27E2B-A99A-4650-AB20-1231AF9A1EB2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F1ED9489-6FD7-4F1E-82AB-2240E0006164} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F2F033A2-93E4-424C-86A2-B6295321CF21} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F3CFA932-D6B9-4123-8D33-127A2FBBAABF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F406F716-3141-48D5-8DF7-14335A9238BB} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F42EACF8-810B-4571-A11E-76B29BCAA819} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F436068A-7C58-4155-B604-5038E50552DF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F525A95E-44D7-44F5-8A80-3817F0DA4AC9} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F561A005-01F8-440A-AB4A-3E0AFA38415F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F5AF702F-FE89-4F22-BCBE-82498C054195} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F6745391-8589-4FF2-9685-B14A67CA7EC4} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F68ACA46-C2D6-43E6-9FF1-72E25089B27E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F6EF56D2-D91D-4C98-A85A-6919F9FDA926} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F6FB2D73-73A1-4961-9EB0-9C45CA70EE37} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F7FC2727-FC6A-4C1C-81E6-F6ED59DEFA84} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F82C4206-CA4F-4AE6-B55A-00A5C3A97E57} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F8C0CF04-C133-4D0A-9B2B-04065344C805} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F8E03421-DCC4-4096-838B-6E588161999B} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{F94A0CCF-D8B9-4D05-8ED5-2BD0650292BF} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FA4B4FA3-603A-422D-B715-B79A9FC93F3C} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FAF960EF-D27A-47F4-9BAB-D1A6CE25CD1A} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FC357312-CA01-4F90-A771-F5A24438635F} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FC7FBF6E-F882-4C69-B095-B280857D7A6E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FD23E1BC-FC14-47C5-B9D9-F94385422D02} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FD27FE47-A099-418D-B121-B55DC4F8BF6D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FD739139-988A-4C3E-B612-4F4B242C4C4E} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FDA49FF6-69B7-451D-85BE-9A706E9F2E65} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FE027667-79AC-41B8-B250-E86CA810D03D} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FE3D4642-79B6-4BA0-9024-49E4A54F83C2} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FE59C3EA-3696-477B-B0B6-9A11B142F1BD} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FE8EE171-F28F-42F6-BC4B-ED1C315DE2D1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FEBD73D6-0488-4412-B0B5-A741631DE0D1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FECD4053-D227-4043-9480-3D44A830D086} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FEFA05C3-F046-4FB5-B44F-F50D568A7222} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FF0E6BCC-773D-48EA-B6CE-692DC2939CA6} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FF26FFFD-C558-4AA5-8874-A62AD918FABE} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FF28D267-83F7-4FC4-9E3D-E01360D2BDEA} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FF2D9A3F-6074-48F0-9141-7C6349F0A062} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FFDCCFC0-9CBA-4558-B8CE-D5308D16C698} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\{FFEA5E81-BCCF-47D3-97D0-014463D45BD1} (Empty Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\2371 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\3503 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\6265 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\6482 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\6604 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\6778 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\6798 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\7225 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\8847 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\9545 (Folder) Successfully deleted: C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\user.js (File) Successfully deleted: C:\Windows\wininit.ini (File) Successfully deleted: C:\Users\Lexani\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6ATY2P3G (Temporary Internet Files Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA9JSA4A (Temporary Internet Files Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QNXVUL55 (Temporary Internet Files Folder) Successfully deleted: C:\Users\Lexani\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP9TWKU1 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6ATY2P3G (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA9JSA4A (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QNXVUL55 (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SP9TWKU1 (Temporary Internet Files Folder) Deleted the following from C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\prefs.js user_pref(icqtoolbar.showPc, false); Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.06.2016 at 12:53:13,13 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |
14.06.2016, 13:08 | #11 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken
__________________ Logfiles bitte immer in CODE-Tags posten |
14.06.2016, 13:16 | #12 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2016 durchgeführt von Lexani (Administrator) auf LEXANI-HP (14-06-2016 14:13:56) Gestartet von C:\Users\Lexani\Desktop Geladene Profile: Lexani (Verfügbare Profile: Lexani) Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: FF) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe (AMD) C:\Windows\System32\atiesrxx.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe (Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Nicht auf der Ausnahmeliste) =========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15033976 2015-11-20] (Logitech Inc.) HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [343168 2011-10-01] (Advanced Micro Devices, Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8722136 2016-06-01] (Piriform Ltd) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\system: [DisableLockWorkstation] 0 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\system: [DisableChangePassword] 0 HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000 ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{98FC677A-F2F8-44F5-BE07-7D9D9117693B}: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{C0F67315-F439-40A3-901A-C5E29AEB2F98}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{EC4F6CEB-DDE8-4976-ABB7-E19BA2CCDB46}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT/4 SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000 -> DefaultScope {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll [2011-02-17] (HP) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Kein Name -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> Keine Datei BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.) BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-23] (Oracle Corporation) BHO-x32: TrueSuite Website Log On -> {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -> C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll [2011-02-17] (HP) BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-23] (Oracle Corporation) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.) FireFox: ======== FF ProfilePath: C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default FF NewTab: hxxp://www.google.com/ FF DefaultSearchEngine: ICQ Search FF DefaultSearchUrl: hxxp://www.google.com/search?btnG=Google+Search&q= FF SearchEngineOrder.1: Google FF SelectedSearchEngine: Google FF Homepage: www.google.de FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q= FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Keine Datei] FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.) FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [Keine Datei] FF Plugin-x32: @esn/esnlaunch,version=2.1.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll [Keine Datei] FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [2014-09-01] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-23] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Keine Datei] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-12] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-06-12] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.) FF Extension: Noia Fox options - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\extensions\NoiaFoxoption@davidvincent.tld.xpi [2016-04-28] FF Extension: Avira Browser Safety - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\abs@avira.com [2016-06-14] FF Extension: ZenMate Security, Privacy & Unblock VPN - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\firefox@zenmate.com.xpi [2016-03-02] FF Extension: Noia 4 Theme Manager - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\Noia4Options@ArisT2.xpi [2014-05-26] [ist nicht signiert] FF Extension: NoiaButtons - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\NoiaButtons@ArisT2_Noia4dev.xpi [2016-05-04] FF Extension: Adblock Plus - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28] FF Extension: TrueSuite Website Logon - C:\Program Files (x86)\Mozilla Firefox\extensions\websitelogon@truesuite.com [2016-06-11] [ist nicht signiert] Chrome: ======= CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [aepeildmfnnehghlknddebgjghlompfe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx [2011-02-11] CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Dienste (Nicht auf der Ausnahmeliste) ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Datei ist nicht signiert] R2 ezSharedSvc; C:\Windows\SysWOW64\ezSharedSvcHost.exe [514232 2010-04-23] (EasyBits Software AS) [Datei ist nicht signiert] R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2011-04-16] (Hewlett-Packard Company) [Datei ist nicht signiert] R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193144 2015-11-20] (Logitech Inc.) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145256 2011-08-02] (Nuance Communications, Inc.) R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.) R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2014-12-23] (SlySoft, Inc.) R1 dvdfabio; C:\Windows\system32\drivers\dvdfabio.sys [9976 2013-11-06] (Fengtao Software Inc.) [Datei ist nicht signiert] S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 lgLowAudio; C:\Windows\System32\drivers\lgLowAudio.sys [26264 2015-11-20] (Logitech Inc.) R3 vdrive; C:\Windows\System32\DRIVERS\vdrive.sys [42232 2013-11-06] (Fengtao Software Inc.) S3 cleanhlp; \??