Guten Morgen.
Oh jetzt tut sich wieder was:-) Code:
ComboFix 13-03-20.01 - Kerry 20.03.2013 9:22.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4063.2699 [GMT 1:00]
ausgeführt von:: c:\users\Kerry\Desktop\ComboFix.exe
AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Kerry\4.0
c:\users\Kerry\AppData\Roaming\.#
c:\users\Kerry\AppData\Roaming\.#\MBX@1014@1F52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1014@1F52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1024@322740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1024@322770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1024@6C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1024@6C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1028@312740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1028@312770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@102C@20B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@102C@20B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1038@1E12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1038@1E12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1038@2252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1038@2252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@103C@662740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@103C@662770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1044@20B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1044@20B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1050@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1050@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1054@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1054@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1064@6E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1064@6E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1070@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1070@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1074@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1074@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@107C@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@107C@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1080@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1080@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1080@A22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1080@A22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1084@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1084@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1088@2172740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1088@2172770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@108C@6A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@108C@6A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1090@2032740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1090@2032770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10A8@2122740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10A8@2122770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10AC@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10AC@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10B0@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10B0@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10BC@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10BC@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10C4@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10C4@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10E0@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10E0@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10E0@302740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10E0@302770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10F0@1F02740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10F0@1F02770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10F4@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@10F4@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1100@2F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1100@2F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1124@2032740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1124@2032770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1138@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1138@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1138@2072740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1138@2072770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@113C@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@113C@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@113C@682740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@113C@682770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1140@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1140@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1150@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1150@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@115C@6D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@115C@6D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1160@1F62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1160@1F62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1164@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1164@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1170@232740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1170@232770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1198@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1198@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11A8@2062740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11A8@2062770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11AC@1E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11AC@1E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11C4@1EB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11C4@1EB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11CC@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@11CC@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1204@1F22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1204@1F22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1214@6F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1214@6F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1224@6E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1224@6E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1258@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1258@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@125C@1F22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@125C@1F22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@125C@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@125C@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1264@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1264@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1280@232740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1280@232770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@129C@2252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@129C@2252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@129C@6E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@129C@6E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12B4@20F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12B4@20F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12C8@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12C8@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12D8@1FC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12D8@1FC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12E0@1E22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12E0@1E22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12E0@2062740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12E0@2062770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F0@1EA2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F0@1EA2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F0@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F0@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F4@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@12F4@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1300@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1300@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1318@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1318@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1318@2032740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1318@2032770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1320@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1320@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@132C@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@132C@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1334@1EE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1334@1EE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@134@392740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@134@392770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1344@1F52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1344@1F52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1344@3B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1344@3B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1348@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1348@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1348@952740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1348@952770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@134C@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@134C@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1354@20F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1354@20F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1354@A12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1354@A12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1384@21A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1384@21A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1394@922740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1394@922770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@139C@232740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@139C@232770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13A4@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13A4@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13B8@6C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13B8@6C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13C8@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13C8@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13DC@1F22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13DC@1F22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13DC@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@13DC@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1434@20A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1434@20A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@145C@20B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@145C@20B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1460@1E42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1460@1E42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1460@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1460@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1494@2072740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1494@2072770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14A4@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14A4@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14AC@702740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14AC@702770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14B8@1F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14B8@1F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14C4@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14C4@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14CC@1DC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14CC@1DC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14CC@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14CC@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14D4@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14D4@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14D8@232740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14D8@232770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14DC@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@14DC@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1510@1F52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1510@1F52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1514@1FC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1514@1FC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@151C@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@151C@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@151C@2072740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@151C@2072770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1534@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1534@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1550@8E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1550@8E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1564@20D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1564@20D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@156C@372740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@156C@372770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1570@302740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1570@302770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1584@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1584@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@158C@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@158C@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@159C@2D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@159C@2D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15A4@2C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15A4@2C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B0@20C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B0@20C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B0@2A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B0@2A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B4@1E52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B4@1E52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B8@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15B8@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15E8@772740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15E8@772770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15F0@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15F0@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15F8@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@15F8@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1610@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1610@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@162C@6A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@162C@6A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1644@1F72740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1644@1F72770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