Prosze o sprawdzenie loga

**Posty:** 370 · przez **bracik1977** 11 Maj 2014, 20:21

Pobralem ten program co mi podales. Czy musze sie tam zalogowac.Bo niewiem co robic.Zeby znowu cos nie narobic.
http://img31.otofotki.pl/ph969_ScreenHunter_02-May.jpg.html

**Posty:** 2183 · przez **NieWiem** 11 Maj 2014, 20:23

nie chciałem, żebyś cokolwiek pobierał. Mediafire to hosting plików, na którym można coś komuś przekazać.
Odpuśćmy to, bo nie chcę żebyś przez nieuwagę narobił więcej krzywdy. skasuj po prostu tą paczkę i wykonaj podany przeze mnie uprzednio skrypt.

**Posty:** 370 · przez **bracik1977** 11 Maj 2014, 20:57

Tak w ogole to ze spraw komputerowych to zielony jestem. I dlatego sa te komplikacje.
A to kolejny scrypt z ZOEK. A tak niewiem czy to normalnie dla tego programu jak chce go uruchomic to trwa u mnie okolo 5 minut, a nawet dluzej

Kod: Zaznacz wszystko: Zoek.exe v5.0.0.0 Updated 14-April-2014 Tool run by ADA on 11.05.2014 at 20:23:46,65. Microsoft Windows 7 Home Premium 6.1.7600 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\ADA\Desktop\zoek (1).exe [Scan all users] [Script inserted] ==== Older Logs ====================== C:\zoek-results2014-05-11-075545.log 189 bytes C:\zoek-results2014-05-11-081306.log 19291 bytes C:\zoek-results2014-05-11-090851.log 75794 bytes C:\zoek-results2014-05-11-101510.log 67344 bytes C:\zoek-results2014-05-11-172315.log 76379 bytes ==== Windows Installer Info ====================== Adobe AIR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F9ACB2AC6655084791DF7CD39837632]c:\Windows\Installer\317ba.msi Adobe Photoshop Elements 8.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C73EFD71E4604384DAF84A2B4BFD868F]C:\Windows\Installer\317c2.msi Adobe Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D385E0A7F3253C469021B967D17E5B4]C:\Windows\Installer\31811.msi Adobe Reader XI (11.0.06) - Deutsch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68AB67CA7DA71301B744BA0000000010]C:\Windows\Installer\9ba5c1.msi Apple Application Support [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5A440F64B8EC691489E4B56D25E563D1]C:\Windows\Installer\9ba146.msi Apple Software Update [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\46B5A9879DD95AB419A50FCFA0B1B7EF]C:\Windows\Installer\376923.msi ATI Catalyst Install Manager [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\14138CB5DD38EB709C04403B5845F040]C:\Windows\Installer\1928155.msi Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1CB9255CFB2C8E446BA21019D30780C1]C:\Windows\Installer\192815a.msi Catalyst Control Center Core Implementation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B09563757C631884E5EB9F3B090F7047]C:\Windows\Installer\192815f.msi Catalyst Control Center Graphics Full Existing [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\121100882E7840129F5FCE1CD5CF1A0E]C:\Windows\Installer\1928164.msi Catalyst Control Center Graphics Full New [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E4A35D8A1A77E32E3A69D6C9682A2F37]C:\Windows\Installer\1928169.msi Catalyst Control Center Graphics Light [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\59D0F562388A261740857B08586B6B39]C:\Windows\Installer\192816e.msi Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0B98994D2CB71F7F087123756F7143A7]C:\Windows\Installer\1928173.msi Catalyst Control Center Graphics Previews Vista [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6F171E2C85B91EC4B7B86BF90AE4AB8B]C:\Windows\Installer\1928178.msi Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D1DD8E7FDFB9BB83685AEB3F310BC015]C:\Windows\Installer\192814b.msi Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\31A9CC5F75C68494578AA3C2293A81B3]C:\Windows\Installer\19281ec.msi ccc-core-static [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\64059B1FAD9ECEFC248A8C226464AA23]C:\Windows\Installer\19281f8.msi ccc-utility64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\934DF9520B3163100D0AAF98BB5038D1]C:\Windows\Installer\19281f1.msi CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\71ECED675FCB04698245C30A9438A404]C:\Windows\Installer\19281e2.msi CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A7E111539B30CE524F431ADC799670CF]C:\Windows\Installer\19281e7.msi CCC Help Czech [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E8957B708BF159A1A7035F435A75624B]C:\Windows\Installer\192817e.msi CCC Help Danish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\121396FD0C0402036D5516E215164632]C:\Windows\Installer\1928183.msi CCC Help Dutch [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\592CED6D0A88AFC5B0928CDF0F19FF3D]C:\Windows\Installer\19281ba.msi CCC Help English [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3A965F1674614F6B808C040A11388172]C:\Windows\Installer\1928192.msi CCC Help Finnish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C14037C917BAD599EE7C4B9E049FF363]C:\Windows\Installer\192819c.msi CCC Help French [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0DA8E7241B4A522D38E6CC6B60B894A0]C:\Windows\Installer\19281a1.msi CCC Help German [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B0C43BE845FA562F48C4E3F69AEAF2DC]C:\Windows\Installer\1928188.msi CCC Help Greek [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0C41C76FE37DB55C1E231B09A4A107C9]C:\Windows\Installer\192818d.msi CCC Help Hungarian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F377200735A22F9E1E16BDD3ADF050EB]C:\Windows\Installer\19281a6.msi CCC Help Italian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E6C73FFB537D784493C072E130A06AC2]C:\Windows\Installer\19281ab.msi CCC Help Japanese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\547FD6E4E99CF909CB0F7B2CA4155EE6]C:\Windows\Installer\19281b0.msi CCC Help Korean [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\928D954C0FF0012C2BFB38BD36CFD116]C:\Windows\Installer\19281b5.msi CCC Help Norwegian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\734EF03F54E0904D6F92D56869A05619]C:\Windows\Installer\19281bf.msi CCC Help Polish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BBC7B38C637C64FB8923A7D9709E9DC4]C:\Windows\Installer\19281c4.msi CCC Help Portuguese [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\54B52D44E0C5781276932EAFE0A8EFD1]C:\Windows\Installer\19281c9.msi CCC Help Russian [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B402F3A6C32323E78F097A03788627D8]C:\Windows\Installer\19281ce.msi CCC Help Spanish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5315E951AEB47B25C8CD28F3E16D8D5A]C:\Windows\Installer\1928197.msi CCC Help Swedish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4C0F36A7B2B6C496DE270D766021CB92]C:\Windows\Installer\19281d3.msi CCC Help Thai [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\151D0FCE0ACBD6E826BDD544BDA48363]C:\Windows\Installer\19281d8.msi CCC Help Turkish [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CC3CDDBEA343DD0C97ABA8210D2AAC01]C:\Windows\Installer\19281dd.msi Evernote [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C953167FDEC9EA54A915D96650DC554C]C:\Windows\Installer\31920.msi Google Update Helper [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\93BAD29AC2E44034A96BCB446EB8552E]C:\Windows\Installer\9ba406.msi IncrediMail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1DF74FC68FC36024AB422A1B4ED3C8AC]C:\Windows\Installer\1ba68.msi Internet Explorer Toolbar 4.6 by SweetPacks [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EE58E3C298524145B73CBBED3CAC4D3]C:\Windows\Installer\117637c.msi InterVideo DeviceService [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\41DAA1250305BB44B8E0C56EF5EC750E]C:\Windows\Installer\d2b595.msi Java 7 Update 45 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4EA42A62D9304AC4784BF238120754FF]C:\Windows\Installer\2a41156.msi Java Auto Updater [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401]C:\Windows\Installer\2a41164.msi MAGIX Video deluxe MX Download Version [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\CA47532DC30547944ABA139F4E1BD63A]C:\Windows\Installer\a5abec.msi Media Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5054FF8D77956114D84EA27F71E407CA]C:\Windows\Installer\31951.msi Media Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5D06B511BDBBE094FAE260D4733AEC10]C:\Windows\Installer\3193c.msi Media Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\71963502FD2E9D544BF1A90CACFF4EA8]C:\Windows\Installer\31943.msi Media Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\77AE5BD341A49CE4B8CF37CB48B8ED37]C:\Windows\Installer\3194a.msi Media Gallery [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BA67B20212B1E4342A9887D867D7A3C7]C:\Windows\Installer\31935.msi Microsoft .NET Framework 4 Client Profile [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DFC90B5F2B0FFA63D84FD16F6BF37C4B]C:\Windows\Installer\154eb6.msi Microsoft .NET Framework 4 Client Profile DEU Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D3FAD3E096FFA5439AE9F1DE03C40A38]C:\Windows\Installer\17cb0f.msi Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C28643E881181F13CBC489DC69571E2C]C:\Windows\Installer\d85a19.msi Microsoft .NET Framework 4 Extended DEU Language Pack [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\078283207C91DCA3BBEA6F3E679074CD]C:\Windows\Installer\d85a1e.msi Microsoft Office 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159070000000000000000F01FEC]C:\Windows\Installer\31958.msi Microsoft Silverlight [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100]c:\Windows\Installer\2272640.msi Microsoft SQL Server Desktop Engine [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B84B90E141EA724BAC03D06157222A4]C:\Windows\Installer\1b70d8.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E815EB96CCE9A53884E7857C57002F0]c:\Windows\Installer\513d0.msi Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1926E8D15D0BCE53481466615F760A7F]c:\Windows\Installer\187f0f.msi Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D5E3C0FEDA1E123187686FED06E995A]c:\Windows\Installer\18475b.msi MSVCRT Redists [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0038069C5F110E116AB400313D6D9992]C:\Windows\Installer\1b72fb.msi MSVCRT Redists [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\08CEC1A654422E119A0B01043F7E10F0]C:\Windows\Installer\242e7af.msi MSVCRT Redists [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E2EA08B5D9570E112AD70005650C0080]C:\Windows\Installer\22cc57f.msi MSXML 4.0 SP3 Parser (KB2758694) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\09AB59D18F4FCE748A2844C1993DC0E1]c:\Windows\Installer\590af.msi Philips Media Converter [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B45684EFAA9FDE04EB3F843FEFF28A74]C:\Windows\Installer\9b3c7a.msi PhotoMizer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7328F00A694F2D4400103ECC8FDC85EA]C:\Windows\Installer\9432b.msi PlayStation(R)Network Downloader [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8DD9566B7A0042A4BBBF1C6F89E2D566]C:\Windows\Installer\199ce6d.msi PlayStation(R)Store [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\48C235E057243B14D9184D1A2AD0E87E]C:\Windows\Installer\199ce73.msi PMB [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F5E89A6B7A6DBF64E9D9F1B74F3494C1]C:\Windows\Installer\31966.msi PMB VAIO Edition Guide [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D4B9F933BC00C1C4EB8DCE689ABA06A2]C:\Windows\Installer\38ae88.msi PMB VAIO Edition Plug-in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\70F3D331855DEC64088E4F7DD5BBDA36]C:\Windows\Installer\11d0ac.msi PMB VAIO Edition Plug-in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9FC8002245B22204FA8DB3D7248CE9B6]C:\Windows\Installer\11d0b1.msi QuickTime 7 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\FD7EE11154CF7C04897A57A34CB621BF]C:\Windows\Installer\9ba3f6.msi Remote Play with PlayStation 3 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C6C6B4370474F674BBC07FFA64E9BD2B]C:\Windows\Installer\319bb.msi Samsung Kies [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1038C85769625584FA5435B4210089A0]C:\Windows\Installer\2d693.msi SkypeT 6.11 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E7FF67E4ABEA78C47B88DC745E24B5D9]C:\Windows\Installer\961b5.msi SmartSound Common Data [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E9682A8BAC035C04C98FDB37455EE78F]c:\Windows\Installer\392f39.msi SmartSound Quicktracks 5 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DF3AB8F29AF197246B6917A2BB210FF9]C:\Windows\Installer\e8f6d.msi SmartSound Quicktracks for Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\443A586481763294AAD951A8A0E2C1BF]C:\Windows\Installer\31816.msi VAIO Care [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0CB536CEC7D02AC4B978A233C092C82B]C:\Windows\Installer\e3b19e.msi VAIO Data Restore Tool [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\082C112820B5E7E45BF548A5022794AB]C:\Windows\Installer\319e9.msi VAIO Hardware Diagnostics [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EB36D9F2198A93E4FA3B47204D6808C0]C:\Windows\Installer\319f0.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\190FA771458751643872CA57816F7228]C:\Windows\Installer\31a1b.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\647AD9B41EA50AB40978DB1B26428209]C:\Windows\Installer\31a14.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6A469D3AA1147184D985C58B08F894E4]C:\Windows\Installer\319fe.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ADDC9F256F629944090ED6DD6E2D52C9]C:\Windows\Installer\31a29.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C43F149BA63FF6A49AC7055B49E854F1]C:\Windows\Installer\31a22.msi VAIO Media plus [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C5F1DFA5ADF8C314FA831F7EDB017DF2]C:\Windows\Installer\319f7.msi VAIO Movie Story Template Data [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C2AB8AF6B25027048B2E32202C86EBE9]C:\Windows\Installer\31a2e.msi VAIO Quick Web Access [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F86429A58DE369F49A1EF471C608CE92]C:\Windows\Installer\319b3.msi VU5x64 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\681ED7B6B4733784EA1C4746AD33D76D]C:\Windows\Installer\17cd4bc.msi VU5x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B8A21D914D95644FB110717E90BDC20]C:\Windows\Installer\17cd4b7.msi VU5x86 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\80D32D2DE01D6D3488C3870E2BCAC96C]C:\Windows\Installer\5d8711f.msi WebTV [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\523528800172BD64386359E3AB867267]C:\Windows\Installer\11cb969.msi WIDCOMM Bluetooth Software [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\97B0E634BFC2F5E439081EC7B1520D5C]C:\Windows\Installer\276cb.msi Windows Live Sync [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0F905685D0535B847B36C92C8F9DC6C4]C:\Windows\Installer\31a8a.msi ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== \"SubEdit-Player\" Adobe AIR Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Photoshop Elements 8.0 Adobe Premiere Elements 8.0 Adobe Reader XI (11.0.06) - Deutsch Any Video Converter 3.3.3 Apple Application Support Apple Software Update ArcSoft Magic-i Visual Effects 2 ArcSoft WebCam Companion 3 Ashampoo Burning Studio 6 FREE v.6.81 ATI Catalyst Install Manager AVS Video Editor 6 BlazeDTV 6.0 Canon Utilities ZoomBrowser EX Catalyst Control Center - Branding Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Common Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization All ccc-core-static ccc-utility64 CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish CCleaner Deutsch Translator 2 EasyCleaner Eusing Free Registry Cleaner Evernote FastStone Image Viewer 4.4 Google Chrome Google Update Helper Hotfix for Microsoft .NET Framework 4 Client Profile (KB2461678) IncrediMail IncrediMail 2.0 Intel(R) Control Center Intel(R) Management Engine Components Intel(R) Rapid Storage Technology Intel(R) Turbo Boost Technology Driver Internet-TV fr Windows Media Center InterVideo DeviceService Java 7 Update 51 Java Auto Updater K-Lite Codec Pack 7.0.0 (Standard) L&H TTS3000 Deutsch MAGIX Video deluxe MX Download Version Malwarebytes Anti-Malware wersja 1.75.0.1300 Media Gallery Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Client Profile DEU Language Pack Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Extended DEU Language Pack Microsoft Office 2010 Microsoft Silverlight Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mozilla Firefox 21.0 (x86 pl) Mozilla Maintenance Service MSVCRT Redists MSXML 4.0 SP3 Parser (KB2758694) MyFreeCodec Odkurzacz Pando Media Booster Philips Media Converter PhotoMizer PhotoScape Picasa 3 PlayStation(R)Network Downloader PlayStation(R)Store PMB PMB VAIO Edition Guide PMB VAIO Edition Plug-in QuickTime 7 Realtek HDMI Audio Driver for ATI Realtek High Definition Audio Driver Remote-Tastatur mit PlayStation 3 Remote Play mit PlayStation©3 Remote Play with PlayStation 3 Revo Uninstaller 1.94 Revo Uninstaller Pro 3.0.8 Samsung Kies SAMSUNG USB Driver for Mobile Phones Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841) Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708) Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636) Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078) Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121) Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2) Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405) Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827) Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449) Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428) Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019) Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595) Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2478663) Security Update for Microsoft .NET Framework 4 Client Profile DEU Language Pack (KB2518870) Security Update for Microsoft .NET Framework 4 Extended (KB2487367) Security Update for Microsoft .NET Framework 4 Extended (KB2656351) Security Update for Microsoft .NET Framework 4 Extended (KB2736428) Security Update for Microsoft .NET Framework 4 Extended (KB2742595) SkypeT 6.11 SmartSound Common Data SmartSound Quicktracks 5 SmartSound Quicktracks for Premiere Elements 8.0 Sony MSS Speedial Synaptics Pointing Device Driver Total Commander Ultima Prime 4.7.0.0 Update for Microsoft .NET Framework 4 Client Profile (KB2468871) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) Update for Microsoft .NET Framework 4 Extended (KB2468871) Update for Microsoft .NET Framework 4 Extended (KB2533523) Update for Microsoft .NET Framework 4 Extended (KB2600217) VAIO-Handbuch VAIO-Support fr šbertragungen VAIO - Media Gallery VAIO - PMB VAIO Edition Guide VAIO - PMB VAIO Edition Plug-in VAIO Care VAIO Control Center VAIO Data Restore Tool VAIO DVD Menu Data VAIO Gate VAIO Gate Default VAIO Hardware Diagnostics VAIO Media plus VAIO Media plus Opening Movie VAIO Movie Story Template Data VAIO Quick Web Access VAIO Sample Contents VAIO Smart Network VAIO Update VU5x64 VU5x86 WebCam webget WebTV WIDCOMM Bluetooth Software Windows Live Sync Windows Media Center Add-in for Silverlight Windows Media Player Firefox Plugin Wisdom-soft Set up ScreenHunter 5.1 Free X-DVD_Player ==== Running Processes ====================== C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe C:\Windows\SysWOW64\PnkBstrA.exe C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe C:\Program Files (x86)\webget\updatewebget.exe C:\Program Files (x86)\webget\bin\utilwebget.exe C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe C:\Windows\SysWOW64\DllHost.exe C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe C:\Windows\sysWOW64\wbem\wmiprvse.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Users\ADA\Desktop\zoek (1).exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Windows\SysWOW64\cmd.exe C:\Program Files\Sony\VAIO Care\VCService.exe ==== Deleting Files \ Folders ====================== C:\Users\ADA\AppData\Roaming\Speedial deleted C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\extensions\{9edd0ea8-2819-47c2-8320-b007d5996f8a}.xpi deleted "C:\Program Files (x86)\webget\updatewebget.exe" deleted "C:\Program Files (x86)\webget\bin\utilwebget.exe" deleted "C:\Program Files (x86)\webget" not deleted "C:\Program Files (x86)\webget\bin" not deleted ==== System Specs ====================== Windows: Windows 7 Home Premium Edition (64-bit) (Build 7600) Memory (RAM): 3951 MB CPU Info: Intel(R) Core(TM) i3 CPU M 370 @ 2.40GHz CPU Speed: 2401,1 MHz Sound Card: Lautsprecher/Kopfhörer (Realtek | Display Adapters: ATI Mobility Radeon HD 5470 | ATI Mobility Radeon HD 5470 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver Monitors: 1x; Generic PnP Monitor | Screen Resolution: 1280 X 720 - 32 bit Network: Network Present Network Adapters: Microsoft Virtual WiFi Miniport Adapter | Atheros AR9285 Wireless Network Adapter | Marvell Yukon 88E8059 PCI-E Gigabit Ethernet Controller CD / DVD Drives: 1x (D: | ) D: TSSTcorpCDDVDW TS-L633C Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 16 Button Wheel Mouse Present Hard Disks: C: 452,3GB Hard Disks - Free: C: 14,5GB Manufacturer *: American Megatrends Inc. BIOS Info: AT/AT COMPATIBLE | 09/23/09 | Sony - 20101006 Time Zone: Mitteleuropäische Zeit Motherboard *: Sony Corporation VAIO Country: Deutschland Language: DEU ==== System Specs (Software) ====================== Anti-Spyware: Windows Defender disabled (Outdated) Internet Explorer Version: 9.0.8112.16421 Mozilla Firefox version: 21.0 (x86 pl) Google Chrome version: 34.0.1847.131 Adobe Reader version: 11.0.06.70 Sun Java version: 1.7.0_51 (32-bit) Flash Player version: 11.9.900.170 ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "KiesPDLR.exe"="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run" [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\runonce] "removemfstaticdllsf7fd3"="cmd.exe /c del /q C:\Program Files (x86)\MediaFire Desktop\*_f7fd3.dll" "removedir"="cmd.exe /c rd /s /q C:\Program Files (x86)\MediaFire Desktop C:/Users/ADA/AppData/Local/MediaFire Desktop" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ISBMgr.exe"="C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "KiesPDLR.exe"="C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce] "removemfstaticdllsf7fd3"="cmd.exe /c del /q C:\Program Files (x86)\MediaFire Desktop\*_f7fd3.dll" "removedir"="cmd.exe /c rd /s /q C:\Program Files (x86)\MediaFire Desktop C:/Users/ADA/AppData/Local/MediaFire Desktop" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 " "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe " ==== Startup Registry Disabled ====================== [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-] "KiesPreload"="C:\\Program Files (x86)\\Samsung\\Kies\\Kies.exe /preload" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-] "KiesTrayAgent"="C:\\Program Files (x86)\\Samsung\\Kies\\KiesTrayAgent.exe" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Elbserver] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Elbserver" "hkey"="HKCU" "command"="C:\\Program Files (x86)\\Sony\\Media Gallery\\ElbServer.exe /Stay" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IAStorIcon] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="IAStorIcon" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\Intel\\Intel(R) Rapid Storage Technology\\IAStorIcon.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PMBVolumeWatcher] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PMBVolumeWatcher" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\Sony\\PMB\\PMBVolumeWatcher.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SHTtray.exe] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SHTtray.exe" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\Common Files\\Sony Shared\\SOHLib\\SHTtray.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sidebar] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Sidebar" "hkey"="HKCU" "command"="C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\StartCCC] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="StartCCC" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\" MSRun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\VRLPHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="VRLPHelper" "hkey"="HKCU" "command"="C:\\Program Files (x86)\\Sony\\Media Gallery\\VRLPHelper.exe /Stay" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk] "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Bluetooth.lnk" "backup"="C:\\Windows\\pss\\Bluetooth.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~1\\WIDCOMM\\BLUETO~1\\BTTray.exe " "item"="Bluetooth" ==== Startup Folders ====================== 2011-02-06 11:19:09 2221 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk 2014-02-25 15:53:06 2044 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Speedial.job --a------ C:\Users\ADA\AppData\Roaming\Speedial\UPDATE1\UPDATE1.exe [] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\Speedial" [C:\Users\ADA\AppData\Roaming\Speedial\UPDATE~1\UPDATE~1.EXE] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{E9FCAAAA-2E6B-450C-8DBD-EE7AE6DCA21C}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\{1D1EA841-6BFD-4022-A87F-97A4EB7C6A20}" ["c:\program files (x86)\google\chrome\application\chrome.exe"] "C:\Windows\SysNative\tasks\{394962AA-8DC2-42F9-BFEC-B190A86D67A5}" ["c:\program files (x86)\google\chrome\application\chrome.exe"] "C:\Windows\SysNative\tasks\{56F30C7D-460F-4D12-9F39-35CC13C90A74}" ["c:\users\ada\appdata\local\google\chrome\application\chrome.exe"] "C:\Windows\SysNative\tasks\{6F8132D4-87B9-43D8-931F-55EBDA0CC4E9}" [C:\Program Files\Sony\MFU\iGoogle.exe] "C:\Windows\SysNative\tasks\{A487AF0B-1475-439F-924E-DB8DB46FE1AB}" [C:\Program Files\Sony\MFU\iGoogle.exe] "C:\Windows\SysNative\tasks\{A7A03983-977D-49EA-A547-D8F0FB525996}" [C:\Program Files (x86)\Skype\\Phone\Skype.exe] "C:\Windows\SysNative\tasks\{AB7E4BE0-4924-4631-93F0-FDDC6B05ED55}" [C:\Program Files\Sony\MFU\iGoogle.exe] "C:\Windows\SysNative\tasks\{AD87D38F-9BBB-446F-A3A4-A9C7E276E908}" ["c:\users\ada\appdata\local\google\chrome\application\chrome.exe"] "C:\Windows\SysNative\tasks\{F07F3B3F-FE2A-439A-8E93-600D98BCE545}" [C:\Program Files\Sony\MFU\iGoogle.exe] "C:\Windows\SysNative\tasks\{FEB03A85-18F5-4C86-B2B4-6D5EAE744C55}" ["c:\program files (x86)\mozilla firefox\firefox.exe"] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] "C:\Windows\SysNative\tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3" ["%ProgramFiles%\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe"] "C:\Windows\SysNative\tasks\SONY\SUS-BCF\Level4Daily" [C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe] "C:\Windows\SysNative\tasks\SONY\SUS-BCF\Level4Month" [C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe] "C:\Windows\SysNative\tasks\SONY\VAIO Power Management\VPM Logon Start" [C:\Program Files\Sony\VAIO Power Management\SPMgr.exe] "C:\Windows\SysNative\tasks\SONY\VAIO Power Management\VPM Session Change" [C:\Program Files\Sony\VAIO Power Management\SPMgr.exe] "C:\Windows\SysNative\tasks\SONY\VAIO Power Management\VPM Unlock" [C:\Program Files\Sony\VAIO Power Management\SPMgr.exe] "C:\Windows\SysNative\tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool" [C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\CRMReminder" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VAIO Care" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCCheckIolo" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCMetrics" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCOneClick" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Care\VCSelfHeal" ["%ProgramFiles%\Sony\VAIO Care\VCSystemTray.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Gate\StartExecuteProxy" ["%programfiles%\Sony\VAIO Gate\ExecutionProxy.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Gate\VAIO Gate" [C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music ADA" [C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Update\VAIO Update" ["C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe"] "C:\Windows\SysNative\tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair" [C:\Program Files\Sony\VAIO Update\VUSR.exe] ==== Firefox Extensions ====================== ProfilePath: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default - Quick Start - %ProfilePath%\extensions\quick_start@gmail.com - Undetermined - %ProfilePath%\extensions\staged ProfilePath: C:\Users\ADA\AppData\Roaming\Philips-Songbird\Profiles\56jgs9ku.default - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\albumart@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\cd-rip@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewaacdec@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewmp3enc@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\fileassociation@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gogear@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gonzo@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gracenote@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\langpack-pl@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\mashTape@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\msc@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\mtp@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-addon-manager@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-branding@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-likemusic@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-msc-mtp-switch@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-promotions@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-skin@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-ui@philips.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\purplerain@songbirdnest.com - Undetermined - C:\Program Files (x86)\Philips\Philips Songbird\extensions\windowsmedia@songbirdnest.com - QuickTime Playback - %ProfilePath%\extensions\quicktime@songbirdnest.com AppDir: C:\Program Files (x86)\Mozilla Firefox - ArcaBit Ext. - %AppDir%\extensions\arcabit@www.arcabit.pl - G Data WebFilter - %AppDir%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default F891089A6AB9E12FEDEBCC5EC0F40D66 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll - Shockwave Flash E0BCE8124D948C1F5909A97D0678E03D - C:\ProgramData\Gadu-Gadu 10\_userdata\npgg.4.dll - Gadu-Gadu Plug-in ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions bakijjialdiiboeaknfpmflphhmljfkd - No path found[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions bakijjialdiiboeaknfpmflphhmljfkd - No path found[] Google Docs - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Last updated at time on date - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb Google Search - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Google Wallet - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Quick Start - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma Gmail - ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chrome Fix ====================== C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage deleted successfully C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_en.softonic.com_0.localstorage-journal deleted successfully ==== IE Start and Search Settings ====================== [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir=" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir=" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Start Page"="http://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir=" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}] not found ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {31090377-0740-419E-BEFC-A56E50500D5B} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {8559D8B2-251B-42ED-8273-4C12CD1E5B98} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8" {F9AF71C9-27C0-4E6F-9607-38672EA2D4AE} IDG Url="http://www.idg.pl?q={searchTerms}" ==== Deleting CLSID Registry Keys ====================== HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{dc264a72-fa75-4948-b881-ea8eff8e5dd2} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dc264a72-fa75-4948-b881-ea8eff8e5dd2} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Uninstall List x64 ====================== Adobe AIR [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A2BCA9F1-566C-4805-97D1-7FDC93386723}] Adobe AIR [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] Adobe Flash Player 11 ActiveX [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] Adobe Flash Player 11 Plugin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] Adobe Photoshop Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}] Adobe Photoshop Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Photoshop Elements 8.0] Adobe Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A0E583D1-23F7-4C35-9620-B169D7715E4B}] Adobe Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PremElem80] Adobe Reader XI (11.0.06) - Deutsch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1031-7B44-AB0000000001}] Any Video Converter 3.3.3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Any Video Converter_is1] Apple Application Support [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{46F044A5-CE8B-4196-984E-5BD6525E361D}] Apple Software Update [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}] ArcSoft Magic-i Visual Effects 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7BB90344-0647-468E-925A-7F69F7983421}] ArcSoft WebCam Companion 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}] Ashampoo Burning Studio 6 FREE v.6.81 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Ashampoo Burning Studio 6 FREE_is1] ATI Catalyst Install Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5BC83141-83DD-07BE-C940-04B385540F04}] AVS Video Editor 6 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVS Video Editor_is1] BlazeDTV 6.