Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   getwindowinfo öfnet sich permanent von alleine (https://www.trojaner-board.de/157219-getwindowinfo-oefnet-permanent-alleine.html)

lawand 04.08.2014 11:45
getwindowinfo öfnet sich permanent von alleine
 
Hallo ,
seit einiger Zeit öffnet sich auf meinem Pc mein IE beim Start meines Pcs . Trotz des Schließens vom IE , öffnet er sich immer wieder von neu . Im Forum habe ich auch einen Beitrag von DerF4lke gefunden , der das Problem auch hatte , jedoch habe ich noch nichts gemacht . Ich habe einen Win 7 rechner von Lenovo

Warlord711 04.08.2014 11:46
Hallo lawand

:hallo:

Mein Name ist Timo und ich werde Dir bei deinem Problem behilflich sein.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
  • Nur Scans durchführen zu denen Du von einem Helfer aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
  • Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
  • Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf.

Hinweis:
Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist immer der sicherste Weg.

Wir "arbeiten" hier alle freiwillig und in unserer Freizeit *hust*. Daher kann es bei Antworten zu Verzögerungen kommen.
Solltest du innerhalb 48 Std keine Antwort von mir erhalten, dann schreib mit eine PM
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis ich oder jemand vom Team sagt, dass Du clean bist.


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


lawand 04.08.2014 12:33
Hier die Dateien :
FRST.txt :
FRST Logfile:
[CODE]Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:2-08-2014
Ran by Lawand (administrator) on PC on 04-08-2014 13:30:58
Running from C:\Users\Lawand\Desktop
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Update Software\winclient32.exe
(OpenLimit SignCubes AG) C:\Program Files\AusweisApp\siqBootLoader.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [Akamai NetSession Interface] => "C:\Users\Lawand\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [AusweisApp] => C:\Program Files\AusweisApp\siqBootLoader.exe [2518656 2014-01-24] (OpenLimit SignCubes AG)
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\MountPoints2: F - F:\LaunchU3.exe -a
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================








Und die Addition.txt :FRST Additions Logfile:
Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version:2-08-2014
Ran by Lawand at 2014-08-04 13:31:45
Running from C:\Users\Lawand\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2540 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.4.0.2540 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.6.636 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AusweisApp (HKLM\...\{BA6CDB7A-F5D7-4341-99E1-1FF0AAEAF1D8}) (Version: 1.13.0 - OpenLimit SignCubes AG)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A3AD381D-848C-4478-80DC-228E37309308}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{65480649-2AA6-4C5C-AAE8-DB35335D98A7}) (Version:  - Microsoft)
DigitalSimulatorV5.57 (remove only) (HKLM\...\DigitalSimulatorV5.57) (Version:  - )
FGS Cash (HKLM\...\FGS Cash5.3.0) (Version: 5.3.0 - FGS Software)
Fraps (remove only) (HKLM\...\Fraps) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Green Line 4 Sprachtrainer (HKLM\...\{577F714E-6F8C-4257-B936-58D0CF85F314}) (Version: 1.00.000 - Klett)
iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) SE Development Kit 7 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170000}) (Version: 1.7.0.0 - Oracle)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 6.5.4 - Notepad++ Team)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CC (Version: 12.0 - Adobe Systems Incorporated) Hidden
Reflector (HKLM\...\{23B3CC0E-24D9-438E-A16D-3E2608B67628}) (Version: 1.3.1.0 - Squirrels)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{968E82F6-FAF7-45E0-BCC0-EF8AA31A4EB3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{97C39B81-3054-4AB4-B11D-A656DE619982}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589370) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{150A0FF0-AF69-4132-BD93-1E34F63FC8A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B1FA5E8C-2342-45AF-8A62-5E860042F8DF}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{1CBEDB37-C438-473F-8BA0-2535B0D237E2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{24BD08F8-FF6E-4DD8-BE49-3659AE78A819}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9CFD026D-EB1C-48C2-9DD2-8E8875F251B2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B7EA8070-C37F-4617-82F4-52CF3304595A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{9BC5FF1D-9626-44D7-BC7F-EB44BD8BDB9F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{D27F6360-AE1E-4C8C-8ECD-C0375E20B923}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{06EF2BF7-7351-4D70-A0D5-588FCCF9808D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{07017577-FBD6-45E2-A796-659E8F428057}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{07017577-FBD6-45E2-A796-659E8F428057}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B23AED0C-4813-4B49-9870-2F0968824E87}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E249DF0B-9318-47AC-A6C2-A860FF1BEC3C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{56962EB1-4DD3-48BB-934B-EA4C4516D89A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{63AED158-0508-4738-A811-840B2053EF3B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.PROPLUSR_{AE4413A8-4182-4883-B0BB-AC34CDFB56BC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{02DB183E-6F67-4906-A391-325874C5DA87}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{FC6618D2-F75D-4FDD-B396-E4B0C0D757B6}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{FC6618D2-F75D-4FDD-B396-E4B0C0D757B6}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3EFF1957-7DEA-4C7A-8E9C-2D6D58E4B2ED}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CA0F0611-10FB-47D4-A642-E3BABCC73393}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CA0F0611-10FB-47D4-A642-E3BABCC73393}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{190EC86F-5867-4D7A-B9F3-D14D82C26F3D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{15033648-0DAB-4BE8-B84B-D1139BD0563F}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{15033648-0DAB-4BE8-B84B-D1139BD0563F}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2837632) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6D8F4981-88A1-4386-8B3C-A51021FD8395}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 5.10 Beta 4 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\GoogleUpdate.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Lawand\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Chrome\Application\21.0.1180.89\delegate_execute.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{9f9ae670-cc3b-48b6-bb33-2eb7bd316d58}\InprocServer32 -> C:\Games\GreenWebPlayer\greenwebplayerax.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}\InprocServer32 -> %LOCALAPPDATA%\Pokki\ocdeskband_0.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File

==================== Restore Points  =========================

04-08-2014 09:32:40 Installed Microsoft Fix it 50195

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {21162EC4-C2A3-4E6F-A1E1-3DCBC0F06BED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-22] (Google Inc.)
Task: {38EA1287-E15A-409A-B54C-F15EE31697AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {5C467E77-6EC9-46AC-947F-4E4A2E2517E2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5E66F55A-95F5-4FCA-8901-8C550AC74913} - System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-Lawand PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-04-08] (Microsoft Corporation)
Task: {72F013AE-CEE2-486D-B7E4-705D563182B7} - System32\Tasks\{5BD5F231-8EA4-458F-BAE1-651C3225D8B3} => C:\Program Files\3DS Emulator\3DSemulator.exe
Task: {95AD39D2-DEF0-4634-AEA2-9874BB567E71} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9DCE34C8-753D-4277-9379-A9996ED95275} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A110DD2C-26B8-40C2-8D3D-9F21B805A562} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {E9D4264A-BFD0-44EC-B89E-83AFCF338236} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-22] (Google Inc.)
Task: {EEFAC5FD-4879-4C80-9090-4DF2E2C23677} - System32\Tasks\{AC258CA1-E057-488F-9A23-24D658F9BD98} => C:\Program Files\3DS Emulator\3DSemulator.exe
Task: {EFD8531A-B1F4-4F7A-A20F-D9451F84042D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-13 20:51 - 2013-09-13 20:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 20:51 - 2013-09-13 20:51 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-26 22:56 - 2014-02-19 23:27 - 00639488 _____ () C:\Program Files\Update Software\winclient32.exe
2014-02-26 22:56 - 2014-02-14 16:05 - 00236544 _____ () C:\Program Files\Update Software\sqlite3.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:B606BA34

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Lawand^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lawand^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lync => "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9173


System errors:
=============
Error: (08/04/2014 01:29:15 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (08/03/2014 00:44:25 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2014 um 18:11:20 unerwartet heruntergefahren.

Error: (08/02/2014 04:22:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (08/02/2014 04:22:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (08/02/2014 04:22:17 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (08/02/2014 04:22:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/02/2014 04:22:07 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (08/02/2014 04:21:28 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2014 um 14:15:08 unerwartet heruntergefahren.

Error: (08/02/2014 00:29:26 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (08/01/2014 04:43:35 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.


Microsoft Office Sessions:
=========================
Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9173


==================== Memory info ===========================

Percentage of memory in use: 45%
Total physical RAM: 1917.24 MB
Available physical RAM: 1053.18 MB
Total Pagefile: 3834.48 MB
Available Pagefile: 1844.98 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.5 GB) (Free:1.48 GB) NTFS
Drive d: () (Fixed) (Total:872.92 GB) (Free:372.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 7DDABF90)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=873 GB) - (Type=07 NTFS)

==================== End Of Log ============================
--- --- ---

--- --- ---

Warlord711 04.08.2014 12:34
Bitte in Code Tags posten.