1648@2042740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1648@2042770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@165C@1C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@165C@1C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@165C@1F22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@165C@1F22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1668@2002740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1668@2002770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1670@2C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1670@2C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1678@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1678@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1688@2202740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1688@2202770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@168C@1FA2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@168C@1FA2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@168C@21B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@168C@21B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1694@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1694@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16A8@732740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16A8@732770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16B0@8C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16B0@8C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16B4@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16B4@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16C0@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16C0@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16C8@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16C8@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16D0@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16D0@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16E4@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@16E4@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1720@2012740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1720@2012770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1720@20F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1720@20F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1728@692740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1728@692770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1738@20E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1738@20E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1750@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1750@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1754@1FA2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1754@1FA2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1754@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1754@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1764@8C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1764@8C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1774@302740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1774@302770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@177C@20D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@177C@20D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1794@1DF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1794@1DF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17AC@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17AC@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17B0@1F82740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17B0@1F82770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17BC@6B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17BC@6B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17C8@1F72740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17C8@1F72770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17D0@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17D0@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17E8@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17E8@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17EC@1C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17EC@1C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F4@1D62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F4@1D62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F4@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F4@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F8@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@17F8@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1878@20F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1878@20F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@18A4@312740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@18A4@312770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@18B8@1FE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@18B8@1FE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1924@3F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1924@3F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1960@712740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1960@712770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1980@2022740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1980@2022770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19B8@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19B8@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19C0@1DD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19C0@1DD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19C0@2F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19C0@2F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19E4@3B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19E4@3B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19F0@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19F0@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19F4@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@19F4@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1A24@1FC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1A24@1FC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1A90@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1A90@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AD4@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AD4@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AE0@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AE0@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AF8@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1AF8@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B24@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B24@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B38@2012740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B38@2012770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B48@2122740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B48@2122770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B4C@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B4C@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B98@20C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1B98@20C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BB8@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BB8@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BC@1E72740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BC@1E72770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BC0@1DE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BC0@1DE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BD0@1D92740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@1BD0@1D92770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@218@2112740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@218@2112770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2518@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2518@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@280@1F32740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@280@1F32770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2900@2122740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2900@2122770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B0@2062740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B0@2062770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B0@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B0@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B4@2132740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B4@2132770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B8@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2B8@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2C4@1F92740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2C4@1F92770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2D4@372740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2D4@372770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2DC@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@2DC@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@354@1F92740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@354@1F92770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@358@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@358@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@36C@352740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@36C@352770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3A8@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3A8@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3B8@6E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3B8@6E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3E0@7B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3E0@7B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3FC@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@3FC@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@404@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@404@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@45C@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@45C@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@464@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@464@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@4A4@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@4A4@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@52C@1F32740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@52C@1F32770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@53C@1FE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@53C@1FE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@550@9D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@550@9D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@574@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@574@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@57C@2112740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@57C@2112770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@57C@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@57C@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@59C@2A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@59C@2A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5A4@21B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5A4@21B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5B4@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5B4@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5E0@1F32740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@5E0@1F32770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@604@3C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@604@3C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@620@20A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@620@20A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@638@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@638@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@65C@1F92740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@65C@1F92770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@69C@2172740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@69C@2172770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6B0@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6B0@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6BC@2C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6BC@2C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6DC@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6DC@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6E4@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6E4@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6E8@8B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6E8@8B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6F0@722740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6F0@722770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6FC@622740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@6FC@622770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@750@1F72740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@750@1F72770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@754@1EE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@754@1EE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@76C@692740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@76C@692770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@770@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@770@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@778@302740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@778@302770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@78C@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@78C@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7B4@672740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7B4@672770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7B8@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7B8@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7DC@1DF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7DC@1DF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7E8@302740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7E8@302770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7E8@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7E8@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F0@1E62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F0@1E62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F4@3F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F4@3F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F8@6E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7F8@6E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7FC@1FC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@7FC@1FC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@828@1E52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@828@1E52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@84C@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@84C@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@850@2042740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@850@2042770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@854@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@854@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@1EB