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BlazeDTV 6.0_is1] Canon Utilities ZoomBrowser EX [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ZoomBrowser EX] Catalyst Control Center - Branding [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C5529BC1-C2BF-44E8-B62A-01913D70081C}] Catalyst Control Center Core Implementation [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5736590B-36C7-4881-5EBE-F9B390F00774}] Catalyst Control Center Graphics Full Existing [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{88001121-87E2-2104-F9F5-ECC15DFCA1E0}] Catalyst Control Center Graphics Full New [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A8D53A4E-77A1-E23E-A396-6D9C86A2F273}] Catalyst Control Center Graphics Light [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{265F0D95-A883-7162-0458-B78085B6B693}] Catalyst Control Center Graphics Previews Common [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D49989B0-7BC2-F7F1-8017-3257F617347A}] Catalyst Control Center Graphics Previews Vista [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C2E171F6-9B58-4CE1-7B8B-B69FA04EBAB8}] Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A20548C1-4B08-C41D-A3A8-FE8C933C2A00}] Catalyst Control Center InstallProxy [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F7E8DD1D-9BFD-38BB-86A5-BEF313B00C51}] Catalyst Control Center Localization All [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5CC9A13-6C57-4948-75A8-3A2C92A3183B}] ccc-core-static [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F1B95046-E9DA-CFEC-42A8-C8224646AA32}] ccc-utility64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{259FD439-13B0-0136-D0A0-FA89BB05831D}] CCC Help Chinese Standard [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{76DECE17-BCF5-9640-2854-3CA049834A40}] CCC Help Chinese Traditional [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{35111E7A-03B9-25EC-F434-A1CD976907FC}] CCC Help Czech [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{07B7598E-1FB8-1A95-7A30-F534A55726B4}] CCC Help Danish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DF693121-40C0-3020-D655-612E51616423}] CCC Help Dutch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D6DEC295-88A0-5CFA-0B29-C8FDF091FFD3}] CCC Help English [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{61F569A3-1647-B6F4-08C8-40A011831827}] CCC Help Finnish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9C73041C-AB71-995D-EEC7-B4E940F93F36}] CCC Help French [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{427E8AD0-A4B1-D225-836E-CCB6068B490A}] CCC Help German [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8EB34C0B-AF54-F265-844C-3E6FA9AE2FCD}] CCC Help Greek [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F67C14C0-D73E-C55B-E132-B1904A1A709C}] CCC Help Hungarian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7002773F-2A53-E9F2-E161-DB3DDA0F05BE}] CCC Help Italian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BFF37C6E-D735-4487-390C-271E030AA62C}] CCC Help Japanese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4E6DF745-C99E-909F-BCF0-B7C24A51E56E}] CCC Help Korean [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C459D829-0FF0-C210-B2BF-83DB63FC1D61}] CCC Help Norwegian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F30FE437-0E45-D409-F629-5D86960A6591}] CCC Help Polish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C83B7CBB-C736-BF46-9832-7A9D07E9D94C}] CCC Help Portuguese [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{44D25B45-5C0E-2187-6739-E2FA0E8AFE1D}] CCC Help Russian [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6A3F204B-323C-7E32-F890-A7308768728D}] CCC Help Spanish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{159E5135-4BEA-52B7-8CDC-823F1ED6D8A5}] CCC Help Swedish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{7A63F0C4-6B2B-694C-ED72-D0670612BC29}] CCC Help Thai [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ECF0D151-BCA0-8E6D-62DB-5D44DB4A3836}] CCC Help Turkish [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{EBDDC3CC-343A-C0DD-79BA-8A12D0A2CA10}] CCleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner] Deutsch Translator 2 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DT2] EasyCleaner [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D}] Eusing Free Registry Cleaner [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Eusing Free Registry Cleaner] Evernote [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F761359C-9CED-45AE-9A51-9D6605CD55C4}] FastStone Image Viewer 4.4 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FastStone Image Viewer] Google Chrome [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome] Google Update Helper [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}] IncrediMail [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6CF47FD1-3CF8-4206-BA24-A2B1E43D8CCA}] IncrediMail 2.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\IncrediMail] Intel(R) Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}] Intel(R) Management Engine Components [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}] Intel(R) Rapid Storage Technology [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}] Intel(R) Turbo Boost Technology Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}] Internet-TV fr Windows Media Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}] InterVideo DeviceService [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}] Java 7 Update 51 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83217045FF}] Java Auto Updater [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}] K-Lite Codec Pack 7.0.0 (Standard) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\KLiteCodecPack_is1] L&H TTS3000 Deutsch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LHTTSGED] MAGIX Video deluxe MX Download Version [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D23574AC-503C-4974-A4AB-31F9E4B16DA3}] Malwarebytes Anti-Malware wersja 1.75.0.1300 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Malwarebytes' Anti-Malware_is1] Media Gallery [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{115B60D5-BBDB-490E-AF2E-064D37A3CE01}] Media Gallery [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{202B76AB-1B21-434E-A289-788D767D3A7C}] Media Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{20536917-E2DF-45D9-B41F-9AC0CAFFE48A}] Media Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3DB5EA77-4A14-4EC9-8BFC-73BC848BDE73}] Media Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D8FF4505-5977-4116-8DE4-2AF7174E70AC}] Microsoft .NET Framework 4 Client Profile [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}] Microsoft .NET Framework 4 Client Profile DEU Language Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0E3DAF3D-FF69-345A-A99E-1FED304CA083}] Microsoft .NET Framework 4 Extended [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}] Microsoft .NET Framework 4 Extended DEU Language Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{02382870-19C7-3ACD-BBAE-F6E3760947DC}] Microsoft Silverlight [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}] Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E09B48B5-E141-427A-AB0C-D3605127224A}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}] Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}] Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}] Mozilla Firefox 21.0 (x86 pl) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox 21.0 (x86 pl)] Mozilla Maintenance Service [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MozillaMaintenanceService] MSVCRT Redists [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6A1CEC80-2445-11E2-A9B0-1040F3E7010F}] MSVCRT Redists [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C9608300-11F5-11E0-A64B-0013D3D69929}] MSVCRT Redists [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B80AE2E-759D-11E0-A27D-005056C00008}] MSXML 4.0 SP3 Parser (KB2758694) [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}] MyFreeCodec [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec] Odkurzacz [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Odkurzacz 13.4_is1] Pando Media Booster [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{980A182F-E0A2-4A40-94C1-AE0C1235902E}] Philips Media Converter [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FE48654B-F9AA-40ED-BEF3-48F3FE2FA847}] PhotoMizer [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A00F8237-F496-44D2-0001-E3CCF8CD58AE}] PhotoScape [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PhotoScape] Picasa 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picasa 3] PlayStation(R)Network Downloader [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}] PlayStation(R)Store [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}] PMB [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}] PMB VAIO Edition Guide [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}] PMB VAIO Edition Plug-in [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{133D3F07-D558-46CE-80E8-F4D75DBBAD63}] PMB VAIO Edition Plug-in [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}] QuickTime 7 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}] Realtek HDMI Audio Driver for ATI [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5449FB4F-1802-4D5B-A6D8-087DB1142147}] Realtek High Definition Audio Driver [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}] Remote-Tastatur mit PlayStation 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{65B138AE-F636-4D4C-BA5D-A06E21E47C53}] Remote Play mit PlayStation©3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{07441A52-E208-478A-92B7-5C337CA8C131}] Remote Play with PlayStation 3 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{734B6C6C-4740-476F-BB0C-F7AF469EDBB2}] Revo Uninstaller 1.94 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Revo Uninstaller] Revo Uninstaller Pro 3.0.8 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1] Samsung Kies [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{758C8301-2696-4855-AF45-534B1200980A}] Samsung Kies [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}] SAMSUNG USB Driver for Mobile Phones [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}\25_escape] SAMSUNG USB Driver for Mobile Phones [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}] SkypeT 6.11 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}] SmartSound Common Data [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}] SmartSound Common Data [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}] SmartSound Quicktracks 5 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}] SmartSound Quicktracks 5 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}] SmartSound Quicktracks for Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4685A344-6718-4923-AA9D-158A0A2E1CFB}] SmartSound Quicktracks for Premiere Elements 8.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}] Speedial [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Speedial] Synaptics Pointing Device Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SynTPDeinstKey] Total Commander Ultima Prime 4.7.0.0 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\TC UP] VAIO-Handbuch [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}] VAIO-Support fr šbertragungen [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}] VAIO - Media Gallery [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}] VAIO - PMB VAIO Edition Guide [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}] VAIO - PMB VAIO Edition Plug-in [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}] VAIO Care [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{EC635BC0-0D7C-4CA2-9B87-2A330C298CB2}] VAIO Control Center [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{72042FA6-5609-489F-A8EA-3C2DD650F667}] VAIO Data Restore Tool [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}] VAIO Data Restore Tool [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8211C280-5B02-4E7E-B55F-845A207249BA}] VAIO DVD Menu Data [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}] VAIO Gate [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7C30414-2382-4086-B0D6-01A88ABA21C3}] VAIO Gate Default [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B7546697-2A80-4256-A24B-1C33163F535B}] VAIO Hardware Diagnostics [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2F9D63BE-A891-4E39-AFB3-7402D486800C}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5AFD1F5C-8FDA-413C-AF38-F1E7BD10D72F}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A3D964A6-411A-4817-9D58-5CB8808F494E}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{177AF091-7854-4615-8327-AC7518F62782}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4B9DA746-5AE1-4BA0-9087-BDB162242890}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{52F9CDDA-26F6-4499-90E0-6DDDE6D2259C}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}] VAIO Media plus [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{B941F34C-F36A-4A6F-A97C-50B5948E451F}] VAIO Media plus Opening Movie [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}] VAIO Movie Story Template Data [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}] VAIO Movie Story Template Data [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}] VAIO Quick Web Access [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5A92468F-3ED8-4F96-A9E1-4F176C80EC29}] VAIO Quick Web Access [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\splashtop] VAIO Sample Contents [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}] VAIO Smart Network [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}] VAIO Update [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}] VU5x64 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6B7DE186-374B-4873-AEC1-7464DA337DD6}] VU5x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9D12A8B5-9D41-4465-BF11-70719EB0CD02}] VU5x86 [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D2D23D08-D10E-43D6-883C-78E0B2AC9CC6}] WebCam [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{ED1674F5-5165-49BF-B546-AE5343111540}] webget [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\webget] WebTV [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{08825325-2710-46DB-8336-953EBA682776}] WIDCOMM Bluetooth Software [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}] Windows Live Sync [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{586509F0-350D-48B5-B763-9CC2F8D96C4C}] Windows Media Center Add-in for Silverlight [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}] Windows Media Player Firefox Plugin [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}] Wisdom-soft Set up ScreenHunter 5.1 Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wisdom-soft Set up ScreenHunter 5.1 Free] X-DVD_Player [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\X-DVD_Player] ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\bakijjialdiiboeaknfpmflphhmljfkd deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\webget deleted successfully HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Speedial deleted successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=363 folders=76 29129315 bytes) ==== After Reboot ====================== ==== Deleting Files / Folders ====================== "C:\Program Files (x86)\webget" not found ==== EOF on 11.05.2014 at 20:50:33,13 ======================

