Trojaner-Board - Windows Systemblokade - runterladen und bezahlen

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Windows Systemblokade - runterladen und bezahlen (https://www.trojaner-board.de/111813-windows-systemblokade-runterladen-bezahlen.html)

Windows Systemblokade - runterladen und bezahlen

Hallo,
vorab sorry, wenn ich etwas falsch gemacht habe. Dies ist mein erster Foreneintrag. Ich hoffe aber, ich mache es richtig....
ich habe mir einen Trojaner eingefangen.
Er sieht so aus aus: Nach dem Hochfahren ist der Bilschirm blokiert und es erscheint mit schwarz-rot-goldener-Falagge ein Schrift: "Achtung. Aus Sicherheitsgründen wurde ihr Windowssystem blockiert." Dann soll ich mir nach dem text für geld ein update kaufen.

Ich habe nun erstmal im den Pc im abgesicherten Modus mit Netzwerkadapter gestartet um hier überhaupt schreiben zu können. Mein Betriebssystem ist Windows 7 Professional 64bit.

Mein Virenscanner McAfee hat nach Vollscan 4 Trojaner gefunden (alle im java-context), genützt hat es nichts. Im geschützten Modus beschwert er sich jetzt immer, dass der Echtzeitscan nicht mehr funktionieren würde. Ist das normal oder wegen des Trojaners?

Ich hoffe ihr könnt mir helfen...

(ich kenne mich mit dem pc einigermaßen aus, benuze ihn alltäglich. Dennoch wäre eine ausführliche Beschreibung hilfreich, glaube ich)

Ich habe gerade Malewarebytes laufen lassen und exploit.drops.4 entfernen lassen.
Nach Neustart und erneutem Aufruf anbei die Log-Datei.
Wie kann ich eigentlich direkt Log-Text reinposten? Vmtl. dumme Frage, habe ich aber im Help-Bereich nicht gefunden.
Nach Durchsicht eines anderen Threads zum Thema, habe ich OTL runtergeladen und den Quickscan (mit den dort angegebenen manuellen Tasks) laufen lassen. Beide Ergebnisse im Anhang.

Was muss ich als nächstes tun?

Danke und Gruß Comka

Hallo,
anbei noch gemäß Checklist die dds-Dateien als Anhang.
Gruß Comka

:hallo:

Mein Name ist Marius und ich werde dir bei deinem Problem helfen.

Eines vorneweg:

Hinweis: Wir können hier nie dafür garantieren, dass wir sämtliche Reste von Schadsoftware gefunden haben. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.

Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass du clean bist.

Eine Bereinigung ist mitunter mit viel Arbeit für dich verbunden.

Bitte arbeite alle Schritte der Reihe nach ab.
Lese die Anleitungen sorgfältig. Solltest du irgendwo nicht weiterkommen, stoppe an diesem Punkt und beschreibe dein Problem hier!
Nur Scans durchführen, zu denen du von einem Helfer aufgefordert wirst.
Bitte kein Crossposting ( posten in mehreren Foren) - wenn du die anweisungen mehrere Helfer ausführst, kann das schwere Probleme nach sich ziehen!.
Installiere oder Deinstalliere während der Bereinigung keine Software (ausser, du wurdest dazu aufgefordert).
Wenn etwas unklar ist: Frage, bevor du etwas "blind" machst!
Poste die Logfiles direkt in deinen Thread. Nicht anhängen, außer, ich fordere dich dazu auf. Erschwert mir nämlich das Auswerten.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Setze die Logfiles in Codetags - diese Funktion findest du oben im Antwortfenster, sieht aus wie ein "#".
Bleibe auch erstmal im abgesicherten Modus.

Schritt 1: defogger

Downloade Dir bitte defogger von jpshortstuff auf Deinem Desktop.

Starte das Tool mit Doppelklick.
Vista und Win7 User mit Rechtsklick "als Administrator starten".
Klicke nun auf den Disable Button um die Treiber gewisser Emulatoren zu deaktivieren.
Wenn der Scan beendet wurde ( Finished ), klicke auf OK.
Defogger fordert gegebenfalls zum Neustart auf. Bestätige dies mit OK.

Sollte Defogger eine Fehlermeldung ausgeben, poste bitte die defogger_disable Log von deinem Desktop.
Klicke den Re-enable Button nicht ohne Anweisung.

Schritt 2: aswMBR

Downloade dir bitte aswMBR.exe und speichere die Datei auf deinem Desktop.

Starte die aswMBR.exe - (aswMBR.exe Anleitung) Vista und Win7 User mit Rechtsklick "als Admininstartor starten"
Das Tool wird dich fragen, ob Du mit der aktuellen Virendefinition von AVAST! dein System scannen willst. Beantworte diese Frage bitte mit Ja. ( Sollte deine Firewall fragen, bitte den Zugriff auf das Internet zulassen ) Der Download der Definitionen kann je nach Verbindung eine Weile dauern.
Klicke auf Scan.
Warte bitte bis Scan finished successfully im DOS Fenster steht.
Drücke auf Save Log und speichere diese auf dem Desktop.

Poste mir die aswMBR.txt in deiner nächsten Antwort. Wichtig: Drücke keinesfalls einen der Fix Buttons ohne Anweisung Hinweis: Sollte der Scan Button ausgeblendet sein, schließe das Tool und starte es erneut. Sollte es erneut nicht klappen teile mir das bitte mit.

Schritt 3: Scan mit TDSS-Killer

Lese bitte folgende Anweisungen genau. Wir wollen hier noch nichts "fixen" sondern nur einen Scan Report sehen. Downloade dir bitte TDSSKiller.exe und speichere diese Datei auf dem Desktop

Starte die TDSSKiller.exe
Drücke Start Scan
Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und speichere das Logfile. TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern ( Meistens C:\ ) Als Beispiel: C:\TDSSKiller.<version_date_time>log.txt

Poste den Inhalt bitte hier in deinen Thread.

Hallo Marius,
Schritt 1 erledigt. Defogger erfolgreich ausgeführt
Schritt 2: aswMBR.exe downgeloadet und ausgeführt wie von Dir beschrieben.
Das Tool läuft auch ne Weile, stürzt dann aber bei
C:\windows\assembly\GAC_MSIL\Microsoft.visualstudio.Tools.Applications....
ab ("Es ist ein Problem aufgetreten. Anwendung muss beendet werden").
Dadurch ist kein Log möglich.
Was soll ich tun? Und noch ne "bloede" Frage. Lt. Anleitung aswMBR.exe soll ich ja den Virenscanner/Firewall ausschalten. Ic hhabe daher die einzelnen Module von McAffee deaktiviert. Reicht das? Und soll ich dann den Rechner vom Netz nehmen?

Ich mach jetzt mal mit Schritt 3 weiter.

So, jetzt habe ich Schritt 3 ausgeführt. Den Log vom TDSKiller findest Du als Anhang.
Ach ja: ein Verdacht: bei mir gibt es plötzlich eine Skype-Anwendung unter programme. Ich nurtze aber Skype gar nicht. Hilft das?

Gruß Karsten

Code:

21:09:43.0162 1388        TDSS rootkit removing tool 2.7.20.0 Mar  9 2012 17:10:43

21:09:45.0174 1388        ============================================================

21:09:45.0174 1388        Current date / time: 2012/03/19 21:09:45.0174

21:09:45.0174 1388        SystemInfo:

21:09:45.0174 1388        

21:09:45.0174 1388        OS Version: 6.1.7601 ServicePack: 1.0

21:09:45.0174 1388        Product type: Workstation

21:09:45.0174 1388        ComputerName: KARSTEN-PC

21:09:45.0174 1388        UserName: Karsten

21:09:45.0174 1388        Windows directory: C:\Windows

21:09:45.0174 1388        System windows directory: C:\Windows

21:09:45.0174 1388        Running under WOW64

21:09:45.0174 1388        Processor architecture: Intel x64

21:09:45.0174 1388        Number of processors: 8

21:09:45.0174 1388        Page size: 0x1000

21:09:45.0174 1388        Boot type: Safe boot with network

21:09:45.0174 1388        ============================================================

21:09:45.0658 1388        Drive \Device\Harddisk0\DR0 - Size: 0x15D50F66000 (1397.27 Gb), SectorSize: 0x200, Cylinders: 0x2C881, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040

21:09:45.0673 1388        \Device\Harddisk0\DR0:

21:09:45.0673 1388        MBR used

21:09:45.0673 1388        \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x4B000, BlocksNum 0x187F000

21:09:45.0673 1388        \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x18CA000, BlocksNum 0xAD1BD000

21:09:45.0704 1388        Initialize success

21:09:45.0704 1388        ============================================================

21:09:57.0514 2412        ============================================================

21:09:57.0514 2412        Scan started

21:09:57.0514 2412        Mode: Manual; 

21:09:57.0514 2412        ============================================================

21:09:57.0950 2412        1394ohci        (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys

21:09:57.0950 2412        1394ohci - ok

21:09:57.0997 2412        ACPI            (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys

21:09:57.0997 2412        ACPI - ok

21:09:58.0044 2412        AcpiPmi         (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys

21:09:58.0044 2412        AcpiPmi - ok

21:09:58.0106 2412        adp94xx         (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys

21:09:58.0106 2412        adp94xx - ok

21:09:58.0122 2412        adpahci         (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys

21:09:58.0122 2412        adpahci - ok

21:09:58.0122 2412        adpu320         (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys

21:09:58.0138 2412        adpu320 - ok

21:09:58.0216 2412        AFD             (1c7857b62de5994a75b054a9fd4c3825) C:\Windows\system32\drivers\afd.sys

21:09:58.0216 2412        AFD - ok

21:09:58.0247 2412        agp440          (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys

21:09:58.0247 2412        agp440 - ok

21:09:58.0309 2412        aliide          (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys

21:09:58.0309 2412        aliide - ok

21:09:58.0372 2412        amdide          (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys

21:09:58.0372 2412        amdide - ok

21:09:58.0418 2412        AmdK8           (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys

21:09:58.0418 2412        AmdK8 - ok

21:09:58.0512 2412        amdkmdag        (9673319070166e26660eba4edf316fa2) C:\Windows\system32\DRIVERS\atipmdag.sys

21:09:58.0606 2412        amdkmdag - ok

21:09:58.0652 2412        amdkmdap        (430d06d63952848e64cbbf23b5c1479e) C:\Windows\system32\DRIVERS\atikmpag.sys

21:09:58.0652 2412        amdkmdap - ok

21:09:58.0684 2412        AmdPPM          (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys

21:09:58.0684 2412        AmdPPM - ok

21:09:58.0746 2412        amdsata         (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys

21:09:58.0746 2412        amdsata - ok

21:09:58.0777 2412        amdsbs          (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys

21:09:58.0777 2412        amdsbs - ok

21:09:58.0793 2412        amdxata         (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys

21:09:58.0793 2412        amdxata - ok

21:09:58.0840 2412        androidusb      (4de0d5d747a73797c95a97dcce5018b5) C:\Windows\system32\Drivers\ssadadb.sys

21:09:58.0840 2412        androidusb - ok

21:09:58.0886 2412        AppID           (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys

21:09:58.0886 2412        AppID - ok

21:09:58.0933 2412        arc             (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys

21:09:58.0933 2412        arc - ok

21:09:58.0933 2412        arcsas          (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys

21:09:58.0933 2412        arcsas - ok

21:09:58.0980 2412        AsyncMac        (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys

21:09:58.0980 2412        AsyncMac - ok

21:09:59.0042 2412        atapi           (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys

21:09:59.0042 2412        atapi - ok

21:09:59.0074 2412        AtiHdmiService  (77c149e6d702737b2e372dee166faef8) C:\Windows\system32\drivers\AtiHdmi.sys

21:09:59.0074 2412        AtiHdmiService - ok

21:09:59.0120 2412        atksgt          (b4bde3f758a34658a37dfed3d9783cd8) C:\Windows\system32\DRIVERS\atksgt.sys

21:09:59.0120 2412        atksgt - ok

21:09:59.0167 2412        b06bdrv         (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys

21:09:59.0167 2412        b06bdrv - ok

21:09:59.0183 2412        b57nd60a        (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys

21:09:59.0183 2412        b57nd60a - ok

21:09:59.0214 2412        Beep            (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys

21:09:59.0214 2412        Beep - ok

21:09:59.0245 2412        blbdrive        (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys

21:09:59.0245 2412        blbdrive - ok

21:09:59.0292 2412        bowser          (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys

21:09:59.0292 2412        bowser - ok

21:09:59.0308 2412        BrFiltLo        (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys

21:09:59.0308 2412        BrFiltLo - ok

21:09:59.0339 2412        BrFiltUp        (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys

21:09:59.0339 2412        BrFiltUp - ok

21:09:59.0354 2412        Brserid         (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys

21:09:59.0354 2412        Brserid - ok

21:09:59.0370 2412        BrSerWdm        (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys

21:09:59.0370 2412        BrSerWdm - ok

21:09:59.0386 2412        BrUsbMdm        (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys

21:09:59.0386 2412        BrUsbMdm - ok

21:09:59.0401 2412        BrUsbSer        (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys

21:09:59.0401 2412        BrUsbSer - ok

21:09:59.0432 2412        BTHMODEM        (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys

21:09:59.0432 2412        BTHMODEM - ok

21:09:59.0448 2412        cdfs            (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys

21:09:59.0448 2412        cdfs - ok

21:09:59.0495 2412        cdrom           (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys

21:09:59.0495 2412        cdrom - ok

21:09:59.0526 2412        cfwids          (ed0263b2eb24f0f4e3898036fa1d28a1) C:\Windows\system32\drivers\cfwids.sys

21:09:59.0526 2412        cfwids - ok

21:09:59.0542 2412        circlass        (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys

21:09:59.0542 2412        circlass - ok

21:09:59.0573 2412        CLFS            (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys

21:09:59.0573 2412        CLFS - ok

21:09:59.0588 2412        CmBatt          (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys

21:09:59.0588 2412        CmBatt - ok

21:09:59.0635 2412        cmdide          (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys

21:09:59.0635 2412        cmdide - ok

21:09:59.0698 2412        CNG             (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys

21:09:59.0698 2412        CNG - ok

21:09:59.0713 2412        Compbatt        (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys

21:09:59.0713 2412        Compbatt - ok

21:09:59.0760 2412        CompositeBus    (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys

21:09:59.0760 2412        CompositeBus - ok

21:09:59.0776 2412        crcdisk         (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys

21:09:59.0776 2412        crcdisk - ok

21:09:59.0838 2412        CSC             (54da3dfd29ed9f1619b6f53f3ce55e49) C:\Windows\system32\drivers\csc.sys

21:09:59.0838 2412        CSC - ok

21:09:59.0885 2412        DfsC            (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys

21:09:59.0885 2412        DfsC - ok

21:09:59.0947 2412        dgderdrv        (def365f0f6e017888c4b869d3ba4b8e0) C:\Windows\system32\drivers\dgderdrv.sys

21:09:59.0947 2412        dgderdrv - ok

21:09:59.0963 2412        discache        (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys

21:09:59.0963 2412        discache - ok

21:09:59.0994 2412        Disk            (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys

21:09:59.0994 2412        Disk - ok

21:10:00.0041 2412        drmkaud         (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys

21:10:00.0041 2412        drmkaud - ok

21:10:00.0088 2412        dsNcAdpt        (3eef0b3489edbf725564e17c77cabafd) C:\Windows\system32\DRIVERS\dsNcAdpt.sys

21:10:00.0088 2412        dsNcAdpt - ok

21:10:00.0181 2412        DXGKrnl         (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys

21:10:00.0197 2412        DXGKrnl - ok

21:10:00.0259 2412        ebdrv           (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys

21:10:00.0306 2412        ebdrv - ok

21:10:00.0368 2412        elxstor         (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys

21:10:00.0368 2412        elxstor - ok

21:10:00.0400 2412        ErrDev          (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys

21:10:00.0400 2412        ErrDev - ok

21:10:00.0415 2412        exfat           (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys

21:10:00.0415 2412        exfat - ok

21:10:00.0446 2412        fastfat         (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys

21:10:00.0446 2412        fastfat - ok

21:10:00.0462 2412        fdc             (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys

21:10:00.0462 2412        fdc - ok

21:10:00.0478 2412        FileInfo        (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys

21:10:00.0478 2412        FileInfo - ok

21:10:00.0493 2412        Filetrace       (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys

21:10:00.0493 2412        Filetrace - ok

21:10:00.0509 2412        flpydisk        (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys

21:10:00.0509 2412        flpydisk - ok

21:10:00.0540 2412        FltMgr          (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys

21:10:00.0540 2412        FltMgr - ok

21:10:00.0571 2412        FsDepends       (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys

21:10:00.0571 2412        FsDepends - ok

21:10:00.0587 2412        Fs_Rec          (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys

21:10:00.0587 2412        Fs_Rec - ok

21:10:00.0634 2412        fvevol          (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys

21:10:00.0634 2412        fvevol - ok

21:10:00.0665 2412        gagp30kx        (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys

21:10:00.0665 2412        gagp30kx - ok

21:10:00.0727 2412        GEARAspiWDM     (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys

21:10:00.0727 2412        GEARAspiWDM - ok

21:10:00.0743 2412        hcw85cir        (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys

21:10:00.0743 2412        hcw85cir - ok

21:10:00.0805 2412        HDAudBus        (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys

21:10:00.0805 2412        HDAudBus - ok

21:10:00.0836 2412        HECIx64         (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys

21:10:00.0836 2412        HECIx64 - ok

21:10:00.0836 2412        HidBatt         (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys

21:10:00.0836 2412        HidBatt - ok

21:10:00.0852 2412        HidBth          (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys

21:10:00.0852 2412        HidBth - ok

21:10:00.0868 2412        HidIr           (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys

21:10:00.0868 2412        HidIr - ok

21:10:00.0899 2412        HidUsb          (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys

21:10:00.0899 2412        HidUsb - ok

21:10:00.0946 2412        HpSAMD          (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys

21:10:00.0946 2412        HpSAMD - ok

21:10:00.0992 2412        HTTP            (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys

21:10:01.0008 2412        HTTP - ok

21:10:01.0055 2412        hwpolicy        (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys

21:10:01.0055 2412        hwpolicy - ok

21:10:01.0102 2412        i8042prt        (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys

21:10:01.0102 2412        i8042prt - ok

21:10:01.0133 2412        iaStor          (631fa8935163b01fc0c02966cb3adb92) C:\Windows\system32\DRIVERS\iaStor.sys