Die Addition.txt auch.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

lawand 04.08.2014 12:40
Addition.txt :


Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version:2-08-2014
Ran by Lawand at 2014-08-04 13:31:45
Running from C:\Users\Lawand\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 3.4.0.2540 - Adobe Systems Incorporated)
Adobe AIR (Version: 3.4.0.2540 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 11 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 11.4.402.287 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Photoshop CC (HKLM\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM\...\Adobe Shockwave Player) (Version: 11.6.6.636 - Adobe Systems, Inc.)
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AusweisApp (HKLM\...\{BA6CDB7A-F5D7-4341-99E1-1FF0AAEAF1D8}) (Version: 1.13.0 - OpenLimit SignCubes AG)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.5.464 - Avira)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.09 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A3AD381D-848C-4478-80DC-228E37309308}) (Version:  - Microsoft)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{65480649-2AA6-4C5C-AAE8-DB35335D98A7}) (Version:  - Microsoft)
DigitalSimulatorV5.57 (remove only) (HKLM\...\DigitalSimulatorV5.57) (Version:  - )
FGS Cash (HKLM\...\FGS Cash5.3.0) (Version: 5.3.0 - FGS Software)
Fraps (remove only) (HKLM\...\Fraps) (Version:  - )
Google Chrome (HKLM\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Update Helper (Version: 1.3.24.15 - Google Inc.) Hidden
Green Line 4 Sprachtrainer (HKLM\...\{577F714E-6F8C-4257-B936-58D0CF85F314}) (Version: 1.00.000 - Klett)
iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 55 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) SE Development Kit 7 (HKLM\...\{32A3A4F4-B792-11D6-A78A-00B0D0170000}) (Version: 1.7.0.0 - Oracle)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 2010 Service Pack 1 (SP1) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}) (Version:  - Microsoft)
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM\...\Notepad++) (Version: 6.5.4 - Notepad++ Team)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF Settings CC (Version: 12.0 - Adobe Systems Incorporated) Hidden
Reflector (HKLM\...\{23B3CC0E-24D9-438E-A16D-3E2608B67628}) (Version: 1.3.1.0 - Squirrels)
Safari (HKLM\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (Version:  - Microsoft) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
TuneUp Utilities Language Pack (de-DE) (Version: 13.0.3020.2 - TuneUp Software) Hidden
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2881085) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{122B0E69-64AF-41BE-B3F6-D387A7E7E687}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2850074) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{968E82F6-FAF7-45E0-BCC0-EF8AA31A4EB3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{A8686D24-1E89-43A1-973E-05A258D2B3F8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553157) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{97C39B81-3054-4AB4-B11D-A656DE619982}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{48E1B6C2-7299-4F3F-AA63-42F0ACE55AA4}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{18B3CF2A-73F7-4716-B1AE-86D68726D408}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFB525A0-E1C0-4E32-9968-FE401BC87363}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589370) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{150A0FF0-AF69-4132-BD93-1E34F63FC8A3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ED31DE9A-3E13-4E2C-9106-E0D8AFFB9FA6}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B1FA5E8C-2342-45AF-8A62-5E860042F8DF}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{1CBEDB37-C438-473F-8BA0-2535B0D237E2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760758) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{24BD08F8-FF6E-4DD8-BE49-3659AE78A819}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9CFD026D-EB1C-48C2-9DD2-8E8875F251B2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7610F07-E844-4444-8E1D-D5BC8AD0B4C5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{45B7D395-EB9B-414F-9E46-5849B42326E2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{66421820-D3CA-450A-898C-78D7E40108E6}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1644D7F6-90EE-4252-8884-18E4E330529D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B7EA8070-C37F-4617-82F4-52CF3304595A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{9BC5FF1D-9626-44D7-BC7F-EB44BD8BDB9F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{D27F6360-AE1E-4C8C-8ECD-C0375E20B923}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{5D6439FF-D651-4B13-B52E-2508AB9DE19D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880464) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{06EF2BF7-7351-4D70-A0D5-588FCCF9808D}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{07017577-FBD6-45E2-A796-659E8F428057}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880987) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{07017577-FBD6-45E2-A796-659E8F428057}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0016-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{90150000-0090-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{01B80B63-C638-4004-9148-75B8C8518B1E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881074) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{B23AED0C-4813-4B49-9870-2F0968824E87}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{E249DF0B-9318-47AC-A6C2-A860FF1BEC3C}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{56962EB1-4DD3-48BB-934B-EA4C4516D89A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{63AED158-0508-4738-A811-840B2053EF3B}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881084) 32-Bit Edition (HKLM\...\{90150000-001F-0410-0000-0000000FF1CE}_Office15.PROPLUSR_{AE4413A8-4182-4883-B0BB-AC34CDFB56BC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881086) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{02DB183E-6F67-4906-A391-325874C5DA87}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 32-Bit Edition (HKLM\...\{90150000-00BA-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{FC6618D2-F75D-4FDD-B396-E4B0C0D757B6}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2881087) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{FC6618D2-F75D-4FDD-B396-E4B0C0D757B6}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3EFF1957-7DEA-4C7A-8E9C-2D6D58E4B2ED}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 32-Bit Edition (HKLM\...\{90150000-00A1-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{CA0F0611-10FB-47D4-A642-E3BABCC73393}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{CA0F0611-10FB-47D4-A642-E3BABCC73393}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{1BCA67A6-5329-48D0-A088-C097AC7A14BD}) (Version:  - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{BC6DFBFD-16DD-47E1-A7EF-2C062930FA4F}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{190EC86F-5867-4D7A-B9F3-D14D82C26F3D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 32-Bit Edition (HKLM\...\{90150000-0018-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{15033648-0DAB-4BE8-B84B-D1139BD0563F}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2881075) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{15033648-0DAB-4BE8-B84B-D1139BD0563F}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{90150000-0019-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7500AD77-83C6-400B-8B2F-F8E401A7B697}) (Version:  - Microsoft)
Update for Microsoft Visio 2013 (KB2837632) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6D8F4981-88A1-4386-8B3C-A51021FD8395}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{90150000-006E-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{25C61889-2E44-4BE1-9E96-9364BFDCF501}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{A7CD05CC-CA85-428C-91FD-74A908D126E1}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-001A-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-001B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{90150000-012B-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2881080) 32-Bit Edition (HKLM\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{2C43B8B8-09A1-4D09-B4B9-B247A7348D75}) (Version:  - Microsoft)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR 5.10 Beta 4 (32-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{022105BD-948A-40C9-AB42-A3300DDF097F}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\GoogleUpdate.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{2F0E2680-9FF5-43C0-B76E-114A56E93598}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Lawand\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS)
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{51F9E8EF-59D7-475B-A106-C7EA6F30C119}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Chrome\Application\21.0.1180.89\delegate_execute.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{634059C0-D264-4B2C-AE80-F73E48D33E5B}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.123\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{9f9ae670-cc3b-48b6-bb33-2eb7bd316d58}\InprocServer32 -> C:\Games\GreenWebPlayer\greenwebplayerax.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{A75BE48D-BF58-4A8B-B96C-F9A09DFB9844}\InprocServer32 -> %LOCALAPPDATA%\Pokki\ocdeskband_0.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C442AC41-9200-4770-8CC0-7CDB4F245C55}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{C5A2122B-A05B-4FD8-AE49-91990AE10998}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{E67BE843-BBBE-4484-95FB-05271AE86750}\localserver32 -> "C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\GoogleUpdateOnDemand.exe" No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.115\psuser.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Lawand\AppData\Roaming\Dropbox\bin\DropboxExt.17.dll No File
CustomCLSID: HKU\S-1-5-21-2722409785-1221214759-2200874239-1003_Classes\CLSID\{FB994D36-B312-46CE-A40B-CF63980641F9}\InprocServer32 -> C:\Users\Lawand\AppData\Local\Google\Update\1.3.21.111\psuser.dll No File

==================== Restore Points  =========================

04-08-2014 09:32:40 Installed Microsoft Fix it 50195

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {21162EC4-C2A3-4E6F-A1E1-3DCBC0F06BED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-22] (Google Inc.)
Task: {38EA1287-E15A-409A-B54C-F15EE31697AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-12-17] (Piriform Ltd)
Task: {5C467E77-6EC9-46AC-947F-4E4A2E2517E2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5E66F55A-95F5-4FCA-8901-8C550AC74913} - System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-Lawand PC => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2014-04-08] (Microsoft Corporation)
Task: {72F013AE-CEE2-486D-B7E4-705D563182B7} - System32\Tasks\{5BD5F231-8EA4-458F-BAE1-651C3225D8B3} => C:\Program Files\3DS Emulator\3DSemulator.exe
Task: {95AD39D2-DEF0-4634-AEA2-9874BB567E71} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9DCE34C8-753D-4277-9379-A9996ED95275} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {A110DD2C-26B8-40C2-8D3D-9F21B805A562} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: {E9D4264A-BFD0-44EC-B89E-83AFCF338236} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-22] (Google Inc.)
Task: {EEFAC5FD-4879-4C80-9090-4DF2E2C23677} - System32\Tasks\{AC258CA1-E057-488F-9A23-24D658F9BD98} => C:\Program Files\3DS Emulator\3DSemulator.exe
Task: {EFD8531A-B1F4-4F7A-A20F-D9451F84042D} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-13 20:51 - 2013-09-13 20:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2013-09-13 20:51 - 2013-09-13 20:51 - 01242952 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-02-26 22:56 - 2014-02-19 23:27 - 00639488 _____ () C:\Program Files\Update Software\winclient32.exe
2014-02-26 22:56 - 2014-02-14 16:05 - 00236544 _____ () C:\Program Files\Update Software\sqlite3.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-07-21 14:30 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:B606BA34

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Lawand^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^An OneNote senden.lnk => C:\Windows\pss\An OneNote senden.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Lawand^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\Windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Lync => "C:\Program Files\Microsoft Office\Office15\lync.exe" /fromrunkey
MSCONFIG\startupreg: msnmsgr => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9173


System errors:
=============
Error: (08/04/2014 01:29:15 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (08/03/2014 00:44:25 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2014 um 18:11:20 unerwartet heruntergefahren.