**Posty:** 2183 · przez **NieWiem** 11 Maj 2014, 21:21

Hm, dziwne, ale nie chce puścić.

Zrobimy inaczej. Pobierz świeżą wersję ComboFixa, uruchom i wklej raport.

**Posty:** 370 · przez **bracik1977** 11 Maj 2014, 22:23

Tu jest raport z ComboFix.

Kod: Zaznacz wszystko: ComboFix 14-05-10.01 - ADA 11.05.2014 22:02:36.3.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3950.2146 [GMT 2:00] ausgeführt von:: c:\users\ADA\Desktop\ComboFix.exe SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . Infizierte Kopie von c:\windows\SysWow64\user32.dll wurde gefunden und desinfiziert Kopie von - c:\combofix\HarddiskVolumeShadowCopy9_!Windows!SysWOW64!user32.dll wurde wiederhergestellt . . ((((((((((((((((((((((( Dateien erstellt von 2014-04-11 bis 2014-05-11 )))))))))))))))))))))))))))))) . . 2014-05-11 20:11 . 2014-05-11 20:11 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-05-11 18:48 . 2014-05-11 18:23 24064 ----a-w- c:\windows\zoek-delete.exe 2014-05-11 18:09 . 2013-12-06 16:42 20696 ----a-w- c:\windows\system32\drivers\mfmonitor_x64.sys 2014-05-11 17:56 . 2014-05-11 17:56 -------- d-----w- c:\users\ADA\MediaFire 2014-05-11 11:14 . 2014-05-11 11:14 -------- d-----w- c:\program files (x86)\Speedial 2014-05-11 08:51 . 2014-05-11 20:13 -------- d-----w- c:\users\ADA\AppData\Local\Temp 2014-05-10 17:36 . 2014-05-10 17:36 -------- d-----w- C:\_OTS 2014-05-07 18:58 . 2014-05-11 18:45 -------- d-----w- C:\zoek_backup 2014-05-07 13:16 . 2014-05-07 17:05 -------- d-----w- c:\program files\suprasavings 2014-05-07 06:33 . 2014-05-07 17:04 -------- d-----w- c:\users\ADA\AppData\Roaming\Wise Uninstaller 2014-05-06 19:21 . 2014-05-06 19:21 -------- d-----w- c:\windows\system32\log 2014-05-06 19:21 . 2014-04-23 10:19 43520 ----a-w- c:\windows\system32\drivers\iSafeKrnlBoot.sys 2014-05-06 17:01 . 2014-05-07 05:05 -------- d-----w- c:\program files\Enigma Software Group 2014-05-06 10:42 . 2014-05-07 18:03 -------- d-----w- C:\FRST 2014-05-06 09:51 . 2014-05-06 09:51 -------- d-----w- c:\users\ADA\AppData\Local\VS Revo Group 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\programdata\VS Revo Group 2014-05-06 09:50 . 2009-12-30 08:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\program files\VS Revo Group 2014-05-06 05:25 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll 2014-05-06 05:19 . 2014-05-07 04:36 -------- d-----w- C:\AdwCleaner 2014-04-22 15:49 . 2014-04-22 15:49 -------- d-----w- c:\program files (x86)\ToniArts 2014-04-22 15:49 . 2004-07-15 22:20 733184 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll 2014-04-22 15:49 . 2004-07-15 22:20 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll 2014-04-22 15:49 . 2004-07-15 22:19 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll 2014-04-22 15:49 . 2004-07-15 22:18 172032 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll 2014-04-22 15:49 . 2004-07-15 22:18 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe 2014-04-22 15:49 . 2014-04-22 15:49 303236 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll 2014-04-22 15:49 . 2014-04-22 15:49 180356 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll 2014-04-22 15:14 . 2014-04-02 09:18 144664 ----a-w- c:\windows\SysWow64\secman.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Regular.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Light.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Bold.fot 2014-02-25 15:53 . 2014-02-25 15:53 74703 ----a-w- c:\windows\SysWow64\mfc45.dll 2014-02-16 08:03 . 2010-12-25 13:10 88567024 ----a-w- c:\windows\system32\MRT.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "KiesPDLR.exe"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2014-02-14 845120] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2010-05-31 673136] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Dienst-Manager.lnk - c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2002-12-17 74308] Sony MSS.lnk - c:\program files (x86)\Sony\MSS\3.0.271\SSScheduler.exe [2012-3-13 274328] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "KiesTrayAgent"=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe . R1 VD_FileDisk;VD_FileDisk; [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] R2 Update webget;Update webget;c:\program files (x86)\webget\updatewebget.exe;c:\program files (x86)\webget\updatewebget.exe [x] R2 Util webget;Util webget;c:\program files (x86)\webget\bin\utilwebget.exe;c:\program files (x86)\webget\bin\utilwebget.exe [x] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x] R3 dump_wmimmc;dump_wmimmc;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [x] R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x] R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] R3 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x] R3 usbet;USB 2.0 WebCAM;c:\windows\system32\DRIVERS\ETdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ETdrv.sys [x] R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x] R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x] R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x] R4 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x] S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe;c:\program files\CyberLink\Shared files\RichVideo64.exe [x] S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x] S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x] S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x] S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x] S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x] S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x] S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x] S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x] S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x] S2 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x] S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x] S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x] S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x] S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-05-06 12:19 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-31 10775584] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-05-31 2040352] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= mStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= uInternet Settings,ProxyOverride = <local> IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\ FF - prefs.js: browser.search.selectedEngine - Speedial FF - prefs.js: browser.startup.homepage - hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= FF - ExtSQL: 2014-05-07 15:15; quick_start@gmail.com; c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\extensions\quick_start@gmail.com FF - user.js: extensions.nspdlsd.aflt - spd_ir_14_19_ch FF - user.js: extensions.nspdlsd.instlRef - 140305_c FF - user.js: extensions.nspdlsd.cr - 1693991309 FF - user.js: extensions.nspdlsd.cd - 2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q user_pref(extensions.autoDisableScopes,14); . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2487367 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2461678 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-MyFreeCodec - c:\program files (x86)\MyFree Codec\1.0b beta\uninstall.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector] "ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=10000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1\" \"/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"&\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\%C3 & Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\"" "ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z [\]^_²\00\00²\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~²\00\00²\00\00\00\00w\00\00\00\00\00\00\00\00‘’“" . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.032" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.abr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ac3" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.amr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ani" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee Photo Manager 12.apd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bay" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Bitmap" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.bwf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.cel" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.cs1" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cur" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dib" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.djv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.djvu" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.emf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.eps" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.erf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.fff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.flc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.fli" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.fpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Gif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.hdr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.icl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.icn" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ico" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.iff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ilbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.int" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.inta" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.iw4" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.j2c" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.j2k" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.jbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jfif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jp2" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpk" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.kar" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.lbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m15" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m1a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m2a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m75" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.mef" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.mos" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.mpv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pct" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pgm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pic" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.pics" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pict" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pix" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Png" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ppm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspbrush" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspimage" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qcp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qtpf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ras" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rgb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rgba" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rle" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rsb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.rwl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sdv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sfil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.sgi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sml" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.swa" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tga" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.thm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ulw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.vfw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.wbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wbmp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wmf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.xif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xpm" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe c:\program files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe c:\windows\SysWOW64\DllHost.exe c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-05-11 22:18:57 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-05-11 20:18 ComboFix2.txt 2014-05-10 19:30 ComboFix3.txt 2014-05-10 18:48 . Vor Suchlauf: 37 Verzeichnis(se), 15.635.767.296 Bytes frei Nach Suchlauf: 39 Verzeichnis(se), 15.324.119.040 Bytes frei . - - End Of File - - 2118F9081BC4E0674A9E4AC9E8644B91

**Posty:** 2183 · przez **NieWiem** 11 Maj 2014, 22:39

Otwórz notatnik i wklej do niego zawartość ramki:

Kod: Zaznacz wszystko: Folder:: c:\program files (x86)\Speedial c:\program files\suprasavings c:\program files (x86)\webget Driver:: Update webget Util webget DDS:: uStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= mStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= uInternet Settings,ProxyOverride = <local> FireFox:: FF - ProfilePath - c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\ FF - prefs.js: browser.search.selectedEngine - Speedial FF - prefs.js: browser.startup.homepage - hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= FF - user.js: extensions.nspdlsd.cd - 2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q user_pref(extensions.autoDisableScopes,14); Reboot::

Plik zapisz jako CFScript.txt
Przeciągnij i upuść ten plik na ikonę ComboFixa - to uruchomi proces.
Przeklej wynikowy raport.

**Posty:** 370 · przez **bracik1977** 12 Maj 2014, 17:05

Tu kolejny raport z ComboFixa.

Kod: Zaznacz wszystko: ComboFix 14-05-10.01 - ADA 12.05.2014 16:45:17.4.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3950.2410 [GMT 2:00] ausgeführt von:: c:\users\ADA\Desktop\ComboFix.exe Benutzte Befehlsschalter :: c:\users\ADA\Desktop\CFScript.txt SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Service_Update webget -------\Service_Util webget . . ((((((((((((((((((((((( Dateien erstellt von 2014-04-12 bis 2014-05-12 )))))))))))))))))))))))))))))) . . 2014-05-12 14:54 . 2014-05-12 14:54 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-05-11 18:48 . 2014-05-11 18:23 24064 ----a-w- c:\windows\zoek-delete.exe 2014-05-11 18:09 . 2013-12-06 16:42 20696 ----a-w- c:\windows\system32\drivers\mfmonitor_x64.sys 2014-05-11 17:56 . 2014-05-11 17:56 -------- d-----w- c:\users\ADA\MediaFire 2014-05-11 11:14 . 2014-05-11 11:14 -------- d-----w- c:\program files (x86)\Speedial 2014-05-11 08:51 . 2014-05-12 14:57 -------- d-----w- c:\users\ADA\AppData\Local\Temp 2014-05-10 17:36 . 2014-05-10 17:36 -------- d-----w- C:\_OTS 2014-05-07 18:58 . 2014-05-11 18:45 -------- d-----w- C:\zoek_backup 2014-05-07 13:16 . 2014-05-07 17:05 -------- d-----w- c:\program files\suprasavings 2014-05-07 06:33 . 2014-05-07 17:04 -------- d-----w- c:\users\ADA\AppData\Roaming\Wise Uninstaller 2014-05-06 19:21 . 2014-05-06 19:21 -------- d-----w- c:\windows\system32\log 2014-05-06 19:21 . 2014-04-23 10:19 43520 ----a-w- c:\windows\system32\drivers\iSafeKrnlBoot.sys 2014-05-06 17:01 . 2014-05-07 05:05 -------- d-----w- c:\program files\Enigma Software Group 2014-05-06 10:42 . 2014-05-07 18:03 -------- d-----w- C:\FRST 2014-05-06 09:51 . 2014-05-06 09:51 -------- d-----w- c:\users\ADA\AppData\Local\VS Revo Group 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\programdata\VS Revo Group 2014-05-06 09:50 . 2009-12-30 08:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\program files\VS Revo Group 2014-05-06 05:25 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll 2014-05-06 05:19 . 2014-05-07 04:36 -------- d-----w- C:\AdwCleaner 2014-04-22 15:49 . 2014-04-22 15:49 -------- d-----w- c:\program files (x86)\ToniArts 2014-04-22 15:49 . 2004-07-15 22:20 733184 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll 2014-04-22 15:49 . 2004-07-15 22:20 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll 2014-04-22 15:49 . 2004-07-15 22:19 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll 2014-04-22 15:49 . 2004-07-15 22:18 172032 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll 2014-04-22 15:49 . 2004-07-15 22:18 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe 2014-04-22 15:49 . 2014-04-22 15:49 303236 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll 2014-04-22 15:49 . 2014-04-22 15:49 180356 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll 2014-04-22 15:14 . 2014-04-02 09:18 144664 ----a-w- c:\windows\SysWow64\secman.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Regular.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Light.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Bold.fot 2014-02-25 15:53 . 2014-02-25 15:53 74703 ----a-w- c:\windows\SysWow64\mfc45.dll 2014-02-16 08:03 . 2010-12-25 13:10 88567024 ----a-w- c:\windows\system32\MRT.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "KiesPDLR.exe"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2014-02-14 845120] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2010-05-31 673136] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Dienst-Manager.lnk - c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2002-12-17 74308] Sony MSS.lnk - c:\program files (x86)\Sony\MSS\3.0.271\SSScheduler.exe [2012-3-13 274328] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "KiesTrayAgent"=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe . R1 VD_FileDisk;VD_FileDisk; [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x] R3 dump_wmimmc;dump_wmimmc;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [x] R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x] R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] R3 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x] R3 usbet;USB 2.0 WebCAM;c:\windows\system32\DRIVERS\ETdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ETdrv.sys [x] R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x] R3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x] R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x] R4 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x] S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe;c:\program files\CyberLink\Shared files\RichVideo64.exe [x] S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x] S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x] S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x] S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x] S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x] S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x] S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x] S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x] S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x] S2 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x] S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x] S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x] S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x] S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-05-06 12:19 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-31 10775584] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-05-31 2040352] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] . ------- Zusätzlicher Suchlauf ------- . mStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\ FF - ExtSQL: 2014-05-07 15:15; quick_start@gmail.com; c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\extensions\quick_start@gmail.com FF - user.js: extensions.nspdlsd.aflt - spd_ir_14_19_ch FF - user.js: extensions.nspdlsd.instlRef - 140305_c FF - user.js: extensions.nspdlsd.cr - 1693991309 user_pref(extensions.autoDisableScopes,14); . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2487367 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2461678 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector] "ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=10000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1\" \"/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"&\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\%C3 & Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\"" "ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z [\]^_²\00\00²\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~²\00\00²\00\00\00\00w\00\00\00\00\00\00\00\00‘’“" . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.032" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.abr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ac3" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.amr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ani" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee Photo Manager 12.apd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bay" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Bitmap" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.bwf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.cel" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.cs1" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cur" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dib" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.djv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.djvu" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.emf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.eps" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.erf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.fff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.flc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.fli" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.fpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Gif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.hdr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.icl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.icn" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ico" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.iff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ilbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.int" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.inta" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.iw4" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.j2c" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.j2k" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.jbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jfif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jp2" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpk" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.kar" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.lbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m15" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m1a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m2a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m75" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.mef" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.mos" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.mpv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pct" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pgm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pic" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.pics" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pict" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pix" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Png" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ppm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspbrush" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspimage" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qcp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qtpf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ras" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rgb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rgba" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rle" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rsb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.rwl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sdv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sfil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.sgi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sml" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.swa" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tga" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.thm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ulw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.vfw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.wbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wbmp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wmf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.xif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xpm" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe c:\program files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe c:\program files (x86)\Sony\VAIO Event Service\VESMgr.exe c:\windows\SysWOW64\DllHost.exe c:\program files (x86)\Sony\VAIO Event Service\VESMgrSub.exe c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe c:\program files\Sony\VAIO Personalization Manager\VpmLM.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-05-12 17:02:40 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-05-12 15:02 ComboFix2.txt 2014-05-11 20:18 ComboFix3.txt 2014-05-10 19:30 ComboFix4.txt 2014-05-10 18:48 . Vor Suchlauf: 37 Verzeichnis(se), 15.395.450.880 Bytes frei Nach Suchlauf: 39 Verzeichnis(se), 14.794.596.352 Bytes frei . - - End Of File - - C3F0A8B76180ADFD0CB4349228556D3A

**Posty:** 2183 · przez **NieWiem** 12 Maj 2014, 18:32

Będzie jeszcze poprawka z takim skryptem:

Kod: Zaznacz wszystko: DDS:: mStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= ClearJavaCache::

Procedura jak poprzednio.