21:10:01.0133 2412        iaStor - ok

21:10:01.0211 2412        iaStorV         (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys

21:10:01.0226 2412        iaStorV - ok

21:10:01.0242 2412        iirsp           (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys

21:10:01.0242 2412        iirsp - ok

21:10:01.0273 2412        Impcd           (dd587a55390ed2295bce6d36ad567da9) C:\Windows\system32\DRIVERS\Impcd.sys

21:10:01.0273 2412        Impcd - ok

21:10:01.0336 2412        IntcAzAudAddService (ee64207f2f5c20bfe5f73db2566c4601) C:\Windows\system32\drivers\RTKVHD64.sys

21:10:01.0367 2412        IntcAzAudAddService - ok

21:10:01.0382 2412        IntcDAud        (58cf58dee26c909bd6f977b61d246295) C:\Windows\system32\DRIVERS\IntcDAud.sys

21:10:01.0382 2412        IntcDAud - ok

21:10:01.0414 2412        intelide        (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys

21:10:01.0414 2412        intelide - ok

21:10:01.0445 2412        intelppm        (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys

21:10:01.0445 2412        intelppm - ok

21:10:01.0492 2412        IpFilterDriver  (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys

21:10:01.0492 2412        IpFilterDriver - ok

21:10:01.0507 2412        IPMIDRV         (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys

21:10:01.0507 2412        IPMIDRV - ok

21:10:01.0523 2412        IPNAT           (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys

21:10:01.0523 2412        IPNAT - ok

21:10:01.0554 2412        IRENUM          (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys

21:10:01.0554 2412        IRENUM - ok

21:10:01.0585 2412        isapnp          (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys

21:10:01.0585 2412        isapnp - ok

21:10:01.0616 2412        iScsiPrt        (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys

21:10:01.0616 2412        iScsiPrt - ok

21:10:01.0632 2412        k57nd60a        (9d7ea8c7215d8d4ae7be110eee61085d) C:\Windows\system32\DRIVERS\k57nd60a.sys

21:10:01.0632 2412        k57nd60a - ok

21:10:01.0679 2412        kbdclass        (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys

21:10:01.0679 2412        kbdclass - ok

21:10:01.0710 2412        kbdhid          (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys

21:10:01.0710 2412        kbdhid - ok

21:10:01.0757 2412        KSecDD          (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys

21:10:01.0757 2412        KSecDD - ok

21:10:01.0804 2412        KSecPkg         (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys

21:10:01.0804 2412        KSecPkg - ok

21:10:01.0819 2412        ksthunk         (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys

21:10:01.0819 2412        ksthunk - ok

21:10:01.0866 2412        lirsgt          (955982bf4421b77722196552b62e8dc2) C:\Windows\system32\DRIVERS\lirsgt.sys

21:10:01.0882 2412        lirsgt - ok

21:10:01.0897 2412        lltdio          (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys

21:10:01.0897 2412        lltdio - ok

21:10:01.0928 2412        LSI_FC          (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys

21:10:01.0928 2412        LSI_FC - ok

21:10:01.0928 2412        LSI_SAS         (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys

21:10:01.0928 2412        LSI_SAS - ok

21:10:01.0944 2412        LSI_SAS2        (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys

21:10:01.0960 2412        LSI_SAS2 - ok

21:10:01.0960 2412        LSI_SCSI        (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys

21:10:01.0960 2412        LSI_SCSI - ok

21:10:01.0975 2412        luafv           (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys

21:10:01.0975 2412        luafv - ok

21:10:02.0038 2412        MBAMProtector   (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys

21:10:02.0038 2412        MBAMProtector - ok

21:10:02.0100 2412        megasas         (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys

21:10:02.0100 2412        megasas - ok

21:10:02.0131 2412        MegaSR          (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys

21:10:02.0131 2412        MegaSR - ok

21:10:02.0178 2412        mfeapfk         (ef3acfb7e3f82d5f7cde9ef5f0a4e2e2) C:\Windows\system32\drivers\mfeapfk.sys

21:10:02.0178 2412        mfeapfk - ok

21:10:02.0209 2412        mfeavfk         (e7a60bdb4365b561d896019b82fb7dd0) C:\Windows\system32\drivers\mfeavfk.sys

21:10:02.0209 2412        mfeavfk - ok

21:10:02.0256 2412        mfefirek        (670dffe55e2f9ab99d9169c428bcece9) C:\Windows\system32\drivers\mfefirek.sys

21:10:02.0256 2412        mfefirek - ok

21:10:02.0287 2412        mfehidk         (1892616b7f9291fd77c3fa0a5811fe9f) C:\Windows\system32\drivers\mfehidk.sys

21:10:02.0303 2412        mfehidk - ok

21:10:02.0318 2412        mfenlfk         (1721261c77f6e7a9e0cb51b7d9f31b60) C:\Windows\system32\DRIVERS\mfenlfk.sys

21:10:02.0318 2412        mfenlfk - ok

21:10:02.0350 2412        mferkdet        (65776bd8029e409935b90de30bf99526) C:\Windows\system32\drivers\mferkdet.sys

21:10:02.0350 2412        mferkdet - ok

21:10:02.0381 2412        mfewfpk         (4f17d8b85b903d96ef7033bb6ef50516) C:\Windows\system32\drivers\mfewfpk.sys

21:10:02.0381 2412        mfewfpk - ok

21:10:02.0396 2412        Modem           (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys

21:10:02.0396 2412        Modem - ok

21:10:02.0428 2412        monitor         (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys

21:10:02.0428 2412        monitor - ok

21:10:02.0490 2412        mouclass        (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys

21:10:02.0490 2412        mouclass - ok

21:10:02.0521 2412        mouhid          (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys

21:10:02.0521 2412        mouhid - ok

21:10:02.0568 2412        mountmgr        (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys

21:10:02.0568 2412        mountmgr - ok

21:10:02.0615 2412        mpio            (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys

21:10:02.0615 2412        mpio - ok

21:10:02.0630 2412        mpsdrv          (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys

21:10:02.0630 2412        mpsdrv - ok

21:10:02.0677 2412        MRxDAV          (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys

21:10:02.0677 2412        MRxDAV - ok

21:10:02.0724 2412        mrxsmb          (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys

21:10:02.0724 2412        mrxsmb - ok

21:10:02.0755 2412        mrxsmb10        (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys

21:10:02.0771 2412        mrxsmb10 - ok

21:10:02.0786 2412        mrxsmb20        (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys

21:10:02.0786 2412        mrxsmb20 - ok

21:10:02.0833 2412        msahci          (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys

21:10:02.0833 2412        msahci - ok

21:10:02.0849 2412        msdsm           (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys

21:10:02.0849 2412        msdsm - ok

21:10:02.0880 2412        Msfs            (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys

21:10:02.0880 2412        Msfs - ok

21:10:02.0896 2412        mshidkmdf       (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys

21:10:02.0896 2412        mshidkmdf - ok

21:10:02.0927 2412        msisadrv        (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys

21:10:02.0927 2412        msisadrv - ok

21:10:02.0989 2412        MSKSSRV         (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys

21:10:02.0989 2412        MSKSSRV - ok

21:10:03.0005 2412        MSPCLOCK        (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys

21:10:03.0005 2412        MSPCLOCK - ok

21:10:03.0020 2412        MSPQM           (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys

21:10:03.0020 2412        MSPQM - ok

21:10:03.0067 2412        MsRPC           (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys

21:10:03.0067 2412        MsRPC - ok

21:10:03.0114 2412        mssmbios        (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys

21:10:03.0114 2412        mssmbios - ok

21:10:03.0130 2412        MSTEE           (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys

21:10:03.0130 2412        MSTEE - ok

21:10:03.0145 2412        MTConfig        (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys

21:10:03.0145 2412        MTConfig - ok

21:10:03.0192 2412        Mup             (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys

21:10:03.0192 2412        Mup - ok

21:10:03.0223 2412        NativeWifiP     (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys

21:10:03.0223 2412        NativeWifiP - ok

21:10:03.0286 2412        NDIS            (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys

21:10:03.0286 2412        NDIS - ok

21:10:03.0301 2412        NdisCap         (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys

21:10:03.0317 2412        NdisCap - ok

21:10:03.0348 2412        NdisTapi        (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys

21:10:03.0348 2412        NdisTapi - ok

21:10:03.0395 2412        Ndisuio         (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys

21:10:03.0395 2412        Ndisuio - ok

21:10:03.0442 2412        NdisWan         (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys

21:10:03.0442 2412        NdisWan - ok

21:10:03.0488 2412        NDProxy         (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys

21:10:03.0488 2412        NDProxy - ok

21:10:03.0535 2412        NetBIOS         (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys

21:10:03.0535 2412        NetBIOS - ok

21:10:03.0551 2412        NetBT           (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys

21:10:03.0551 2412        NetBT - ok

21:10:03.0613 2412        nfrd960         (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys

21:10:03.0613 2412        nfrd960 - ok

21:10:03.0722 2412        nmwcd           (985a3f046dfcd58e26d3a95283bb8f1d) C:\Windows\system32\drivers\ccdcmbx64.sys

21:10:03.0722 2412        nmwcd - ok

21:10:03.0754 2412        nmwcdc          (5eb41a9656388dc21119ccc33f0ee22a) C:\Windows\system32\drivers\ccdcmbox64.sys

21:10:03.0754 2412        nmwcdc - ok

21:10:03.0785 2412        Npfs            (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys

21:10:03.0785 2412        Npfs - ok

21:10:03.0800 2412        nsiproxy        (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys

21:10:03.0800 2412        nsiproxy - ok

21:10:03.0863 2412        Ntfs            (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys

21:10:03.0878 2412        Ntfs - ok

21:10:03.0894 2412        Null            (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys

21:10:03.0894 2412        Null - ok

21:10:03.0941 2412        nvraid          (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys

21:10:03.0941 2412        nvraid - ok

21:10:03.0972 2412        nvstor          (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys

21:10:03.0972 2412        nvstor - ok

21:10:04.0003 2412        nv_agp          (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys

21:10:04.0003 2412        nv_agp - ok

21:10:04.0019 2412        ohci1394        (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys

21:10:04.0019 2412        ohci1394 - ok

21:10:04.0066 2412        Parport         (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys

21:10:04.0066 2412        Parport - ok

21:10:04.0097 2412        partmgr         (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys

21:10:04.0097 2412        partmgr - ok

21:10:04.0159 2412        pccsmcfd        (bc0018c2d29f655188a0ed3fa94fdb24) C:\Windows\system32\DRIVERS\pccsmcfdx64.sys

21:10:04.0159 2412        pccsmcfd - ok

21:10:04.0206 2412        PCDSRVC{1E208CE0-FB7451FF-06020101}_0 (7317a0b550f7ac0223b7070897670476) c:\program files\dell support center\pcdsrvc_x64.pkms

21:10:04.0268 2412        PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - ok

21:10:04.0300 2412        pci             (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys

21:10:04.0300 2412        pci - ok

21:10:04.0331 2412        pciide          (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys

21:10:04.0331 2412        pciide - ok

21:10:04.0346 2412        pcmcia          (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys

21:10:04.0346 2412        pcmcia - ok

21:10:04.0362 2412        pcw             (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys

21:10:04.0362 2412        pcw - ok

21:10:04.0409 2412        PEAUTH          (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys

21:10:04.0409 2412        PEAUTH - ok

21:10:04.0471 2412        PptpMiniport    (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys

21:10:04.0471 2412        PptpMiniport - ok

21:10:04.0487 2412        Processor       (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys

21:10:04.0487 2412        Processor - ok

21:10:04.0518 2412        Psched          (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys

21:10:04.0518 2412        Psched - ok

21:10:04.0565 2412        PxHlpa64        (87b04878a6d59d6c79251dc960c674c1) C:\Windows\system32\Drivers\PxHlpa64.sys

21:10:04.0565 2412        PxHlpa64 - ok

21:10:04.0596 2412        ql2300          (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys

21:10:04.0627 2412        ql2300 - ok

21:10:04.0643 2412        ql40xx          (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys

21:10:04.0643 2412        ql40xx - ok

21:10:04.0674 2412        QWAVEdrv        (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys

21:10:04.0674 2412        QWAVEdrv - ok

21:10:04.0690 2412        RasAcd          (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys

21:10:04.0690 2412        RasAcd - ok

21:10:04.0721 2412        RasAgileVpn     (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys

21:10:04.0721 2412        RasAgileVpn - ok

21:10:04.0752 2412        Rasl2tp         (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys

21:10:04.0752 2412        Rasl2tp - ok

21:10:04.0768 2412        RasPppoe        (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys

21:10:04.0768 2412        RasPppoe - ok

21:10:04.0783 2412        RasSstp         (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys

21:10:04.0783 2412        RasSstp - ok

21:10:04.0846 2412        rdbss           (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys

21:10:04.0846 2412        rdbss - ok

21:10:04.0861 2412        rdpbus          (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys

21:10:04.0861 2412        rdpbus - ok

21:10:04.0877 2412        RDPCDD          (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys

21:10:04.0877 2412        RDPCDD - ok

21:10:04.0924 2412        RDPDR           (1b6163c503398b23ff8b939c67747683) C:\Windows\system32\drivers\rdpdr.sys

21:10:04.0924 2412        RDPDR - ok

21:10:04.0955 2412        RDPENCDD        (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys

21:10:04.0955 2412        RDPENCDD - ok

21:10:04.0970 2412        RDPREFMP        (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys

21:10:04.0970 2412        RDPREFMP - ok

21:10:05.0017 2412        RdpVideoMiniport (70cba1a0c98600a2aa1863479b35cb90) C:\Windows\system32\drivers\rdpvideominiport.sys

21:10:05.0017 2412        RdpVideoMiniport - ok

21:10:05.0064 2412        RDPWD           (6d76e6433574b058adcb0c50df834492) C:\Windows\system32\drivers\RDPWD.sys

21:10:05.0064 2412        RDPWD - ok

21:10:05.0095 2412        rdyboost        (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys

21:10:05.0095 2412        rdyboost - ok

21:10:05.0126 2412        rspndr          (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys

21:10:05.0126 2412        rspndr - ok

21:10:05.0158 2412        s3cap           (e60c0a09f997826c7627b244195ab581) C:\Windows\system32\drivers\vms3cap.sys

21:10:05.0158 2412        s3cap - ok

21:10:05.0204 2412        sbp2port        (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys

21:10:05.0204 2412        sbp2port - ok

21:10:05.0251 2412        scfilter        (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys

21:10:05.0251 2412        scfilter - ok

21:10:05.0282 2412        secdrv          (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys

21:10:05.0282 2412        secdrv - ok

21:10:05.0314 2412        Serenum         (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys

21:10:05.0314 2412        Serenum - ok

21:10:05.0329 2412        Serial          (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys

21:10:05.0329 2412        Serial - ok

21:10:05.0360 2412        sermouse        (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys

21:10:05.0360 2412        sermouse - ok

21:10:05.0423 2412        sffdisk         (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys

21:10:05.0423 2412        sffdisk - ok

21:10:05.0438 2412        sffp_mmc        (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys

21:10:05.0438 2412        sffp_mmc - ok

21:10:05.0454 2412        sffp_sd         (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys

21:10:05.0454 2412        sffp_sd - ok

21:10:05.0454 2412        sfloppy         (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys

21:10:05.0454 2412        sfloppy - ok

21:10:05.0485 2412        SiSRaid2        (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys

21:10:05.0485 2412        SiSRaid2 - ok

21:10:05.0501 2412        SiSRaid4        (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys

21:10:05.0516 2412        SiSRaid4 - ok

21:10:05.0516 2412        Smb             (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys

21:10:05.0516 2412        Smb - ok

21:10:05.0532 2412        spldr           (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys

21:10:05.0532 2412        spldr - ok

21:10:05.0594 2412        srv             (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys

21:10:05.0594 2412        srv - ok

21:10:05.0657 2412        srv2            (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys

21:10:05.0657 2412        srv2 - ok

21:10:05.0672 2412        srvnet          (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys

21:10:05.0672 2412        srvnet - ok

21:10:05.0704 2412        ssadbus         (c1212ba5ab6783191899d194672a5b5c) C:\Windows\system32\DRIVERS\ssadbus.sys

21:10:05.0704 2412        ssadbus - ok

21:10:05.0735 2412        ssadmdfl        (eb270596d4117c4306442f36ef2c290e) C:\Windows\system32\DRIVERS\ssadmdfl.sys

21:10:05.0735 2412        ssadmdfl - ok

21:10:05.0750 2412        ssadmdm         (e29027dfaec246299d1cf88627c5cbe6) C:\Windows\system32\DRIVERS\ssadmdm.sys

21:10:05.0750 2412        ssadmdm - ok

21:10:05.0797 2412        ssadserd        (aabc1907cac4e2c99d849deaa5e77c9b) C:\Windows\system32\DRIVERS\ssadserd.sys

21:10:05.0797 2412        ssadserd - ok

21:10:05.0828 2412        sscdbus         (f4f1e1ff6986fe8914525af751ea3eac) C:\Windows\system32\DRIVERS\sscdbus.sys

21:10:05.0828 2412        sscdbus - ok

21:10:05.0860 2412        sscdmdfl        (5447690d2cfe1bde1be3a5a5a3e2f796) C:\Windows\system32\DRIVERS\sscdmdfl.sys

21:10:05.0860 2412        sscdmdfl - ok

21:10:05.0891 2412        sscdmdm         (bfda292053aeb76a0c1d63b2279d5138) C:\Windows\system32\DRIVERS\sscdmdm.sys

21:10:05.0891 2412        sscdmdm - ok

21:10:05.0906 2412        stexstor        (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys

21:10:05.0906 2412        stexstor - ok

21:10:05.0969 2412        storflt         (7785dc213270d2fc066538daf94087e7) C:\Windows\system32\drivers\vmstorfl.sys

21:10:05.0969 2412        storflt - ok

21:10:06.0016 2412        storvsc         (d34e4943d5ac096c8edeebfd80d76e23) C:\Windows\system32\drivers\storvsc.sys

21:10:06.0016 2412        storvsc - ok

21:10:06.0062 2412        swenum          (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys

21:10:06.0062 2412        swenum - ok

21:10:06.0078 2412        Synth3dVsc - ok

21:10:06.0156 2412        Tcpip           (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys

21:10:06.0172 2412        Tcpip - ok

21:10:06.0218 2412        TCPIP6          (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys

21:10:06.0234 2412        TCPIP6 - ok

21:10:06.0265 2412        tcpipreg        (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys

21:10:06.0265 2412        tcpipreg - ok

21:10:06.0296 2412        TDPIPE          (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys

21:10:06.0296 2412        TDPIPE - ok

21:10:06.0343 2412        TDTCP           (51c5eceb1cdee2468a1748be550cfbc8) C:\Windows\system32\drivers\tdtcp.sys

21:10:06.0343 2412        TDTCP - ok

21:10:06.0374 2412        tdx             (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys

21:10:06.0374 2412        tdx - ok

21:10:06.0421 2412        TermDD          (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys

21:10:06.0421 2412        TermDD - ok

21:10:06.0484 2412        TFsExDisk       (ce4b6956e4e12492715a53076e58761f) C:\Windows\System32\Drivers\TFsExDisk.sys

21:10:06.0484 2412        TFsExDisk - ok

21:10:06.0530 2412        tssecsrv        (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys

21:10:06.0530 2412        tssecsrv - ok

21:10:06.0562 2412        TsUsbFlt        (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys

21:10:06.0562 2412        TsUsbFlt - ok

21:10:06.0577 2412        tsusbhub - ok

21:10:06.0608 2412        tunnel          (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys

21:10:06.0608 2412        tunnel - ok

21:10:06.0640 2412        uagp35          (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys

21:10:06.0640 2412        uagp35 - ok

21:10:06.0686 2412        udfs            (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys

21:10:06.0686 2412        udfs - ok

21:10:06.0733 2412        uliagpkx        (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys

21:10:06.0733 2412        uliagpkx - ok

21:10:06.0780 2412        umbus           (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys

21:10:06.0780 2412        umbus - ok

21:10:06.0796 2412        UmPass          (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys

21:10:06.0796 2412        UmPass - ok

21:10:06.0842 2412        USBAAPL64       (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys

21:10:06.0842 2412        USBAAPL64 - ok

21:10:06.0874 2412        usbccgp         (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys

21:10:06.0874 2412        usbccgp - ok

21:10:06.0920 2412        usbcir          (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys

21:10:06.0920 2412        usbcir - ok

21:10:06.0967 2412        usbehci         (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys

21:10:06.0967 2412        usbehci - ok

21:10:06.0998 2412        usbhub          (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys

21:10:06.0998 2412        usbhub - ok

21:10:07.0030 2412        usbohci         (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys

21:10:07.0030 2412        usbohci - ok

21:10:07.0076 2412        usbprint        (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys

21:10:07.0076 2412        usbprint - ok

21:10:07.0108 2412        usbscan         (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys

21:10:07.0108 2412        usbscan - ok

21:10:07.0123 2412        usbser          (4acee387fa8fd39f83564fcd2fc234f2) C:\Windows\system32\drivers\usbser.sys

21:10:07.0123 2412        usbser - ok

21:10:07.0154 2412        USBSTOR         (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS

21:10:07.0154 2412        USBSTOR - ok

21:10:07.0170 2412        usbuhci         (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys

21:10:07.0170 2412        usbuhci - ok

21:10:07.0201 2412        vdrvroot        (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys

21:10:07.0201 2412        vdrvroot - ok

21:10:07.0217 2412        vga             (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys

21:10:07.0217 2412        vga - ok

21:10:07.0248 2412        VgaSave         (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys

21:10:07.0248 2412        VgaSave - ok

21:10:07.0264 2412        VGPU - ok

21:10:07.0310 2412        vhdmp           (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys

21:10:07.0310 2412        vhdmp - ok

21:10:07.0357 2412        viaide          (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys

21:10:07.0357 2412        viaide - ok

21:10:07.0373 2412        vmbus           (86ea3e79ae350fea5331a1303054005f) C:\Windows\system32\drivers\vmbus.sys

21:10:07.0373 2412        vmbus - ok

21:10:07.0404 2412        VMBusHID        (7de90b48f210d29649380545db45a187) C:\Windows\system32\drivers\VMBusHID.sys

21:10:07.0404 2412        VMBusHID - ok

21:10:07.0435 2412        volmgr          (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys

21:10:07.0435 2412        volmgr - ok

21:10:07.0482 2412        volmgrx         (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys

21:10:07.0482 2412        volmgrx - ok

21:10:07.0513 2412        volsnap         (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys

21:10:07.0513 2412        volsnap - ok

21:10:07.0544 2412        vpcbus          (b4a73ca4ef9a02b9738cea9ad5fe5917) C:\Windows\system32\DRIVERS\vpchbus.sys

21:10:07.0544 2412        vpcbus - ok

21:10:07.0607 2412        vpcnfltr        (e675fb2b48c54f09895482e2253b289c) C:\Windows\system32\DRIVERS\vpcnfltr.sys

21:10:07.0607 2412        vpcnfltr - ok

21:10:07.0622 2412        vpcusb          (5fb42082b0d19a0268705f1dd343df20) C:\Windows\system32\DRIVERS\vpcusb.sys

21:10:07.0622 2412        vpcusb - ok

21:10:07.0685 2412        vpcvmm          (207b6539799cc1c112661a9b620dd233) C:\Windows\system32\drivers\vpcvmm.sys

21:10:07.0685 2412        vpcvmm - ok

21:10:07.0732 2412        vsmraid         (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys

21:10:07.0732 2412        vsmraid - ok

21:10:07.0763 2412        vwifibus        (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\System32\drivers\vwifibus.sys

21:10:07.0763 2412        vwifibus - ok

21:10:07.0778 2412        WacomPen        (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys

21:10:07.0778 2412        WacomPen - ok

21:10:07.0794 2412        WANARP          (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys

21:10:07.0794 2412        WANARP - ok

21:10:07.0794 2412        Wanarpv6        (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys

21:10:07.0794 2412        Wanarpv6 - ok

21:10:07.0825 2412        Wd              (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys

21:10:07.0825 2412        Wd - ok

21:10:07.0856 2412        Wdf01000        (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys

21:10:07.0856 2412        Wdf01000 - ok

21:10:07.0903 2412        WfpLwf          (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys

21:10:07.0903 2412        WfpLwf - ok

21:10:07.0934 2412        WimFltr         (b14ef15bd757fa488f9c970eee9c0d35) C:\Windows\system32\DRIVERS\wimfltr.sys

21:10:07.0934 2412        WimFltr - ok

21:10:07.0950 2412        WIMMount        (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys

21:10:07.0950 2412        WIMMount - ok

21:10:07.0981 2412        WinUsb          (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys

21:10:07.0981 2412        WinUsb - ok

21:10:08.0044 2412        WmiAcpi         (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys

21:10:08.0044 2412        WmiAcpi - ok

21:10:08.0075 2412        ws2ifsl         (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys

21:10:08.0075 2412        ws2ifsl - ok

21:10:08.0106 2412        WudfPf          (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys

21:10:08.0106 2412        WudfPf - ok

21:10:08.0137 2412        WUDFRd          (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys

21:10:08.0137 2412        WUDFRd - ok

21:10:08.0153 2412        MBR (0x1B8)     (a36c5e4f47e84449ff07ed3517b43a31) \Device\Harddisk0\DR0

21:10:08.0215 2412        \Device\Harddisk0\DR0 - ok

21:10:08.0215 2412        Boot (0x1200)   (aebabcca042f08c65694b3c3f2124cd4) \Device\Harddisk0\DR0\Partition0

21:10:08.0215 2412        \Device\Harddisk0\DR0\Partition0 - ok

21:10:08.0231 2412        Boot (0x1200)   (2f5d3753ffd0242028b14160e6f08789) \Device\Harddisk0\DR0\Partition1

21:10:08.0231 2412        \Device\Harddisk0\DR0\Partition1 - ok

21:10:08.0231 2412        ============================================================

21:10:08.0231 2412        Scan finished

21:10:08.0231 2412        ============================================================

21:10:08.0246 3052        Detected object count: 0

21:10:08.0246 3052        Actual detected object count: 0

21:10:30.0757 0796        Deinitialize success

Combofix

Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich ziehen und eine Bereinigung der Infektion noch erschweren.

Downloade dir bitte Combofix von einem dieser Downloadspiegel

Link 1
Link 2

WICHTIG - Speichere Combofix auf deinem Desktop

Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Zitat:

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

hallo Marius,
combofix meldet mcafee antivirus und antispyware als aktiv.
ich finde keinen Weg, diese auszuschalten, auch nicht via taskmanager oder systemsteurung. im Security Center habe ich alles mögliche deaktiviert. hilft aber nicht. google hat auch nicht weitergeholfen.
hast du einen Tipp?
danke und Gruß karsten

Wenn es nicht geht, dann ignoriere diese Meldung und fahre erst einmal fort.

Hallo Marius,
Combofix ist durchgelaufen. Anbei der log.
Gruß Karsten

Code:

ComboFix 12-03-20.01 - Karsten 20.03.2012  22:24:14.1.8 - x64 NETWORK

Microsoft Windows 7 Ultimate   6.1.7601.1.1252.49.1031.18.8151.7126 [GMT 1:00]

ausgeführt von:: c:\users\Karsten\Desktop\ComboFix.exe

AV: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}

FW: McAfee  Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}

SP: McAfee  Anti-Virus und Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Neuer Wiederherstellungspunkt wurde erstellt

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Karsten\AppData\Local\Skype\SkypePM.exe

c:\windows\SysWow64\muzapp.exe

c:\windows\SysWow64\system32

c:\windows\SysWow64\system32\3DAudio.ax

c:\windows\SysWow64\system32\avrt.dll

c:\windows\SysWow64\system32\cis-2.4.dll

c:\windows\SysWow64\system32\issacapi_bs-2.3.dll

c:\windows\SysWow64\system32\issacapi_pe-2.3.dll

c:\windows\SysWow64\system32\issacapi_se-2.3.dll

c:\windows\SysWow64\system32\MACXMLProto.dll

c:\windows\SysWow64\system32\MaDRM.dll

c:\windows\SysWow64\system32\MaJGUILib.dll

c:\windows\SysWow64\system32\MAMACExtract.dll

c:\windows\SysWow64\system32\MASetupCleaner.exe

c:\windows\SysWow64\system32\MaXMLProto.dll

c:\windows\SysWow64\system32\mfplat.dll

c:\windows\SysWow64\system32\MK_Lyric.dll

c:\windows\SysWow64\system32\MSCLib.dll

c:\windows\SysWow64\system32\MSFLib.dll

c:\windows\SysWow64\system32\MSLUR71.dll

c:\windows\SysWow64\system32\msvcp60.dll

c:\windows\SysWow64\system32\MTTELECHIP.dll

c:\windows\SysWow64\system32\MTXSYNCICON.dll

c:\windows\SysWow64\system32\muzaf1.dll

c:\windows\SysWow64\system32\muzapp.dll

c:\windows\SysWow64\system32\muzapp.exe

c:\windows\SysWow64\system32\muzdecode.ax

c:\windows\SysWow64\system32\muzeffect.ax

c:\windows\SysWow64\system32\muzmp4sp.ax

c:\windows\SysWow64\system32\muzmpgsp.ax

c:\windows\SysWow64\system32\muzoggsp.ax

c:\windows\SysWow64\system32\muzwmts.dll

c:\windows\SysWow64\system32\psapi.dll

.

.

(((((((((((((((((((((((   Dateien erstellt von 2012-02-20 bis 2012-03-20  ))))))))))))))))))))))))))))))

.

.

2012-03-20 21:29 . 2012-03-20 21:29        --------        d-----w-        c:\users\Kirsten\AppData\Local\temp

2012-03-20 21:29 . 2012-03-20 21:29        --------        d-----w-        c:\users\Minister\AppData\Local\temp

2012-03-20 21:29 . 2012-03-20 21:29        --------        d-----w-        c:\users\Jan\AppData\Local\temp

2012-03-20 21:29 . 2012-03-20 21:29        --------        d-----w-        c:\users\Default\AppData\Local\temp

2012-03-20 21:29 . 2012-03-20 21:29        --------        d-----w-        c:\users\Arne\AppData\Local\temp

2012-03-18 22:31 . 2012-03-18 22:31        --------        d-----w-        c:\users\Karsten\AppData\Roaming\Malwarebytes

2012-03-18 22:31 . 2012-03-18 22:31        --------        d-----w-        c:\programdata\Malwarebytes

2012-03-18 22:31 . 2012-03-18 22:31        --------        d-----w-        c:\program files (x86)\Malwarebytes' Anti-Malware

2012-03-18 22:31 . 2011-12-10 14:24        23152        ----a-w-        c:\windows\system32\drivers\mbam.sys

2012-03-18 09:38 . 2012-03-18 09:38        --------        d-----w-        c:\users\Jan\AppData\Local\Microsoft Help

2012-03-13 20:53 . 2011-11-19 15:20        5559152        ----a-w-        c:\windows\system32\ntoskrnl.exe

2012-03-13 20:53 . 2011-11-19 14:50        3968368        ----a-w-        c:\windows\SysWow64\ntkrnlpa.exe

2012-03-13 20:53 . 2011-11-19 14:50        3913584        ----a-w-        c:\windows\SysWow64\ntoskrnl.exe

2012-03-13 19:37 . 2012-02-03 04:34        3145728        ----a-w-        c:\windows\system32\win32k.sys

2012-03-13 19:37 . 2012-02-10 06:36        1544192        ----a-w-        c:\windows\system32\DWrite.dll

2012-03-13 19:37 . 2012-02-10 05:38        1077248        ----a-w-        c:\windows\SysWow64\DWrite.dll

2012-03-13 19:34 . 2012-01-25 06:33        9216        ----a-w-        c:\windows\system32\rdrmemptylst.exe

2012-03-13 19:34 . 2012-01-25 06:38        77312        ----a-w-        c:\windows\system32\rdpwsx.dll

2012-03-13 19:34 . 2012-01-25 06:38        149504        ----a-w-        c:\windows\system32\rdpcorekmts.dll

2012-03-13 19:33 . 2012-02-17 06:38        1112064        ----a-w-        c:\windows\system32\rdpcorets.dll

2012-03-13 19:33 . 2012-02-17 06:38        1031680        ----a-w-        c:\windows\system32\rdpcore.dll

2012-03-13 19:33 . 2012-02-17 05:34        826880        ----a-w-        c:\windows\SysWow64\rdpcore.dll

2012-03-13 19:33 . 2012-02-17 04:58        210944        ----a-w-        c:\windows\system32\drivers\rdpwd.sys

2012-03-13 19:33 . 2012-02-17 04:57        23552        ----a-w-        c:\windows\system32\drivers\tdtcp.sys

2012-03-08 17:54 . 2012-03-08 17:54        --------        d-----w-        c:\users\Arne\AppData\Local\Microsoft Help

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-02-25 06:35 . 2011-05-17 18:22        414368        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2012-02-01 19:51 . 2012-02-01 19:51        0        ---ha-w-        c:\users\Karsten\AppData\Local\BIT6B7F.tmp

2012-01-04 10:44 . 2012-02-15 19:16        509952        ----a-w-        c:\windows\system32\ntshrui.dll

2012-01-04 08:58 . 2012-02-15 19:16        442880        ----a-w-        c:\windows\SysWow64\ntshrui.dll

2011-12-30 06:26 . 2012-02-15 19:16        515584        ----a-w-        c:\windows\system32\timedate.cpl

2011-12-30 05:27 . 2012-02-15 19:16        478720        ----a-w-        c:\windows\SysWow64\timedate.cpl

2011-12-28 03:59 . 2012-02-15 19:16        498688        ----a-w-        c:\windows\system32\drivers\afd.sys

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2011-01-06 39408]

"NokiaOviSuite2"="c:\program files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" [2011-01-31 703360]

"KiesHelper"="c:\program files (x86)\Samsung\Kies\KiesHelper.exe" [2011-09-29 929680]

"KiesTrayAgent"="c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe" [2011-09-29 3508112]

"KiesPDLR"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-09-29 20880]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"NokiaMServer"="c:\program files (x86)\Common Files\Nokia\MPlatform\NokiaMServer" [X]

"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]

"ShwiconXP9106"="c:\program files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe" [2009-07-17 237568]

"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-01-13 98304]

"Dell DataSafe Online"="c:\program files (x86)\Dell DataSafe Online\DataSafeOnline.exe" [2010-02-09 1807680]

"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe" [2009-12-01 963584]

"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]

"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1675160]

"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]

"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]

"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-27 75048]

"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-09-04 240112]

"FreePDF Assistant"="c:\program files (x86)\FreePDF_XP\fpassist.exe" [2010-06-17 370176]

"Desktop Disc Tool"="c:\program files (x86)\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe" [2010-11-01 522736]

"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2011-11-17 273528]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-11-01 59240]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]

"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-01-16 421736]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"="c:\program files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe" [2010-07-21 165184]

"Malwarebytes Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]

.

c:\users\Arne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]

OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2011-9-2 227712]

.

c:\users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]

.

c:\users\Minister\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]

.

c:\users\Karsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]

.

c:\users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dell Dock First Run.lnk - c:\program files\Dell\DellDock\DellDock.exe [2010-5-28 1324384]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]

"aux"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

Security Packages        REG_MULTI_SZ           kerberos msv1_0 schannel wdigest tspkg pku2u livessp

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]

R2 CLKMSVC10_9EC60124;CyberLink Product - 2010/12/29 17:23;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-26 236016]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

R2 DockLoginService;Dock Login Service;c:\program files\Dell\DellDock\DockLogin.exe [2009-06-09 155648]

R2 gupdate;Google Update Service (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-06 135664]

R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]

R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]

R2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]

R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-09-04 219632]

R2 SftService;SoftThinks Agent Service;c:\program files (x86)\Dell DataSafe Local Backup\sftservice.EXE [2010-08-20 689472]

R3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atipmdag.sys [x]

R3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [x]

R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys [x]

R3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]

R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys [x]

R3 gupdatem;Google Update-Dienst (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-06 135664]

R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]

R3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]

R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]

R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

R3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0;PCDSRVC{1E208CE0-FB7451FF-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2012-02-01 25072]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]

R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-09-04 1116656]

R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys [x]

R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys [x]

R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys [x]

R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys [2010-09-06 16392]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x]

R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]

S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]

S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x]

S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]

S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-10-18 208536]

S2 mfevtp;McAfee Validation Trust Protection Service;c:\program files\Common Files\McAfee\SystemCore\mfevtps.exe [2011-10-18 161168]

S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]

S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x]

S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]

.