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@1EB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@2192740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@2192770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@6F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@85C@6F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@860@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@860@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@864@312740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@864@312770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@868@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@868@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@874@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@874@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@884@6F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@884@6F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8BC@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8BC@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8E0@702740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8E0@702770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8F0@2B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8F0@2B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8FC@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@8FC@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@90C@2A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@90C@2A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@91C@20B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@91C@20B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@940@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@940@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@958@20F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@958@20F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@978@1E42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@978@1E42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9C4@3B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9C4@3B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9C8@20C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9C8@20C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9CC@1F42740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9CC@1F42770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9D4@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9D4@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9E0@20D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9E0@20D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9E8@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@9E8@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A04@2B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A04@2B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A10@1FF2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A10@1FF2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A44@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A44@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A4C@6B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A4C@6B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A5C@1EE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A5C@1EE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A7C@1E12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A7C@1E12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@1FE2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@1FE2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@2132740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@2132770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@2B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8@2B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A84@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A84@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8C@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@A8C@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AB4@2C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AB4@2C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AB8@1F12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AB8@1F12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AD8@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AD8@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@ADC@722740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@ADC@722770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AE0@1E82740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@AE0@1E82770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B08@3C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B08@3C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B0C@1E82740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B0C@1E82770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B2C@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B2C@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B84@382740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B84@382770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B8C@1FC2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@B8C@1FC2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BAC@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BAC@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BC0@2D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BC0@2D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BE8@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BE8@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BFC@2E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BFC@2E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BFC@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@BFC@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C0C@342740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C0C@342770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C18@1F92740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C18@1F92770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C34@2142740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C34@2142770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C3C@21E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C3C@21E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C40@2012740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C40@2012770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C58@2002740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C58@2002770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C60@1E52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C60@1E52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C74@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C74@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C80@662740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C80@662770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C84@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C84@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C9C@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@C9C@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CB4@8B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CB4@8B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CB8@2052740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CB8@2052770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CC8@362740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CC8@362770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CEC@1F62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@CEC@1F62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D04@652740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D04@652770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D04@792740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D04@792770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D10@232740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D10@232770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D14@2B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D14@2B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D28@2082740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D28@2082770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D30@2F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D30@2F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D3C@322740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D3C@322770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D4C@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D4C@262770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D50@1E12740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D50@1E12770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D54@1F22740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D54@1F22770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D58@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D58@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D5C@1F32740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D5C@1F32770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D8@2C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D8@2C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D80@2A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D80@2A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D84@1FD2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@D84@1FD2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DB4@3A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DB4@3A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DB4@3E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DB4@3E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DBC@1E52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DBC@1E52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DC0@9B2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DC0@9B2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD0@2E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD0@2E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD0@662740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD0@662770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD8@20E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD8@20E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD8@21A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DD8@21A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DDC@1DA2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DDC@1DA2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DE0@342740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DE0@342770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DEC@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DEC@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DF0@372740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@DF0@372770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E08@3D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E08@3D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E18@1E62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E18@1E62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E30@252740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E30@252770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E30@292740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E30@292770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E48@1EB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E48@1EB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E6C@1F52740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E6C@1F52770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E70@2022740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E70@2022770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E7C@6C2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E7C@6C2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E88@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E88@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E94@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E94@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E94@2E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E94@2E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E9C@2042740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@E9C@2042770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EAC@1F62740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EAC@1F62770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EB4@272740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EB4@272770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EC0@1FB2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EC0@1FB2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@ED8@672740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@ED8@672770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@2032740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@2032770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@6A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@6A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@702740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF0@702770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF4@2E2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF4@2E2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF4@9D2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EF4@9D2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EFC@682740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@EFC@682770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F1C@2A2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F1C@2A2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F1C@332740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F1C@332770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F70@1F82740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F70@1F82770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F80@2092740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F80@2092770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F88@2F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@F88@2F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FC0@282740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FC0@282770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FC4@1F32740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FC4@1F32770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FCC@702740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FCC@702770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FCC@8F2740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FCC@8F2770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FE8@242740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FE8@242770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FF8@2112740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FF8@2112770.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FF8@262740.###
c:\users\Kerry\AppData\Roaming\.#\MBX@FF8@262770.###
c:\windows\security\Database\tmp.edb
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
((((((((((((((((((((((((((((((((((((((( Treiber/Dienste )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
((((((((((((((((((((((( Dateien erstellt von 2013-02-20 bis 2013-03-20 ))))))))))))))))))))))))))))))
.