\C:\EEK\bin\cleanhlp64.sys [X] S3 clwvd; system32\DRIVERS\clwvd.sys [X] S3 CM_VENDER_CMD; \??\C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-14 14:13 - 2016-06-14 14:14 - 00015284 _____ C:\Users\Lexani\Desktop\FRST.txt 2016-06-14 14:12 - 2016-06-14 14:12 - 00000000 ____D C:\Users\Lexani\Desktop\FRST-OlderVersion 2016-06-14 12:53 - 2016-06-14 12:53 - 00072714 _____ C:\Users\Lexani\Desktop\JRT.txt 2016-06-14 12:51 - 2016-06-14 12:50 - 01610816 _____ (Malwarebytes) C:\Users\Lexani\Desktop\JRT.exe 2016-06-14 12:49 - 2016-06-14 12:50 - 01610816 _____ (Malwarebytes) C:\Users\Lexani\Downloads\JRT.exe 2016-06-14 12:43 - 2016-06-14 12:46 - 00000000 ____D C:\AdwCleaner 2016-06-14 12:42 - 2016-06-14 12:42 - 03677248 _____ C:\Users\Lexani\Downloads\AdwCleaner_5.119.exe 2016-06-14 12:02 - 2016-06-14 12:35 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2016-06-14 12:00 - 2016-06-14 12:35 - 00000000 ____D C:\Users\Lexani\Desktop\mbar 2016-06-14 11:58 - 2016-06-14 12:00 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Lexani\Downloads\mbar-1.09.3.1001.exe 2016-06-14 00:30 - 2016-06-14 00:30 - 00000000 ____D C:\Windows\System32\Tasks\Aufgaben der Ereignisanzeige 2016-06-13 16:15 - 2016-06-13 16:15 - 00048725 _____ C:\ttttt.txt 2016-06-13 15:50 - 2016-06-14 14:13 - 00000000 ____D C:\FRST 2016-06-13 15:50 - 2016-06-13 15:53 - 00000000 _____ C:\Users\Lexani\Downloads\FRST.txt 2016-06-13 15:49 - 2016-06-14 14:12 - 02385920 _____ (Farbar) C:\Users\Lexani\Desktop\FRST64.exe 2016-06-13 13:17 - 2016-06-13 13:19 - 04630840 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_de_av_575de264933da__ws.exe 2016-06-13 00:44 - 2016-06-14 00:22 - 00840460 _____ C:\Windows\ntbtlog.txt 2016-06-13 00:40 - 2016-06-13 00:40 - 02983904 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_registry_cleaner_de.exe 2016-06-12 17:57 - 2016-06-12 17:58 - 00675242 _____ C:\Users\Lexani\Desktop\registrierung sicherung.reg 2016-06-12 17:55 - 2016-06-12 17:55 - 00002223 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-06-12 17:52 - 2016-06-12 17:52 - 00002794 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-06-12 17:52 - 2016-06-12 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-06-12 17:49 - 2016-06-14 14:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-06-12 17:49 - 2016-06-14 12:48 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-06-12 17:49 - 2016-06-12 17:56 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-06-12 17:49 - 2016-06-12 17:56 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-06-12 17:45 - 2016-06-12 17:46 - 06893008 _____ (Piriform Ltd) C:\Users\Lexani\Downloads\ccsetup518.exe 2016-06-11 09:40 - 2016-06-11 19:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-06-08 15:48 - 2016-06-08 15:48 - 00180097 _____ C:\Users\Lexani\Downloads\importexporttools-3.2.4.1-sm+tb.xpi 2016-06-08 15:44 - 2016-06-08 15:44 - 00180096 _____ C:\Users\Lexani\Downloads\ImportExportTools-3.2.5.xpi 2016-06-08 15:28 - 2016-06-08 15:32 - 34810488 _____ (Mozilla) C:\Users\Lexani\Downloads\Thunderbird Setup 45.1.1(1).exe 2016-06-08 14:39 - 2016-06-13 16:48 - 00000000 ____D C:\Program Files (x86)\Avira 2016-06-08 14:37 - 2016-06-08 14:38 - 04630840 _____ (Avira Operations GmbH & Co. KG) C:\Users\Lexani\Downloads\avira_de_avprodl_57580fe603ce0__ws.exe 2016-06-08 10:59 - 2016-06-08 11:02 - 34810488 _____ (Mozilla) C:\Users\Lexani\Downloads\Thunderbird Setup 45.1.1.exe 2016-06-08 09:25 - 2016-06-08 09:25 - 01985486 _____ C:\Users\Lexani\Documents\IMG_20160608_0001.pdf 2016-06-03 09:45 - 2016-06-05 09:25 - 00000000 ____D C:\Users\Lexani\Desktop\Desktop,Bilder etc 2016-05-28 23:48 - 2016-06-10 23:33 - 00000000 ____D C:\ProgramData\ICQ 2016-05-28 23:48 - 2016-05-28 23:49 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\ICQ 2016-05-28 23:44 - 2016-05-28 23:44 - 01473544 _____ C:\Users\Lexani\Downloads\ICQ ProSieben Games Version - CHIP-Installer(1).exe 2016-05-28 23:43 - 2016-05-28 23:43 - 01473544 _____ C:\Users\Lexani\Downloads\ICQ ProSieben Games Version - CHIP-Installer.exe 2016-05-28 23:40 - 2016-05-28 23:42 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ 2016-05-28 23:34 - 2016-05-28 23:39 - 47404760 _____ C:\Users\Lexani\Downloads\icq_rfrset_ICQ7install_icq7.exe 2016-05-28 23:27 - 2016-05-28 23:27 - 00000000 ____D C:\Users\Lexani\AppData\Local\VS Revo Group 2016-05-28 23:27 - 2016-05-28 23:27 - 00000000 ____D C:\ProgramData\VS Revo Group 2016-05-28 23:26 - 2016-05-28 23:27 - 11374528 _____ (VS Revo Group ) C:\Users\Lexani\Downloads\RevoUninProSetup.exe 2016-05-28 23:25 - 2016-05-28 23:25 - 01473544 _____ C:\Users\Lexani\Downloads\Revo Uninstaller - CHIP-Installer.exe 2016-05-28 23:22 - 2016-05-28 23:22 - 00003294 _____ C:\Windows\System32\Tasks\{E00A36EF-025B-44B7-959C-7B5110EF5F31} 2016-05-28 22:59 - 2016-05-28 23:04 - 47404760 _____ C:\Users\Lexani\Downloads\icq_rfrset.exe 2016-05-27 20:15 - 2016-05-27 20:15 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\27862 2016-05-25 15:26 - 2016-05-25 15:26 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\29429 ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2016-06-14 14:13 - 2011-11-25 00:23 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\NetSpeedMonitor 2016-06-14 13:15 - 2015-01-18 18:26 