.

--- Andere Dienste/Treiber im Speicher ---

.

*NewlyCreated* - WS2IFSL

.

Inhalt des "geplante Tasks" Ordners

.

2012-03-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-06 20:19]

.

2012-03-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-06 20:19]

.

2012-03-09 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-02-07 23:32]

.

2012-03-18 c:\windows\Tasks\SystemToolsDailyTest.job

- c:\program files\Dell Support Center\uaclauncher.exe [2012-02-07 23:32]

.

.

--------- x86-64 -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-10-07 8158240]

"RunDLLEntry_THXCfg"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568]

"RunDLLEntry_EptMon"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"LoadAppInit_DLLs"=0x0

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://www.google.de/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105

IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.0.1

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

Toolbar-Locked - (no file)

Wow6432Node-HKCU-Run-SkypePM - c:\users\Karsten\AppData\Local\Skype\SkypePM.exe

Wow6432Node-HKLM-RunOnce-Malwarebytes Anti-Malware (cleanup) - c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll

Toolbar-Locked - (no file)

AddRemove-TextCrawler - c:\program files (x86)\TextCrawler2\uninst.exe

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020101}_0]

"ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2012-03-20  22:35:39 - PC wurde neu gestartet

ComboFix-quarantined-files.txt  2012-03-20 21:35

.

Vor Suchlauf: 19 Verzeichnis(se), 1.254.542.282.752 Bytes frei

Nach Suchlauf: 23 Verzeichnis(se), 1.258.589.589.504 Bytes frei

.

- - End Of File - - AC27F45A7C2E0D1DB2AF1795D46D854D

Sieht ganz gut aus - kontrollieren wir alles nochmal! :)

Schritt 1: MBAM vollständig

Downloade Dir bitte Malwarebytes

Installiere das Programm in den vorgegebenen Pfad.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Starte Malwarebytes, klicke auf Aktualisierung --> Suche nach Aktualisierung
Wenn das Update beendet wurde, aktiviere Vollständigen Scan durchführen und drücke auf Scannen. (Hinweis: Alle Festplatten anhaken!)
Wenn der Scan beendet ist, klicke auf Ergebnisse anzeigen.
Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
Poste das Logfile, welches sich in Notepad öffnet, hier in den Thread.
Nachträglich kannst du den Bericht unter "Log Dateien" finden.

Schritt 2: ESET

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hallo Marius,
hier das Ergebnis von Schritt 1. Malewarebytes hat nahc 1,5h nichts gefunden (auch nicht auf meiner USB-Backup-Festplatte).
Ich mache weiter mit Schritt 2.
Gruß Karsten

Code:

Malwarebytes Anti-Malware (Test) 1.60.1.1000

www.malwarebytes.org
 

Datenbank Version: v2012.03.21.06
 

Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus/Netzwerkfähig)

Internet Explorer 9.0.8112.16421

Karsten :: KARSTEN-PC [Administrator]
 

Schutz: Deaktiviert
 

21.03.2012 20:46:47

mbam-log-2012-03-21 (20-46-47).txt
 

Art des Suchlaufs: Vollständiger Suchlauf

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 703244

Laufzeit: 1 Stunde(n), 21 Minute(n), 43 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)
 

(Ende)

Hallo Marius,
der Schritt 2 ESET hat leider nicht funktioniert. ESET kann sich nicht updaten. Meldung " Can not update - proxy configured?" erscheint.
Ich habe auf Extras-internetoptionen unter Verbindungen-LAN-Einstellungen die Option "automatisch Einstellungen übernehmen" angeschaltet. Hat aber auch nichts genutzt. Was soll ich tun?
Normales Internet tut ja. Sonst könnte ich diese Nachricht nicht schreiben. Ich bin bei KabelBW via kabel-Modem und WLAN-Router. Firewall und Virenscanner waren soweit möglich ausgeschaltet. Wobei der Echtzeitscan von McAfee sich nicht anschalten laesst. Liegt das evtl. auch an den Proxy-Einstellungnen oder am geschützten Modus?
Vielen Dank schon mal.
Gruß Karsten

Schritt 1: McAfee

Öffne über die Systemsteuerung das Menü Programme und Funktionen.
Suche nach McAfee, markiere es und versuche eine Reparaturinstallation.

und anstatt ESET:

F-Secure Onlinescanner

Bitte während der Online-Scans evtl. vorhandene externe Festplatten einschalten! Bitte während der Scans alle Hintergrundwächter (Anti-Virus-Programm, Firewall, Skriptblocking und ähnliches) abstellen und nicht vergessen, alles hinterher wieder einzuschalten.

Anmerkung für Vista und Win7 User: Bitte den Browser unbedingt als Administrator starten.

Deaktiviere dein Antivirenprogramm für die Dauer dieses Scans.
Rufe den F-Secure Onlinescanner durch Klick auf diesen Link auf.

Hinweis: Die Seite prüft, welchen Browser du installiert hast und ob deine Java-Version aktuell ist. Gegebenenfalls wirst du aufgefordert, dein Java zu aktualisieren. Führe dies durch.
Wähle als Sprache "Deutsch" und akzeptiere die Lizenzvereinbarungen, indem du das Häkchen in der dafür vorgesehenen Box darunter setzt.
Klicke auf "Prüfung durchführen".

Hinweis: Eventuell wird dir nun eine Java-Sicherheitsabfrage (Sicherheitsinformationen) angezeigt. Bestätige diese unbedingt mit "ausführen".
Es wird sich ein neues Fenster öffnen.
Wähle Mein Scan und klicke auf Optionen anzeigen.
In dem sich öffnenden Fenster, wähle unter Dateitypen für Scan auswählen die Option Alle Dateitypen und hake darunter In komprimierten Dateien suchen an.
Klicke unten auf OK.
Du befindest dich nun wieder im Hauptmenü des Onlinescanners. Klicke auf Start. F-Secure Online Scanner wird nun einige Dateien herunterladen und dein System scannen.
Wenn der Scan abgeschlossen ist, klicke auf Bericht anzeigen.
Poste den Bericht hier in deinem Thread.

Hallo Marius,
Schritt 1 McAfee: hier gibt es unter Systemsteuerung bei McAfee keine Auswahl "Reparieren" nur "aendern/entfernen".
McAfee ist komisch. Ich kann kurzzeitig den Echtzeitscan anschalten, doch dann shcaltet er sich gleich wieder ab. Ich versuch mal ne Neuinstallation.

Schritt 2: F-Secure ist durchgelaufen. Er hat 11xMalware gefunden und teilweise beseitigt. Der "ziemlich lange" Bericht anbei.

Wie gehts weiter? Gruß Karsten

Code:

11 Malware gefunden

TrackingCookie.Research-int (Spyware) 

System (Desinfiziert) 

Suspicious:W32/Malware!Gemini (Spyware) 

System (Desinfiziert) 

TrackingCookie.WebTrendsLive (Spyware) 

System (Desinfiziert) 

TrackingCookie.Xiti (Spyware) 

System (Desinfiziert) 

TrackingCookie.Liveperson (Spyware) 

System (Desinfiziert) 

TrackingCookie.Tradedoubler (Spyware) 

System (Desinfiziert) 

TrackingCookie.Atwola (Spyware) 

System (Desinfiziert) 

Suspicious:W32/Malware!Gemini (Virus) 

C:\Qoobox\Quarantine\C\Users\Karsten\AppData\Local\Skype\SkypePM.exe.vir (Nicht bereinigt & Übermittelt) 

Suspicious:W32/Malware!Gemini (Virus) 

C:\Program Files (x86)\GIMPshop\lib\gimp\2.0\plug-ins\ifscompose.exe (Nicht bereinigt & Übermittelt) 

Suspicious:W32/Malware!Gemini (Virus) 

C:\Exact Audio Copy\CheckLog.exe (Nicht bereinigt) 

Suspicious:W32/Malware!Gemini (Virus) 

C:\Exact Audio Copy\EAC.exe (Nicht bereinigt) 
 

--------------------------------------------------------------------------------
 

Statistik

Gescannt: 

Dateien: 570435 

System: 6710 

Nicht gescannt: 766 

Aktionen: 

Desinfiziert: 7 

Umbenannt: 0 

Gelöscht: 0 

Nicht bereinigt: 4 

Übermittelt: 2 

Nicht gescannte Dateien:

C:\HIBERFIL.SYS 

C:\PAGEFILE.SYS 

C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT 

C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG1 

C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG2 

C:\WINDOWS\SYSTEM32\CONFIG\SAM 

C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG1 

C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG2 

C:\WINDOWS\SYSTEM32\CONFIG\SECURITY 

C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG1 

C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG2 

C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE 

C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG1 

C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG2 

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM 

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG1 

C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG2 

C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\DEFAULT 

C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SAM 

C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SECURITY 

C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SOFTWARE 

C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SYSTEM 

C:\WINDOWS\SYSTEM32\CATROOT2\EDB.LOG 

C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB 

C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB 

C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT 

C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG1 

C:\WINDOWS\SERVICEPROFILES\NETWORKSERVICE\NTUSER.DAT.LOG2 

C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT 

C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG1 

C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\NTUSER.DAT.LOG2 

C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\LASTALIVE0.DAT 

C:\WINDOWS\SERVICEPROFILES\LOCALSERVICE\APPDATA\LOCAL\LASTALIVE1.DAT 

C:\USERS\KARSTEN\NTUSER.DAT 

C:\USERS\KARSTEN\NTUSER.DAT.LOG1 

C:\USERS\KARSTEN\NTUSER.DAT.LOG2 

C:\Users\Karsten\Downloads\01_Im_Discofieber.part2.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\01_Im_Discofieber.part3.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\01_Im_Discofieber.part1.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part1.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part2.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part3.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part4.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part5.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part6.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\ibngfg1adxx.part7.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part1.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part2.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part3.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part4.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part6.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part5.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part8.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\pagxdxc.part7.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part2.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part3.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part1.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part4.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part5.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part6.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part7.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\papg2xdxe.part8.rar\dummy file name of encryted archive 

C:\Users\Karsten\Downloads\PES2009\BuLi-Patch_v3.0.part2.rar\dummy file name of broken archive 

C:\Users\Karsten\Documents\02_Karsten\Privat\The.Andromeda.Strain.1971.DVDRip.XviD.MP3.part2.rar\dummy file name of broken archive 

C:\Users\Karsten\Documents\02_Karsten\Privat\The.Andromeda.Strain.1971.DVDRip.XviD.MP3.part3.rar\dummy file name of broken archive 

C:\Users\Karsten\Documents\02_Karsten\Privat\The.Andromeda.Strain.1971.DVDRip.XviD.MP3.part4.rar\dummy file name of broken archive 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\FML143D.TMP 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\~DF56F16CAD4C81A331.TMP 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\~DF7CF8122152E85655.TMP 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\~DFBFC6B10672233ECE.TMP 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\HSPERFDATA_KARSTEN\1592 

C:\USERS\KARSTEN\APPDATA\LOCAL\TEMP\HSPERFDATA_KARSTEN\2100 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG1 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG2 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\INTERNET EXPLORER\RECOVERY\HIGH\ACTIVE\RECOVERYSTORE.{714C4157-7451-11E1-AF5D-842B2BB16F25}.DAT 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\INTERNET EXPLORER\RECOVERY\HIGH\ACTIVE\{714C4158-7451-11E1-AF5D-842B2BB16F25}.DAT 

C:\USERS\KARSTEN\APPDATA\LOCAL\MICROSOFT\INTERNET EXPLORER\RECOVERY\HIGH\ACTIVE\{DB0E53CB-7452-11E1-AF5D-842B2BB16F25}.DAT 