**Posty:** 370 · przez **bracik1977** 12 Maj 2014, 19:25

Kod: Zaznacz wszystko: ComboFix 14-05-10.01 - ADA 12.05.2014 19:00:57.5.4 - x64 Microsoft Windows 7 Home Premium 6.1.7600.0.1252.49.1031.18.3950.2269 [GMT 2:00] ausgeführt von:: c:\users\ADA\Desktop\ComboFix.exe Benutzte Befehlsschalter :: c:\users\ADA\Desktop\CFScript.txt SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((( Dateien erstellt von 2014-04-12 bis 2014-05-12 )))))))))))))))))))))))))))))) . . 2014-05-12 17:12 . 2014-05-12 17:12 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-05-11 18:48 . 2014-05-11 18:23 24064 ----a-w- c:\windows\zoek-delete.exe 2014-05-11 18:09 . 2013-12-06 16:42 20696 ----a-w- c:\windows\system32\drivers\mfmonitor_x64.sys 2014-05-11 17:56 . 2014-05-11 17:56 -------- d-----w- c:\users\ADA\MediaFire 2014-05-11 11:14 . 2014-05-11 11:14 -------- d-----w- c:\program files (x86)\Speedial 2014-05-11 08:51 . 2014-05-12 17:12 -------- d-----w- c:\users\ADA\AppData\Local\Temp 2014-05-10 17:36 . 2014-05-10 17:36 -------- d-----w- C:\_OTS 2014-05-07 18:58 . 2014-05-11 18:45 -------- d-----w- C:\zoek_backup 2014-05-07 13:16 . 2014-05-07 17:05 -------- d-----w- c:\program files\suprasavings 2014-05-07 06:33 . 2014-05-07 17:04 -------- d-----w- c:\users\ADA\AppData\Roaming\Wise Uninstaller 2014-05-06 19:21 . 2014-05-06 19:21 -------- d-----w- c:\windows\system32\log 2014-05-06 19:21 . 2014-04-23 10:19 43520 ----a-w- c:\windows\system32\drivers\iSafeKrnlBoot.sys 2014-05-06 17:01 . 2014-05-07 05:05 -------- d-----w- c:\program files\Enigma Software Group 2014-05-06 10:42 . 2014-05-07 18:03 -------- d-----w- C:\FRST 2014-05-06 09:51 . 2014-05-06 09:51 -------- d-----w- c:\users\ADA\AppData\Local\VS Revo Group 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\programdata\VS Revo Group 2014-05-06 09:50 . 2009-12-30 08:21 31800 ----a-w- c:\windows\system32\drivers\revoflt.sys 2014-05-06 09:50 . 2014-05-06 09:50 -------- d-----w- c:\program files\VS Revo Group 2014-05-06 05:25 . 2010-08-30 06:34 536576 ----a-w- c:\windows\SysWow64\sqlite3.dll 2014-05-06 05:19 . 2014-05-07 04:36 -------- d-----w- C:\AdwCleaner 2014-04-22 15:49 . 2014-04-22 15:49 -------- d-----w- c:\program files (x86)\ToniArts 2014-04-22 15:49 . 2004-07-15 22:20 733184 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iKernel.dll 2014-04-22 15:49 . 2004-07-15 22:20 69715 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\ctor.dll 2014-04-22 15:49 . 2004-07-15 22:19 266240 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iscript.dll 2014-04-22 15:49 . 2004-07-15 22:18 172032 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iuser.dll 2014-04-22 15:49 . 2004-07-15 22:18 5632 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\DotNetInstaller.exe 2014-04-22 15:49 . 2014-04-22 15:49 303236 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\setup.dll 2014-04-22 15:49 . 2014-04-22 15:49 180356 ----a-w- c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\10\01\Intel32\iGdi.dll 2014-04-22 15:14 . 2014-04-02 09:18 144664 ----a-w- c:\windows\SysWow64\secman.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Regular.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Light.fot 2014-05-11 17:52 . 2014-05-11 17:52 1409 ----a-w- c:\windows\Fonts\OpenSans-Bold.fot 2014-02-25 15:53 . 2014-02-25 15:53 74703 ----a-w- c:\windows\SysWow64\mfc45.dll 2014-02-16 08:03 . 2010-12-25 13:10 88567024 ----a-w- c:\windows\system32\MRT.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072] "KiesPDLR.exe"="c:\program files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2014-02-14 845120] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe" [2010-05-31 673136] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Dienst-Manager.lnk - c:\program files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe /n [2002-12-17 74308] Sony MSS.lnk - c:\program files (x86)\Sony\MSS\3.0.271\SSScheduler.exe [2012-3-13 274328] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 0 (0x0) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableLUA"= 0 (0x0) "EnableUIADesktopToggle"= 0 (0x0) "PromptOnSecureDesktop"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "mixer2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "KiesTrayAgent"=c:\program files (x86)\Samsung\Kies\KiesTrayAgent.exe . R1 VD_FileDisk;VD_FileDisk; [x] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] R3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys;c:\windows\SYSNATIVE\drivers\btwampfl.sys [x] R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x] R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x] R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x] R3 dump_wmimmc;dump_wmimmc;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys;c:\aeriagames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [x] R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x] R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] R3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] R3 McComponentHostServiceSony;McAfee Security Scan Component Host Service for Sony;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe;c:\program files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [x] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x] R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x] R3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssudserd.sys [x] R3 usbet;USB 2.0 WebCAM;c:\windows\system32\DRIVERS\ETdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ETdrv.sys [x] R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [x] R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x] R4 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe;c:\program files\Sony\VAIO Care\VCPerfService.exe [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x] S2 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [x] S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe;c:\program files\CyberLink\Shared files\RichVideo64.exe [x] S2 rimspci;rimspci;c:\windows\system32\drivers\rimssne64.sys;c:\windows\SYSNATIVE\drivers\rimssne64.sys [x] S2 risdsnpe;risdsnpe;c:\windows\system32\drivers\risdsne64.sys;c:\windows\SYSNATIVE\drivers\risdsne64.sys [x] S2 SOHCImp;VAIO Media plus Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [x] S2 SOHDms;VAIO Media plus Digital Media Server;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [x] S2 SOHDs;VAIO Media plus Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [x] S2 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [x] S2 VAIO Power Management;VAIO Power Management;c:\program files\Sony\VAIO Power Management\SPMService.exe;c:\program files\Sony\VAIO Power Management\SPMService.exe [x] S2 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [x] S2 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [x] S2 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [x] S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe;c:\program files\Sony\VAIO Smart Network\VSNService.exe [x] S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys;c:\windows\SYSNATIVE\DRIVERS\ArcSoftKsUFilter.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\drivers\SFEP.sys;c:\windows\SYSNATIVE\drivers\SFEP.sys [x] S3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [x] S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe;c:\program files\Sony\VAIO Care\VCService.exe [x] S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe;c:\program files\Sony\VAIO Update\VUAgent.exe [x] S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x] . . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-05-06 12:19 1078088 ----a-w- c:\program files (x86)\Google\Chrome\Application\34.0.1847.131\Installer\chrmstp.exe . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-31 10775584] "RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-05-31 2040352] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU] . ------- Zusätzlicher Suchlauf ------- . mStart Page = hxxp://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\ FF - ExtSQL: 2014-05-07 15:15; quick_start@gmail.com; c:\users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\extensions\quick_start@gmail.com FF - user.js: extensions.nspdlsd.aflt - spd_ir_14_19_ch FF - user.js: extensions.nspdlsd.instlRef - 140305_c FF - user.js: extensions.nspdlsd.cr - 1693991309 user_pref(extensions.autoDisableScopes,14); . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2487367 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2160841 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2446708 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2461678 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2478663 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2518870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2539636 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2572078 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2604121 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2633870 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656351 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656368v2 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2656405 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2686827 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2729449 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2736428 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2737019 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe AddRemove-{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2742595 - c:\windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe . . . [HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector] "ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=10000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1\" \"/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"&\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\%C3 & Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\"" "ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z [\]^_²\00\00²\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~²\00\00²\00\00\00\00w\00\00\00\00\00\00\00\00‘’“" . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.032" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.abr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.abr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ac3\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ac3" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.amr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ani" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.apd\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee Photo Manager 12.apd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.arw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bay" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Bitmap" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.bw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bwf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.bwf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cel\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.cel" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.cs1" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.cur" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.dib" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.djv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.djvu" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.emf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.eps" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.erf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.fff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.flc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fli\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.fli" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.fpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Gif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.hdr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.icl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.icn" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ico" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.iff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ilbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.int" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.inta" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.iw4" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.j2c" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.j2k" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.jbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jfif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jp2" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.jpc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Jpeg" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpk" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.jpx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.kar\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.kar" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.lbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m15\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m15" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m1a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m1a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m2a\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m2a" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m75\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.m75" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mef\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.mef" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.mos" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.mpv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nrw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbr\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pbr" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pct" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pcx" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.pgm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pic" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pics\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.pics" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pict" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.pix" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Png" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ppm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psd" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.psp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspbrush\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspbrush" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pspimage\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.pspimage" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qcp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qcp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.qtpf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.qtpf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.ras" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rgb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rgba" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.rle" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.rsb" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rw2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rwl\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 12.rwl" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sdv\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sdv" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sfil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sfil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.sgi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smi\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smi" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.smil\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.smil" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.sml" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="Google.PhotoViewer.3.0" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.swa\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.swa" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.tga" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.thm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice] @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) @Denied: (2) (LocalSystem) "Progid"="PhotoViewer.FileAssoc.Tiff" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttc" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.ttf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ulw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.ulw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vfw\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee Photo Manager 2009.vfw" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.wbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wbmp" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.wmf" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xbm" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice] @Denied: (2) (LocalSystem) @Denied: (2) (S-1-5-21-293356991-225826379-2249491693-1000) "Progid"="ACDSee 9.0.xif" . [HKEY_USERS\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ACDSee 9.0.xpm" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Wow6432Node\Nico Mak Computing\WinZip] "SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-05-12 19:23:47 ComboFix-quarantined-files.txt 2014-05-12 17:23 ComboFix2.txt 2014-05-12 15:02 ComboFix3.txt 2014-05-11 20:18 ComboFix4.txt 2014-05-10 19:30 ComboFix5.txt 2014-05-12 16:59 . Vor Suchlauf: 37 Verzeichnis(se), 14.908.526.592 Bytes frei Nach Suchlauf: 38 Verzeichnis(se), 14.831.333.376 Bytes frei . - - End Of File - - 089A3B1999E84EB1EDF9227CB5219322

**Posty:** 2183 · przez **NieWiem** 12 Maj 2014, 19:51

Wygeneruj nowe raporty z FRST z zaznaczoną opcją addition.