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-06-14 12:56 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-06-14 12:56 - 2009-07-14 06:45 - 00032064 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-06-14 12:50 - 2014-01-17 14:09 - 06836736 ___SH C:\Users\Lexani\Downloads\Thumbs.db 2016-06-14 12:48 - 2011-11-19 17:14 - 00000000 ____D C:\Users\Lexani\AppData\LocalLow\AuthenTec 2016-06-14 12:48 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-06-14 12:02 - 2014-11-10 20:23 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-06-14 12:02 - 2014-11-04 23:14 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-06-14 12:00 - 2014-11-10 20:23 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-06-13 16:47 - 2014-09-22 17:42 - 00000000 ____D C:\ProgramData\Package Cache 2016-06-13 16:47 - 2013-08-05 23:45 - 00000000 ____D C:\ProgramData\Avira 2016-06-13 16:46 - 2014-09-22 19:43 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Avira 2016-06-13 00:44 - 2012-01-11 13:43 - 08487936 ___SH C:\Users\Lexani\Desktop\Thumbs.db 2016-06-13 00:31 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-06-13 00:22 - 2015-07-26 21:40 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForLexani.job 2016-06-12 21:50 - 2015-07-26 21:40 - 00003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLexani 2016-06-12 18:03 - 2012-06-01 15:10 - 00000000 ____D C:\Users\Lexani\AppData\Local\Google 2016-06-12 17:57 - 2015-12-30 02:06 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\TS3Client 2016-06-12 17:57 - 2014-06-29 14:04 - 00000000 ____D C:\ProgramData\VSO 2016-06-12 17:57 - 2012-03-30 17:59 - 00000000 ____D C:\Users\Lexani\AppData\Roaming\Vso 2016-06-12 17:57 - 2011-11-29 15:28 - 00000000 ____D C:\Program Files (x86)\Steam 2016-06-12 17:56 - 2011-11-20 11:21 - 00000000 ____D C:\Users\Lexani\AppData\Local\CrashDumps 2016-06-12 17:55 - 2012-06-01 15:10 - 00000000 ____D C:\Program Files (x86)\Google 2016-06-12 17:52 - 2014-09-22 16:35 - 00000000 ____D C:\Program Files\CCleaner 2016-06-11 19:38 - 2013-12-12 21:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-06-10 23:35 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\Offline Web Pages 2016-06-08 15:44 - 2012-02-20 06:08 - 00000000 ____D C:\Users\Lexani\AppData\Local\Thunderbird 2016-06-08 09:25 - 2015-10-23 14:31 - 00000000 ____D C:\Blu Ray Label 2016-06-08 08:40 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2016-06-02 10:23 - 2015-11-02 21:24 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-05-30 10:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2016-05-28 00:19 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp 2016-05-26 01:32 - 2015-04-04 19:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-05-26 01:32 - 2015-04-04 19:02 - 00000000 ___SD C:\Windows\system32\GWX 2016-05-25 20:31 - 2014-04-11 12:32 - 00000000 ____D C:\Program Files (x86)\DVDFab 9 2016-05-22 01:26 - 2011-06-21 21:41 - 00710150 _____ C:\Windows\system32\perfh007.dat 2016-05-22 01:26 - 2011-06-21 21:41 - 00154554 _____ C:\Windows\system32\perfc007.dat 2016-05-22 01:26 - 2009-07-14 07:13 - 01649556 _____ C:\Windows\system32\PerfStringBackup.INI ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2012-04-01 11:40 - 2015-09-29 18:45 - 0007859 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.cat 2012-04-01 11:40 - 2015-09-29 18:45 - 0001167 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.inf 2012-04-01 11:40 - 2015-09-29 18:45 - 0000055 _____ () C:\Users\Lexani\AppData\Roaming\pcouffin.log 2012-03-30 17:59 - 2014-02-06 20:54 - 0001057 _____ () C:\Users\Lexani\AppData\Roaming\vso_ts_preview.xml 2012-02-20 16:53 - 2012-02-20 16:53 - 0000094 _____ () C:\Users\Lexani\AppData\Local\fusioncache.dat 2011-11-19 17:22 - 2015-09-26 00:04 - 0007600 _____ () C:\Users\Lexani\AppData\Local\Resmon.ResmonCfg 2013-01-24 00:19 - 2016-03-16 19:36 - 0000040 ___SH () C:\ProgramData\.zreglib Einige Dateien in TEMP: ==================== C:\Users\Lexani\AppData\Local\Temp\avgnt.exe C:\Users\Lexani\AppData\Local\Temp\libeay32.dll C:\Users\Lexani\AppData\Local\Temp\msvcr120.dll C:\Users\Lexani\AppData\Local\Temp\sqlite3.dll ==================== Bamital & volsnap ================= (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\Windows\system32\winlogon.exe => Datei ist digital signiert C:\Windows\system32\wininit.exe => Datei ist digital signiert C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert C:\Windows\explorer.exe => Datei ist digital signiert C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert C:\Windows\system32\svchost.exe => Datei ist digital signiert C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert C:\Windows\system32\services.exe => Datei ist digital signiert C:\Windows\system32\User32.dll => Datei ist digital signiert C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert C:\Windows\system32\userinit.exe => Datei ist digital signiert C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert C:\Windows\system32\rpcss.dll => Datei ist digital signiert C:\Windows\system32\dnsapi.dll => Datei ist digital signiert C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2016-06-07 08:51 ==================== Ende von FRST.txt ============================ Addition.txt: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-06-2016 durchgeführt von Lexani (2016-06-14 14:14:27) Gestartet von C:\Users\Lexani\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2011-11-19 15:13:40) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-4220443347-1911150466-1867623769-500 - Administrator - Disabled) ASPNET (S-1-5-21-4220443347-1911150466-1867623769-1004 - Limited - Enabled) Gast (S-1-5-21-4220443347-1911150466-1867623769-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-4220443347-1911150466-1867623769-1002 - Limited - Enabled) Lexani (S-1-5-21-4220443347-1911150466-1867623769-1000 - Administrator - Enabled) => C:\Users\Lexani ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated) Adobe Flash Player 21 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.5.9.620 - Adobe Systems, Inc.) AMD Catalyst Install Manager (HKLM\...