C:\SYSTEM VOLUME INFORMATION\{42985346-6879-11E1-888A-842B2BB16F25}{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\SYSTEM VOLUME INFORMATION\{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\SYSTEM VOLUME INFORMATION\{31376A46-5EBB-11E1-8868-842B2BB16F25}{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\SYSTEM VOLUME INFORMATION\{A7169ED8-6D42-11E1-AE7A-842B2BB16F25}{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\SYSTEM VOLUME INFORMATION\{CBE500E6-6EDD-11E1-9DEC-842B2BB16F25}{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\SYSTEM VOLUME INFORMATION\{D2F8F0AF-5805-11E1-9DAB-842B2BB16F25}{3808876B-C176-4E48-B7AE-04046E6CC752} 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\019F358D1CB97604D24CAA5F8E178267_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\01BECF111294124A33841A0ED854A873_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\026091D8E1C6C02D299BEE09395A2258_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03797175AC62E4E7BED2B9C7D2060940_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03BD57A81D0E3196C349B9ECD6BF0A98_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03BFC071B05401EAA0F26431A58543FC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0212CE86AAC32999C108C7593A356395_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03C900F217D95A56F6E33DC2FB5520CF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\03D04E9AAC93669DF01C9B1A68B23E96_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\042CF65F70EED3DCDE135B38E7940DA3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0650FDD6F70E4D7B91B5AED5A3E77B97_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0667651E5106D39A2ECF9EFEEA7D06FC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\074E0DB27365294E45780C7B6EA6D849_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0797DFCD2DA827D7FE2F605F8DE640C1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\07D75763CA0BA632D1E1A6BAE4280A1B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\04659FAB2F383BA9A7CD7F6B757EF14D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0809D65ECF37577DC89AC08CC9425E88_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\08576DCCEA71F0B2CDB1CA219741BFA2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\08704EFB77C993EBF0371C1645572BB7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\087E5EBA13CF14229F5E124B7DD75593_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0959E93E69DB0C7CEDCD7C629F0A87F5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\09A3726C218D471231D7D89270137909_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0A5B67D4211EFAB3D0C9F02B8CAD6594_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0B093DEB439CFE6754F5B60B88A2A75C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0BFEA16B5803A5B9B58630CEE5BFC5D5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0C284691879BC16DD9ACB7DA40D160A4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0C2D97CC1761CF7356DA67996570E5EB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0C4B7C5155EE12A717942C5799ADEAF2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0C991EEF3F3C2138E1F3AC0BAD840611_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0C4EE52982CB48AE511879D5C3015E67_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0E584C5CB30E6223BAF13910C3C5A134_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0F41EA383166A6DA1115C122D6A70567_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0F728D5AAAF0DD465B6DF435C12F53DA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0FBD57C52788FBE1F7319DFB5BCB956F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0FEA9B811D1CC446ECA68DB951C51CE4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\115EB08B7AEE16AAD1531396276B0932_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\11609D3D2138B1034E25559D107DE5F5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\11F2CC723CC71C2FE7192ECBC798E6AE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\124BC00C6C55B56C97D6A0CE3BA74B45_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\12E6EA2AADAA6BBED9BF5AB3BCBBB793_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1301EAE5DC35E218ADBEB97D27101196_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\13A9B5508895FBAE710E032ACEB36C6C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1175CD791BF60A16B24593065F80BCFA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\147B12038132C73FEF9FAA4C81DF765C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\14A2367DB72D2FB62B5C066E443E2DAD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\14AA6D006C232E547FE4EF2FC0EA6764_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\14C07031FA7A3B98BF7F8A526115288B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\14D321074749648AB59551D03A3FDFFB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\157FD7C4BB45B10D106FA33981B9CB5C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\13CF5FFA7AC8C5BD8FCEBB3A494EFCF8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\131B8ACF82E36652F355FE27DC6BE129_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\16C9AC46CA4AE4616568169776B671E3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\162FD2750964DD2F1505CA1CDA9153C2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\15A09725F0E41080AD0E36F0E41C70FC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\17D92B37139B8A25C31B94671C399FE3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1735433F30F1D72F63648DC207C36AEA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\17E638A89117227943CAA6D1BB27F8A2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\182B67895207E73F43969EDB859F2940_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\18E537367CEA2A413BC22D952E13051F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1967A337A974A4B45A0EAABA1DE96AD3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A347779EC1C009244B59CD9B831C362_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A590253DBD5C86F832B05B51952D07D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A693C282D8706CB4D5B5AD8C5CC6B84_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A756015862AC3E0009B64FBC404DF5E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A99718A2C353A5B4C83EE4E844B8DD6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B43BD71D1BCC827E8A174B1A4673D1D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B847A51C7D0212FA1CA0E2749AED91F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B865D32900A7CC0B4DF8A95AB4121EA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1B8E2F87730E1EF7432E1DAD71016501_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1BBFF6720A70F271265AEFF576F1E91C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1C3FACB6BEF30CC925B970603B04578E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1C969B10D21E742F5F84199C78BCB2F9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1C9FCA908CF8A30F90BE460B2F538F94_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1CA877EFEC76EF0FE72A26E255CFF132_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1D6ADF61A3AB492E59A090BC300C54CD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1DF28633064F0D6A8644720453DA1AC5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1F0C83E543E1AD5A7E856C642F591AEB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1F353CCF70F741E75F93F7B5FF922E15_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1F98E5109DF7BAAD2548B2BAC0C8C868_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1A6B50C84B9C78257529D7259505122D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1FA3BBB8B80AACDD8B1BAFC27212E6DB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2009B8074B9D61493C4602C4D1018693_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\20F2163EB461250C961D39E93A965712_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\20C4E634EE265B6F79182E574E03C3EE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\210618D27AA9970C07A64865B59C1D68_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\21F50D83EEE3EE6205DB4A83EB0B1331_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\222708E45E3F75846551CD0603D3370F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2287299797198DC0406FA00AD73FE5AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\23516D53DFFF883818F40483B0FD4D37_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\24C3358E3022F6FCC040AC934A9FEA2A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\24DC8E8A7AFE3045A61E09DBE25BDFA7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2543F6DB09577A57112A6B62B57D2F7A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\25FD5CEF09C73A5202CD58A9EE65B495_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\26152E866953B4E1D19CADE7BBF765C8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\26C99CEF363CD369E225350FE0F212CD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\270158D07BE81E03923955EB427E8064_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\285736775A6FE64636957D5549B309CB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\285C2C25E05E200B98112252723256E4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\28888B1E74FD347F8626540E7BDCE61B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\28A44611570AC1C1F1932CF3ECE89564_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\27A876334416E7619CA5AE1B118F05B7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2936FBCBDD6A0EB81670A5E619DC8CBB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\28AF2D1BD5F67598A0A3DE08F387C059_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\298C8E8F5803C5D700E1988DE0189153_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\261A91817EBEC11670D908271046F531_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2A14F763337BCFB8A5DBD82C27D6D346_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2A1AD694F165E9691E1D2015664FB5AD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2A69C3ECF5EC9A05E493189597AFED43_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2C0C425585F24FF849E55F93A6EB7838_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2C47A0BD74D47C3D4A0DC5AD7A328B1E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2CE77391B06714F8C04A765AC9610AF7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2D000F523BE6E91965E8271D3D03B68E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2D83B19B106B660F2BF9D68572B7F2AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2D9DEB7C0D2D4D14C043F5413A40F66D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2E6984ABDFBA1739FC22EFF934105B6D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2EC31FE0AECEAA28A3A1C61E40212B09_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\29F4B418A4D2AA27522B91F3D981773D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2FBE772B5C6D1B380126AB70CA4C9923_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2FE92EA790FD2B6B4FB5A7E16DDD9C53_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\30FACDC16C9B8CE2C2443F116ED13513_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\313D7B61A25C09FD2A523B743E6F2B94_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\315769DDB3F1EA0193D3FFCB40B56CD7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\31A916642F4272DDB57868F9090A0BF4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3262D8BC3C41A6344538672CC0E06057_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\326B60DA4FE735A42441B930F668478C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3302AB1378DC59A2E680012F87C46C18_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\32FEF9E5C1153A96F9765E6628ADC6F1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\337665C3DD95558BDBE6AB27C728AA20_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\333247EBA599BE4A9D6FC389F9DD47FE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3398BCB9ABB05861628E8EFC5BC63338_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\342E0FDDE93AD0FCC543F369FB3CFB1A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\34337F9E8417AEF21B38AF5C6245E39E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\343E63CBCF53EF8482BEC2D48428BB79_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\346D625F4B6383E26351DCEECAFD0882_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\34F3B019F6A207E485420C21AD53A4DF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35158C06ADB50CD87249D63B562ABE0B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3589A4AC05F825CF734BBAA8D6ECACF0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\358CF04753CFD472D9443EA85E480841_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35E6543C6698767B53B76D4E934EB263_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\36712D9F4E3B7A73C941A6D934169D00_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\36EF473CA5C017CBE65CFE4CFF336E17_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\36F909E77538C530BFB3B1C8B5861CF1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3705C18C365340F07774719FC7966874_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\373E9A87C1BECE8A33BDC399C6878F2E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\374287080FC5DB3BDB2E394DA6FD2479_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\37E8ED97BCF0695020FD2843BFD1EF10_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\38188E23623E106FBC23A25DA3C7F98E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\38E937146DF5A62A2849FCA57E2437E2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\39EB32DB3E95EE8A9DAE70B9564166AD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\39EE59E4A0838EB1CF627EE0265D65ED_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\344E018ACE36CED46AA8374A7D953FEF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3BF0FDC50FE4913F606709C58D3CE900_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3C0278726458B75537D8641F33077443_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3C55C5203BCC90D45887860D1BBE110A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3CBAC6DD45A8C5E1BC25C3713409ACCC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3D7B5D181E2699038376B2E860D5C3CD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3DBFF4402A8CB6F28365462EDF141397_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3DF58E27F674FD848B67626AD63E18D1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\35545FB9F1555E2BD9B6C15DF1AC9698_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3EA1265607AB5C4428A180B92AD5A19B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3F9B2D001E6360285F0426B19949EAA5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3FEF6BF7ACAEB4C90340EB1BC4C53614_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3FFD1201E2A06727B3CED31034FEFDC3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\39F68D687B1B134FF7FB75D65A8EE1BE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3E85B96946E852E858D02ABFDC3ABCAD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\407C4939258B3683E011CA37B9087335_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\40A3690A0514178320FFDA23DF743020_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\411D2927C39D31B53546456080044C29_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\424F8FB3F9D9BFC554B42A850516E298_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\42BC7FE5F608C959BF7982C55E1DE02E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\43114148810D3CD60864EC9EABA57200_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4350D91CE5B4DAA004C4F7A89629FB93_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\43780D67FFE6EE9BFAB811FB873A6F72_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\438A471A70ABA39DBFE51706A6F62F20_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4399BF12932E5A57D5AB4CC009F03524_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\43C4B3406634FF30BF00E68946470482_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\43C9DEF0B259ACD8AFF868C3144CADD5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\449CC78DBFA9AE263AE08C35340E4C11_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\44CA0BAA9314DC0918EB6AF240981259_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\44E04A3F3AD92B8FE827889B8F42461F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4523B71483B0BB079440A786FD3FCD6A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\45DFC79B90FD29ACC07E0F002A3EF058_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\454DA58C95E51206D295588EDDBF392D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\46D585861C2FB1C780431F2CC1276B24_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\46E29FAC16310B56A60B8CBB42385B56_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\47363E19F9A6A5F714537F639BA636E1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\476C31B2CC47E11E7D64E6F7BBBC09EE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\487CC2FEBEAEF0E826BDCE7981A9B85F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\48B90D7968F9F268728B1832A8135C67_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\49E829C6330250F3F0080716D200967A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4AD5E990876A7FF70F86DE84BC2121B0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4AFC917EC9203D92DB1FED7AA3F31FD7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B3822207BA8F6B135D89CC510A60C14_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4B55EBA9895CEACCF4CB88087824E0A8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4BE0A950806E5C11E87125E64A61A645_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4BEA59ACF4A30F30B6718435912A412A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4BEB93F5BA73847C5E14F0B247CE88A7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4C3377A801D931F6361A1EB57B5BD84A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4CD3A49E2E21AE26D6ADBB64B9775B76_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4D3C74814FC51C5CA78F2C1E03DAE3C0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\488E401BC74C8AAF632BC184A0497EDA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4D6D35DCE261B5F4D398CD8A2543BC92_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4E1833D899394B6047E98729C6CF0394_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4E741C18B5D05DB5AC5D1B921C50928E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4E82C10D7817223D4F2BB4D5B762B064_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4EDE03CC18BEEBF03F9F3F5A7764C86E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F4329CF48B755EEFDE2A38518F7BB6D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F7565D9A2243E2928D9C5FED1D00145_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F9C0ABC4FB3E411CFA2B43E3A7F4FBD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4F9CBA43E96AC98F1D1EBA397CC0DF72_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\50658DAA057C7290535F96E67ACCB62A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\50F81722E25B4A9CBAB2BE1E194A3C6B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5101CCFB26F3B24DD2D787EBDF1C71DC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\51570F9FAED712D762DFC15E8FB206E8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\516A1926DB05E673753F449CC9044342_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\520575956139B4632B56007B1586E742_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\52572EC7A6CF5757AA9147F9FE9ED479_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\53243481BDAD9A6DDA6B190219364D3E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\532521F03C36451583959488DFDE0C1B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\533647E5D864338368A2A4BE0CC813B4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\546A55E699BDF23E2296499692C89AD4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\54DA6B2A30C4AEABAFF907FEDCDA9EA1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\55493772AF1C2A2731D0321FF6587660_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\56437EE933DDDA544A408773023AD7B2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5646E90EC8A0191B9ABE29445B7AAD4F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\564BAA70C9787EB17FC9277381EAC94B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\56A31CBB48FBB84503EBFD41450962E7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\4E208C04EAF1F8D633AD9CE0E79CDB42_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\570ABCC6837580D63E81F7244CF54C22_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5752436BDE79AC3952E6491582B3ECE7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\587DC569A5905646B367D63E1DFF9686_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\58A80E83BF1B95838F97A951079BC606_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\58F63E9FD5C5DC14D07193F0B35BC97F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5A3D4F88633E093CA4665317F201A282_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5A603ABD62D3AD911C8BFA8F9FFB4ACE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5BF48F8AE7FE3F534C4C5F0C0602AFCB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5C1BFEDA30C5CEC76F44F28DEF37A270_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5CD26A6B3F674E99CF3E97C11D557B39_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D228D5C613B612E3535CCEDB34FAA18_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D2A83EAC7DB7AB08C9BC0168F9DF610_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5D3F86514C57B10AF4ACC5A98B4D19D9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\56C56D9D805CBA753755600C52EC8508_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5E64993814C678CDE6668375A328F1A9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5E9CA4F32CB650476DC7E0C8B115C14E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5F231ABBF4D5F9268E527CF84241A5F8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5F9B683EE804E37AF67187B3DCA0DCB2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FBC8A14AB2339F5C590130EAA5440F6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5FF7421D063CD7A85EE8EAC548CF6F94_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\602CA24F3D7F4F0527B46CE50D3A5E48_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\60B331E5FB3FD3BA3674D372CD1DA9EF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\60EA628650A1932AE563F27FFF7CA2DA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\616117677DA20CBC57FFD1FA778B246A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\48074B89E87CC66966BC1ABEFFE3EE90_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6341AD5DC463A65E29C733B48DD728D3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\63AF1C16F78A5FD784D2B33E61B8EBCE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\63AF98961CED29010D0C318D114C62CC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6520C75AD1E4FBDBB87EDC4064AA62B4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6579F0E696DFA725CD8767EC6258B11D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65823992056FD5E5A36888CB17194962_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\659653CA57EA1800F5B571D28EB15E7B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\659DE00335F2713BE6C4E15A706D7860_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65CF1368BB712A20D23983D6A6C201BF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65D0EEEF16028AAA8F9829C78A0538E2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\65FB96A26F476BF8A4B5DC8125CC4783_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\66048C0BB8CD6A9E8548144CDCB1DF97_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\670C876E428584D6BDB279E801431633_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\67565302E9BDC0506302440BA4F7D5A3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\67E9CE85E1104F356524080962994C05_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\67ECBB5A3F375CBDDE7756F4055274E0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\683894D62ABB9EB43CF0424A8E0EADCC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\68F8FDF1F9A8BDD7249DA4EF77825E1A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\691663C0C5C82500E972E9CA9C1C1F19_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\69D65038E1830165960D97F54C2F0C8F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6A033294B62A9CB5D54FBCA83E8E1BB4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6AA3B19DB882D66EF66024E506C6E44C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6ABF4C5B1F9557788A40A9A17C5ADEEC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6ADF93838963654E223CA639ADA61FBF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6AFEB03678C64FCAAD53F2CD806F2886_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\5E17AFBD9F0CEDCAFE23A61122E636B8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6C4545417C3AA2DF8F5F31DD63AA60DA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6C7B1A49E08D3C892C1BC199C7FF91E4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6CE8496E2062A286FE9E39FF8AC17896_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6D7075DF050B6031143B8588E5E89F77_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6EA1AA94758BA38BECECBFE9A9C2A1C6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6F058657EDBDE6D7C54039A041ACF697_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6F31FF73AA760B67DEEECE239190B31F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6BBCD50A65F24203CCFD66CAB3BDE4A2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\704740BED78287DE6505A3BAD79656B4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\705C64E077FE4BDC20BB74BDD6A39710_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\71F1C72A7F75C42C47259287CC53D324_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\71F396B03926C99FB4199E3BD929F49F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\72807132FFAF2A9A31B2F63B1E8791CC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\72F3B7771A00CF36DB5C9113DCE72DCA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\732821425237B9115C39420B00804C02_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\73B13CED57EDCB7DED06D22481F1BCB7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\741987AFB62A489C817A24324B6758CC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7492B709C8BE51C1ADD77AF9DFE82994_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\6FC01380E58209D12C003EFA76C5B4B4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\75553CC02F6CEBD22D6F6CB528BA945E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\75AF9277C85498B09BC92D1683625219_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\75FAD3A1D230DB40C6E3C5FFCDAC1E11_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\785388C5954F40543E6C20B55D0E1E21_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7888E7A90EB56580A0B0E4376EFA21A9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\795E7FD37252596791CAD6CEFC181025_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79638B2F29ED751561F4C00C48BF56D3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\798E12FB976ADE2B0E40DCDA0C94857C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79AC1A516D13C1BCCD5E52B40DCB8D0A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79E1AE10BF454C7E0941226874B688E8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79E8E06778AFA6284094AA530EE66644_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\79F6524660C066425D2F7772D4894A2A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7A59345E6462A0A959D14126DEB15C75_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7A6AA4E465343FF003BF7DA03A77C4FE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7C111DA1DCD0C20BC0ECE6BDDD4B01CE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7C7D95961D677F6807FD36C9822E5D73_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7C9DEFC01585B170A6AC91FAAC945E2C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7CF08ECF48E819F399B950DA54BDB9EC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\76ED4EDC1574E5F72148C61CEB9ED524_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7CF3AED57CBA183805BB97EF2A72CB00_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7D8EA15D638FE2FF057702ABEB830C5F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7E180C0026E92BFB681DF7D8117DD307_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7E268A902CAA2C9665B129CA0870C152_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7F3C23DF7B08C5005D49019A76C4D48E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\7FCF0578783D1CBF28430A1C4E1D1FE0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\80FF5456D26EC945EE201D10151CA658_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\810283F77533B08D96D57C5ABE6E905B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8146BD6CCD166EC5E2796AD8419B3058_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8147FC842FFA5B4E9ABFCF02A34F82F7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\821CFF3666D219E03C3AB01618C6D755_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\82C52CB919242DD1BAD1BDDD67EEF324_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\82DA486352695862188F6B99863E9705_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8334584B098D1CB9AE25CDB3E3C17430_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\837141F173835FD6BBF496AF5FA13B7F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\83C2FA24DB7A0D08B2119969C8061706_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\83CDA41C61027BB09F52C98EE10BDC89_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\83E2CE99E7FDF2FC1FFE68C09EDD1FE8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\83FD6430290BE666BBA6138AA9CB4344_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\840F67D5AB6DB66487071ED1AA195541_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8429715D54ED03484D630FBB73C1F8AC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\843ACDF85D003F8D65995A5CA1CE4BB2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\84CC10A8C654D4A81913C22BFEF6106C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8594F9CB6D888CC02054EFDEBD6BC9EC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\85E3FCEB19FC5290E3049CA9F1FA938D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\86153AA415055ED19FDB24E9B37DEB22_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\868B36C6F534EC04FB1918F2A586B79D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\88EF78DB9029A0C403C1922FB6711794_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8863DF41458EB4F9B86C8B81D4B44673_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\895FE91A3E783A45EFA36F8709D04816_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8AA2FE473EEB873842D328BF14E97C56_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8BC64EF0F1BD56CD62801977B6EF868B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8C024C6BEDDD912A538A98FCC1FFFEF3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8DC17DD5EB3BAD6C4423E1581491B62F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8E2DECFDAC673A3C7B39558189A9E044_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8E89E26413A6C8D00868D5A75B3405E8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8EAE1716AB6FD0E29F1C1D9117DD84C9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8EB82F6BCDC9C1E13C9E9FB4437F2D82_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8F06D29DA304BEDB447EC2F50C822DBD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8F37EE68E50BCC97969273D885A362AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8F980A5EBA3F32BCB4679857AD10F719_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\90BA20F46319FF6FEB48D5D4216E19C9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\90E3E97C50533B233AA9441D44FFE470_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9116AAC60782F3B4338AD537ECB3C5FA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\918903F385993A3F634C060A7268C2CD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\91F4F2C54E2B155A23EE971FA710DA65_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9267997C1331B66BC0D084080E43C2C5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\926E71F58B33DE49FB129592A3D53EC4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\92DFA31923FAD6FF3D3AD21CE7BE22FD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\93F1156F0B5644F662BDBEB745ECEBC0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\642D0C5908A97F1CA1C4CF7B652C9C51_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\94656D5369E0A9ABF8660721901C53CD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9479917154397F827CEA11229FBAEB6D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\93FF060CC4A6D6B0F413D8B9BFD09607_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\957E8E222CB9EB8D72F6BBC950ED05E1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\959CDC1A3607D91351F490F3DDFE6C70_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9600D5E103E2845AB6479E172C34A86C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\96110816F2A6FA53C241A5F46491F80E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\963522639A856A3F74F2F8BFAB05DC9F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\968A69E34EEA42E2AF10CF25C52CC23E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\975C3D9BEA73796BA57D0FED3F003C73_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\975F7057251103E7B0AF9506E25CE337_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\985209A8BD8413404CBD400935581D46_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\988B19F02B357FD90120FEE40D6A5F02_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\99ACCE14C189CDEFB92565C04E13219A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\99FC7FEB8F4D32A4983A6860A8240652_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9A25D668237A4985FAA7DD2506ED7BC6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9AF5BA25CC3544F10C31B1F63A3C43C3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9AFAD8B2A9503B5AB18FDD04574E4937_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9C92C553CD7DF947F499FAE14F49A15B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9CCC0D491CA0BB7165AC2157BCD2CDE6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9527ABB2E683328A985041F9976D1076_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9D17467C18A10752336FDAAAFDF67117_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\8C1527848063561BE6D73348FC2F993D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9D8871C1BEA58A2CA25E7089BA16B392_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9DE3E565B9E5CCE2D402DC141CF36B95_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9E5901ABBD15C272139C7D661E66C23F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9E5BFABCFD17CFC34372F22FBD6A9C18_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9D5E9AC58EF4691D358F3F082A684F88_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9F93EA3A545E4EDF67C0308A952801D3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9D5E7B5CA4B90B68678871693B16C976_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\9EE8FB894DA9BE3DF75E3EADA715347B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A065BC5E4ADB4427F3BA94478CA50331_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A06A7C63744FC877C14271F2B9B0E098_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A0B5303BEB9E1648DE634216A3A07997_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A1C154EB6F5C6F0FC41ACFF1C10445DB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A1EB8627D0BD138CD572B5E7456C0AFE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A25A156E7EBD047971433887C2D97EEC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A2CA0832AC5728C515628DC9BE61A604_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A2D8BF7A08AD9AFE97DFFB825F2645F3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A35E44D273F59EE4E15C77D97020934B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A3D838317E910BAC5079B029CF831C02_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A4297CD2EB2D80FC8B4959089EDE21C8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A43304D10FB80BC45AB189F79A16C851_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A464458FD3E8A626E34C9B7326343BCA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A565A9B22BB1B0992265E234A593C46F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A584468AADAD075D20EA6718D27327A7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A65CA94D58D8F5AE2614FA9BAEFDACB0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A70DC2A73523AB027FF33939D90BF8E9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A78E49BA91D9C38DC4268FA06D6CB161_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A7A59B2945BC5A37CD715DF3D14AC4C0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A0C03E86FDA3E4DF90172A7D90830003_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A834C99E76B858074CAD645B136C1823_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A85B38A686ED9ACB103E6759656948FA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A85EA0643D43C0CBF4B1D2A5D32749AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A863E726EFBF8B81A1988BA007809A74_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A1636468EDE040A53E5F694598E5352D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A8BE95F716FB00115AAA9744966FCB55_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A88BF036F451B36C537666F282956D80_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A97BA727BD61AA1F1267970586A86AC5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\A9DC89428A07CB81EBDA451C3D8686F2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA2758538E7BF846BC02F14374260877_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AA60D6C6E27810F5F93AADCE2019671E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ABBB608B9E9E294189314D0D5FDB1BB7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AAAE302B25AA35A54101AB543995CC8C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ABD972B59903A5CC911E787FFA7EE621_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ABE147F6B9D54312E5C2C887523FEBC3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ABF16B486061FF9AE83B529C6188F6A8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AC3D04BA56F9720A604435F9BE6F1CCE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ACB8EF0B6E1818CB062D30C14AF1865A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AD0945495855CA9E26064B88E58EAD15_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AE0A105C85BF1D9C15CD247BECCB23E5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AE0B72E928F334880E0F497B59F9BD98_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AC7B988EA5504910C89E8ED7176F9561_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AE864492E6420275A5541459275794D8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AEC692D884161D4514BC65E8EB55349E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AF3D50732421590C7F30BD76C57E346A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AC8DE0DA51BDEF9214533B975E5E7E4E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AFAD96A6434372EEBEE1AE3A7D29A225_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\AF8F9A7C1D85F5F6F201A5ECDE8CB872_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B016691ACA042DD1B0B0AF29342A2575_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B08F22C4FCC35B9D53F3D073504F7E0F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B117DFB88ABDD14712A4D90643C639DF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B245BD2A67A0F038A27E4F4D33BFD12D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B25A4702F0582E3C73BF943EDB91ACE4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B271DBFC249A06D40D5245585EE1227B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B2BD414B0C36FB072667E0E52A5CB58D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B3187B14780C50C1E6516C99F5734016_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B2D28A2AD88AD6376FF7746D236E84C2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B337D6E6C48BBE7E1F2049C37B24654B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B372141B4EB72B92761ECF15F5FC4085_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B3B269D8A74940411616105185B120AE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B432C0A25A0AF7A859898BE1038E01C0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B4C79C1BF9C88D88921F8CAD280E2409_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B4E756D3F14BEEB2F4AE01051C3206BC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B60FD15CB190E505B3B3882138C0F57A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B6297570728886496CFAFA6A2C260FCC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B65717678AD1B724E638FB4A1E0F8B90_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B6D14983FADA5C46FCA59197659E1F7C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B6EF50A570F91603C3DC233C9B7AC0AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B766CCC2AAC1A5EDF6B3B5829CFF40E0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B81141B9DF7DDFE53F1025347F6FD6DC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B815393A6F5B8760D8BD4D3629B1474F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B82D902C96EA496BE52751AC277DD29C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B871796AB9FD4EC0944481E06F549C04_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B8BF06D8008C1B095FF5C14090559877_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B8D1BA030088EF333160E80EC7A18536_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B981A31EFF2F95DD71EBDA3B73B1F40D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B9AFBA6208727BC3A3E854DFE30BCEED_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B9CBFB75A04922118C16930A92F41FAD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BA232C3D9F5C120B02330ABDFFD11F56_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BA3953F9CC0518640D80BE87A73C0B25_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BAAEE2912077287792254827A13B5C36_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BAB8E8D4DB8023ABA73C993E1483BB8F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BB02B3C6645AF1EF732530AEADCBFE23_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BB155E144A3EF673E36BCB79C6B630E8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BB31E152AC3A0FED3267E072A3C191A2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BB34090B0924A623B144B2F6382C0FBB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BB8B6A3E39A7185B36A9523E37EECDCA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BBF42D381EA957D54FBA036723D3E84A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BCC2C6A0D515EEF882BF71FAD6C03BEF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BCCE8D84A937D21AD549E17EB2E1171B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BD1295AA5AE05A420838867D86D5A886_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BD9238CC99162802A3578C809082AB48_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BDF8504B2D4848D47CF82C3EFAA10416_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BDFB71537163952FBFD96A36AD66A78E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BEC31B59C65925F533110AFCFCD36D55_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BEC426A7EADC39AEC51740F6B7EE8EAB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C16276326D6C72A7A48B1EDE1D06870B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\B523D9FB4FA23B658F0D47920BBB764D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\BEC0DC79125FF8A20E7F6C8E9EEC7E11_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C19C12011AE126C2454E0514809802E4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C19F32E83F396569C854DC075059BE11_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C288162B55F3B48143EB16C185A61D6C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C2A55E463F659C99D0F784EEF8C10B1A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C2A768A6309B0AF6498A1735B2CDC9EE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C2CEBE78469DA11736D52A8ECB3FDDFA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C3F5224261EA52BC6972DC5D7A257426_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C664D6416499A21804053AEBDDE7504D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C74803C7F8FD53F5147712C0B70DBAEE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C76F898E15F3FFD49B3A1B7780265FD0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C802033FB7CF8246F48C38AF443A7E53_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C815A42A1BD4877E6C7C42E317E0F919_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C8902732084F7B195220F4B55F08DCD2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C89C95345C8FEBADFBC2F3B7564B3C36_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C8EE986F5E3A2A60596A7CE1A6537AB5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C9F267D9A58052B611470B0AD961E968_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CA654C9912EE0D0F3DEBCA630E497B64_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CA7D2C8D1235A8D0567510650AB9BEA8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CAE97FF233E1BBAA3BB8E29D3424A697_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\C4928BEA0D15A162EFE69DE404D43552_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CB98397458FA551EFFAA00F1DD4DCE59_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBCBF2CDEF0B98121E0D4ED51BCEA8A0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CBF579BCA8C5518868D1380A0138EFB0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CC1E5128B1F0671E9A9F565D9D0C28F8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CC6CC1BD5F0BC20C76A9DF344D43890D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CCA4B2B02CC97CF34993F15802494F00_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CD383A0864F18592E03AD654138CEC35_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CD5AAA4FCD6327C6B5DDAD4DE4669922_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CDBBF0EDAE88BC974D70F558E0FAD7B1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CDDF338696725106E3BF92F35B8DC598_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CE312A01CB8D2831A51A625281FC283D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CE4F3FF42781E4FF410D6EC300EC54FA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CE5DE18186D0BC5F7A84A5AFECD9A57A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CE639617C25AED5E5C355BC29445EE55_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CF894983138E46CDE5109E389A035ABA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CF943834BFD1BC880C3D244D9F95A53D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CFE79C97B12C927505684BEB58234A24_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D1E6E3D8DB184C44E0D920A5E194C025_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D2C4206429EA41FF5DA8A2D9D28E4E6B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D300BE39F0D57E2C3BF81788C4CA382C_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D39C33A052487C7BF84613DDA7B6F457_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D3CFECE1F34D006F9058B5D1A3DD98F5_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D40DD4AA2F8041DF5C4DAC86AF8681DB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D4383E34A49388F12B23EBFDA0772AD7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D45BEA4A35E847F7E1D56CDCFFCBB84D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D45EC8053413BB40B8A0680CAE7DB57B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CAED2F4B1979164B774446337C023162_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\CAA07AA7C804F647153B2AEF2E70096A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D46EE79B46E79340154BA4D8965C0EC2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D59FBB34CD2B436953CDED4C8ECD0388_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D61323ABEC90D834BB4F0619F156317D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D61CF6B8114FD36E507B582188C0FEAD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D66A727C639DADB27F905AF44DC862F6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D62143E11EBCA6D7A7F1B097DAEC19FE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D777435BFD43EFE944CB25B38F1BF501_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D7C0009FB2049FAF665B4982FF825FD3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D7C8B0733124D9B5C0937420FA60F971_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D8519E8EEA761B5E991C774CD71B65BD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D85ED2A08A2BE3E3FE358FF369D3CF19_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D6810362E6AB19607FCED59F5B0FE79A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D7127D8B7D5C75E9FCA7C7FBE0DE85BC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D90BFB995C4DFCE529481FC5B181A471_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D913830F9C90B1FB91C9A464355A4772_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D91C959A22FAEB3512924AB81FB8784B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D9483E609785F510AB3DE37C449EA217_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D999C02D4414C71FE96794B152F26F88_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D9C46A6A6B389A0155231C77ED630882_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\D9F1041AF57E8FFFCE5A5378354A3AB2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DB75FBBDCAD64BBDF0535767CDABD3C2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD14E21C92D562105D57DE3E11318BDD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD45C86036230BD768C7FE968A4F7891_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD483311E21ACF2EC17AE2AC9FF96127_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD51FE7010DB0F60E79CAADF595CA85B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD684D779B6FEECC9251B9144E6AFD40_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DD6969504173BB02CCCA8755C7FA2D99_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DF2F3C358604BA9CA946DD06D784D838_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DF59E557E493392E3E052FA88977221B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DF838FE0749B485AB559391DA67A0DA8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\DFEF33C020B5673239752617B725188B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E0CE97FA71357913B36B78AF2F6D7AFF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E05D4B8B8F155D70F1E23D8589E4F8E1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E1F89F49D1A6E7A4F51A30A4C0265935_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E232F28EAC92777C86A9BD2A7908649A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E23FA3B572A6ABFC6E0A91A51141CDEA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E2A55CB71BE2209EB2BC9832F17FA106_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E2B2C171B0457FE624EAEB79C8EFD4C8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E2CFF7CAA6EA165C590AE92AA4C2DD02_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E2DAFFC66C573F4FA53E7F95156A1B63_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E3171C071D502CDE1D9B2AC7FA540535_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E3484C7322C5352666937D51098E556A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E3493BED44C8E13DE0AA728785C36428_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E19DDA21E73C1561D58EB5156F063915_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E45784756BC4F6AB7290DF500339F914_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E5CD215D484F6C5A6C4ADB0FBEB41510_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E2E889A4F5D10767DD6D7BF0F6888D99_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E3E34D862D458883A9DC9E3B0E3468AA_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E5CE2CB24CCED0FEB7A649C2B2EFC449_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E657B53F00A50F4DB18FD3C3EC4D4680_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E73649A4C209C9C5B0FBEB7A329409FD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E7574A0DEFF9F0D734A7A7BAC4669EC0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E76E1EC500AE2892073D733B47A723A7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E85386ADE2D89403C8CE7A297F325BB8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E937678299A38213EF32D9B9C388E58B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EA2BD47A65D4F8090CC87C761EDA44E3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EA5B983C7CE273198FB07A9520D43137_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EAB67ED84391968FD937A08D2777EC15_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EC05E6161DB7C9F0C965288A834FE5DB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EC14C8476283311718FA259055BADFC4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EC170715C9A50AC1866ED299CE9299D4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EC3E3DF0A7F32D5A90723C11B1F5F9FC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ECB63A6084F698C5C2843B051918AAA2_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\ECF93CAD040601CAF7C46447424309D4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EE6BEC3D6E322A79C8FB796BDE167E7A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EE85105A589046FF98FF3EA048CC9FA9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EEC739B46A2564C5CB1A6CD728403557_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF352C9DE79BFC61BE1A9BEB6995D418_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF5017C2B4DBFBCD61F819EA7F0B8FA1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF7C26E5A7EC402E6C086C6D5E314820_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EF8033E3AFF883F5F24211F8178A6A7B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EFE635ABE09C550EFDF58CD694AA5E4F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\E99A28E4A1D93A0D45951EB29F2AFAE3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F019A9C35E2945BE6628CCBAEF787AD9_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F034D101D6087EAC95DA4E7888F2DAD3_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\EB59974839DCACD8B4FA254E1646BBFD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F0B222B24897B3B58636CFD2FFA17FBD_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F16E19DC5C71EDEF9D95E1D4ACD6751E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F1A481D50D8845976EDE5E77FF4D20DE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F1F6AD35D27A88F9BC874032A26B005F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F294F557946412C618D813B664556771_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F2C84759B05497074C996C8F67AF716E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F2C9600E4A51DED3F07B141543632045_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F2D6C631CFAE8F7A50C99A1700F9D95A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F2DAD95FE5C282F53AA75F8625E29BA8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F3284FF206E9378A31DF4F31179187B0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F3C67C07DEA126E5CD3ED33A361E7D8F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F3CA87A788842CFE322F9D051A842BDF_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F443D9A830649DCBFE98397A8E22BE3E_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F4748AE6BA72AFFDE89FBDB639EFF394_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F48176169E272408AAC45C40290AC588_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F49618AD3AFBBECCB2EFA9D1E427CA6D_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F4F7A0E9554F9D7D8732427B7E2E052A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F502E1C80F70873BD19F378F14F193E4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F552565BD90516C8F3D0024AEEF6B044_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F55277FA57E6CDE7C4D5B477C855D2A7_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F5C08D323C5DE02269E1B75C9DD5FF08_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F635D132DDA078F13EE73E5712B57739_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F62DAFD4A138177D356143E47F567893_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F638B208B6751FDD7D7FA2F51BB67C13_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F65C0C0691A899A750A0D57B05B2FB98_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F7016129236461E552EEC7E8B85F0E1B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F71598B40F212F18BBF88CEAE06261EC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F72E329B7E88E9A54CF45AD3F623C2CB_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F734FBA39BCC89ADBCA93D778226CD16_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F7CF32512A2CE62E21F225C23E4005BC_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F837FB3BCB401821479F73DE0DC4E5E1_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F017D6EA083B4F4E726329D86F3637DE_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F8A41356212F85C3C82044AD61CC03B6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F8EF6107A8A66B54BE382E3E504924D8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F9676AE9AEF36A5FF6516414A2720687_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F6C548DA9A93546BCEC954FB4A1DDF14_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA44B69668F517117F8F542B6A9BD15B_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F8C47710CBCDF7EBA1D65FECE9076877_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA6F2B00E2B99E7B4ECEBBD9452898B8_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA59CA30008673E14088CAA1407749C4_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FA8C2BC698E3D8EE3801D78046D907F6_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FB311FF0B13323A9B4FC3AAACB145632_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FB8C4CFD1DEDE079539ADFADE70FDA3A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FC0065365B4751529632671A921AC91A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\F9A4F2B42D19448ADE4EEE1584FFD735_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FC7589854677153065E6067FFCD4CB26_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FC8AFDB8597C21BDC0D7CE60433B42C0_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FC939194D26A48C631E51E035596242F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FCA556D881541ADEA771B2F6A2FBF842_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FE532A31BD0372D5D54A825ADA6A3868_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FF0E1ECEF97A8FE60B49BC5E6D3E1C11_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FF189FCAAE4DDF91CB6B10A3810D9F6F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FF21234BBAFEE0E89B36FE705DA0611A_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FFD97E983CF4B9CDF60FA4528CF76A72_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\PROGRAMDATA\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\FFFE31E64C40B912EC2FA32825EE6D9F_B88528E6-A816-4F98-A473-7AEB1FCE671B 