Error: (08/02/2014 04:22:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (08/02/2014 04:22:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows Search erreicht.

Error: (08/02/2014 04:22:17 PM) (Source: DCOM) (EventID: 10005) (User: )
Description: 1053WSearch{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (08/02/2014 04:22:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/02/2014 04:22:07 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Windows Search" wurde mit folgendem dienstspezifischem Fehler beendet: %%-1073473535.

Error: (08/02/2014 04:21:28 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎02.‎08.‎2014 um 14:15:08 unerwartet heruntergefahren.

Error: (08/02/2014 00:29:26 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (08/01/2014 04:43:35 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.


Microsoft Office Sessions:
=========================
Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 12184

Error: (08/04/2014 01:25:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11170

Error: (08/04/2014 01:25:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10171

Error: (08/04/2014 01:25:20 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (08/04/2014 01:25:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 9173


==================== Memory info ===========================

Percentage of memory in use: 45%
Total physical RAM: 1917.24 MB
Available physical RAM: 1053.18 MB
Total Pagefile: 3834.48 MB
Available Pagefile: 1844.98 MB
Total Virtual: 2047.88 MB
Available Virtual: 1912.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:58.5 GB) (Free:1.48 GB) NTFS
Drive d: () (Fixed) (Total:872.92 GB) (Free:372.86 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 7DDABF90)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=873 GB) - (Type=07 NTFS)

==================== End Of Log ============================




FRST.txt :




FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:2-08-2014
Ran by Lawand (administrator) on PC on 04-08-2014 13:30:58
Running from C:\Users\Lawand\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Update Software\winclient32.exe
(OpenLimit SignCubes AG) C:\Program Files\AusweisApp\siqBootLoader.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [Akamai NetSession Interface] => "C:\Users\Lawand\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [AusweisApp] => C:\Program Files\AusweisApp\siqBootLoader.exe [2518656 2014-01-24] (OpenLimit SignCubes AG)
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\MountPoints2: F - F:\LaunchU3.exe -a
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: AusweisApp 1.12.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClientIE32.ols (OpenLimit SignCubes AG)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {4432605F-C2EE-4A1E-B2DF-5DC1F1D263B9} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.102

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL No File
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lawand\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Extension: (XJZ Survey Remover) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\cphljojhgmnabimjemakjleocdheengh [2014-01-04]
CHR Extension: (Facebook Theme) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecafhogdjnebmoaebdkdcifnebfbkpoe [2014-03-16]
CHR Extension: (Google Wallet) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02]
CHR HKLM\...\Chrome\Extension: [iokhogohoamdhejdbenjbjkhjmjlggab] - C:\Users\Lawand\AppData\Local\CRE\iokhogohoamdhejdbenjbjkhjmjlggab.crx [2013-12-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [iokhogohoamdhejdbenjbjkhjmjlggab] - C:\Users\Lawand\AppData\Local\CRE\iokhogohoamdhejdbenjbjkhjmjlggab.crx [2013-12-11]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [107736 2014-05-16] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-06] (Avira GmbH)
S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [106752 2011-01-13] (ZTE Incorporated)
U3 mbr; \??\C:\Users\Lawand\AppData\Local\Temp\mbr.sys [X]

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 13:30 - 2014-08-04 13:31 - 00011672 _____ () C:\Users\Lawand\Desktop\FRST.txt
2014-08-04 13:30 - 2014-08-04 13:31 - 00000000 ____D () C:\FRST
2014-08-04 13:30 - 2014-08-04 13:30 - 01084928 _____ (Farbar) C:\Users\Lawand\Desktop\FRST.exe
2014-08-04 12:30 - 2014-08-04 12:30 - 00013208 _____ () C:\Users\Lawand\Desktop\dds.txt
2014-08-04 12:30 - 2014-08-04 12:30 - 00008530 _____ () C:\Users\Lawand\Desktop\attach.txt
2014-08-04 12:28 - 2014-08-04 12:28 - 00688992 ____R (Swearware) C:\Users\Lawand\Desktop\dds.exe
2014-08-04 12:22 - 2014-08-04 12:22 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-04 12:18 - 2014-08-04 12:16 - 01361309 _____ () C:\Users\Lawand\Desktop\adwcleaner_3.302.exe
2014-08-04 12:16 - 2014-08-04 12:20 - 00000000 ____D () C:\AdwCleaner
2014-08-04 11:47 - 2014-08-04 11:47 - 00000000 ____D () C:\Users\Lawand\AppData\Local\{8FA51E5A-1CA6-4C55-BB4E-59309796D46E}
2014-08-03 17:52 - 2014-08-03 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-02 16:21 - 2014-08-04 12:22 - 00000168 _____ () C:\Windows\setupact.log
2014-08-02 16:21 - 2014-08-02 16:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-02 11:01 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:01 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:01 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:01 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:01 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:01 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-23 15:53 - 2014-07-23 15:53 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Unity
2014-07-23 15:47 - 2014-07-23 15:47 - 00000226 _____ () C:\Users\Lawand\BullseyeCoverageError.txt
2014-07-21 15:05 - 2014-07-21 15:05 - 00007605 _____ () C:\Users\Lawand\AppData\Local\Resmon.ResmonCfg
2014-07-20 15:04 - 2014-07-20 15:04 - 00000000 ____D () C:\Users\Lawand\AppData\Local\{6895AF9E-1EF8-429B-B5B8-BCC8967CA7B7}
2014-07-09 17:10 - 2014-07-09 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goat Simulator
2014-07-09 15:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 15:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 15:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 15:44 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 15:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 15:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 15:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 15:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 15:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 15:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 15:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 15:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 15:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 15:44 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 15:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 15:44 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 15:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 15:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 15:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 15:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 15:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 15:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 15:44 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 15:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 15:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 15:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 15:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 15:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 15:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 15:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 15:44 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 15:44 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 15:44 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 15:44 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 15:43 - 2014-06-30 03:40 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 15:43 - 2014-06-30 03:36 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 15:43 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 13:31 - 2014-08-04 13:30 - 00011672 _____ () C:\Users\Lawand\Desktop\FRST.txt
2014-08-04 13:31 - 2014-08-04 13:30 - 00000000 ____D () C:\FRST
2014-08-04 13:30 - 2014-08-04 13:30 - 01084928 _____ (Farbar) C:\Users\Lawand\Desktop\FRST.exe
2014-08-04 13:29 - 2014-05-17 11:04 - 01353767 _____ () C:\Windows\WindowsUpdate.log
2014-08-04 12:53 - 2014-02-27 13:14 - 02269184 _____ () C:\Users\Lawand\AppData\Local\ChromeHitoryDB
2014-08-04 12:53 - 2012-11-22 19:16 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 12:30 - 2014-08-04 12:30 - 00013208 _____ () C:\Users\Lawand\Desktop\dds.txt
2014-08-04 12:30 - 2014-08-04 12:30 - 00008530 _____ () C:\Users\Lawand\Desktop\attach.txt
2014-08-04 12:30 - 2009-07-14 06:34 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 12:30 - 2009-07-14 06:34 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 12:28 - 2014-08-04 12:28 - 00688992 ____R (Swearware) C:\Users\Lawand\Desktop\dds.exe
2014-08-04 12:25 - 2014-06-15 13:49 - 00000000 ____D () C:\Users\Lawand\.ausweisapp
2014-08-04 12:24 - 2012-11-22 19:16 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 12:24 - 2012-03-09 18:57 - 00000000 ____D () C:\Users\Lawand\AppData\Local\Adobe
2014-08-04 12:22 - 2014-08-04 12:22 - 00000310 _____ () C:\Windows\PFRO.log
2014-08-04 12:22 - 2014-08-02 16:21 - 00000168 _____ () C:\Windows\setupact.log
2014-08-04 12:22 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-04 12:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-04 12:20 - 2014-08-04 12:16 - 00000000 ____D () C:\AdwCleaner
2014-08-04 12:20 - 2014-05-18 12:35 - 00000000 ____D () C:\Users\Lawand\Downloads\Mama
2014-08-04 12:16 - 2014-08-04 12:18 - 01361309 _____ () C:\Users\Lawand\Desktop\adwcleaner_3.302.exe
2014-08-04 11:47 - 2014-08-04 11:47 - 00000000 ____D () C:\Users\Lawand\AppData\Local\{8FA51E5A-1CA6-4C55-BB4E-59309796D46E}
2014-08-03 19:05 - 2014-05-16 17:08 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Skype
2014-08-03 18:32 - 2014-04-11 16:30 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\.minecraft
2014-08-03 17:52 - 2014-08-03 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-03 17:52 - 2014-06-16 18:05 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-03 17:52 - 2014-05-29 17:12 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-02 18:04 - 2014-06-12 18:15 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\TS3Client
2014-08-02 16:22 - 2013-02-16 12:42 - 00434688 ___SH () C:\Users\Lawand\Desktop\Thumbs.db
2014-08-02 16:21 - 2014-08-02 16:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-29 08:48 - 2012-12-05 19:43 - 00214016 ___SH () C:\Users\Lawand\Thumbs.db
2014-07-25 12:16 - 2012-02-26 16:27 - 00000000 ___RD () C:\Program Files\Skype
2014-07-25 12:15 - 2012-03-02 18:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 19:45 - 2012-03-03 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-23 15:53 - 2014-07-23 15:53 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Unity
2014-07-23 15:47 - 2014-07-23 15:47 - 00000226 _____ () C:\Users\Lawand\BullseyeCoverageError.txt
2014-07-23 15:47 - 2012-02-24 12:01 - 00000000 ____D () C:\Users\Lawand
2014-07-23 15:07 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-21 15:05 - 2014-07-21 15:05 - 00007605 _____ () C:\Users\Lawand\AppData\Local\Resmon.ResmonCfg
2014-07-20 15:04 - 2014-07-20 15:04 - 00000000 ____D () C:\Users\Lawand\AppData\Local\{6895AF9E-1EF8-429B-B5B8-BCC8967CA7B7}
2014-07-12 20:14 - 2013-12-11 20:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 20:14 - 2012-09-19 17:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 11:49 - 2012-02-24 10:21 - 00000000 ____D () C:\Users\Gullanar
2014-07-10 12:44 - 2012-08-31 15:55 - 00386560 ___SH () C:\Users\Gullanar\Thumbs.db
2014-07-10 12:17 - 2013-10-08 20:00 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-10 12:12 - 2009-07-14 06:33 - 04012240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 12:10 - 2014-05-07 21:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 12:10 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 19:16 - 2013-08-31 19:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 19:14 - 2012-03-03 11:32 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 17:12 - 2012-12-19 21:55 - 00000000 ____D () C:\Users\Lawand\Documents\My Games
2014-07-09 17:10 - 2014-07-09 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goat Simulator