**Posty:** 370 · przez **bracik1977** 12 Maj 2014, 20:42

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01 Ran by ADA (administrator) on ADA-VAIO on 12-05-2014 20:25:59 Running from C:\Users\ADA\Desktop Platform: Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (InterVideo Inc.) C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2057000 2010-05-31] (Synaptics Incorporated) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\.DEFAULT\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION HKU\S-1-5-21-293356991-225826379-2249491693-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk ShortcutTarget: Dienst-Manager.lnk -> C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk ShortcutTarget: Sony MSS.lnk -> C:\Program Files (x86)\Sony\MSS\3.0.271\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKLM-x32 - {228D36DD-3FF0-0F89-0F68-7B229712245D} URL = SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} SearchScopes: HKCU - {F9AF71C9-27C0-4E6F-9607-38672EA2D4AE} URL = http://www.idg.pl?q={searchTerms} BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.145.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default FF user.js: detected! => C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\searchplugins\Speedial.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml FF Extension: Quick Start - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\quick_start@gmail.com [2014-05-07] FF Extension: No Name - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\staged [2014-05-11] FF Extension: ArcaBit Ext. - C:\Program Files (x86)\Mozilla Firefox\extensions\arcabit@www.arcabit.pl [2013-11-12] FF Extension: G Data WebFilter - C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2011-05-16] Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll () CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll No File CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\ADA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File CHR Plugin: (Pando Web Plugin) - C:\Users\ADA\Downloads\null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Extension: (Dokumenty Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-26] CHR Extension: (Dysk Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-26] CHR Extension: (YouTube) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-02] CHR Extension: (Adblock Plus) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-26] CHR Extension: (Szukaj w Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-02] CHR Extension: (Google Wallet) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR Extension: (Quick Start) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-05-07] CHR Extension: (Gmail) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-02] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.) R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-19] () R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] () S4 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1369136 2013-09-25] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 usbet; C:\Windows\System32\DRIVERS\ETdrv.sys [182912 2010-04-29] (Etron) S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [15872 2006-01-13] (Flint Incorporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-12 20:25 - 2014-05-12 20:26 - 00017599 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 20:48 - 2014-05-11 20:23 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 20:41 - 2014-05-11 19:23 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 20:09 - 2013-12-06 18:42 - 00020696 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\mfmonitor_x64.sys 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:49 - 2014-05-11 19:51 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:21 - 2014-05-11 19:21 - 06733559 _____ () C:\Users\ADA\Desktop\sample__1920.zip 2014-05-11 19:19 - 2014-05-11 12:15 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 00000000 ____D () C:\Program Files (x86)\Speedial 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:12 - 2014-05-11 11:08 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:25 - 2014-05-11 10:13 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 10:11 - 2014-05-11 09:55 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-11 10:06 - 2014-05-11 10:06 - 01285120 _____ () C:\Users\ADA\Desktop\zoek (1).exe 2014-05-11 09:59 - 2014-05-11 09:59 - 01285120 _____ () C:\Users\ADA\Desktop\zoek.exe 2014-05-10 20:28 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-10 20:28 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-10 20:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-08 17:00 - 2014-05-12 19:24 - 00000000 ____D () C:\Qoobox 2014-05-08 16:59 - 2014-05-12 16:54 - 00000000 ____D () C:\Windows\erdnt 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:03 - 2014-05-11 20:50 - 00072465 _____ () C:\zoek-results.log 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 20:59 - 2014-05-07 21:00 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:58 - 2014-05-11 20:45 - 00000000 ____D () C:\zoek_backup 2014-05-07 20:58 - 2014-05-07 20:59 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 15:23 - 2014-05-07 15:26 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 15:16 - 2014-05-07 19:05 - 00000000 ____D () C:\Program Files\suprasavings 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:33 - 2014-05-07 06:34 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:21 - 2014-04-23 12:19 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 19:01 - 2014-05-07 07:05 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 12:47 - 2014-05-07 20:03 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:42 - 2014-05-12 20:25 - 00000000 ____D () C:\FRST 2014-05-06 12:42 - 2014-05-07 20:03 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 22:06 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys 2014-05-06 11:49 - 2014-05-06 11:50 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:25 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-07 06:36 - 00000000 ____D () C:\AdwCleaner 2014-05-06 07:18 - 2014-05-06 07:19 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-06 07:15 - 2014-05-12 16:56 - 00018728 _____ () C:\Windows\PFRO.log 2014-05-05 12:35 - 2014-05-05 12:36 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-23 16:00 - 2014-05-12 06:04 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:42 - 2014-04-22 17:21 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:42 - 2014-04-22 17:21 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:42 - 2014-04-22 17:21 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:38 - 2014-04-22 17:40 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:16 - 2014-04-22 18:04 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 17:16 - 2014-04-22 17:18 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:14 - 2014-04-02 11:18 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-04-22 17:13 - 2014-04-22 17:15 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:11 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:10 - 2014-04-22 17:12 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:02 - 2014-04-22 17:03 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:57 - 2014-04-22 16:59 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-21 20:56 - 2014-04-21 21:25 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 10:14 - 2014-04-23 16:37 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 13:25 - 2014-04-15 14:07 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== One Month Modified Files and Folders ======= 2014-05-12 20:26 - 2014-05-12 20:25 - 00017599 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 20:25 - 2014-05-06 12:42 - 00000000 ____D () C:\FRST 2014-05-12 20:24 - 2010-11-23 18:29 - 01833121 _____ () C:\Windows\WindowsUpdate.log 2014-05-12 19:24 - 2014-05-08 17:00 - 00000000 ____D () C:\Qoobox 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-12 19:12 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-12 17:25 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-12 17:25 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-12 16:56 - 2014-05-06 07:15 - 00018728 _____ () C:\Windows\PFRO.log 2014-05-12 16:56 - 2014-01-05 21:44 - 00028550 _____ () C:\Windows\setupact.log 2014-05-12 16:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-12 16:55 - 2009-07-14 04:34 - 79953920 _____ () C:\Windows\system32\config\software.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 24117248 _____ () C:\Windows\system32\config\system.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 01048576 _____ () C:\Windows\system32\config\default.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-05-12 16:54 - 2014-05-08 16:59 - 00000000 ____D () C:\Windows\erdnt 2014-05-12 06:04 - 2014-04-23 16:00 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 21:59 - 2010-11-26 16:53 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E9FCAAAA-2E6B-450C-8DBD-EE7AE6DCA21C} 2014-05-11 20:50 - 2014-05-07 21:03 - 00072465 _____ () C:\zoek-results.log 2014-05-11 20:45 - 2014-05-07 20:58 - 00000000 ____D () C:\zoek_backup 2014-05-11 20:34 - 2010-11-23 18:30 - 00000000 ____D () C:\Users\ADA 2014-05-11 20:23 - 2014-05-11 20:48 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:55 - 2009-07-14 06:45 - 00527056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-11 19:51 - 2014-05-11 19:49 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:23 - 2014-05-11 20:41 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 19:21 - 2014-05-11 19:21 - 06733559 _____ () C:\Users\ADA\Desktop\sample__1920.zip 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 00000000 ____D () C:\Program Files (x86)\Speedial 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:15 - 2014-05-11 19:19 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 11:08 - 2014-05-11 12:12 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:13 - 2014-05-11 10:25 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 10:06 - 2014-05-11 10:06 - 01285120 _____ () C:\Users\ADA\Desktop\zoek (1).exe 2014-05-11 09:59 - 2014-05-11 09:59 - 01285120 _____ () C:\Users\ADA\Desktop\zoek.exe 2014-05-11 09:55 - 2014-05-11 10:11 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-10 20:48 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 21:00 - 2014-05-07 20:59 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:59 - 2014-05-07 20:58 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:03 - 2014-05-06 12:47 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-07 20:03 - 2014-05-06 12:42 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 19:05 - 2014-05-07 15:16 - 00000000 ____D () C:\Program Files\suprasavings 2014-05-07 19:04 - 2010-07-13 00:47 - 00000000 ____D () C:\ProgramData\Sony Corporation 2014-05-07 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 15:26 - 2014-05-07 15:23 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 07:05 - 2014-05-06 19:01 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:36 - 2014-05-06 07:19 - 00000000 ____D () C:\AdwCleaner 2014-05-07 06:34 - 2014-05-07 06:33 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 22:06 - 2014-05-06 11:50 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 14:19 - 2010-07-29 13:31 - 00000000 ____D () C:\Program Files (x86)\Google 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:49 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-06 07:18 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-05 12:36 - 2014-05-05 12:35 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-05 09:40 - 2013-11-02 21:47 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-05-02 23:47 - 2010-12-03 09:25 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Skype 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-24 06:37 - 2010-12-11 11:03 - 00000000 ____D () C:\Update 2014-04-24 06:36 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-23 16:37 - 2014-04-20 10:14 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-23 12:19 - 2014-05-06 21:21 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-04-22 18:04 - 2014-04-22 17:16 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 18:04 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Local\Samsung 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 18:01 - 2013-04-08 19:42 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:59 - 2013-04-08 19:42 - 00000000 ____D () C:\ProgramData\Samsung 2014-04-22 17:59 - 2010-07-12 23:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:43 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Samsung 2014-04-22 17:40 - 2014-04-22 17:38 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:21 - 2014-04-22 17:42 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:21 - 2014-04-22 17:42 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:21 - 2014-04-22 17:42 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:18 - 2014-04-22 17:16 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:15 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:13 - 2014-04-22 17:11 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:12 - 2014-04-22 17:10 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:03 - 2014-04-22 17:02 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:59 - 2014-04-22 16:57 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-22 16:59 - 2013-04-08 19:31 - 00000000 ____D () C:\Users\ADA\AppData\Local\Downloaded Installations 2014-04-21 21:25 - 2014-04-21 20:56 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 12:30 - 2010-07-29 13:45 - 00000000 ____D () C:\SPLASH.000 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 14:07 - 2014-04-15 13:25 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-06 09:28 ==================== End Of Log ============================

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014 01 Ran by ADA at 2014-05-12 20:26:30 Running from C:\Users\ADA\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== "SubEdit-Player" (HKLM-x32\...\"SubEdit-Player") (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated) Adobe Premiere Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Any Video Converter 3.3.3 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft) ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.390 - ArcSoft) Ashampoo Burning Studio 6 FREE v.6.81 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.1 - Ashampoo GmbH & Co. KG) ATI Catalyst Install Manager (HKLM\...\{5BC83141-83DD-07BE-C940-04B385540F04}) (Version: 3.0.769.0 - ATI Technologies, Inc.) AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.) BlazeDTV 6.0 (HKLM-x32\...\BlazeDTV 6.0_is1) (Version: - ) Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0209.16.306 - ATI Technologies, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0920.2143.37117 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help English (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help French (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help German (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden ccc-core-static (x32 Version: 2010.0920.2143.37117 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0920.2143.37117 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.08 - Piriform) Deutsch Translator 2 (HKLM-x32\...\DT2) (Version: - ) EasyCleaner (HKLM-x32\...\{F5346614-B7C4-4E94-826A-E2363155233D}) (Version: 2.0.6.380 - ToniArts) Eusing Free Registry Cleaner (HKLM-x32\...\Eusing Free Registry Cleaner) (Version: - Eusing Software) Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.4.2224 - Evernote Corp.) FastStone Image Viewer 4.4 (HKLM-x32\...\FastStone Image Viewer) (Version: 4.4 - FastStone Soft) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden IncrediMail (x32 Version: 6.2.8.4960 - IncrediMail) Hidden IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.2.8.4960 - IncrediMail Ltd.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation) Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation) InterVideo DeviceService (HKLM-x32\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 7.0.0 (Standard) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 7.0.0 - ) L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version: - ) MAGIX Video deluxe MX Download Version (x32 Version: 11.0.1.4 - MAGIX AG) Hidden Malwarebytes Anti-Malware wersja 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) (HKLM-x32\...\{E09B48B5-E141-427A-AB0C-D3605127224A}) (Version: 8.00.761 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 21.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 21.0 (x86 pl)) (Version: 21.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla) MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliñski) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.) Philips Media Converter (x32 Version: 1.03 - Philips) Hidden PhotoMizer (HKLM-x32\...\{A00F8237-F496-44D2-0001-E3CCF8CD58AE}) (Version: 1.0.10.1236 - Engelmann Media GmbH) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayStation(R)Network Downloader (HKLM-x32\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.06.00741 - Sony Computer Entertainment Inc.) PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.3.3.12540 - Sony Computer Entertainment Inc.) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.3.00.06040 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150 - Sony Corporation) Hidden QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.) Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.2.06210 - Sony Corporation) Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden Remote-Tastatur mit PlayStation 3 (HKLM-x32\...\{65B138AE-F636-4D4C-BA5D-A06E21E47C53}) (Version: 1.0.2.06170 - Sony Corporation) Revo Uninstaller 1.94 (HKLM-x32\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group) Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.) SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc) SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.9.0 - Synaptics Incorporated) Total Commander Ultima Prime 4.7.0.0 (HKLM-x32\...\TC UP) (Version: 4.7.0.0 - ULTIMA PRIME) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) VAIO - Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.3.0.06230 - Sony Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation) VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}) (Version: 1.5.10.06150 - Sony Corporation) VAIO Care (HKLM\...\{EC635BC0-0D7C-4CA2-9B87-2A330C298CB2}) (Version: 8.1.0.10120 - Sony Corporation) VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.3.0.05310 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.4.0.05240 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.4.00.05300 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.0.06210 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.2.0.07020 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.18210 - Sony Corporation) VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation) VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.5.00.05300 - Sony Corporation) VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.3.4.2 - Sony Corporation) VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation) Hidden VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.3.0.06041 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation) VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.3.1.10120 - Sony Corporation) VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.1.0.05280 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.2.0.06230 - Sony Corporation) VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden WebCam (HKLM-x32\...\{ED1674F5-5165-49BF-B546-AE5343111540}) (Version: 5.1.0.0 - ETRON) WebTV (x32 Version: 3.4.1 - XStream Incorporated) Hidden WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation) Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation) Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Wisdom-soft Set up ScreenHunter 5.1 Free (HKLM-x32\...\Wisdom-soft Set up ScreenHunter 5.1 Free) (Version: - Wisdom Software Inc.) X-DVD_Player (HKLM-x32\...\X-DVD_Player) (Version: - ) ==================== Restore Points ========================= 07-05-2014 04:57:15 Revo Uninstaller Pro's restore point - SpyHunter 07-05-2014 04:57:46 Removed SpyHunter 07-05-2014 13:26:51 Revo Uninstaller Pro's restore point - Advanced System Protector 07-05-2014 13:28:54 Revo Uninstaller Pro's restore point - AnyProtect 07-05-2014 13:30:18 Revo Uninstaller Pro's restore point - Free Download Manager 3.9.4 07-05-2014 13:35:44 Revo Uninstaller Pro's restore point - MyPC Backup 07-05-2014 13:41:39 Revo Uninstaller Pro's restore point - RegClean Pro 07-05-2014 13:46:45 Revo Uninstaller Pro's restore point - BrowserSafeguard with RocketTab 07-05-2014 13:48:41 Revo Uninstaller Pro's restore point - qone8 uninstaller 07-05-2014 13:50:10 Revo Uninstaller Pro's restore point - Plus-HD-9.3 07-05-2014 13:51:38 Revo Uninstaller Pro's restore point - VO Package 07-05-2014 13:54:38 Revo Uninstaller Pro's restore point - VisualBee for Microsoft PowerPoint 07-05-2014 16:51:14 Wiederherstellungsvorgang 07-05-2014 19:03:43 zoek.exe restore point 10-05-2014 18:29:02 ComboFix created restore point 11-05-2014 11:26:22 Revo Uninstaller Pro's restore point - WinRAR 5.01 (64-bitowy) 11-05-2014 17:58:35 Revo Uninstaller Pro's restore point - MediaFire Desktop 11-05-2014 18:06:18 Revo Uninstaller Pro's restore point - MediaFire Desktop 11-05-2014 18:30:01 Revo Uninstaller Pro's restore point - MediaFire Desktop ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-05-12 16:56 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {08467DEC-BA6E-4BAA-9E5C-87E13289B7E0} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {0885AE72-75F9-43DF-BDBD-589259EB1DF0} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {15C2BA37-1546-45E1-A823-DCB117AFB4AE} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {18D8AE03-4A62-4478-AD25-28DCF5B1D82D} - System32\Tasks\{56F30C7D-460F-4D12-9F39-35CC13C90A74} => Chrome.exe http://ui.skype.com/ui/0/6.0.0.126/pl/go/help.faq.installer?LastError=1601 Task: {194405C1-A14F-4493-AC1A-4CF728FF984C} - System32\Tasks\{AB7E4BE0-4924-4631-93F0-FDDC6B05ED55} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {1B2941EC-6DB5-498B-96AE-392A63E89215} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-09-27] (Sony Corporation) Task: {2F90065B-220D-4B57-B45C-BDB2146B4E4B} - System32\Tasks\{A487AF0B-1475-439F-924E-DB8DB46FE1AB} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {391B5D82-2435-4ED3-A7C2-1B9B359CC009} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation) Task: {5EA3C9A7-C21B-4DDD-8EC2-613183356F33} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {71F67D36-6168-40F4-918B-6BBAA87B9964} - System32\Tasks\{AD87D38F-9BBB-446F-A3A4-A9C7E276E908} => Chrome.exe http://ui.skype.com/ui/0/6.6.0.106/pl/abandoninstall?page=tsMain Task: {75D14FD0-FE04-46D6-A6AB-4E909312B8CD} - System32\Tasks\{394962AA-8DC2-42F9-BFEC-B190A86D67A5} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {7D0449A6-CFA5-4D56-9E8E-15A395D8A47A} - System32\Tasks\{A7A03983-977D-49EA-A547-D8F0FB525996} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {89363FA7-68C1-4163-8AA8-4E53105CD20D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: {8B739A8A-7D03-428F-8655-3B74EB84C5CA} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music ADA => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2010-01-20] (Sony Corporation) Task: {9B84AC86-B7D2-4B99-B4F6-67261DF81A80} - System32\Tasks\{F07F3B3F-FE2A-439A-8E93-600D98BCE545} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {AADAE9E2-2B0C-441D-AD3F-F78FF221DD4D} - \PC Optimizer Pro64 startups No Task File <==== ATTENTION Task: {AE31F376-8A3F-4597-AD1C-D5CE26B921B2} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {B57F37DE-120E-48F8-9EF0-331C863FF356} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {B5ECC4A0-199B-4C91-96BC-F3E02EBFC248} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {B7C7D2D0-3108-40E9-A38A-A1E8471248DB} - System32\Tasks\{FEB03A85-18F5-4C86-B2B4-6D5EAE744C55} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {BFD1709B-0FFE-4A39-BE68-2CA40FDA6A17} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {C1EAEF35-3E92-42AA-8261-DC9779B3B432} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C8C5F0FB-E945-468D-99B9-40E737A4EC27} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {CAFC96C4-A0ED-45AD-92A4-C2032768CD52} - System32\Tasks\{1D1EA841-6BFD-4022-A87F-97A4EB7C6A20} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {D04F9636-7D65-4AAB-AD44-356BCF1430DE} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe Task: {DB8BCBD7-53AB-47C2-841D-BB3D4CE92F7A} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation) Task: {DD529932-CF27-4DE8-8F28-F548B9E95C17} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation) Task: {EC9B56C2-5659-45AE-912D-41969BB0862C} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation) Task: {F7A9D5F4-467C-4164-9733-75D24A954BCA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-09-19] (Sony Corporation) Task: {F85274D6-EC22-4323-BBE3-171F01924590} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-06-21] (Sony Corporation) Task: {FBE4A347-9B07-40CC-B297-E8A715C50C9A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {FCF2339C-FB56-4E8A-87B7-D1600BB28220} - System32\Tasks\{6F8132D4-87B9-43D8-931F-55EBDA0CC4E9} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () ==================== Loaded Modules (whitelisted) ============= 2012-08-25 21:25 - 2012-12-19 16:34 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2011-02-05 16:21 - 2010-08-19 18:43 - 00386344 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2010-06-12 10:27 - 2010-06-12 10:27 - 00135168 _____ () C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\Extension\MrsMpegParser.dll 2010-07-29 13:19 - 2010-05-31 19:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2010-07-29 13:19 - 2010-05-31 19:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll 2014-03-01 14:53 - 2014-03-01 14:53 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll 2010-07-12 23:29 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup MSCONFIG\startupreg: Elbserver => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe /Stay MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SHTtray.exe => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: VRLPHelper => C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe /Stay ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (05/12/2014 07:15:49 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 07:03:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 06:57:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 05:51:38 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 05:43:44 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 05:02:39 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 04:58:57 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/12/2014 06:03:38 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/11/2014 10:19:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/11/2014 10:15:04 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. System errors: ============= Error: (05/12/2014 07:15:52 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 07:12:14 PM) (Source: Service Control Manager) (User: ) (EventID: 7030) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (05/12/2014 07:05:53 PM) (Source: Service Control Manager) (User: ) (EventID: 7030) Description: Der Dienst "PEVSystemStart" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren. Error: (05/12/2014 07:03:21 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 06:57:18 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 05:51:41 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 05:43:47 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 05:02:42 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/12/2014 05:00:13 PM) (Source: Service Control Manager) (User: ) (EventID: 7003) Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist von folgendem Dienst abhängig: LMS. Dieser Dienst ist eventuell nicht installiert. Error: (05/12/2014 04:59:00 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Microsoft Office Sessions: ========================= Error: (05/12/2014 07:15:49 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 07:03:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 06:57:15 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 05:51:38 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 05:43:44 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 05:02:39 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 04:58:57 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/12/2014 06:03:38 AM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/11/2014 10:19:08 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/11/2014 10:15:04 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 CodeIntegrity Errors: =================================== Date: 2014-05-10 21:22:13.645 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.557 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.465 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.375 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 20:44:39.562 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 20:44:39.473 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.948 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ADA\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.792 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ADA\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.588 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.425 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 52% Total physical RAM: 3950.1 MB Available physical RAM: 1874.33 MB Total Pagefile: 7898.33 MB Available Pagefile: 5515.41 MB Total Virtual: 8192 MB Available Virtual: 8191.86 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:452.32 GB) (Free:13.87 GB) NTFS Drive d: (Mój dysk) (CDROM) (Total:3.95 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: AA1C306D) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ==================== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 12 Maj 2014, 23:01