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.dat\_TUProj.dat 

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.dat\_TUProjDT.dat 

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.dat\DataSafe_Green.ico 

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.dat\IRIMG1.BMP 

C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.dat\IRIMG1.JPG 
 

--------------------------------------------------------------------------------
 

Optionen

Scan-Engines: 

Scanoptionen: 

Alle Dateien scannen

Innerhalb von Archiven suchen

Erweiterte Heuristik verwenden
 

--------------------------------------------------------------------------------
 

Copyright © 1998-2009 Produktsupport | Virusbeispiel an F-Secure senden

F-Secure übernimmt keine Verantwortung für Material, das von Drittparteien erstellt oder veröffentlicht wurde, die mit den WWW-Seiten von F-Secure verlinkt sind. Falls von Ihnen nicht ausdrücklich anders angegeben, stimmen Sie durch das Übermitteln von Material auf einen unserer Server, zum Beispiel per E-Mail oder über F-Secure CGI E-Mail, zu, dass das von Ihnen zur Verfügung gestellte Material auf den WWW-Seiten von F-Secure oder in gedruckten Publikationen von F-Secure veröffentlicht werden darf. Sie gelangen auf die öffentliche Website von F-Secure, indem Sie auf unterstrichene Links klicken. Dabei wird Ihr Zugriff in unserer privaten Zugriffsstatistik mit Ihrem Domänennamen protokolliert. Diese Informationen werden nicht an Dritte weitergeleitet. Sie erklären sich damit einverstanden, in Zusammenhang mit von Ihnen übermitteltem Material keine rechtlichen Schritte gegen uns einzuleiten. Falls von Ihnen nicht ausdrücklich anders angegeben, berechtigen Sie F-Secure durch die Übermittlung von Material, alle darin beschriebenen Konzepte in Produkten oder Publikationen von F-Secure zu veröffentlichen, ohne dass F-Secure dafür verantwortlich zeichnet.