Some content of TEMP:
====================
C:\Users\Gullanar\AppData\Local\Temp\avgnt.exe
C:\Users\Lawand\AppData\Local\Temp\avgnt.exe
C:\Users\Lawand\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-30 14:53

==================== End Of Log ============================
--- --- ---

Warlord711 04.08.2014 13:01
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Starte noch einmal FRST.
  • Ändere keine der Voreinstellungen und drücke auf Scan.
  • Wenn der Scan abgeschlossen ist, werden ein neues Logfile FRST.txt erstellt und auf dem Desktop gespeichert.
  • Poste den Inhalt dieses Logfiles bitte hier in deinen Thread.

lawand 04.08.2014 16:10
AdwCleaner :

Code:
# AdwCleaner v3.302 - Bericht erstellt am 04/08/2014 um 15:52:40
# Aktualisiert 30/07/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (32 bits)
# Benutzername : Lawand - PC
# Gestartet von : C:\Users\Lawand\Desktop\adwcleaner_3.302.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17207


-\\ Google Chrome v36.0.1985.125

[ Datei : C:\Users\Gullanar\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R1].txt - [1812 octets] - [04/08/2014 12:17:02]
AdwCleaner[R2].txt - [1039 octets] - [04/08/2014 15:50:14]
AdwCleaner[S1].txt - [1873 octets] - [04/08/2014 12:20:19]
AdwCleaner[S2].txt - [962 octets] - [04/08/2014 15:52:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1021 octets] ##########

Junkware Removal Tool :



Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x86
Ran by Lawand on 04.08.2014 at 16:28:54,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-2722409785-1221214759-2200874239-1003\Software\Microsoft\Internet Explorer\Main\\Start Page