Pobierz załączony plik i umieść go obok FRST.

fixlist.txt: (1.8 KiB) Ściągnięto 129 razy

Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.

Następnie poproszę raport z usuwania (fixlog.txt) i nowy raport z FRST z opcji Scan.

**Posty:** 370 · przez **bracik1977** 13 Maj 2014, 17:13

To jest raport z fixlog.txt

Kod: Zaznacz wszystko: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014 01 Ran by ADA at 2014-05-13 17:12:46 Run:6 Running from C:\Users\ADA\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKU\.DEFAULT\...\Winlogon: [Shell] explorer.exe, <==== ATTENTION HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://speedial.com/?f=1&a=spd_ir_14_19_ch&cd=2XzuyEtN2Y1L1QzuyDyEyEtByEzy0E0EtD0EzzyByBtByE0AtN0D0Tzu0SzzyCtCtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2SyDtD0AtDzyyB0DyCtG0BtDyE0AtG0D0EyB0EtGtDyEtD0EtGtBtAtAyCzytDtAyE0FzztByB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyEtA0Czyzy0FtB0FtGzzyDtDzytGyCtAtDzztGyC0AyB0BtGyCzy0BtB0DtDyB0DyC0F0D0D2Q&cr=1693991309&ir= StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKLM-x32 - {228D36DD-3FF0-0F89-0F68-7B229712245D} URL = SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKCU - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} SearchScopes: HKCU - {31090377-0740-419E-BEFC-A56E50500D5B} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage} FF SearchPlugin: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\searchplugins\Speedial.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\searchplugins\Speedial.xml C:\Program Files (x86)\Speedial C:\Program Files\suprasavings ***************** HKU\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Value deleted successfully. HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully. HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully. HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully. HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\Backup.Old.DefaultScope => Value deleted successfully. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{228D36DD-3FF0-0F89-0F68-7B229712245D} => Key deleted successfully. HKCR\Wow6432Node\CLSID\{228D36DD-3FF0-0F89-0F68-7B229712245D} => Key not found. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\Backup.Old.DefaultScope => Value deleted successfully. HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{31090377-0740-419E-BEFC-A56E50500D5B} => Key deleted successfully. HKCR\CLSID\{31090377-0740-419E-BEFC-A56E50500D5B} => Key not found. C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\searchplugins\Speedial.xml => Moved successfully. C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml => Moved successfully. "C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qone8.xml" => File/Directory not found. "C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\searchplugins\Speedial.xml" => File/Directory not found. C:\Program Files (x86)\Speedial => Moved successfully. C:\Program Files\suprasavings => Moved successfully. ==== End of Fixlog ====

Dodano 13.05.2014 16:15:54:
A tu reszta.

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01 Ran by ADA (administrator) on ADA-VAIO on 13-05-2014 17:14:05 Running from C:\Users\ADA\Desktop Platform: Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (InterVideo Inc.) C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2057000 2010-05-31] (Synaptics Incorporated) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-293356991-225826379-2249491693-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk ShortcutTarget: Dienst-Manager.lnk -> C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk ShortcutTarget: Sony MSS.lnk -> C:\Program Files (x86)\Sony\MSS\3.0.271\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {F9AF71C9-27C0-4E6F-9607-38672EA2D4AE} URL = http://www.idg.pl?q={searchTerms} BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.145.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default FF user.js: detected! => C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Extension: Quick Start - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\quick_start@gmail.com [2014-05-07] FF Extension: No Name - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\staged [2014-05-11] FF Extension: ArcaBit Ext. - C:\Program Files (x86)\Mozilla Firefox\extensions\arcabit@www.arcabit.pl [2013-11-12] FF Extension: G Data WebFilter - C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2011-05-16] Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll () CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll No File CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\ADA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File CHR Plugin: (Pando Web Plugin) - C:\Users\ADA\Downloads\null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Extension: (Dokumenty Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-26] CHR Extension: (Dysk Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-26] CHR Extension: (YouTube) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-02] CHR Extension: (Adblock Plus) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-26] CHR Extension: (Szukaj w Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-02] CHR Extension: (Google Wallet) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR Extension: (Quick Start) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-05-07] CHR Extension: (Gmail) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-02] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.) R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-19] () R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] () S4 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1369136 2013-09-25] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 usbet; C:\Windows\System32\DRIVERS\ETdrv.sys [182912 2010-04-29] (Etron) S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [15872 2006-01-13] (Flint Incorporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-13 17:14 - 2014-05-13 17:14 - 00016282 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 20:48 - 2014-05-11 20:23 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 20:41 - 2014-05-11 19:23 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 20:09 - 2013-12-06 18:42 - 00020696 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\mfmonitor_x64.sys 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:49 - 2014-05-11 19:51 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:21 - 2014-05-11 19:21 - 06733559 _____ () C:\Users\ADA\Desktop\sample__1920.zip 2014-05-11 19:19 - 2014-05-11 12:15 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:12 - 2014-05-11 11:08 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:25 - 2014-05-11 10:13 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 10:11 - 2014-05-11 09:55 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-11 10:06 - 2014-05-11 10:06 - 01285120 _____ () C:\Users\ADA\Desktop\zoek (1).exe 2014-05-11 09:59 - 2014-05-11 09:59 - 01285120 _____ () C:\Users\ADA\Desktop\zoek.exe 2014-05-10 20:28 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-10 20:28 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-10 20:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-08 17:00 - 2014-05-12 19:24 - 00000000 ____D () C:\Qoobox 2014-05-08 16:59 - 2014-05-12 16:54 - 00000000 ____D () C:\Windows\erdnt 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:03 - 2014-05-11 20:50 - 00072465 _____ () C:\zoek-results.log 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 20:59 - 2014-05-07 21:00 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:58 - 2014-05-11 20:45 - 00000000 ____D () C:\zoek_backup 2014-05-07 20:58 - 2014-05-07 20:59 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 15:23 - 2014-05-07 15:26 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:33 - 2014-05-07 06:34 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:21 - 2014-04-23 12:19 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 19:01 - 2014-05-07 07:05 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 12:47 - 2014-05-07 20:03 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:42 - 2014-05-13 17:14 - 00000000 ____D () C:\FRST 2014-05-06 12:42 - 2014-05-07 20:03 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 22:06 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys 2014-05-06 11:49 - 2014-05-06 11:50 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:25 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-07 06:36 - 00000000 ____D () C:\AdwCleaner 2014-05-06 07:18 - 2014-05-06 07:19 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-06 07:15 - 2014-05-13 09:06 - 00019268 _____ () C:\Windows\PFRO.log 2014-05-05 12:35 - 2014-05-05 12:36 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-23 16:00 - 2014-05-12 06:04 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:42 - 2014-04-22 17:21 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:42 - 2014-04-22 17:21 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:42 - 2014-04-22 17:21 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:38 - 2014-04-22 17:40 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:16 - 2014-04-22 18:04 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 17:16 - 2014-04-22 17:18 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:14 - 2014-04-02 11:18 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-04-22 17:13 - 2014-04-22 17:15 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:11 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:10 - 2014-04-22 17:12 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:02 - 2014-04-22 17:03 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:57 - 2014-04-22 16:59 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-21 20:56 - 2014-04-21 21:25 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 10:14 - 2014-04-23 16:37 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 13:25 - 2014-04-15 14:07 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== One Month Modified Files and Folders ======= 2014-05-13 17:14 - 2014-05-13 17:14 - 00016282 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-13 17:14 - 2014-05-06 12:42 - 00000000 ____D () C:\FRST 2014-05-13 16:57 - 2010-11-23 18:29 - 01840213 _____ () C:\Windows\WindowsUpdate.log 2014-05-13 09:15 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-13 09:15 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-13 09:07 - 2014-01-05 21:44 - 00028718 _____ () C:\Windows\setupact.log 2014-05-13 09:07 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-13 09:06 - 2014-05-06 07:15 - 00019268 _____ () C:\Windows\PFRO.log 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 19:24 - 2014-05-08 17:00 - 00000000 ____D () C:\Qoobox 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-12 19:12 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-12 16:55 - 2009-07-14 04:34 - 79953920 _____ () C:\Windows\system32\config\software.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 24117248 _____ () C:\Windows\system32\config\system.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 01048576 _____ () C:\Windows\system32\config\default.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-05-12 16:54 - 2014-05-08 16:59 - 00000000 ____D () C:\Windows\erdnt 2014-05-12 06:04 - 2014-04-23 16:00 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 21:59 - 2010-11-26 16:53 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E9FCAAAA-2E6B-450C-8DBD-EE7AE6DCA21C} 2014-05-11 20:50 - 2014-05-07 21:03 - 00072465 _____ () C:\zoek-results.log 2014-05-11 20:45 - 2014-05-07 20:58 - 00000000 ____D () C:\zoek_backup 2014-05-11 20:34 - 2010-11-23 18:30 - 00000000 ____D () C:\Users\ADA 2014-05-11 20:23 - 2014-05-11 20:48 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:55 - 2009-07-14 06:45 - 00527056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-11 19:51 - 2014-05-11 19:49 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:23 - 2014-05-11 20:41 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 19:21 - 2014-05-11 19:21 - 06733559 _____ () C:\Users\ADA\Desktop\sample__1920.zip 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:15 - 2014-05-11 19:19 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 11:08 - 2014-05-11 12:12 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:13 - 2014-05-11 10:25 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 10:06 - 2014-05-11 10:06 - 01285120 _____ () C:\Users\ADA\Desktop\zoek (1).exe 2014-05-11 09:59 - 2014-05-11 09:59 - 01285120 _____ () C:\Users\ADA\Desktop\zoek.exe 2014-05-11 09:55 - 2014-05-11 10:11 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-10 20:48 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 21:00 - 2014-05-07 20:59 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:59 - 2014-05-07 20:58 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:03 - 2014-05-06 12:47 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-07 20:03 - 2014-05-06 12:42 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 19:04 - 2010-07-13 00:47 - 00000000 ____D () C:\ProgramData\Sony Corporation 2014-05-07 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 15:26 - 2014-05-07 15:23 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 07:05 - 2014-05-06 19:01 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:36 - 2014-05-06 07:19 - 00000000 ____D () C:\AdwCleaner 2014-05-07 06:34 - 2014-05-07 06:33 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 22:06 - 2014-05-06 11:50 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 14:19 - 2010-07-29 13:31 - 00000000 ____D () C:\Program Files (x86)\Google 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:49 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-06 07:18 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-05 12:36 - 2014-05-05 12:35 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-05 09:40 - 2013-11-02 21:47 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-05-02 23:47 - 2010-12-03 09:25 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Skype 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-24 06:37 - 2010-12-11 11:03 - 00000000 ____D () C:\Update 2014-04-24 06:36 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-23 16:37 - 2014-04-20 10:14 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-23 12:19 - 2014-05-06 21:21 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-04-22 18:04 - 2014-04-22 17:16 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 18:04 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Local\Samsung 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 18:01 - 2013-04-08 19:42 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:59 - 2013-04-08 19:42 - 00000000 ____D () C:\ProgramData\Samsung 2014-04-22 17:59 - 2010-07-12 23:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:43 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Samsung 2014-04-22 17:40 - 2014-04-22 17:38 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:21 - 2014-04-22 17:42 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:21 - 2014-04-22 17:42 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:21 - 2014-04-22 17:42 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:18 - 2014-04-22 17:16 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:15 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:13 - 2014-04-22 17:11 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:12 - 2014-04-22 17:10 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:03 - 2014-04-22 17:02 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:59 - 2014-04-22 16:57 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-22 16:59 - 2013-04-08 19:31 - 00000000 ____D () C:\Users\ADA\AppData\Local\Downloaded Installations 2014-04-21 21:25 - 2014-04-21 20:56 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 12:30 - 2010-07-29 13:45 - 00000000 ____D () C:\SPLASH.000 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 14:07 - 2014-04-15 13:25 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-06 09:28 ================

==== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 14 Maj 2014, 07:54

Się udało

Czy jeszcze jakieś problemy?