Hallo Marius,
habe mal über den Support von McAfee versucht den Echtzeitscan zu aktivieren. Der "Virtual technician" zeigt folgenden Fehlerbericht.
Gruß Karsten

Code:

MVT Information  

MVT Version  : 6.3.0.1911 

System Information  

Operating System  : Microsoft Windows 7 Ultimate Edition(Build 7601) 

Service Pack  : Service Pack 1.0 

Language  : 0407 

Internet Explorer Version  : 9.0 

Internet Explorer Language  : de 

System Drive Type  : NTFS 

Physical Memory Available  : 4194303 

Physical Memory Total  : 4194303 

Virtual Memory Available  : 15515236 

Virtual Memory Total  : 16691556 

System Architecture  : Intel64 Family 6 Model 30 Stepping 5Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz 

Date Time  : 03/22/2012 21:52:38 

Time Zone  : GMT +01:00 

Product Details  

Product Name : VirusScan - McAfee SecurityCenter  

Product Version : 15.0.294 

Language : de 

Partner : 105-435 

Health Check Details  
 Registry  1 Registry key(s) incorrect  

Expected Registry Value not Present 

Expected : ini log txt trc

Existing : ini log txt trc wiki-publisher log1 evtx mui

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration SmoothWritesExtensions Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration EOLPid 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\VirusScanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\VirusScanner EOLPid 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet EOLPid 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner EOLPid 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration PPContextIDs 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\VirusScanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\VirusScanner ContextID 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Custom\QuickScan 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Custom\QuickScan ContextIDs 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Custom\QuickScan 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Custom\QuickScan PPDID 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE,Software\McAfee\SystemCore\VSCore\Script Scanner PPContextIDs 

Expected Registry Key Present 

{DC7EF8E1-824F-4110-AB43-1604DA9B4F40} AppID 

Expected Registry Key Present 

{395633B1-EED9-4DFC-B67F-9788B51C9F06} AppID 

Expected Registry Key Present 

{782C48A5-DD18-43E5-B32E-88E66CBB85D0} AppID 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} Name 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} Protocols 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\McProxy\Plugins\{F80EAA49-6471-40B8-84F5-E1C1E4F5644A} LateInit 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet bScanIncoming 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Email Scanner\Internet ApplyNVP 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectRemoteAdminTools 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectDialers 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectAdware 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectPasswordCrackers 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectPotentiallyUnwantedApps 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectSpyware 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectJokes 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\NVP DetectKeyLoggers 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\BehaviourBlocking 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\BehaviourBlocking ProductID 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScanProcessesDelaySeconds 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration DotVirToDenyFailedClean 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration DotVirToDenyWrite 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLogDateTime 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bDenyFloppyMountIfInfected 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration uCloseDelta 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bApplyNow 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration DotVirOnQuarantine 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bDisconnectUser 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration WorkAroundAllocateCDRoms 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bDisableScanning 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLimitSize 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration Alert_UsersCanClean 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLogClean 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bScanFloppyOnShutdown 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLogSummary 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bReloadDATs 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration OnlyUseDefaultConfig 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration Alert_UsersCanRemove 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration WorkAroundAllocateFloppies 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLoadAtStartup 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration RepairBootSectors 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bDontScanMBRSectors 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ReportEncryptedFiles 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration wFlags 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bLogToFile 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration wTaskType 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration uKilobytes 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration wDate 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bFileCacheEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration Alert_MaxAlertsCount 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bVScan 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration Alert_UsersCanDelete 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScannerThreadTimeout 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScannerThreadTimeoutEx 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScannerThreadRepairTimeout 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScannerThreadRepairTimeoutEx 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration wTime 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration LogFileFormat 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration bDontScanBootSectors 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration dwExitStatus 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration UseAVVDats 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration DisableCachingOfNetworkScans 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration DisableVerifyOfPersistedCache 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScanProcessesOnEnable 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScanProcessOnDetection 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration BootCacheMinutes 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScanArchiveTimeout 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration RepairBackup 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration SendScanCompleteNotifications 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration UsePUPDats 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration RepairBackupPUPs 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration RepairBackupViruses 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration RepairBackupCookies 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration FailActionAfterFailedBackup 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration OasRpcTimeout 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration ScanCookies 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default NetworkExtensionMode 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ReportEncryptedFiles 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ApplyNVP 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default LocalExtensionMode 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default szIncludeExts 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bScanOutgoing 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uSecAction_Program 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uAction_Program 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default dwMacroHeuristicsLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uAction 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ProcessList 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uSecAction 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default dwProgramHeuristicsLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bScanIncoming 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default szProgExts 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bNetworkScanEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ScanBackupReads 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ScanArchives 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default ScanMime 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bLogToFile 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default dwMaxLogSizeMB 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default LogFileFormat 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bLimitSize 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bDontScanCompress 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default bNetworkScanDontRepair 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uAction_Cookie 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\Default uSecAction_Cookie 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High ReportEncryptedFiles 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High bScanIncoming 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High bScanOutgoing 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High bNetworkScanEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High dwProgramHeuristicsLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High ScanArchives 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High ApplyNVP 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uSecAction_Program 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High dwMacroHeuristicsLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High NetworkExtensionMode 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High szIncludeExts 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High ScanMime 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High szProgExts 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High LocalExtensionMode 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High Exclusions 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uAction_Program 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uSecAction 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uAction 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High bNetworkScanDontRepair 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High bDontScanCompress 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High ScanBackupReads 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uAction_Cookie 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner\McShield\Configuration\High uSecAction_Cookie 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner HookMode 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\Script Scanner bUseMcShieldEngine 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis ArtemisEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis ArtemisUIEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner ArtemisAllowed 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner ArtemisEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\Email Scanner ArtemisLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner ArtemisAllowed 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner ArtemisEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\SystemCore\VSCore\On Access Scanner ArtemisLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner ArtemisAllowed 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner ArtemisEnabled 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\Artemis\On Demand Scanner ArtemisLevel 

Expected Registry Key Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\InstallSettings\Substitute 

Expected Registry Value Present 

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\VirusScan\InstallSettings\Substitute appcode 

 

File  OK  

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\ftl.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\lockdown.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mcshield.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mcshield.exe 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfeapfa.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfeavfa.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfefire.exe 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfefwctl.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfehida.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfehidin.exe 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfehidk_messages.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mferkda.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mfevtpa.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mytilus3.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mytilus3_server.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\mytilus3_worker.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\naevent.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\naievent.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\scriptsn.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\strings.bin 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\common files\mcafee\systemcore\vscan.bof 

Expected File Present 

c:\program files\mcafee\virusscan\escnplug.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcavtsub.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcctxmnu.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcinsupd.exe 

Expected File Present 

c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcods.exe 

Expected File Present 

c:\program files\mcafee\virusscan\mcodsax.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcodsps.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcodsshm.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcqtax.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcqtlib.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcvsmap.exe 

Expected File Present 

c:\program files\mcafee\virusscan\mcvsoins.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcvspp.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcvsps.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcvsqt.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mcvsshld.exe 

Expected File Present 

c:\program files\mcafee\virusscan\mvsap.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mvscfg.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mvsinst.exe 

Expected File Present 

c:\program files\mcafee\virusscan\mvslog.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mvsoem.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mvsscan.dll 

Expected File Present 

c:\program files\mcafee\virusscan\mvsver.dll 

Expected File Present 

c:\program files\mcafee\virusscan\naiann.dll 

Expected File Present 

c:\program files\mcafee\virusscan\naiannps.dll 

Expected File Present 

c:\program files\mcafee\virusscan\subavt.dll 

Expected File Present 

c:\program files\mcafee\virusscan\vsjsres.dll 

Expected File Present 

c:\program files\mcafee\virusscan\vsores.dll 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfeapfk.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfeavfk.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfeclnk.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfefirek.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfehidk.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mferkdet.sys 

Expected File Present 

c:\program files\mcafee\virusscan\..\..\..\windows\system32\drivers\mfewfpk.sys 

 

Process  OK  
 Service  2 service(s) incorrect  

Expected Service State Incorrect 

Expected : running

Existing : stopped

Service : mcshield "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" 

Expected Service State Incorrect 

Expected : running

Existing : stoppedService : mcnaiann "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc 

Expected Service Present 

Service : mcshield "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" 

Expected Service Startup type Correct 

Service : mcshield "C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe" 

Expected Service Present 

Service : mfevtp "C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe" 

Expected Service State Correct 

Service : mfevtp "C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe" 

Expected Service Startup type Correct 

Service : mfevtp "C:\Program Files\Common Files\McAfee\SystemCore\mfevtps.exe" 

Expected Service Present 

Service : mfefire "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" 

Expected Service State Correct 

Service : mfefire "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" 

Expected Service Startup type Correct 

Service : mfefire "C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe" 

Expected Service Present 

Service : mcnaiann "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc 

Expected Service Startup type Correct 

Service : mcnaiann "C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe" /McCoreSvc 

 

COM  OK  

Expected COM Component Present 

EscnPlug {f80eaa49-6471-40b8-84f5-e1c1e4f5644a} c:\program files\mcafee\virusscan\escnplug.dll 

Expected COM Component Server Type Correct 

EscnPlug {f80eaa49-6471-40b8-84f5-e1c1e4f5644a} c:\program files\mcafee\virusscan\escnplug.dll 

Expected COM Component File Present 

EscnPlug {f80eaa49-6471-40b8-84f5-e1c1e4f5644a} c:\program files\mcafee\virusscan\escnplug.dll 

Expected COM Component Present 

McAfee Avert Submission {e66c0dae-131f-4ef6-a2ce-88cf1964253a} c:\program files\mcafee\virusscan\mcavtsub.dll 

Expected COM Component Server Type Correct 

McAfee Avert Submission {e66c0dae-131f-4ef6-a2ce-88cf1964253a} c:\program files\mcafee\virusscan\mcavtsub.dll 

Expected COM Component File Present 

McAfee Avert Submission {e66c0dae-131f-4ef6-a2ce-88cf1964253a} c:\program files\mcafee\virusscan\mcavtsub.dll 

Expected COM Component Present 

PSFactoryBuffer {94478404-6236-40c4-8850-df09ce6d95bc} c:\program files\mcafee\virusscan\mcvsps.dll 

Expected COM Component Server Type Correct 

PSFactoryBuffer {94478404-6236-40c4-8850-df09ce6d95bc} c:\program files\mcafee\virusscan\mcvsps.dll 

Expected COM Component File Present 

PSFactoryBuffer {94478404-6236-40c4-8850-df09ce6d95bc} c:\program files\mcafee\virusscan\mcvsps.dll 

Expected COM Component Present 

McAfee Quarantine API {ae557891-0ad1-433f-9788-3fd5f19a3397} c:\program files\mcafee\virusscan\mcvsqt.dll 

Expected COM Component Server Type Correct 

McAfee Quarantine API {ae557891-0ad1-433f-9788-3fd5f19a3397} c:\program files\mcafee\virusscan\mcvsqt.dll 

Expected COM Component File Present 

McAfee Quarantine API {ae557891-0ad1-433f-9788-3fd5f19a3397} c:\program files\mcafee\virusscan\mcvsqt.dll 

Expected COM Component Present 

McVSApp2 Class {21924a5a-a65a-47f7-9f21-5ca2ec954504} c:\program files\mcafee\virusscan\mvscfg.dll 

Expected COM Component Server Type Correct 

McVSApp2 Class {21924a5a-a65a-47f7-9f21-5ca2ec954504} c:\program files\mcafee\virusscan\mvscfg.dll 

Expected COM Component File Present 

McVSApp2 Class {21924a5a-a65a-47f7-9f21-5ca2ec954504} c:\program files\mcafee\virusscan\mvscfg.dll 

Expected COM Component Present 

McVSApp Class {68e641dd-0ff3-4c19-9499-985eca497c06} c:\program files\mcafee\virusscan\mvscfg.dl 

Expected COM Component Server Type Correct 

McVSApp Class {68e641dd-0ff3-4c19-9499-985eca497c06} c:\program files\mcafee\virusscan\mvscfg.dl 

Expected COM Component File Present 

McVSApp Class {68e641dd-0ff3-4c19-9499-985eca497c06} c:\program files\mcafee\virusscan\mvscfg.dll 

Expected COM Component Present 

McAfee VirusScan Engine {3ef62937-0a7b-4f6c-988d-994620390a80} c:\program files\mcafee\virusscan\mvsscan.dll 

Expected COM Component Server Type Correct 

McAfee VirusScan Engine {3ef62937-0a7b-4f6c-988d-994620390a80} c:\program files\mcafee\virusscan\mvsscan.dll 

Expected COM Component File Present 

McAfee VirusScan Engine {3ef62937-0a7b-4f6c-988d-994620390a80} c:\program files\mcafee\virusscan\mvsscan.dll 

Expected COM Component Present 

McVSVer Class {2813d8f5-e8cc-4102-b76a-472a0df23e51} c:\program files\mcafee\virusscan\mvsver.dll 

Expected COM Component Server Type Correct 

McVSVer Class {2813d8f5-e8cc-4102-b76a-472a0df23e51} c:\program files\mcafee\virusscan\mvsver.dll 

Expected COM Component File Present 

McVSVer Class {2813d8f5-e8cc-4102-b76a-472a0df23e51} c:\program files\mcafee\virusscan\mvsver.dll 

Expected COM Component Present 

McAfee VirusScan Announcer Subsystem Class {a737699f-3765-4b1d-adaf-77424e23a9fa} c:\program files\mcafee\virusscan\naiann.dll 

Expected COM Component Server Type Correct 

McAfee VirusScan Announcer Subsystem Class {a737699f-3765-4b1d-adaf-77424e23a9fa} c:\program files\mcafee\virusscan\naiann.dll 

Expected COM Component File Present 

McAfee VirusScan Announcer Subsystem Class {a737699f-3765-4b1d-adaf-77424e23a9fa} c:\program files\mcafee\virusscan\naiann.dll 

Expected COM Component Present 

McAfee McQuarantine Shim {89129896-0240-4245-a9f0-866e06263a0d} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Server Type Correct 

McAfee McQuarantine Shim {89129896-0240-4245-a9f0-866e06263a0d} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component File Present 

McAfee McQuarantine Shim {89129896-0240-4245-a9f0-866e06263a0d} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Present 

McAfee McRealtimeScan Shim {9ea1a0ad-b6aa-4f94-849c-02c8223ce619} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Server Type Correct 

McAfee McRealtimeScan Shim {9ea1a0ad-b6aa-4f94-849c-02c8223ce619} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component File Present 

McAfee McRealtimeScan Shim {9ea1a0ad-b6aa-4f94-849c-02c8223ce619} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Present 

McAfee McTrustedItem Shim {a10ddd46-26aa-4b27-8fd1-d8a27a8aaf8c} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Server Type Correct 

McAfee McTrustedItem Shim {a10ddd46-26aa-4b27-8fd1-d8a27a8aaf8c} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component File Present 

McAfee McTrustedItem Shim {a10ddd46-26aa-4b27-8fd1-d8a27a8aaf8c} c:\program files\mcafee\virusscan\mcoasshm.dll 

Expected COM Component Present 

McAfee MCODS Shim {16453650-8364-4e9c-b891-1cf822b38f2e} c:\program files\mcafee\virusscan\mcodsshm.dll 

Expected COM Component Server Type Correct 

McAfee MCODS Shim {16453650-8364-4e9c-b891-1cf822b38f2e} c:\program files\mcafee\virusscan\mcodsshm.dll 

Expected COM Component File Present 

McAfee MCODS Shim {16453650-8364-4e9c-b891-1cf822b38f2e} c:\program files\mcafee\virusscan\mcodsshm.dll 

 
 DAT and Engine  1 DAT / Engine update  

DAT not Up-to-date 

Expected : 6656

Existing: 6652 

Engine Up-to-date 

Expected : 5200

Existing: 5400 

 

Top Issues  OK  

Top Issue: Corrupt DAT issue  

SYSTEM  OK

Hallo Marius,
noch eine Ergänzung zu McAfee:
beim Versuch das Tool zu reparieren, wurde es deinstalliert. Ich habe dann versucht es wieder neu zu installieren. Die Installation von McAfee bricht aber ab. Auch das Removal-Tool von McAfee bricht ab.
Soll ich einne anderen Virenscanner/Firewall installieren? Wenn ja, welchen empfiehlst Du?
Gruß Karsten

Hm....das doof!

Ich muss da mal noch was recherchieren und möchte dich bitte, zu warten! :)

Hallo,

Danke fürs Warten!
Versuche einmal das RemovalTool von McAfee im abgesicherten Modus.

Berichte! :)

Hallo Marius,
auch im geschützten Modus sagt das Tool "incomplete uninstallation. error obtaining Full permissiven for cleanup. See Log file for more Details."
wenn ich dann auf "view Logs" gehe, kommt die Meldung "der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird".
nach ok ist ein leeres Editor-Fenster auf. ich kann dann das Remoulade-Tool mit close beenden.
im taskmanager läuft unter Dienste ein Dienst namens 0066701332454761mcinstcleanup mit der beschreibung "mcafee application installier cleanup (0066701332454761)" und Status "beendet". unter Dienste.. steht der Dienst als Startplatz "automatisch". mehr ist von mcafee nicht mehr zu finden.
Gruß Karsten

Schritt 1: Microsoft FixIt

Downloader dir das Tool von hier und speichere es auf deinem Desktop.
Starte die Datei und folge den Anweisungen auf dem Bildschirm.

Schritt 2: OTL

Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Kopiere nun den Inhalt in die http://larusso.trojaner-board.de/Images/otlfix.jpg Textbox.

Code:

%SYSTEMDRIVE%\*

%PROGRAMFILES%\*

%LOCALAPPDATA%\*

%systemroot%\*. /mp /s

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Kopiere nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread

Hallo Marius,

habe das fixit tool installiert und laufen lassen (im Modus Probleme bei der Deinstallation). Er findet allerdings das mcafee security center nicht (und auch sonst nichts von mcafee, auch nicht den dienst). er fragt dann alternativ nach einem programm key, der mir allerdings nichts sagt. Wo kriege ich den her?
Der in meiner letzten Mail angegebene Dienst ist nach wie vor aktiv.
Ich habe alles als Administrator ausgeführt und auch das Removal Tool sagt immer noch das Gleiche.
Mit Schritt 2 habe ich mal noch nicht weiter gemacht.
Gruß Karsten

Hallo Marius,
1) McAfee:
ich habe zwischenzeitlich auch mal per Email beiMcafee um Tipps für die Deinstallation angefragt. Ich mail Dir die Antwort in jedem Fall in diesen Thread.

2) OTL
ich habe OTL inzwischen laufen lassen. Es hat aber nur eine OTL.txt erzeugt und keine extra.txt. Den Log anbei. Dabei ist mir beim Durchschauen eine exe namens Musiccitydownload.exe aufgefallen, deren Herkunft ich mir eigentlich nicht erklären kann.
Gruß Karsten

Code:

OTL logfile created on: 28.03.2012 22:30:44 - Run 2

OTL by OldTimer - Version 3.2.39.1     Folder = C:\Users\Karsten\Desktop

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

7,96 Gb Total Physical Memory | 7,15 Gb Available Physical Memory | 89,83% Memory free

15,92 Gb Paging File | 15,13 Gb Available in Paging File | 95,04% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 1384,87 Gb Total Space | 1172,08 Gb Free Space | 84,63% Space Free | Partition Type: NTFS

 

Computer Name: KARSTEN-PC | User Name: Karsten | Logged in as Administrator.

Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.03.19 01:14:40 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Karsten\Desktop\OTL.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV:64bit: - [2010.01.14 08:04:10 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2010.12.29 18:19:37 | 001,045,256 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2010.12.08 15:31:06 | 000,628,736 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)

SRV - [2010.10.26 19:26:58 | 000,236,016 | ---- | M] (CyberLink) [Auto | Stopped] -- C:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)

SRV - [2010.09.22 19:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)

SRV - [2010.09.21 15:49:00 | 002,286,976 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2010.09.04 02:15:22 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)

SRV - [2010.09.04 02:14:26 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)

SRV - [2010.08.21 01:53:08 | 000,689,472 | ---- | M] (SoftThinks SAS) [Auto | Stopped] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)

SRV - [2010.06.08 09:12:36 | 000,623,984 | ---- | M] (Juniper Networks) [Auto | Stopped] -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)

SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.01.09 22:34:24 | 004,925,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)

SRV - [2009.10.02 14:26:12 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009.06.09 16:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Stopped] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2011.07.17 19:22:58 | 000,088,480 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)

DRV:64bit: - [2011.07.17 19:22:58 | 000,046,400 | ---- | M] () [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)

DRV:64bit: - [2011.05.10 08:06:08 | 000,051,712 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010.11.20 15:34:02 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)

DRV:64bit: - [2010.11.20 15:34:02 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)

DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 13:35:32 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)

DRV:64bit: - [2010.11.20 13:35:20 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)

DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010.11.20 13:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2010.11.20 12:43:57 | 000,032,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser)

DRV:64bit: - [2010.09.06 09:19:54 | 000,020,552 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)

DRV:64bit: - [2010.09.06 09:11:32 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)

DRV:64bit: - [2010.07.30 15:18:00 | 000,026,624 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc)

DRV:64bit: - [2010.07.30 15:17:56 | 000,019,456 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd)

DRV:64bit: - [2010.07.20 12:38:24 | 000,159,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdm.sys -- (ssadmdm)

DRV:64bit: - [2010.07.20 12:38:24 | 000,126,952 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)

DRV:64bit: - [2010.07.20 12:38:24 | 000,125,416 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)

DRV:64bit: - [2010.07.20 12:38:24 | 000,036,328 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadadb.sys -- (androidusb)

DRV:64bit: - [2010.07.20 12:38:24 | 000,016,872 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)

DRV:64bit: - [2010.06.08 08:35:32 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt)

DRV:64bit: - [2010.04.27 04:25:20 | 000,172,104 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdm.sys -- (sscdmdm)

DRV:64bit: - [2010.04.27 04:25:20 | 000,136,264 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)

DRV:64bit: - [2010.04.27 04:25:20 | 000,019,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sscdmdfl.sys -- (sscdmdfl)

DRV:64bit: - [2010.03.19 04:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2010.02.27 01:32:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)

DRV:64bit: - [2010.02.03 15:38:30 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)

DRV:64bit: - [2010.01.29 08:33:38 | 000,116,736 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService)

DRV:64bit: - [2010.01.14 08:26:02 | 006,327,296 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag)

DRV:64bit: - [2010.01.14 07:10:58 | 000,185,344 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2009.10.16 13:32:24 | 000,321,064 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\k57nd60a.sys -- (k57nd60a) Broadcom NetLink (TM)

DRV:64bit: - [2009.10.02 22:58:58 | 000,537,112 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2009.09.17 22:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:47:48 | 000,023,104 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.18 14:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2008.08.28 12:44:42 | 000,025,600 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd)

DRV:64bit: - [2006.11.01 13:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV - [2012.02.02 00:06:42 | 000,025,072 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Programme\Dell Support Center\pcdsrvc_x64.pkms -- (PCDSRVC{1E208CE0-FB7451FF-06020101}_0)

DRV - [2010.09.06 09:11:32 | 000,016,392 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

DRV - [1999.10.13 15:19:20 | 000,012,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\USBSCAN.SYS -- (usbscan)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE:64bit: - HKLM\..\SearchScopes\{4A2C522E-9F74-47CC-8DAF-A2DD095CBB4D}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7

IE - HKLM\..\SearchScopes\{EBF9D3BC-690C-4268-85A4-8D33807C47E5}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7IRFD_deDE413

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledItems: windows-contacts-loader@as:0.3.1

FF - prefs.js..extensions.enabledItems: {CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}:7.3.4.44

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@mcafee.com/MVT: C:\Program Files (x86)\McAfee\Supportability\MVT\npmvtplugin.dll File not found

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.669: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.669: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.669: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.669: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.18: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2011.02.02 20:27:23 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.11.17 23:32:57 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.07.29 23:44:30 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.02.27 02:08:22 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2012.01.18 22:48:24 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011.02.02 20:27:23 | 000,000,000 | ---D | M]

 

[2011.01.05 19:23:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karsten\AppData\Roaming\mozilla\Extensions

[2011.01.05 19:23:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Karsten\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2012.01.05 22:16:31 | 000,000,000 | ---D | M] (Windows Contacts Loader) -- C:\USERS\KARSTEN\APPDATA\ROAMING\THUNDERBIRD\PROFILES\PG3BII1S.DEFAULT\EXTENSIONS\WINDOWS-CONTACTS-LOADER@AS

 

O1 HOSTS File: ([2012.03.20 23:31:39 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)

O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)

O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [RunDLLEntry_EptMon] C:\Windows\SysNative\EptMon64.DLL (Creative Technology Ltd.)

O4:64bit: - HKLM..\Run: [RunDLLEntry_THXCfg] C:\Windows\SysNative\THXCfg64.DLL (Creative Technology Ltd.)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)

O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()

O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\oem\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()

O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de)

O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)

O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia)

O4 - HKLM..\Run: [PDVD9LanguageShortcut] C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)

O4 - HKLM..\Run: [RemoteControl9] C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)

O4 - HKLM..\Run: [ShwiconXP9106] C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe (Alcor Micro Corp.)

O4 - HKLM..\Run: [StartCCC] c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [THX Audio Control Panel] C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe (Creative Technology Ltd)

O4 - HKLM..\Run: [TkBellExe] c:\program files (x86)\real\realplayer\Update\realsched.exe (RealNetworks, Inc.)

O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)

O4 - HKCU..\Run: [KiesHelper] C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe (Samsung)

O4 - HKCU..\Run: [KiesPDLR] C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()

O4 - HKCU..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)

O4 - HKCU..\Run: [NokiaOviSuite2] C:\Program Files (x86)\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe (Nokia)

O4 - HKLM..\RunOnce: [Launcher] C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe (Softthinks)

O4 - HKLM..\RunOnce: [restoresetting] c:\mfe\certfix.reg ()

O4 - Startup: C:\Users\Karsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk =  File not found

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found

O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found

O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found

O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O15 - HKCU\..Trusted Domains: internet ([]about in Trusted sites)

O15 - HKCU\..Trusted Domains: mcafee.com ([]http in Trusted sites)

O15 - HKCU\..Trusted Domains: mcafee.com ([]https in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab (QuickTime Object)

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab (DivXBrowserPlugin Object)

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://vpn.extranet.deutschebahn.com/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CE6AC17B-9AA1-4024-9DEF-7EB63AAB750B}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 

CREATERESTOREPOINT

Error creating restore point.

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.03.27 20:24:56 | 000,000,000 | ---D | C] -- C:\Users\Karsten\AppData\Local\ElevatedDiagnostics

[2012.03.23 00:24:55 | 000,000,000 | --SD | C] -- C:\Windows\SysWow64\Microsoft

[2012.03.23 00:24:30 | 001,832,544 | ---- | C] (McAfee, Inc.) -- C:\Users\Karsten\Desktop\MCPR.exe

[2012.03.23 00:08:20 | 000,000,000 | ---D | C] -- C:\mfe

[2012.03.22 22:42:10 | 000,000,000 | ---D | C] -- C:\Users\Karsten\AppData\Roaming\McAfee

[2012.03.22 21:19:01 | 000,000,000 | ---D | C] -- C:\Users\Karsten\AppData\Roaming\f-secure

[2012.03.22 21:18:51 | 000,000,000 | ---D | C] -- C:\ProgramData\F-Secure

[2012.03.22 21:12:19 | 000,000,000 | ---D | C] -- C:\Windows\Sun

[2012.03.20 23:35:41 | 000,000,000 | ---D | C] -- C:\Windows\temp

[2012.03.20 23:20:30 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2012.03.20 23:20:30 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2012.03.20 23:20:30 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2012.03.20 23:20:27 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT

[2012.03.20 21:10:05 | 000,000,000 | ---D | C] -- C:\Qoobox

[2012.03.20 21:02:42 | 004,440,469 | R--- | C] (Swearware) -- C:\Users\Karsten\Desktop\ComboFix.exe

[2012.03.19 01:14:40 | 000,594,432 | ---- | C] (OldTimer Tools) -- C:\Users\Karsten\Desktop\OTL.exe

[2012.03.19 00:31:15 | 000,000,000 | ---D | C] -- C:\Users\Karsten\AppData\Roaming\Malwarebytes

[2012.03.19 00:31:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[1 C:\Users\Karsten\AppData\Local\*.tmp files -> C:\Users\Karsten\AppData\Local\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.03.28 22:30:03 | 001,498,742 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.03.28 22:30:03 | 000,654,150 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.03.28 22:30:03 | 000,616,032 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.03.28 22:30:03 | 000,130,022 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.03.28 22:30:03 | 000,106,412 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.03.28 22:25:49 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.03.28 22:25:31 | 2115,301,375 | -HS- | M] () -- C:\hiberfil.sys

[2012.03.23 00:24:29 | 001,832,544 | ---- | M] (McAfee, Inc.) -- C:\Users\Karsten\Desktop\MCPR.exe

[2012.03.22 23:30:50 | 000,000,311 | ---- | M] () -- C:\Users\Karsten\Desktop\oas-disabled-fix.cmd

[2012.03.22 22:56:11 | 000,191,424 | ---- | M] () -- C:\Users\Karsten\Desktop\MVTHealthCheck.html

[2012.03.20 23:31:39 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2012.03.20 21:02:49 | 004,440,469 | R--- | M] (Swearware) -- C:\Users\Karsten\Desktop\ComboFix.exe

[2012.03.19 01:59:13 | 000,000,000 | ---- | M] () -- C:\Users\Karsten\defogger_reenable

[2012.03.19 01:14:40 | 000,594,432 | ---- | M] (OldTimer Tools) -- C:\Users\Karsten\Desktop\OTL.exe

[2012.03.19 00:46:56 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012.03.18 21:47:55 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.03.18 21:47:55 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.03.18 21:20:39 | 000,000,506 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job

[2012.03.18 20:39:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012.03.14 18:13:13 | 000,412,880 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.03.09 20:48:33 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job

[1 C:\Users\Karsten\AppData\Local\*.tmp files -> C:\Users\Karsten\AppData\Local\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.03.22 23:30:50 | 000,000,311 | ---- | C] () -- C:\Users\Karsten\Desktop\oas-disabled-fix.cmd

[2012.03.22 22:56:11 | 000,191,424 | ---- | C] () -- C:\Users\Karsten\Desktop\MVTHealthCheck.html

[2012.03.22 22:41:38 | 000,002,164 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Virtual Technician.lnk

[2012.03.20 23:20:30 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2012.03.20 23:20:30 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2012.03.20 23:20:30 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2012.03.20 23:20:30 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2012.03.20 23:20:30 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2012.03.19 01:59:13 | 000,000,000 | ---- | C] () -- C:\Users\Karsten\defogger_reenable

[2012.02.01 21:49:32 | 000,000,000 | ---- | C] () -- C:\Users\Karsten\AppData\Local\{0E2050BE-59A1-4497-A8CB-5A934A0161E7}

[2011.10.17 23:52:46 | 000,000,000 | ---- | C] () -- C:\Users\Karsten\AppData\Local\{5F26C0A2-48D5-48D8-8E8B-E960448578BA}

[2011.10.17 23:50:47 | 000,000,000 | ---- | C] () -- C:\Users\Karsten\AppData\Local\{31A78BD4-2568-4C86-AB30-C73B5333C45E}

[2011.06.07 11:13:38 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll

[2011.06.07 11:13:38 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll

[2011.06.07 11:13:38 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll

[2011.06.07 11:13:38 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll

[2011.06.07 11:13:38 | 000,030,568 | ---- | C] () -- C:\Windows\MusiccityDownload.exe

[2011.02.05 15:17:12 | 000,134,128 | ---- | C] () -- C:\Windows\ColorPic Uninstaller.exe

[2011.01.06 22:24:34 | 000,006,656 | ---- | C] () -- C:\Users\Karsten\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.01.05 19:08:49 | 000,020,531 | -H-- | C] () -- C:\ProgramData\M33KI

[2011.01.05 18:48:31 | 000,020,531 | -H-- | C] () -- C:\ProgramData\V36QQ

[2011.01.05 18:44:48 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\PF1800LC.Dll

[2011.01.05 18:44:48 | 000,049,152 | ---- | C] () -- C:\Windows\SysWow64\PWiaExt.dll

[2011.01.05 18:44:47 | 000,155,648 | ---- | C] () -- C:\Windows\SysWow64\daspi32u.dll

[2011.01.05 18:44:47 | 000,000,234 | ---- | C] () -- C:\Windows\Scanner.ini

[2010.12.30 02:40:45 | 000,001,035 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2010.12.29 18:20:19 | 000,001,264 | ---- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini

[2010.12.29 18:20:19 | 000,001,247 | ---- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini

[2010.12.29 18:20:19 | 000,001,247 | ---- | C] () -- C:\Windows\THXCfg_APOIM.ini

[2010.12.29 18:20:18 | 000,177,664 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL

[2010.12.29 18:20:18 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL

[2010.12.29 18:07:34 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

 
 ========== LOP Check ==========

 

[2011.02.22 22:10:49 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Canon

[2011.10.11 21:53:30 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Columbus Soft

[2011.01.09 00:32:10 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\EAC

[2012.03.22 21:19:01 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\f-secure

[2011.10.20 00:26:40 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\FileZilla

[2011.05.16 23:20:28 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\HandBrake

[2011.01.26 23:18:18 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Helios

[2012.03.18 17:52:14 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\IrfanView

[2011.04.30 15:44:21 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Jose Vázquez

[2012.02.09 08:59:58 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Juniper Networks

[2012.03.11 18:45:08 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Lasersoft Imaging

[2011.07.05 22:59:33 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Mobile Atlas Creator

[2011.12.28 18:54:53 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Mp3tag

[2011.01.14 19:39:35 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\PC Suite

[2011.01.22 18:07:00 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\PCDr

[2011.02.22 23:14:03 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Pixmantec

[2011.09.04 11:03:50 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Samsung

[2011.01.05 19:23:13 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Thunderbird

[2011.01.30 19:49:48 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\Ubisoft

[2011.05.15 12:20:27 | 000,000,000 | ---D | M] -- C:\Users\Karsten\AppData\Roaming\XMedia Recode

[2012.03.09 20:48:33 | 000,000,564 | ---- | M] () -- C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job

[2012.02.26 11:21:29 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

[2012.03.18 21:20:39 | 000,000,506 | ---- | M] () -- C:\Windows\Tasks\SystemToolsDailyTest.job

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %SYSTEMDRIVE%\* >

[2011.05.06 00:43:28 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp

[2012.03.20 23:35:39 | 000,018,409 | ---- | M] () -- C:\ComboFix.txt

[2010.12.30 02:57:34 | 000,005,094 | RH-- | M] () -- C:\dell.sdr

[2012.03.28 22:25:31 | 2115,301,375 | -HS- | M] () -- C:\hiberfil.sys

[2012.03.28 22:25:36 | 4252,057,599 | -HS- | M] () -- C:\pagefile.sys

[2012.03.19 22:10:30 | 000,085,350 | ---- | M] () -- C:\TDSSKiller.2.7.20.0_19.03.2012_21.09.43_log.txt

 
 < %PROGRAMFILES%\* >

[2012.03.23 00:08:20 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini

 
 < %LOCALAPPDATA%\* >

[2011.10.18 22:28:05 | 000,006,656 | ---- | M] () -- C:\Users\Karsten\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2011.10.12 21:57:18 | 000,110,536 | ---- | M] () -- C:\Users\Karsten\AppData\Local\GDIPFONTCACHEV1.DAT

[2012.02.01 21:49:32 | 000,000,000 | ---- | M] () -- C:\Users\Karsten\AppData\Local\{0E2050BE-59A1-4497-A8CB-5A934A0161E7}

[2011.10.17 23:50:47 | 000,000,000 | ---- | M] () -- C:\Users\Karsten\AppData\Local\{31A78BD4-2568-4C86-AB30-C73B5333C45E}

[2011.10.17 23:52:46 | 000,000,000 | ---- | M] () -- C:\Users\Karsten\AppData\Local\{5F26C0A2-48D5-48D8-8E8B-E960448578BA}

[1 C:\Users\Karsten\AppData\Local\*.tmp files -> C:\Users\Karsten\AppData\Local\*.tmp -> ]

 
 < %systemroot%\*. /mp /s >

 
 <           >
 

< End of report >

OK, die Schädlinge sind wir los - mit dem Installer-Problem verweise ich dich an unser Windows-Forum.

Lass uns aber vorher noch aufräumen:

Defogger re-enable

Starte bitte den Defogger und klicke den re-enable Button

ComboFix

Bitte vor der folgenden Aktion wieder temporär Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.

Windows-Taste + R drücke. Kopiere nun folgende Zeile in die Kommandozeile und klicke OK.

Code:

Combofix /Uninstall

http://larusso.trojaner-board.de/Images/CFuninstall.jpg

Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert, damit auch aus dieser die Schädlinge verschwinden.

Nun die eben deaktivierten Programme wieder aktivieren.

OTL

Starte bitte OTL und klicke auf Bereinigung.
Dies wird die meisten Tools entfernen, die wir zur Bereinigung benötigt haben. Sollte etwas bestehen bleiben, bitte mit Rechtsklick --> Löschen entfernen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Aktualität

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Antviren-Software

Gehe sicher immer eine Antiviren-Software installiert zu haben und dass diese auch up to date ist. Auch der beste Virenscanner ist sinnlos, wenn er nicht aktuell ist!
Eine Auswahl kostenloser Antivirenprogramme:

AVG Free Anti-Virus
Avast! Free Anti-Virus
Microsoft Security Essentials
Hinweis:MSE wird auch durch Windows Updates angeboten, falls kein Virenscanner am System erkannt wird

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner, um diesen zu AdBlockPlus hinzuzufügen, reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Sei mißtrauisch in sozialen Netzwerken (z.B. MeinVZ, Facebook, etc) - auch, wenn Nachrichten/Einträge scheinbar von einem deiner Freunde stammen, bedeutet das noch lange nicht, dass sie unschädlich sind (Malware kann seinen Rechner verseucht haben).
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, damit ich diesen Thread aus meinen Abos löschen kann.

Hallo Marius,
super und vielen Dank für Deine Unterstuetzung. Das Aufräumen habe ich erledigt.
Morgen werde ich versuchen mit dem mcafee-chatservice das installationsproblem zu beheben. wenn das nicht klappt, wende ich mich, wie von dir vorgeschlagen an das windows-forum.
solange der mcafee nicht wieder läuft, werde ich mal sicherheitshalber im abgesicherten Modus bleiben.
Ich melde mich dann nochmal final.
Nochmal ganz, ganz vielen Dank und ich werd mal versuchen, mich eurem board erkenntlich zu zeigen.
Auch Deine Sicherheitstipps werde ich mir über Ostern mal sukkzessive vornehmen.
Viele Grüße Karsten

Alles klar - melde dich dann per persönlicher Nachricht, ich schließe das Thema hier! :)

Dieses Thema scheint erledigt und wurde aus meinen Abos gelöscht.
Solltest du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und ein eigenes Thema erstellen!