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{005DE7FE-390C-455C-BC96-F169339C489A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{00C93BA0-4E6C-4BB4-9454-AB7DEA76741C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{01135D57-F71F-43B3-B4CA-169FB55D45EB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{015D9104-B99F-46A9-A71E-65EBC4109D6E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{020ECADA-57C6-47B2-8EEF-5F929FE60622}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{02600C85-0770-4FE5-96A0-B64AAC99D941}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{05402AE8-9457-472D-87B0-224ECE8C74D8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0579C033-0F9F-469C-8CCC-95B13F8B6D8F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{059119C9-BE38-4634-B5D6-2CB9D96449E4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{05D4A578-78C8-4170-955F-D6730B3C49B8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{06128B24-D693-4A56-9AF9-1A51561D939A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{07E927F3-35B8-4ABB-9DFD-FE3FF6F2C6C6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{08D75FCF-71EF-4FD2-8DBA-ADD3BA63E961}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0A8B0DD4-C970-463C-9715-76CEFE9B52C5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0ACB85B9-FF1D-4B2F-B2F7-DEDAF2024E86}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0AE2CE52-8958-4C53-9A7A-5140C63F9E72}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0B882F5A-7BBB-467D-865B-5EA2A398170E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0C1BA501-21E7-4399-873A-66304EA00F8C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0C979106-CD95-43EA-92A7-56A5C8ED3F71}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0CF67908-6A87-45D9-AC38-B23AA824C987}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0E13D20F-58DC-4E24-8126-DE550540CFA0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0EAA7DA0-3386-419A-9171-E03AA7C9627F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0F44ECAD-987E-4C91-A848-971931549478}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0F4778F3-E9C4-490D-B02C-E7BC047356CB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0F6DD7A9-8AA1-4631-9410-9A872247CCDA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{0F9FF7E4-65E1-41D7-9F25-936419808B43}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{125C8BD5-CDFE-4412-93B4-AC4291FA34B8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{139DB675-1321-4DBC-8B93-080645D189FB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{140C7F11-B9A4-4221-977C-75405D80CCBE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{14254283-670E-4168-9820-6815157BE259}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{14490AF7-FA14-43B6-85D9-11BAFB991478}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{15C9E60E-213D-47D7-AC1F-AE1895A1B8B1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{17253CEA-A450-4550-AF54-56323CEC87CE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1961F82B-4AA1-4DCA-8CFE-DF6A9A8FD722}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{19BC529F-3054-4DE6-A247-4A58C5CA5BF4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1B0F6947-7F85-4CBE-9A33-448D50283158}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1BA7BADE-FD7F-440D-BFBA-677DB6D4788F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1BE61EF7-378E-4DDE-B82C-7F622417E2B6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1C1634E3-07E3-4A7B-B709-18311AFE1D6C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1E40EF76-D9BE-45B6-9758-07F13E9F8BB9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1EF8B6F2-A31D-4492-A33E-EBBE835956B0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{1FDE9651-AE7B-4F92-90AC-78BA354F5D23}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{20CA454B-8B03-453B-B312-2F176CC89479}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{210368A4-1B72-43FD-8CC6-76267D9026A7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{21070E19-1F10-46DD-80B7-A1A4D7EB4AC3}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{21286754-CCA8-4401-9995-4449ABD57090}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{21F6A404-5AF2-488D-BCE5-0807B4CBC0A8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{22D491C7-94BF-4A7D-9AC5-3C534D839FEB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{22FAFF33-4226-4318-B191-842E8B7127B9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{232BF652-FA20-4039-A5D9-08FF76FEA187}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{24C0447E-81DF-45ED-9C68-AE24656A2BE4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{24D289B6-6D93-47C0-89BA-B4F5DFDB537D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{268F35DD-6D04-4EA2-8D55-B4B879E3F62D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2691FEF3-39EC-4824-9769-0DA2E41C57A8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2790C385-F1EC-4627-B139-89E28CF6396C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{29AFE94B-1292-42E1-9087-9051633C092F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2A263925-1C99-4AE1-99DF-E9C16EB464FA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2A749930-968A-4794-AAFA-92072EA2AD29}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2A786637-3934-4473-B836-92EFB4D504EB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2A7B99C3-2C56-40FF-8E25-FABB67B7C631}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2B65CC4A-909A-4499-9D36-5F1F6F6AF5D8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2C93F286-F13D-4711-8690-A6F5C0563F33}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2CCE2B65-641B-479E-96F1-88DB1B768F4C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2E6535DE-E217-4653-8B94-F6B941B08E2C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2EC3847F-E85D-4463-8280-81B1F6BCE383}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2EF17492-BBAA-4FD7-8A44-7CFBB2653DC4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{2FE1AAD9-3D13-4227-A56A-1B57E55E1132}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{30394CCE-D93D-4BCA-8BBF-D38E65DB6521}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{305BD6D8-4D7F-49EF-9034-E69D27B30E30}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3086B185-86DA-40F3-BDFB-C766ECF42539}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{31A0524A-DF99-4E8D-B4B7-4C2CCF716DC6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{31B32052-301D-459A-96AE-DAE9CA5074FA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3243CE96-3558-425C-8E48-28D7DB6AF342}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{32C63145-F7DC-4920-A769-4F13E521C92F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{32D09110-CFAE-4CE1-9002-804B82077C13}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{334D6A9F-4583-47E4-B058-30A4E3439844}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{33757FD7-21A9-4852-97B2-E66CE5180A89}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{34BDE63C-3375-441E-9232-091AC7B133AA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{35856598-88D9-4EFF-8D17-4216DC7889C0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{367B6CD7-0CDE-4FB4-9B12-B01BA1E64BF5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3776742A-DC62-4F24-94B2-1E1F5DC6023D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{37E85F36-4D43-4BC0-8D32-298605AFABE9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3B143979-8D6D-47DB-AC18-549EED98FA87}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3C24AA10-97AD-49B3-8E16-00E0E64E98DB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3C648904-CA4D-477D-BED8-08B47031840E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3C97B849-DDBF-487E-B1D5-6F0E965DEECC}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3CBC74CB-0F34-4F0C-96F2-09FA22721DDF}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3CCE3F76-1824-4A17-B01F-B69818E54AE5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3CFF7433-6B10-468E-B17E-B3E64F3EF60D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3D787B16-D5EA-4DE4-ABF9-B647D35AB89C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3E581714-7ADD-4104-9454-348E2168221D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{3F2F19A8-C3FD-4839-A1AA-F410963EBF50}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{425B96CF-6FEF-47A8-BCCB-31AA8297B9DA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{425D088F-4DCB-4930-B7A1-4289355CC5D7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4267E8DB-BA07-467A-98DE-0B8D35D01D40}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{427D36FF-FD8C-464C-B243-F8E79848E60C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{428C9F06-E00A-4AA4-A5BD-5292A567B176}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{43E3E681-BB06-4EFC-8659-EBC3AA31FDC6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4420F6DE-45EE-4A05-ABE9-935B45035037}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{44715057-080A-4679-B4F5-BE5537556671}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{45BC9540-EB52-4199-ABAA-D63A18E2B339}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{45CFDC80-8855-4A0F-8105-18F0CA2C7F27}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{46C25294-35A9-432D-AF3B-2CD642CA973E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{46C84247-5FA5-4545-BBB1-CE02FD6FF1D5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{497F4700-5467-481F-8324-32F912EC9FA6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4B9D26CC-3F30-4117-9762-27C58634C2A1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4BB27FD3-3823-4172-BA47-46BD4A635157}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4BFFEE56-38F6-4687-9596-06CC87FED840}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4C53757A-E0FA-40D8-AAB9-13645820DE14}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4CD56152-E5B9-4C2D-A7B3-033B9855B0E1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4DAD81A6-0FBC-4E50-B6C1-D3D40E43A492}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4E082EC6-F733-4742-962E-F01462E132DB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4EB9E660-D9A6-43CF-A010-0C41176C2B05}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{4FDE78AC-76EC-4CD0-841B-49C2DC9C725E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{550CA7CA-CE10-45B6-AB9E-CC0C7193C525}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5633DA20-DA9F-44CA-8411-56C1DE25A79F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{56D6D1A2-6EBC-4AC1-8F08-5C696ADB1435}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{57FAE227-C007-408E-9EF0-881D8C683C21}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{580C0CB9-88E0-4F8A-8C12-225EB0279AFE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{592A1308-F64A-4437-8FC9-D5D38F9FB7A3}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5998D936-EE62-402F-BC19-7AA2B231AB6F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5A28D7B6-C562-452F-8CB9-83BEAFA23006}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5A29D870-5DEB-471E-949B-871B53E7ADAE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5A2F48BA-599C-4642-BBA7-187CA35FABF4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5A3D9C16-A89F-41B5-9ECB-B225B266544E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5A4E712F-9FA9-4CC5-9B50-D3F406114619}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5B0314F6-B58E-4EC1-A4E5-A45B1EAE26F4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5B563DA1-AC5C-420C-A89F-C4AF53DB73F1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5DA6B1FB-C58A-49CE-820B-14D3E4463421}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5DD4CA95-2DAA-4074-A43D-7200D5E46FC2}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5DEFC87C-17F4-4914-BC02-63C48F559931}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5EBACD41-3D31-48B3-9671-AF30D4B9EC84}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{5F33B418-3747-4A77-8971-D006FF381033}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{61664CD7-BD19-44AD-97AB-17CBB4C3F8C4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{61B48FD1-F03C-41EC-A3F6-E4D759946F37}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{62B0EA37-E3AA-4A4E-9CC3-BBA41E8C4CDE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{63329D11-069F-4E02-84BF-BB5E026E2FF6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{637261F7-3C65-42E4-80E7-8260972CA888}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{64A89FDB-4968-4F12-A611-CEAFA62F6412}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{64EF8373-A345-45B3-9B44-C51970EB2554}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{65007BE1-B169-4185-9166-5410EDB1AE93}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{65D78AE3-C2E6-4CDA-A5F3-DBFF07EAC9CB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6667B7B7-DBC8-4458-AD7A-C7E09420640E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6699D90C-181E-4EB6-A649-713F38B1339A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6738CBB0-8DCF-4A04-88CD-E5FFE869BF55}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{67AD8D1D-24CA-439C-B034-C29D030F35A5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{67B962A9-E877-483B-975D-16B6D06A703B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6895AF9E-1EF8-429B-B5B8-BCC8967CA7B7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6A768AD8-4151-4B3E-A749-FA4B0A8352A1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6A9894A6-270E-40E7-9E4C-F67AB6D54586}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6B2DF01E-807C-47F8-ADF7-2683EF71A070}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6B87423F-AE65-474A-81A1-4F722FB3AA8D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6BFA6727-8762-4EBC-9F31-A64A947D767E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6DFFCA07-9D66-4FA8-8E09-27A9FF52E877}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{6E9BA1DC-7BAA-4C78-B717-3E232CDC7ABE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{71709D43-BCBC-4AB1-9642-08B81E47F58D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{71795EEB-0224-4AEF-ABB4-B0A671D7BB81}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7257460D-624C-43F2-9CDE-D97FAF066FC7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7488154A-4891-4B1E-88C3-A23F8EA9DEE0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{75012414-BE0C-418D-B36D-F8B76D0CAB97}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7525DF4E-40B6-4F89-B860-D21B9CB77F92}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