\{3BF3599D-7F28-C60B-1C5D-82BFD4E5EF33}) (Version: 3.0.838.0 - Advanced Micro Devices, Inc.) AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.5.7.0 - SlySoft) AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden Broadcom 802.11 Wireless LAN Adapter (HKLM\...\Broadcom 802.11 Wireless LAN Adapter) (Version: 5.60.48.61 - Broadcom Corporation) Brother MFL-Pro Suite MFC-J870DW (HKLM-x32\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.6.0.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - Canon Inc.) Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version: 1.3.0 - Canon Inc.) Canon MX920 series Benutzerregistrierung (HKLM-x32\...\Canon MX920 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MX920 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX920_series) (Version: 1.00 - Canon Inc.) Canon MX920 series On-screen Manual (HKLM-x32\...\Canon MX920 series On-screen Manual) (Version: 7.6.0 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 1.1.2 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 1.0.1 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.1.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.1.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.18 - Piriform) CD-LabelPrint (HKLM-x32\...\MediaNavigation.CDLabelPrint) (Version: - ) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Counter-Strike: Source (HKLM-x32\...\{9580813D-94B1-4C28-9426-A441E2BB29A5}) (Version: 1.0.0.0 - Valve) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard) eReg (x32 Version: 1.20.138.34 - Logitech, Inc.) Hidden ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard) Evernote v. 4.2.2 (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 4.2.2.3979 - Evernote Corp.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 51.0.2704.84 - Google Inc.) Google Update Helper (x32 Version: 1.3.21.169 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Hewlett-Packard ACLM.NET v1.1.1.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden HP 3D DriveGuard (HKLM\...\{76785052-9E6A-4403-B06A-929B6BF9D742}) (Version: 4.1.5.1 - Hewlett-Packard Company) HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company) HP Documentation (HKLM-x32\...\{3C5AB11A-2DDB-49E6-9FC0-CFD88A7DDFE4}) (Version: 1.1.0.0 - Hewlett-Packard) HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company) HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{EB58480C-0721-483C-B354-9D35A147999F}) (Version: 2.3.6 - Hewlett-Packard Company) HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company) HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13231.3673 - Hewlett-Packard Company) HP SimplePass 2011 (HKLM-x32\...\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}) (Version: 5.1.0.495 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{CE4551E8-8D09-4126-A39B-B7DF82C5EB83}) (Version: 4.0.110.1 - Hewlett-Packard Company) HP Support Assistant (HKLM-x32\...\{CA43FE4F-9FF2-4AD7-88F0-CC3BAC17B226}) (Version: 6.0.5.4 - Hewlett-Packard Company) IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6329.0 - IDT) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) Java 8 Update 91 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218091F0}) (Version: 8.0.910.14 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LightScribe System Software (HKLM-x32\...\{10427BCB-0742-43BE-81E2-3920972946F5}) (Version: 1.18.23.1 - LightScribe) Logitech Gaming Software 8.76 (HKLM\...\Logitech Gaming Software) (Version: 8.76.155 - Logitech Inc.) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft) Microsoft .NET Framework 4.5.2 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Office Word Viewer 2003 (HKLM-x32\...\{90850407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation) NetSpeedMonitor 2.5.4.0 x64 (HKLM\...\{88F41EE2-949B-4B52-933D-C7F8F67BC1D2}) (Version: 2.5.4.0 - Florian Gilles) NewSoft CD Labeler (HKLM-x32\...\{F8418921-5B66-4732-9CA4-B7112CA241F1}) (Version: 2.00.00 - NewSoft Technology Corporation) Nuance PaperPort 12 (HKLM-x32\...\{869FCC6C-5669-4B0B-827E-2BBAACD88A87}) (Version: 12.1.0006 - Nuance Communications, Inc.) Nuance PDF Viewer Plus (HKLM-x32\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.) PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.74 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden Scansoft PDF Professional (x32 Version: - ) Hidden Steam(TM) (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve) Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH) USB Vibration Joystick (HKLM-x32\...