.
2013-03-20 08:36 . 2013-03-20 08:36 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-03-18 15:44 . 2013-03-18 15:44 -------- d-----w- c:\programdata\Malwarebytes
2013-03-17 14:08 . 2013-03-20 08:46 -------- d-----w- c:\users\Kerry\AppData\Roaming\Dropbox
2013-03-16 16:00 . 2013-03-16 16:00 -------- d-sh--w- c:\windows\SysWow64\%APPDATA%
2013-03-16 15:24 . 2013-03-16 15:24 -------- d-----w- c:\programdata\gubu
2013-03-12 11:39 . 2013-03-12 11:39 -------- d-----w- c:\users\Kerry\AppData\Roaming\Panel+
2013-03-12 11:39 . 2013-03-12 11:39 -------- d-----w- c:\users\Kerry\AppData\Local\Panel+
2013-03-11 18:40 . 2013-03-12 10:54 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird
2013-03-04 17:52 . 2013-03-11 18:40 -------- d-----w- c:\users\Kerry\AppData\Local\Thunderbird
2013-03-04 17:52 . 2013-03-04 17:52 -------- d-----w- c:\users\Kerry\AppData\Roaming\Thunderbird
2013-03-02 11:58 . 2013-03-02 11:58 -------- d-sh--w- c:\windows\system32\%APPDATA%
2013-03-02 11:38 . 2012-08-21 12:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2013-03-02 11:38 . 2013-03-02 11:38 -------- d-----w- c:\program files\iPod
2013-03-02 11:38 . 2013-03-02 11:38 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-03-02 11:38 . 2013-03-02 11:38 -------- d-----w- c:\program files\iTunes
2013-03-02 11:38 . 2013-03-02 11:38 -------- d-----w- c:\program files (x86)\iTunes
2013-02-28 17:40 . 2013-02-28 17:40 -------- d-----w- c:\users\Kerry\AppData\Roaming\Avira
2013-02-28 17:35 . 2013-03-18 13:18 -------- d-----w- c:\users\Kerry\AppData\Local\DoNotTrackPlus
2013-02-28 17:34 . 2013-02-28 17:34 -------- d-----w- c:\users\Kerry\AppData\Local\AskToolbar
2013-02-28 17:34 . 2013-02-28 17:35 -------- d-----w- c:\program files (x86)\Ask.com
2013-02-28 17:33 . 2013-02-28 17:25 27800 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2013-02-28 17:33 . 2013-02-28 17:25 129216 ----a-w- c:\windows\system32\drivers\avipbb.sys
2013-02-28 17:33 . 2013-02-28 17:25 99912 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2013-02-28 17:33 . 2013-02-28 17:33 -------- d-----w- c:\program files (x86)\Avira
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-13 18:23 . 2009-11-11 14:29 72013344 ----a-w- c:\windows\system32\MRT.exe
2013-03-13 11:09 . 2012-05-14 15:41 693976 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-03-13 11:09 . 2011-08-22 19:16 73432 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-02-12 05:45 . 2013-03-13 17:40 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 17:40 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-13 17:40 308736 ----a-w- c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 17:40 111104 ----a-w- c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-13 17:40 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 17:40 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll
2013-02-08 00:28 . 2013-02-26 10:49 9162192 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A167C436-F1D7-439A-8684-BA7E5525708B}\mpengine.dll
2013-01-17 00:28 . 2009-11-27 15:32 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-05 05:53 . 2013-02-14 11:42 5553512 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-01-05 05:00 . 2013-02-14 11:42 3967848 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2013-01-05 05:00 . 2013-02-14 11:42 3913064 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2013-01-04 13:41 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2013-01-04 13:41 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2013-01-04 05:46 . 2013-02-14 11:41 215040 ----a-w- c:\windows\system32\winsrv.dll