7742EC77-3F81-4674-A05F-80BD5564EE7B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{77EE3A0E-D699-4749-A3D9-887F8A789FF6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{79BEB48E-F5AF-4C46-A726-9EFA26792E0B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{79CF14C2-7479-4987-B970-8BB9873F3B52}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7AD9C608-2744-4169-9373-E1985FAFC032}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7B7B99C4-42FD-46EB-97E0-650FFAB1D01F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7C1CECD5-39D3-4D70-BB33-F36212753C7E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7D437BCB-D7AE-4113-8AD9-C84A3E693E73}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7D57942D-4A14-4177-903B-950C903A8241}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{7FB90136-18F6-4ACF-8279-20D9F5B823A9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8048E076-4E28-474F-9AA0-E6471F032222}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8090F4A0-1746-43A0-B7BF-79171BD53A72}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{809DE737-3D3B-4472-A7A6-1166314AEE22}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8172965F-D201-4E6C-B715-8EAC46DF09C5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8176EC91-C7F0-4B6A-B27C-D5815DFFD659}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{81A32D6E-F34C-4486-AA1A-CC3D32C61C15}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{841865CC-8C09-4FC5-ADBA-AE8B3A22E66F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8682F77D-1C27-47A1-AEE2-6EEE779AAA57}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{874E1237-1E6E-4F57-9371-2539C2930C45}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{88172833-0B53-45E2-A9D2-4CACF1B9745D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8883C9B5-5621-46EB-9826-A0866605D531}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8AC4F899-C335-48E9-B4E7-52B7FA63F94A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{8FA51E5A-1CA6-4C55-BB4E-59309796D46E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{90C1A5FF-4929-44A2-BDCF-F7A70042CD1D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{90CA6115-A19A-4126-9C1B-AE524B6BF647}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9131CAC3-0B51-42F1-8E66-A5893C186E83}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{913BCF80-8DC0-46F2-AEC6-7D5A474AB74C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{93252437-B51F-47E7-AC28-511BDB0AD7AF}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{93782EFE-B87E-47B0-B61F-4D23E371FE88}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{93DAF338-9832-4D6F-8338-96BF85330D80}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{941352A4-3641-425B-BDD7-B26C33703BF8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{95F41DBB-B93B-4399-B746-498E91BD8A82}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{960FB80C-5DF4-47F4-B681-2A3BA004276E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{970C6DDA-389B-40C5-865B-95F247AA155A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{98A1752D-26FD-44F5-AC07-78454F3E3118}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{98F64CBD-CE74-446C-B883-F2DB979FFE8F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9A0FC140-AE85-4B2A-90B1-114701D96E2D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9B88F5F5-B494-4D67-A49C-0B18948CCAE3}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9BB15271-99B7-41A7-9AF4-5C5462E6E48E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9C6FEBD4-12A1-493C-AD77-938108CDD439}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9D16469E-1330-4295-99AA-D50ACD3ABC76}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9D8349C6-B559-4847-970A-CA8B4719C001}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9DCFB5F0-34DD-4D79-AD62-E57B9B8D2622}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9E2006C9-1AB3-4387-86A0-00E1E4B60315}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{9F63FFD8-11A3-4DA6-9CE3-F55474237327}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A00139C7-27EB-4A30-9C5F-83C72F542957}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A10E81A0-DE98-41F1-B23A-3E1CA973A711}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A34702B6-119D-46AF-A908-572B7E4ABD76}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A387A241-2E20-41CC-B143-8094B14FE687}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A38DF40C-00F5-4D7E-B5D0-62EA10B47E66}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A4F7F11D-B8FA-4BC0-AA16-0059F4AACDCE}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A69D48B2-4045-4BF8-A26E-C85B30F54D45}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A75A21DE-F5BE-4138-A769-AAF54A87A7CB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{A9302DBF-5CBE-4DD9-9ED1-6E3CBB749FD0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AA6AF515-B039-443D-8B17-E4CBA5E20100}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AB20E988-4643-4590-9925-874A11759F76}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AB324AE6-057E-40A1-A891-AFA65E2C6011}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AB69B9E7-5B80-4656-AE90-9ED77B1A6580}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{ADECCFCE-DDC1-4735-8CD4-C650C9226E6E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AE89D1FB-E3E7-4686-9A83-299BB37820C3}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AEEC00AF-2422-40B1-9FEB-F18B1BDF1FDA}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{AF432535-C384-426A-B5B7-EC106F39A29E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B05D2E7A-27DE-4561-8791-52CC6CC6D126}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B07330A3-8E05-4F5E-ACBA-8EFD016E5E4B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B0DCCC2A-C524-4B9D-8466-FFC589CE4800}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B0FCD112-25F4-47CC-B69E-F9E930FB83B5}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B21497BA-969A-44CD-84A7-7FC1C45E1BF9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B336A4BA-9055-477F-87CD-A20ACE931B0F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B4684835-B3A4-4095-856A-E3643E89CCAD}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B518D223-6176-4776-85BC-B45320EF3AE2}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B5E27FD1-288A-42BF-9AC7-F742501174BF}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B66E1AB9-C706-4BA4-9A8C-A4F65F71F48A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B7C871EA-3406-4271-840D-F9E9636BC68A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B7FB0C31-FCA8-4FC5-8A6C-1DAF9EECF1F4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B926D7E4-FDF6-4479-8E09-7A684C568957}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{B9B26BCA-880B-496D-B7B4-6858520CDC09}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{BD46ACB7-FA18-48E8-924E-F0FCA9B4D20A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{BD86B54A-0E1B-41CB-B489-3541AC68D60E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{BE780117-08E3-4A73-91F4-2F4AEB80850E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C225DE81-FE28-4B01-9A11-D1235233E05D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C24D4C63-F1CF-4FAE-947C-681BD8F9C65F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C28342E8-6774-4983-A13F-81777D60BBAC}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C2D98EB6-1A5E-4031-8303-F8BC66D52EDB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C3955BEA-2509-4D03-9270-813F723D435B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C41B6F87-7065-4532-9B23-97006D0CA712}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C41D0352-95B8-4846-AAF1-F1ECA9C0CE76}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C4EAFDF0-EDB4-43B4-8B66-286555242702}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C5064FD1-769C-4F69-8518-40EF253C5776}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C68D3B37-622A-4874-B1D6-F102685A161C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C7AD247C-459B-4B5C-A6F9-314254E78BAD}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C874E858-0E21-4D1B-A35C-767ACD5B20DC}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C8D797AA-E61E-45B6-A257-1DF5439B483A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C8E13837-3C3F-4AFF-A3BD-03B386E95991}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{C9B0C4ED-98BA-4583-AF08-BE645C149125}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CA33A2CF-343C-448E-AECE-47ECE17C36F0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CAA74231-08C0-4266-BCFC-EDCB5CC697D9}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CADCABE1-AA05-4261-B970-983E5D6CACF6}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CC173C46-B685-4DE6-8B0A-66B0991FFE44}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CCFBF011-8753-4637-8EBF-92BCD0C3F242}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CD59FE51-EEEB-4A2B-A736-7CCAB6B30502}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CEF79152-E9AB-4377-8D9C-9AA58D25BF87}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{CFDB896F-6835-4B09-B808-42544E5C09AD}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D1036806-D776-4969-A3B3-074A5185D849}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D41E4C98-E54A-467D-B062-CA8B0B089D44}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D4374DAF-802A-4EA3-80E3-55230F3FF869}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D4473009-141C-4CD4-B53D-AAB23FB8B402}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D60686E2-A2C0-4DA6-80DF-4929D9BA12D4}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D6AC123F-8D39-4B9D-B7ED-E5D34510FDC8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D7B7B0EC-73AE-4F94-B815-CAEB6C589123}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D7D04B9B-4E67-43CD-A86F-112054F2B65B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{D8EF06CE-5EDE-4F79-895F-A900D09E9C94}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DC4FB397-062F-45BA-B8F0-8EF9829EF77E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DC6D4701-A1F2-46B5-A14B-727E5949E87D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DC74A6D0-6422-4A3B-AC79-2FC23855E265}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DCEF4C63-A506-4513-9B98-074833C48909}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DD5EA102-3ACC-4A56-B281-A5AF20F39435}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DE652D23-F94D-4C35-83B5-C01583A17FA8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{DED06FA3-2AAA-442B-9E4E-1B9B9CD6DD8E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E0448B5C-5F2E-46C3-BA8D-11D57BF3B5D2}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E0516EFA-2990-4FBE-8163-E667157B5521}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E06CCBF7-FD55-47C6-97A6-8113FCDE8110}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E267C2C3-FB8F-4803-9339-8EF9E754113B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E33E0F44-106B-4CA2-806C-E9384D807C6D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E52C3772-2C4B-448A-A114-33C82B02039C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E5C47DB4-3E70-4579-8667-15892D323871}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E74F1DF6-52F8-49A6-AC6D-D0BB1B7B4426}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E8420A94-42D6-4F53-8113-FD5ADE651734}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E853B954-A6B9-4D46-A84E-ACB1F647AA4A}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E8B03F7A-494C-4870-B8C1-D0DE269CC4E7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E9A8C5C6-AAC7-44BB-8480-1D1440C565E7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{E9BF9EC3-6567-466E-BCBB-45BE058B70DC}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EAEDAF07-B88B-46A6-8EF4-1F4E7C541BDB}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EB0325BD-8637-43F7-8E0C-53818BAB4389}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EB4BB964-6E4F-4B16-B347-5E60FE7DCC14}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EC911E1E-55A5-44DD-B8E3-5A413E32CF33}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EE8582CC-DBFE-488B-A05F-A6792BD17CF8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{EEE9BECD-12C3-4C0A-AD57-926D1ACDBAEC}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F0E87DAA-88C8-455A-9CFD-E34A22B2BF10}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F1419F20-5627-4BAD-A33A-37BF67766166}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F16EA3E3-2712-4A1A-9C1F-1EAE7098E40E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F1A6D093-1A87-4879-BE35-849462711E7B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F1E3DDED-22E0-43C9-8F92-613E20B62B67}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F2D89538-42D3-48BC-874E-F85289962B0B}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F3F0B33C-2F45-481A-865F-6150A2F41364}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F40CFAA9-2E45-4A95-B616-2355EE6080F1}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F4B9DD7C-0BAE-4E73-9501-4A8CE9A87560}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F5BA81DB-470D-4135-9F33-7CAE3C890641}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F5BE49D6-CAC5-410E-A399-73F1DEE257CD}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F69354DD-4017-432A-AB2C-F55EA77F0586}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F6C7C76E-3B43-44F1-8CCE-8E89C7FC453E}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F75740FC-8402-477F-8EDC-27223EBB0DD8}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F77A4EBC-6952-4484-809C-A8888265122C}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F9182420-6829-4278-8ABE-60F68B8D49F7}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{F979800F-CE44-44D9-9C62-8DFB52D36D8D}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FA0CA24C-4947-4650-B790-8A3B8C8C95C0}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FB7026DA-5021-453F-AF26-0425D1103E94}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FC5205A6-6DCF-46D3-9928-20AE17D93568}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FD837FE9-6867-4712-B1B7-BB579679EC4F}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FDD158EF-C95C-4C5B-80B5-53C0E152F036}
Successfully deleted: [Empty Folder] C:\Users\Lawand\appdata\local\{FF6D6E09-10DA-4C45-81A6-FBDDBEB88292}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 04.08.2014 at 16:31:48,21
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Malwarebytes Anti-Malware :