\{57496D70-3C5A-4197-9908-128101444B73}) (Version: 2006.01.20 - ) Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3538.0513 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) WinRAR 4.01 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0634B703-F954-4200-B336-965BC1AA69DD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-12] (Google Inc.) Task: {07203BCA-BEFC-40D5-B967-8C9F1041919B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated) Task: {1A111124-9535-4573-B16A-3BEDED1AF3C8} - System32\Tasks\{2FC18E24-73FC-49F4-A643-49C0399E1D09} => pcalua.exe -a C:\Users\Lexani\Downloads\sp55098.exe -d C:\Users\Lexani\Downloads Task: {20718612-332C-4437-B6DE-0706E9852B57} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-13] (Adobe Systems Incorporated) Task: {32DC6588-2723-4BC6-9367-96682A88AA48} - System32\Tasks\{E00A36EF-025B-44B7-959C-7B5110EF5F31} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE}\ICQ7.exe" -c -runfromtemp -l0x0009 -removeonly Task: {3B0CA477-B0BD-414A-8B39-35B74F870253} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater\HPSFUpdater.exe [2011-06-14] (Hewlett-Packard) Task: {3ECA3385-09D1-4416-AB2B-9CDE1CE49617} - System32\Tasks\{414529B2-929D-4FDE-94F7-5FAF500ECC9B} => C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe Task: {437CFF8F-C7E2-4201-B81C-7DF43FAC5D6C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2012-02-22] (Microsoft) Task: {51585E49-22BF-4568-B77C-04CE891A70A1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Total Care Tune-Up => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPTuneUp.exe [2011-03-22] (Hewlett-Packard Company) Task: {587F6E91-286D-409D-B5BA-F163A42B32D6} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.) Task: {721E83F9-3E2E-456F-9461-F25EDCFBC76B} - System32\Tasks\{92390A59-B268-4A49-85DA-2F362321019C} => pcalua.exe -a C:\Users\Lexani\Desktop\sp55098.exe -d C:\Users\Lexani\Desktop Task: {7D6B9A19-A363-4E73-BED4-70360C8E3303} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-01] (Piriform Ltd) Task: {7DD10F7C-20A6-4FB1-BD52-1EFD8B01C016} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-06-21] (Hewlett-Packard Company) Task: {B24A98F3-3CA8-49A7-AEB8-0D6D113361FB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-12] (Google Inc.) Task: {B38458F7-6B83-4670-A83E-8AAE651A6DC2} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {C2D88E39-CC9C-4627-88BD-74DC2321AFEC} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {C568217F-1F35-4C7C-BBEB-7B0DA4F43974} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFMessenger\HPSFMsgr.exe [2011-06-21] (Hewlett-Packard Company) Task: {DBDC90FB-3166-4943-BEAF-7819343E19AC} - System32\Tasks\{14554DD6-7E99-48F8-96B5-2482E2DEB0AB} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.161/de/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {E2E516EC-FB1B-4EEB-9A1D-BF75E085F4AF} - System32\Tasks\{01A1AD2F-39D3-430D-9365-D5F822A78A6F} => C:\Program Files (x86)\Electronic Arts\Crytek\Crysis\Bin64\Crysis.exe Task: {E431741A-8D24-481F-BD4A-8CE91CD783BE} - System32\Tasks\HPCeeScheduleForLexani => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {ECC83520-F12C-4693-9123-B608E1C66EF7} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.) Task: {F6E891DD-3E49-4571-B47D-EB8A5274E9B1} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {FA67528C-087D-4D3B-B007-3F5FAC4CE951} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-06-21] (Hewlett-Packard Company) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\HPCeeScheduleForLexani.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2011-11-20 19:51 - 2011-05-28 23:05 - 00164864 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2016-06-01 20:15 - 2016-06-01 20:15 - 00061440 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll 2015-07-26 19:08 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-07-26 19:08 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-07-26 19:08 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-07-26 19:08 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-07-26 19:08 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2016-05-11 15:33 - 2016-05-11 15:33 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\61a733954a0da9a5988d596c76b2b891\IsdiInterop.ni.dll 2011-08-18 18:01 - 2011-01-13 03:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Da befinden sich 7867 mehr Seiten. IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\...\123simsen.com -> www.123simsen.com Da befinden sich 7867 mehr Seiten. ==================== Hosts Inhalt: =============================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2009-07-14 04:34 - 2014-11-10 21:02 - 00000840 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ::1 localhost ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-4220443347-1911150466-1867623769-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lexani\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) MSCONFIG\startupfolder: C:^Users^Lexani^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Netzmanager.lnk => C:\Windows\pss\Netzmanager.