2013-01-04 04:51 . 2013-02-14 11:41 5120 ----a-w- c:\windows\SysWow64\wow32.dll
2013-01-04 04:43 . 2013-02-14 11:41 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2013-01-04 03:26 . 2013-02-14 11:41 3153408 ----a-w- c:\windows\system32\win32k.sys
2013-01-04 02:47 . 2013-02-14 11:41 25600 ----a-w- c:\windows\SysWow64\setup16.exe
2013-01-04 02:47 . 2013-02-14 11:41 7680 ----a-w- c:\windows\SysWow64\instnm.exe
2013-01-04 02:47 . 2013-02-14 11:41 2048 ----a-w- c:\windows\SysWow64\user.exe
2013-01-04 02:47 . 2013-02-14 11:41 14336 ----a-w- c:\windows\SysWow64\ntvdm64.dll
2013-01-03 06:00 . 2013-02-14 11:41 1913192 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-01-03 06:00 . 2013-02-14 11:41 288088 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-02-08 1521800]
"{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}"= "c:\program files (x86)\Yahoo!\Companion\Installs\cpn0\yt.dll" [2012-11-26 1525088]
.
[HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
.
[HKEY_CLASSES_ROOT\clsid\{81017ea9-9aa8-4a6a-9734-7af40e7d593f}]
[HKEY_CLASSES_ROOT\yt.YTNavAssistPlugin.1]
[HKEY_CLASSES_ROOT\TypeLib\{003028C2-EA1C-4676-A316-B5CB50917002}]
[HKEY_CLASSES_ROOT\yt.YTNavAssistPlugin]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2013-02-08 14:10 1521800 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{d28c7e56-2cc6-415c-8727-d71334085926}"= "mscoree.dll" [2010-11-05 297808]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2013-02-08 1521800]
.
[HKEY_CLASSES_ROOT\clsid\{d28c7e56-2cc6-415c-8727-d71334085926}]
[HKEY_CLASSES_ROOT\IEToolbar.Toolbar]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 129272 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 129272 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 129272 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 129272 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-09-06 39408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Messenger (Yahoo!)"="c:\progra~2\Yahoo!\Messenger\YahooMessenger.exe" [2009-11-10 5244216]
"Panel+"="c:\users\Kerry\AppData\Local\Panel+\service\PanelPlusService.exe" [2013-02-21 140880]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2009-05-26 317288]
"StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-07-10 98304]
"NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-17 538472]
"MarketingTools"="c:\program files (x86)\Sony\Marketing Tools\MarketingTools.exe" [2009-09-06 26624]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-01-28 59720]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2009-11-10 417792]
"Nikon Message Center 2"="c:\program files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe" [2010-05-25 619008]
"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"MailCheck IE Broker"="c:\program files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck_Broker.exe" [2012-10-05 1459848]
"ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2013-02-08 1644680]
"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-02-28 385248]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-02-20 152392]
.