Code:
Malwarebytes Anti-Malware
www.malwarebytes.org


Protection, 04.08.2014 16:38:03, SYSTEM, PC, Protection, Malware Protection, Starting,
Protection, 04.08.2014 16:38:03, SYSTEM, PC, Protection, Malware Protection, Started,
Protection, 04.08.2014 16:38:03, SYSTEM, PC, Protection, Malicious Website Protection, Starting,
Update, 04.08.2014 16:38:17, SYSTEM, PC, Manual, Rootkit Database, 2014.2.20.1, 2014.8.1.1,
Update, 04.08.2014 16:38:20, SYSTEM, PC, Manual, Malware Database, 2014.3.4.9, 2014.8.4.5,
Protection, 04.08.2014 16:38:21, SYSTEM, PC, Protection, Refresh, Starting,
Protection, 04.08.2014 16:38:38, SYSTEM, PC, Protection, Malicious Website Protection, Started,
Protection, 04.08.2014 16:38:38, SYSTEM, PC, Protection, Malicious Website Protection, Stopping,
Protection, 04.08.2014 16:38:38, SYSTEM, PC, Protection, Malicious Website Protection, Stopped,
Protection, 04.08.2014 16:38:43, SYSTEM, PC, Protection, Refresh, Success,
Protection, 04.08.2014 16:38:43, SYSTEM, PC, Protection, Malicious Website Protection, Starting,
Protection, 04.08.2014 16:38:43, SYSTEM, PC, Protection, Malicious Website Protection, Started,
Protection, 04.08.2014 16:55:16, SYSTEM, PC, Protection, Malware Protection, Starting,
Protection, 04.08.2014 16:55:16, SYSTEM, PC, Protection, Malware Protection, Started,
Protection, 04.08.2014 16:55:16, SYSTEM, PC, Protection, Malicious Website Protection, Starting,
Protection, 04.08.2014 16:56:46, SYSTEM, PC, Protection, Malicious Website Protection, Started,

(end)


FRST :



FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:2-08-2014
Ran by Lawand (administrator) on PC on 04-08-2014 17:00:33
Running from C:\Users\Lawand\Desktop
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Program Files\Update Software\winclient32.exe
(OpenLimit SignCubes AG) C:\Program Files\AusweisApp\siqBootLoader.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [Akamai NetSession Interface] => "C:\Users\Lawand\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\Run: [AusweisApp] => C:\Program Files\AusweisApp\siqBootLoader.exe [2518656 2014-01-24] (OpenLimit SignCubes AG)
HKU\S-1-5-21-2722409785-1221214759-2200874239-1003\...\MountPoints2: F - F:\LaunchU3.exe -a
ShellIconOverlayIdentifiers:  SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers:  SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: AusweisApp 1.12.0.0 -> {C9EE92B7-EDD5-4ad9-8029-2EC6818E653A} -> C:\Program Files\AusweisApp\siqeCardClientIE32.ols (OpenLimit SignCubes AG)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - No Name - {4432605F-C2EE-4A1E-B2DF-5DC1F1D263B9} -  No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 80.69.100.110 80.69.100.102

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1166636.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/DTPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL No File
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Lawand\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)

Chrome:
=======
CHR HomePage: https://www.google.de/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Extension: (XJZ Survey Remover) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\cphljojhgmnabimjemakjleocdheengh [2014-01-04]
CHR Extension: (Facebook Theme) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecafhogdjnebmoaebdkdcifnebfbkpoe [2014-03-16]
CHR Extension: (Google Wallet) - C:\Users\Lawand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-02]
CHR HKLM\...\Chrome\Extension: [iokhogohoamdhejdbenjbjkhjmjlggab] - C:\Users\Lawand\AppData\Local\CRE\iokhogohoamdhejdbenjbjkhjmjlggab.crx [2013-12-11]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
CHR HKCU\...\Chrome\Extension: [iokhogohoamdhejdbenjbjkhjmjlggab] - C:\Users\Lawand\AppData\Local\CRE\iokhogohoamdhejdbenjbjkhjmjlggab.crx [2013-12-11]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1028688 2014-07-04] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [97648 2014-07-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-14] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-08-04] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-10-06] (Avira GmbH)
S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [106752 2011-01-13] (ZTE Incorporated)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 16:59 - 2014-08-04 16:59 - 00001544 _____ () C:\Users\Lawand\Desktop\mbam.txt
2014-08-04 16:34 - 2014-08-04 16:34 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lawand\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-04 16:34 - 2014-08-04 16:34 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-04 16:34 - 2014-08-04 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-04 16:34 - 2014-08-04 16:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-08-04 16:34 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-04 16:34 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-04 16:34 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-04 16:31 - 2014-08-04 16:31 - 00035756 _____ () C:\Users\Lawand\Desktop\JRT.txt
2014-08-04 16:28 - 2014-08-04 16:28 - 01016261 _____ (Thisisu) C:\Users\Lawand\Desktop\JRT.exe
2014-08-04 16:28 - 2014-08-04 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-08-04 16:27 - 2014-08-04 16:27 - 00001101 _____ () C:\Users\Lawand\Desktop\AdwCleaner[S2].txt
2014-08-04 13:31 - 2014-08-04 13:32 - 00042161 _____ () C:\Users\Lawand\Desktop\Addition.txt
2014-08-04 13:30 - 2014-08-04 17:00 - 00012199 _____ () C:\Users\Lawand\Desktop\FRST.txt
2014-08-04 13:30 - 2014-08-04 17:00 - 00000000 ____D () C:\FRST
2014-08-04 13:30 - 2014-08-04 13:30 - 01084928 _____ (Farbar) C:\Users\Lawand\Desktop\FRST.exe
2014-08-04 12:28 - 2014-08-04 12:28 - 00688992 ____R (Swearware) C:\Users\Lawand\Desktop\dds.exe
2014-08-04 12:22 - 2014-08-04 15:54 - 00000616 _____ () C:\Windows\PFRO.log
2014-08-04 12:18 - 2014-08-04 12:16 - 01361309 _____ () C:\Users\Lawand\Desktop\adwcleaner_3.302.exe
2014-08-04 12:16 - 2014-08-04 15:53 - 00000000 ____D () C:\AdwCleaner
2014-08-03 17:52 - 2014-08-03 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-02 16:21 - 2014-08-04 16:55 - 00000280 _____ () C:\Windows\setupact.log
2014-08-02 16:21 - 2014-08-02 16:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-02 11:01 - 2014-05-14 18:23 - 01973728 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00054240 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-02 11:01 - 2014-05-14 18:23 - 00045536 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-02 11:01 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-02 11:01 - 2014-05-14 18:17 - 02425856 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-02 11:01 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-02 11:01 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-02 11:01 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-07-23 15:53 - 2014-07-23 15:53 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Unity
2014-07-23 15:47 - 2014-07-23 15:47 - 00000226 _____ () C:\Users\Lawand\BullseyeCoverageError.txt
2014-07-21 15:05 - 2014-07-21 15:05 - 00007605 _____ () C:\Users\Lawand\AppData\Local\Resmon.ResmonCfg
2014-07-09 17:10 - 2014-07-09 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goat Simulator
2014-07-09 15:44 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 15:44 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 15:44 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 15:44 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 15:44 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 15:44 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 15:44 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 15:44 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 15:44 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 15:44 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 15:44 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 15:44 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 15:44 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 15:44 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 15:44 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 15:44 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 15:44 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 15:44 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 15:44 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 15:44 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 15:44 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 15:44 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 15:44 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 15:44 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 15:44 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 15:44 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 15:44 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 15:44 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 15:44 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 15:44 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 15:44 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 15:44 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 15:44 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 15:44 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 15:43 - 2014-06-30 03:40 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 15:43 - 2014-06-30 03:36 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 15:43 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 15:43 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-04 17:01 - 2014-08-04 13:30 - 00012199 _____ () C:\Users\Lawand\Desktop\FRST.txt
2014-08-04 17:00 - 2014-08-04 13:30 - 00000000 ____D () C:\FRST
2014-08-04 16:59 - 2014-08-04 16:59 - 00001544 _____ () C:\Users\Lawand\Desktop\mbam.txt
2014-08-04 16:58 - 2014-02-27 13:14 - 02269184 _____ () C:\Users\Lawand\AppData\Local\ChromeHitoryDB
2014-08-04 16:57 - 2014-04-27 13:35 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-04 16:56 - 2014-06-15 13:49 - 00000000 ____D () C:\Users\Lawand\.ausweisapp
2014-08-04 16:56 - 2012-11-22 19:16 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-04 16:55 - 2014-08-02 16:21 - 00000280 _____ () C:\Windows\setupact.log
2014-08-04 16:55 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-04 16:54 - 2014-05-17 11:04 - 01370741 _____ () C:\Windows\WindowsUpdate.log
2014-08-04 16:53 - 2012-11-22 19:16 - 00001102 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-04 16:34 - 2014-08-04 16:34 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Lawand\Desktop\mbam-setup-2.0.2.1012.exe
2014-08-04 16:34 - 2014-08-04 16:34 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-04 16:34 - 2014-08-04 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-04 16:34 - 2014-08-04 16:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-08-04 16:31 - 2014-08-04 16:31 - 00035756 _____ () C:\Users\Lawand\Desktop\JRT.txt
2014-08-04 16:28 - 2014-08-04 16:28 - 01016261 _____ (Thisisu) C:\Users\Lawand\Desktop\JRT.exe
2014-08-04 16:28 - 2014-08-04 16:28 - 00000000 ____D () C:\Windows\ERUNT
2014-08-04 16:27 - 2014-08-04 16:27 - 00001101 _____ () C:\Users\Lawand\Desktop\AdwCleaner[S2].txt
2014-08-04 16:01 - 2009-07-14 06:34 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-04 16:01 - 2009-07-14 06:34 - 00014592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-04 15:54 - 2014-08-04 12:22 - 00000616 _____ () C:\Windows\PFRO.log
2014-08-04 15:53 - 2014-08-04 12:16 - 00000000 ____D () C:\AdwCleaner
2014-08-04 15:48 - 2014-05-16 17:08 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Skype
2014-08-04 15:30 - 2014-06-12 18:15 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\TS3Client
2014-08-04 13:56 - 2014-04-11 16:30 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\.minecraft
2014-08-04 13:32 - 2014-08-04 13:31 - 00042161 _____ () C:\Users\Lawand\Desktop\Addition.txt
2014-08-04 13:30 - 2014-08-04 13:30 - 01084928 _____ (Farbar) C:\Users\Lawand\Desktop\FRST.exe
2014-08-04 12:28 - 2014-08-04 12:28 - 00688992 ____R (Swearware) C:\Users\Lawand\Desktop\dds.exe
2014-08-04 12:24 - 2012-03-09 18:57 - 00000000 ____D () C:\Users\Lawand\AppData\Local\Adobe
2014-08-04 12:22 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-08-04 12:20 - 2014-05-18 12:35 - 00000000 ____D () C:\Users\Lawand\Downloads\Mama
2014-08-04 12:16 - 2014-08-04 12:18 - 01361309 _____ () C:\Users\Lawand\Desktop\adwcleaner_3.302.exe
2014-08-03 17:52 - 2014-08-03 17:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-03 17:52 - 2014-06-16 18:05 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-03 17:52 - 2014-05-29 17:12 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-02 16:22 - 2013-02-16 12:42 - 00434688 ___SH () C:\Users\Lawand\Desktop\Thumbs.db
2014-08-02 16:21 - 2014-08-02 16:21 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-29 08:48 - 2012-12-05 19:43 - 00214016 ___SH () C:\Users\Lawand\Thumbs.db
2014-07-25 12:16 - 2012-02-26 16:27 - 00000000 ___RD () C:\Program Files\Skype
2014-07-25 12:15 - 2012-03-02 18:03 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 19:45 - 2012-03-03 11:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-23 15:53 - 2014-07-23 15:53 - 00000000 ____D () C:\Users\Lawand\AppData\Roaming\Unity
2014-07-23 15:47 - 2014-07-23 15:47 - 00000226 _____ () C:\Users\Lawand\BullseyeCoverageError.txt
2014-07-23 15:47 - 2012-02-24 12:01 - 00000000 ____D () C:\Users\Lawand
2014-07-23 15:07 - 2009-07-14 06:53 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-21 15:05 - 2014-07-21 15:05 - 00007605 _____ () C:\Users\Lawand\AppData\Local\Resmon.ResmonCfg
2014-07-12 20:14 - 2013-12-11 20:42 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-07-12 20:14 - 2012-09-19 17:45 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-11 11:49 - 2012-02-24 10:21 - 00000000 ____D () C:\Users\Gullanar
2014-07-10 12:44 - 2012-08-31 15:55 - 00386560 ___SH () C:\Users\Gullanar\Thumbs.db
2014-07-10 12:17 - 2013-10-08 20:00 - 00035848 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2014-07-10 12:12 - 2009-07-14 06:33 - 04012240 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 12:10 - 2014-05-07 21:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 12:10 - 2009-07-14 10:56 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 19:16 - 2013-08-31 19:46 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 19:14 - 2012-03-03 11:32 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 17:12 - 2012-12-19 21:55 - 00000000 ____D () C:\Users\Lawand\Documents\My Games
2014-07-09 17:10 - 2014-07-09 17:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Goat Simulator