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: AnyDVD => "C:\Program Files (x86)\SlySoft\AnyDVD\AnyDVD.exe" MSCONFIG\startupreg: BDRegion => c:\Program Files (x86)\Cyberlink\Shared files\brs.exe MSCONFIG\startupreg: BrHelp => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe /AUTORUN MSCONFIG\startupreg: BrMfcWnd => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN MSCONFIG\startupreg: BrStsMon00 => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe /AUTORUN MSCONFIG\startupreg: CanonQuickMenu => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon MSCONFIG\startupreg: ControlCenter3 => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun MSCONFIG\startupreg: ControlCenter4 => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun MSCONFIG\startupreg: DVDFab VDrive => "C:\Program Files (x86)\DVDFab Virtual Drive\vdrive.exe" MSCONFIG\startupreg: Easybits Recovery => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: HP Quick Launch => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe MSCONFIG\startupreg: HPConnectionManager => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe MSCONFIG\startupreg: HPOSD => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: ICQ => "C:\Program Files (x86)\ICQ7.7\ICQ.exe" silent loginmode=4 MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe MSCONFIG\startupreg: IndexSearch => "C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe" MSCONFIG\startupreg: ISUSPM => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe -scheduler MSCONFIG\startupreg: ISUSPM Startup => C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup MSCONFIG\startupreg: ISUSScheduler => "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup MSCONFIG\startupreg: KiesHelper => C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s MSCONFIG\startupreg: KiesPDLR => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: LightScribe Control Panel => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe -hidden MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" MSCONFIG\startupreg: PaperPort PTD => "C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe" MSCONFIG\startupreg: PDF5 Registry Controller => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe MSCONFIG\startupreg: PDFHook => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe MSCONFIG\startupreg: Persistence => C:\Windows\system32\igfxpers.exe MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe MSCONFIG\startupreg: Power2GoExpress => "C:\Program Files (x86)\CyberLink\Power2Go\Power2GoExpress.exe" MSCONFIG\startupreg: RemoteControl10 => "c:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe" MSCONFIG\startupreg: RGSC => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" MSCONFIG\startupreg: SpybotPostWindows10UpgradeReInstall => "C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe" MSCONFIG\startupreg: SpywareTerminatorShield => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe MSCONFIG\startupreg: SpywareTerminatorUpdater => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe MSCONFIG\startupreg: SysTrayApp => C:\Program Files\IDT\WDM\sttray64.exe ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{F18EC597-6CC3-45A4-9205-4271898D6187}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{0D76C90D-D1AE-4FC8-A7DE-C9C4BF8570B3}] => (Allow) LPort=2869 FirewallRules: [{5ED80375-8131-4BBB-8002-8D2ADDBF20E1}] => (Allow) LPort=1900 FirewallRules: [{6F8EA42B-2B34-4AA1-A5F6-B4BB499DAC23}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{17EE661E-BDF5-4D4D-A4F2-406D3984D6BD}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{2D333D60-D41D-4108-B835-ECD07E35CB16}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe FirewallRules: [{02627CCC-E72F-4B77-8F44-530F0A065CDC}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{98FD5377-1850-4ED8-8FDF-D8C36377D299}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{D97CD439-8589-489A-8A0F-8A814A03F0A0}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{9E412C29-F64F-4F82-8244-6CFE3DFF0A23}] => (Allow) C:\Windows\SysWOW64\muzapp.exe FirewallRules: [{DAED3E9D-C92A-47ED-8FB1-AC77AE30640C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{84D79187-D6A8-4716-B854-AC3B409C4174}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{9ABB79EE-1B58-4A3B-AB02-CC57F58D4985}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{211E5F82-F8AE-45D2-B139-C3298B91FC94}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{9A78679E-D3A5-4C8B-90BD-33277C691641}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{B9A14C11-ED05-4188-BC80-BE698ABCEF09}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{E7BA635B-B463-425E-9C1A-243C15A7211C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{EC788BB3-B360-4B43-83CC-6246791C6C02}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{70FBF6DF-CE15-4F3D-ADFD-F53040F6620E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{8F8D879A-F477-4099-8307-7FDE4DEE52CB}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{041968C2-CE8C-42E8-B036-90427140BB0B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{5CF21EE6-3B97-44B7-8A4E-07F00D25DE3E}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [TCP Query User{23828ECA-CAEF-435B-A67F-767EFE7DD546}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{4FA8E15F-8A62-4256-8008-5F9DC4F43DBE}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe FirewallRules: [{75A26AC2-127D-4A71-8787-98819A457935}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{58523F0D-0640-4FF8-8645-FFE0E25B017A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{4BDF3564-3C98-42B0-A276-AB462F9B0CD2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Wiederherstellungspunkte ========================= 05-06-2016 15:12:34 Geplanter Prüfpunkt 07-06-2016 08:26:30 Windows Update 10-06-2016 22:20:10 HPSF Restore Point 10-06-2016 22:58:15 HPSF Restore Point 13-06-2016 00:31:39 Removed Avira Browser Safety 13-06-2016 16:46:29 Removed Avira Browser Safety 14-06-2016 00:29:28 Windows Update 14-06-2016 12:51:13 JRT Pre-Junkware Removal ==================== Fehlerhafte Geräte im Gerätemanager ============= ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (06/14/2016 12:48:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2016 11:57:23 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/14/2016 12:24:04 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 04:51:54 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 04:48:33 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 01:05:22 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 01:06:32 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:48:01 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:46:22 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/13/2016 12:36:42 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Systemfehler: ============= Error: (06/14/2016 12:47:28 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet. Modulpfad: C:\Windows\System32\bcmihvsrv64.dll Error: (06/14/2016 12:47:28 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet. Modulpfad: C:\Windows\System32\bcmihvsrv64.dll Error: (06/14/2016 12:47:25 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT) Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet. Modulpfad: C:\Windows\System32\bcmihvsrv64.dll Error: (06/14/2016 12:47:24 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Windows Search" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: Es wird bereits eine Instanz des Dienstes ausgeführt. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Intel(R) Management and Security Application User Notification Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "HP Support Assistant Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts. Error: (06/14/2016 12:46:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "Spybot-S&D 2 Security Center Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. CodeIntegrity: =================================== Date: 2014-01-08 12:38:04.565 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\igdpmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-01-08 12:38:04.331 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\igdpmd64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz Prozentuale Nutzung des RAM: 27% Installierter physikalischer RAM: 8139.86 MB Verfügbarer physikalischer RAM: 5915.01 MB Summe virtueller Speicher: 16277.9 MB Verfügbarer virtueller Speicher: 13883.75 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:683.28 GB) (Free:565.33 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] Drive d: (RECOVERY) (Fixed) (Total:15.06 GB) (Free:1.61 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)] ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 21053EDB) Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=683.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=15.1 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=103 MB) - (Type=0C) ==================== Ende von Addition.txt ============================ |
14.06.2016, 13:25 | #13 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter FF DefaultSearchEngine: ICQ Search FF Extension: Avira Browser Safety - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\abs@avira.com [2016-06-14] C:\Users\Lexani\AppData\Roaming\27862 C:\Users\Lexani\AppData\Roaming\29429 C:\ProgramData\Avira emptytemp: Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
14.06.2016, 13:31 | #14 |
| PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Fixlog.txt: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:13-06-2016 durchgeführt von Lexani (2016-06-14 14:28:27) Run:1 Gestartet von C:\Users\Lexani\Desktop Geladene Profile: Lexani (Verfügbare Profile: Lexani) Start-Modus: Normal ============================================== fixlist Inhalt: ***************** FF DefaultSearchEngine: ICQ Search FF Extension: Avira Browser Safety - C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\abs@avira.com [2016-06-14] C:\Users\Lexani\AppData\Roaming\27862 C:\Users\Lexani\AppData\Roaming\29429 C:\ProgramData\Avira emptytemp: ***************** Firefox DefaultSearchEngine erfolgreich entfernt C:\Users\Lexani\AppData\Roaming\Mozilla\Firefox\Profiles\uphnurqb.default\Extensions\abs@avira.com => erfolgreich verschoben C:\Users\Lexani\AppData\Roaming\27862 => erfolgreich verschoben C:\Users\Lexani\AppData\Roaming\29429 => erfolgreich verschoben C:\ProgramData\Avira => erfolgreich verschoben EmptyTemp: => 391.9 MB temporäre Dateien entfernt. Das System musste neu gestartet werden. ==== Ende von Fixlog 14:28:32 ==== |
14.06.2016, 13:35 | #15 |
/// Winkelfunktion /// TB-Süch-Tiger™ | PC immer langsamer,Festplatte lädt dauerhaft. Infektion? Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte Malwarebytes Anti-Malware
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
Themen zu PC immer langsamer,Festplatte lädt dauerhaft. Infektion? |
dauerhaft, festplatte, handel, infektion, infektion?, langsamer, lädt, malware, platte, reagiert, tagen, viren |