c:\users\Kerry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Kerry\AppData\Roaming\Dropbox\bin\Dropbox.exe [2013-3-12 26043088]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-7-1 1079584]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="userinit.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2009-07-01 09:49 98304 ----a-w- c:\windows\System32\VESWinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 DiscountfinderService;DiscountfinderService;c:\programdata\Rabatt-Finder\DFService.exe [x]
R2 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2009-06-26 362992]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-05-26 191752]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2009-07-30 35104]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [2009-08-05 139264]
R3 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2009-06-26 313840]
R3 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2009-07-27 120104]
R3 SOHDBSvr;VAIO Media plus Database Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [2009-07-27 70952]
R3 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2009-07-27 427304]
R3 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2009-07-27 75048]
R3 SOHPlMgr;VAIO Media plus Playlist Manager;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [2009-07-27 91432]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-12-13 54784]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2009-06-26 468264]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2009-06-26 357672]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2009-06-17 110888]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2010-08-04 1255736]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-05-20 55280]
S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys [2013-02-28 27800]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-07-27 203264]
S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [2013-02-28 86752]
S2 AntiVirWebService;Avira Browser-Schutz;c:\program files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [2013-02-28 565472]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-03-10 249648]
S2 RtkAudioService;Realtek Audio Service;c:\program files\Realtek\Audio\HDA\RtkAudioService64.exe [2009-07-24 189984]
S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2008-09-18 104960]
S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe [2009-07-16 411496]
S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2009-07-22 642920]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2009-08-12 522240]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;c:\windows\system32\DRIVERS\netw5v64.sys [2009-06-05 5435904]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2009-06-11 11392]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys [2009-07-31 393216]
.
.
Inhalt des "geplante Tasks" Ordners
.
2013-03-20 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-14 11:09]
.
2013-03-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-06 08:06]
.
2013-03-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2009-09-06 08:06]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 162552 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 162552 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 162552 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-03-12 06:39 162552 ----a-w- c:\users\Kerry\AppData\Roaming\Dropbox\bin\DropboxExt64.17.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2009-07-24 7938080]
"Skytel"="c:\program files\Realtek\Audio\HDA\Skytel.exe" [2009-07-24 1833504]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2009-06-04 186904]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-08-17 171520]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService
FontCache
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.google.de/
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
uInternet Settings,ProxyServer = http=localhost:44413
IE: Nach Microsoft E&xel exportieren - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