Some content of TEMP:
====================
C:\Users\Gullanar\AppData\Local\Temp\avgnt.exe
C:\Users\Lawand\AppData\Local\Temp\avgnt.exe
C:\Users\Lawand\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-30 14:53

==================== End Of Log ============================
--- --- ---

Warlord711 04.08.2014 16:13
Das Malwarebyte Log ist nicht das richtige.

Schau bitte unter C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-yyyy-mm-dd nach

Warlord711 04.08.2014 16:18
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.
  • Klicke auf Wählen Sie eine
  • Kopiere nun folgendes in die Suchleiste
    Code:
    C:\Program Files\Update Software\winclient32.exe
  • und klicke auf Öffnen.
  • Klicke auf Scannen!.
  • Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen
    Zitat:
    Diese Datei wurde bereits von VirusTotal analysiert...
    klicke auf Neu analysieren.
  • Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
  • Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Schritt 2
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Users\Lawand\AppData\Local\CRE

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


lawand 04.08.2014 16:31
Code:
<?xml version="1.0" encoding="UTF-8"?>

-<logs>

<record subtype="Malware Protection" result="Starting" last_modified_tag="81c6a325-56eb-4717-a171-247b3f132f3a" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:03.585692+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malware Protection" result="Started" last_modified_tag="1859f9a7-1b4e-4236-9cdc-d6cc4c282447" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:03.589692+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="646330eb-f866-4c66-8660-6655bf200e14" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:03.605693+02:00" LoggingEventType="2" severity="debug"/>

<record last_modified_tag="c6fba5d4-9a19-4095-bad9-c8397926c33d" systemname="PC" username="SYSTEM" type="Update" source="Manual" datetime="2014-08-04T16:38:17.662497+02:00" LoggingEventType="1" severity="debug" toVersion="2014.8.1.1" name="Rootkit Database" fromVersion="2014.2.20.1"/>

<record last_modified_tag="b311b28d-f91e-49d9-b2dd-a5404dfd05b1" systemname="PC" username="SYSTEM" type="Update" source="Manual" datetime="2014-08-04T16:38:20.216643+02:00" LoggingEventType="1" severity="debug" toVersion="2014.8.4.5" name="Malware Database" fromVersion="2014.3.4.9"/>

<record subtype="Refresh" result="Starting" last_modified_tag="b88597e9-4b9b-4f9f-a836-05264ad92815" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:21.690728+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Started" last_modified_tag="66717151-2df1-4660-9e32-f59ec8a79918" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:38.390683+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Stopping" last_modified_tag="32015939-bf61-47e7-bea2-75093d84f66c" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:38.439686+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Stopped" last_modified_tag="e9d42d8d-3e98-4b06-9616-58a456f133d6" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:38.507690+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Refresh" result="Success" last_modified_tag="0304e174-118d-431a-be52-78a943466d2b" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:43.558979+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="a7d0c992-7586-4e2b-a34c-945c93ef27fa" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:43.595981+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Started" last_modified_tag="13812064-daa4-47be-8555-13931130e9f7" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:38:43.972002+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malware Protection" result="Starting" last_modified_tag="f35d583d-7952-4c67-bdab-c88eca97c3df" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:55:16.404395+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malware Protection" result="Started" last_modified_tag="5d67684d-9e66-48f1-a26f-4e2b522efea4" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:55:16.419995+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Starting" last_modified_tag="af34d10c-09af-473e-b186-82b57c19d69a" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:55:16.435595+02:00" LoggingEventType="2" severity="debug"/>

<record subtype="Malicious Website Protection" result="Started" last_modified_tag="e50af5f3-82ed-4235-9561-1adfd21e0b4e" systemname="PC" username="SYSTEM" type="Protection" source="Protection" datetime="2014-08-04T16:56:46.699795+02:00" LoggingEventType="2" severity="debug"/>

</logs>

Malwerebite

Warlord711 04.08.2014 16:36
Leider immer noch das falsche Log, aber egal, arbeite erstmal die Folgeschritte ab.

lawand 04.08.2014 16:37
Virustotal :

https://www.virustotal.com/de/file/21931885f1afc5e7030a413738f9f6a24b32582fe135deb6de5144edcc2be7f3/analysis/1407166340/


Fixlog :

Code:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:2-08-2014
Ran by Lawand at 2014-08-04 17:35:58 Run:1
Running from C:\Users\Lawand\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
C:\Users\Lawand\AppData\Local\CRE

*****************

C:\Users\Lawand\AppData\Local\CRE => Moved successfully.

==== End of Fixlog ====

Warlord711 04.08.2014 18:17
Mach mal noch den Fix:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
C:\Program Files\Update Software

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Und dann ESET, das kann länger dauern, teilweise mehrere Stunden:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


lawand 06.08.2014 09:58
ist esnormal das der Suchlauf mehr als 1 und halb Tage dauert ? Ist schon bei 86 % und hat schon mehr als ! 100 infizierte Dateien gefunden

Warlord711 06.08.2014 10:10
Das hängt davon ab, wieviele Dateien (auch externe Lauwerke) der Scan durchsuchen muss. Und halt auch an der Geschwindigkeit der Platten.

Aber 1,5 Tage ist schon sportlich, bisher so im Schnitt 2-3 Std, aber ist wie gesagt individuell.


Alle Zeitangaben in WEZ +1. Es ist jetzt 21:00 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131