LSP: c:\program files (x86)\Avira\AntiVir Desktop\avsda.dll
TCP: DhcpNameServer = 192.168.0.1
Handler: webde - {8FAF0273-9CA8-4efc-9536-1E35E254D5CD} - c:\program files (x86)\WEB.DE MailCheck\IE\WEB.DE_MailCheck.dll
FF - ProfilePath - c:\users\Kerry\AppData\Roaming\Mozilla\Firefox\Profiles\ubm6n0lk.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://search.avira.com/?l=dis&o=APN10261&gct=hp&dc=EU&locale=de_DE
FF - ExtSQL: 2013-02-28 18:35; toolbar@ask.com; c:\users\Kerry\AppData\Roaming\Mozilla\Firefox\Profiles\ubm6n0lk.default\extensions\toolbar@ask.com
FF - ExtSQL: 2013-03-12 12:39; IpsosPanelPlus@ipsosinteractive.com; c:\users\Kerry\AppData\Local\Panel+\toolbar_ff
FF - ExtSQL: 2013-03-16 16:28; discountfinder@moneymillionaire.com; c:\programdata\Rabatt-Finder\FFExtension20130221120752
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
SafeBoot-mcmscsvc
SafeBoot-MCODS
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (LocalSystem)
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=hex:51,66,7a,6c,4c,1d,38,12,5c,be,8a,
eb,c9,8f,bc,54,f6,39,43,d0,22,43,0b,9c
"{D4027C7F-154A-4066-A1AD-4243D8127440}"=hex:51,66,7a,6c,4c,1d,38,12,11,7f,11,
d0,78,5b,08,05,de,bb,01,03,dd,4c,30,54
"{C424171E-592A-415A-9EB1-DFD6D95D3530}"=hex:51,66,7a,6c,4c,1d,38,12,70,14,37,
c0,18,17,34,04,e1,a7,9c,96,dc,03,71,24
"{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:51,66,7a,6c,4c,1d,38,12,df,c1,0b,
27,57,07,ba,54,e4,0e,43,d0,22,fb,89,5b
"{D28C7E56-2CC6-415C-8727-D71334085926}"=hex:51,66,7a,6c,4c,1d,38,12,38,7d,9f,
d6,f4,62,32,04,f8,31,94,53,31,56,1d,32
"{02478D38-C3F9-4EFB-9B51-7695ECA05670}"=hex:51,66,7a,6c,4c,1d,38,12,56,8e,54,
06,cb,8d,95,0b,e4,47,35,d5,e9,fe,12,64
"{18DF081C-E8AD-4283-A596-FA578C2EBDC3}"=hex:51,66,7a,6c,4c,1d,38,12,72,0b,cc,
1c,9f,a6,ed,07,da,80,b9,17,89,70,f9,d7
"{1D970ED5-3EDA-438D-BFFD-715931E2775B}"=hex:51,66,7a,6c,4c,1d,38,12,bb,0d,84,
19,e8,70,e3,06,c0,eb,32,19,34,bc,33,4f
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"=hex:51,66,7a,6c,4c,1d,38,12,0a,d7,23,
94,30,02,d1,0f,f1,da,12,24,73,56,27,d2
"{AA58ED58-01DD-4D91-8333-CF10577473F7}"=hex:51,66,7a,6c,4c,1d,38,12,36,ee,4b,
ae,ef,4f,ff,08,fc,25,8c,50,52,2a,37,e3
"{BF42D4A8-016E-4FCD-B1EB-837659FD77C6}"=hex:51,66,7a,6c,4c,1d,38,12,c6,d7,51,
bb,5c,4f,a3,0a,ce,fd,c0,36,5c,a3,33,d2
"{DBC80044-A445-435B-BC74-9C25C1C588A9}"=hex:51,66,7a,6c,4c,1d,38,12,2a,03,db,
df,77,ea,35,06,c3,62,df,65,c4,9b,cc,bd
"{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}"=hex:51,66,7a,6c,4c,1d,38,12,cf,4e,be,
f9,90,2f,b6,0a,e3,01,c5,b7,a9,7a,14,95
"{FF059E31-CC5A-4E2E-BF3B-96E929D65503}"=hex:51,66,7a,6c,4c,1d,38,12,5f,9d,16,
fb,68,82,40,0b,c0,2d,d5,a9,2c,88,11,17
"{BDEADE7F-C265-11D0-BCED-00A0C90AB50F}"=hex:51,66,7a,6c,4c,1d,38,12,11,dd,f9,
b9,57,8c,be,54,c3,fb,43,e0,cc,54,f1,1b
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
@Denied: (2) (LocalSystem)
"Timestamp"=hex:b7,fc,72,1c,9c,0b,ce,01
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,04,4c,60,67,e7,6d,43,a7,41,8e,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,04,4c,60,67,e7,6d,43,a7,41,8e,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files (x86)\Avira\AntiVir Desktop\avguard.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Yahoo!\Messenger\ymsgr_tray.exe
c:\users\Kerry\AppData\Local\Panel+\service\PanelPlusNet.exe
c:\users\Kerry\AppData\Local\Panel+\service\PanelPlusNet.exe
c:\program files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
c:\program files (x86)\Common Files\Java\Java Update\jucheck.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-03-20 10:12:40 - PC wurde neu gestartet
ComboFix-quarantined-files.txt 2013-03-20 09:12
.
Vor Suchlauf: 10 Verzeichnis(se), 408.714.665.984 Bytes frei
Nach Suchlauf: 16 Verzeichnis(se), 415.141.781.504 Bytes frei
.
- - End Of File - - 6667AC18C4ABAB01A2D7775F9A675251
|
Lesestoff:
GMER herunter: (Dateiname zufällig) 
Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
aswMBR.exe und speichere die Datei auf deinem Desktop.
TDSSKiller.exe und speichere diese Datei auf dem Desktop
AdwCleaner auf deinen Desktop.