**Posty:** 370 · przez **bracik1977** 14 Maj 2014, 18:12

Dzieki za starania i doprowadzenia sprawy do konca po tylu trudach.
Jeszcze mam taka sprawe jak bys mi pomogl troche usprawnic mojego laptopa co odinstalowac i np. wylaczyc przy starcie zeby go nie zamulalo.Na poczatku tego tematu wrzucilem screny co mam zainstalowane .

**Posty:** 2183 · przez **NieWiem** 14 Maj 2014, 18:16

Jasne

Wygeneruj mi w takim razie nowy log z FRST z funkcji scan, z zaznaczonym addition

**Posty:** 370 · przez **bracik1977** 14 Maj 2014, 18:24

Kod: Zaznacz wszystko: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-05-2014 01 Ran by ADA (administrator) on ADA-VAIO on 14-05-2014 18:22:23 Running from C:\Users\ADA\Desktop Platform: Windows 7 Home Premium (X64) OS Language: German Standard Internet Explorer Version 9 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe (InterVideo Inc.) C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe (Sony Corporation) C:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation) C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe (Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe (Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation) C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation) C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSub.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Microsoft Corporation) C:\Windows\System32\vds.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2057000 2010-05-31] (Synaptics Incorporated) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-293356991-225826379-2249491693-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk ShortcutTarget: Dienst-Manager.lnk -> C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk ShortcutTarget: Sony MSS.lnk -> C:\Program Files (x86)\Sony\MSS\3.0.271\SSScheduler.exe (McAfee, Inc.) ==================== Internet (Whitelisted) ==================== SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {F9AF71C9-27C0-4E6F-9607-38672EA2D4AE} URL = http://www.idg.pl?q={searchTerms} BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) DPF: HKLM-x32 {784797A8-342D-4072-9486-03C8D0F2F0A1} http://www.battlefieldheroes.com/static/updater/BFHUpdater_5.0.145.0.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 FireFox: ======== FF ProfilePath: C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default FF user.js: detected! => C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\user.js FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll () FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF Extension: Quick Start - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\quick_start@gmail.com [2014-05-07] FF Extension: No Name - C:\Users\ADA\AppData\Roaming\Mozilla\Firefox\Profiles\1svcy6jz.default\Extensions\staged [2014-05-11] FF Extension: ArcaBit Ext. - C:\Program Files (x86)\Mozilla Firefox\extensions\arcabit@www.arcabit.pl [2013-11-12] FF Extension: G Data WebFilter - C:\Program Files (x86)\Mozilla Firefox\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} [2011-05-16] Chrome: ======= CHR HomePage: hxxp://www.google.pl/ CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll () CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.1) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll No File CHR Plugin: (NPCIG.dll) - C:\Program Files (x86)\Canon\MyCamera Download Plugin\NPCIG.dll No File CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\ADA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File CHR Plugin: (Pando Web Plugin) - C:\Users\ADA\Downloads\null\Pando Networks\Media Booster\npPandoWebPlugin.dll No File CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\SysWOW64\npDeployJava1.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File CHR Extension: (Dokumenty Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-26] CHR Extension: (Dysk Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-26] CHR Extension: (YouTube) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-09-02] CHR Extension: (Adblock Plus) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2013-09-26] CHR Extension: (Szukaj w Google) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-09-02] CHR Extension: (Google Wallet) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29] CHR Extension: (Quick Start) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-05-07] CHR Extension: (Gmail) - C:\Users\ADA\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-09-02] ==================== Services (Whitelisted) ================= S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) S3 McComponentHostServiceSony; C:\Program Files (x86)\Sony\MSS\3.0.271\McCHSvc.exe [237328 2012-03-30] (McAfee, Inc.) R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2012-12-19] () R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] () S4 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [156672 2012-08-06] () S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.) R2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [887000 2011-01-20] (Sony Corporation) R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1369136 2013-09-25] (Sony Corporation) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 NPPTNT2; C:\Windows\SysWOW64\npptNT2.sys [4682 2005-01-01] (INCA Internet Co., Ltd.) S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr)) S3 usbet; C:\Windows\System32\DRIVERS\ETdrv.sys [182912 2010-04-29] (Etron) S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [15872 2006-01-13] (Flint Incorporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 dgderdrv; System32\drivers\dgderdrv.sys [X] S3 dump_wmimmc; \??\C:\AeriaGames\WolfTeam-PL\GameGuard\dump_wmimmc.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-14 18:22 - 2014-05-14 18:22 - 00016357 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 20:48 - 2014-05-11 20:23 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 20:41 - 2014-05-11 19:23 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 20:09 - 2013-12-06 18:42 - 00020696 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\mfmonitor_x64.sys 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:49 - 2014-05-11 19:51 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:19 - 2014-05-11 12:15 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:12 - 2014-05-11 11:08 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:25 - 2014-05-11 10:13 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 10:11 - 2014-05-11 09:55 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-10 20:28 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-10 20:28 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-10 20:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-10 20:28 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-08 17:00 - 2014-05-12 19:24 - 00000000 ____D () C:\Qoobox 2014-05-08 16:59 - 2014-05-12 16:54 - 00000000 ____D () C:\Windows\erdnt 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:03 - 2014-05-11 20:50 - 00072465 _____ () C:\zoek-results.log 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 20:59 - 2014-05-07 21:00 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:58 - 2014-05-11 20:45 - 00000000 ____D () C:\zoek_backup 2014-05-07 20:58 - 2014-05-07 20:59 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 15:23 - 2014-05-07 15:26 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:33 - 2014-05-07 06:34 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:21 - 2014-04-23 12:19 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 19:01 - 2014-05-07 07:05 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 12:47 - 2014-05-07 20:03 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:42 - 2014-05-14 18:22 - 00000000 ____D () C:\FRST 2014-05-06 12:42 - 2014-05-07 20:03 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 22:06 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys 2014-05-06 11:49 - 2014-05-06 11:50 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:25 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-07 06:36 - 00000000 ____D () C:\AdwCleaner 2014-05-06 07:18 - 2014-05-06 07:19 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-06 07:15 - 2014-05-13 09:06 - 00019268 _____ () C:\Windows\PFRO.log 2014-05-05 12:35 - 2014-05-05 12:36 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-23 16:00 - 2014-05-12 06:04 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:42 - 2014-04-22 17:21 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:42 - 2014-04-22 17:21 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:42 - 2014-04-22 17:21 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:38 - 2014-04-22 17:40 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:16 - 2014-04-22 18:04 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 17:16 - 2014-04-22 17:18 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:14 - 2014-04-02 11:18 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll 2014-04-22 17:13 - 2014-04-22 17:15 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:11 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:10 - 2014-04-22 17:12 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:02 - 2014-04-22 17:03 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:57 - 2014-04-22 16:59 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-21 20:56 - 2014-04-21 21:25 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 10:14 - 2014-04-23 16:37 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 13:25 - 2014-04-15 14:07 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== One Month Modified Files and Folders ======= 2014-05-14 18:22 - 2014-05-14 18:22 - 00016357 _____ () C:\Users\ADA\Desktop\FRST.txt 2014-05-14 18:22 - 2014-05-06 12:42 - 00000000 ____D () C:\FRST 2014-05-14 18:08 - 2010-11-23 18:29 - 01850205 _____ () C:\Windows\WindowsUpdate.log 2014-05-14 14:13 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-14 14:13 - 2009-07-14 06:45 - 00013984 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-14 12:23 - 2014-01-05 21:44 - 00028774 _____ () C:\Windows\setupact.log 2014-05-14 12:23 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-13 21:39 - 2010-11-26 16:53 - 00003922 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{E9FCAAAA-2E6B-450C-8DBD-EE7AE6DCA21C} 2014-05-13 09:06 - 2014-05-06 07:15 - 00019268 _____ () C:\Windows\PFRO.log 2014-05-12 20:25 - 2014-05-12 20:25 - 02066944 _____ (Farbar) C:\Users\ADA\Desktop\FRST64.exe 2014-05-12 19:24 - 2014-05-08 17:00 - 00000000 ____D () C:\Qoobox 2014-05-12 19:23 - 2014-05-12 19:23 - 00051620 _____ () C:\ComboFix.txt 2014-05-12 19:12 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-12 16:55 - 2009-07-14 04:34 - 79953920 _____ () C:\Windows\system32\config\software.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 24117248 _____ () C:\Windows\system32\config\system.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 01048576 _____ () C:\Windows\system32\config\default.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\security.bak 2014-05-12 16:55 - 2009-07-14 04:34 - 00262144 _____ () C:\Windows\system32\config\sam.bak 2014-05-12 16:54 - 2014-05-08 16:59 - 00000000 ____D () C:\Windows\erdnt 2014-05-12 06:04 - 2014-04-23 16:00 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk 2014-05-11 22:00 - 2014-05-11 22:00 - 05200347 ____R (Swearware) C:\Users\ADA\Desktop\ComboFix.exe 2014-05-11 20:50 - 2014-05-07 21:03 - 00072465 _____ () C:\zoek-results.log 2014-05-11 20:45 - 2014-05-07 20:58 - 00000000 ____D () C:\zoek_backup 2014-05-11 20:34 - 2010-11-23 18:30 - 00000000 ____D () C:\Users\ADA 2014-05-11 20:23 - 2014-05-11 20:48 - 00024064 _____ () C:\Windows\zoek-delete.exe 2014-05-11 19:56 - 2014-05-11 19:56 - 00000000 ____D () C:\Users\ADA\MediaFire 2014-05-11 19:55 - 2009-07-14 06:45 - 00527056 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-11 19:51 - 2014-05-11 19:49 - 69675552 _____ (MediaFire) C:\Users\ADA\Downloads\MediaFireDesktop-0.10.29.9309-windows-PRODUCTION.exe 2014-05-11 19:23 - 2014-05-11 20:41 - 00076379 _____ () C:\zoek-results2014-05-11-172315.log 2014-05-11 13:15 - 2014-05-11 13:15 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398) (1).exe 2014-05-11 13:14 - 2014-05-11 13:14 - 02134936 _____ () C:\Users\ADA\Downloads\winrar-x64-501pl(dobreprogramy.pl).exe 2014-05-11 13:13 - 2014-05-11 13:13 - 00702752 _____ () C:\Users\ADA\Downloads\WinRAR(12398).exe 2014-05-11 12:15 - 2014-05-11 19:19 - 00067344 _____ () C:\zoek-results2014-05-11-101510.log 2014-05-11 11:08 - 2014-05-11 12:12 - 00075794 _____ () C:\zoek-results2014-05-11-090851.log 2014-05-11 10:13 - 2014-05-11 10:25 - 00019291 _____ () C:\zoek-results2014-05-11-081306.log 2014-05-11 09:55 - 2014-05-11 10:11 - 00000189 _____ () C:\zoek-results2014-05-11-075545.log 2014-05-10 20:48 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Default 2014-05-10 19:36 - 2014-05-10 19:36 - 00000000 ____D () C:\_OTS 2014-05-07 21:46 - 2014-05-07 21:46 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds (1).com 2014-05-07 21:09 - 2014-05-07 21:09 - 00688992 ____R (Swearware) C:\Users\ADA\Downloads\dds.com 2014-05-07 21:01 - 2014-05-07 21:01 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (3).exe 2014-05-07 21:00 - 2014-05-07 21:00 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (2).exe 2014-05-07 21:00 - 2014-05-07 20:59 - 04235514 _____ () C:\Users\ADA\Downloads\zoek.rar 2014-05-07 20:59 - 2014-05-07 20:58 - 04095370 _____ () C:\Users\ADA\Downloads\Niepotwierdzony 69661.crdownload 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek.exe 2014-05-07 20:58 - 2014-05-07 20:58 - 01285120 _____ () C:\Users\ADA\Downloads\zoek (1).exe 2014-05-07 20:03 - 2014-05-06 12:47 - 00043581 _____ () C:\Users\ADA\Downloads\Addition.txt 2014-05-07 20:03 - 2014-05-06 12:42 - 00043169 _____ () C:\Users\ADA\Downloads\FRST.txt 2014-05-07 20:01 - 2014-05-07 20:01 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (3).exe 2014-05-07 19:04 - 2010-07-13 00:47 - 00000000 ____D () C:\ProgramData\Sony Corporation 2014-05-07 19:03 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration 2014-05-07 15:26 - 2014-05-07 15:23 - 00000322 _____ () C:\Users\ADA\AppData\Roaming\aps.uninstall.scan.results 2014-05-07 08:33 - 2014-05-07 08:33 - 00000000 ____D () C:\Users\ADA\Downloads\WPU 2014-05-07 08:32 - 2014-05-07 08:32 - 01728466 _____ () C:\Users\ADA\Downloads\WPU.zip 2014-05-07 08:23 - 2014-05-07 08:23 - 00000552 _____ () C:\Users\ADA\Downloads\fixlist (1).txt 2014-05-07 07:05 - 2014-05-06 19:01 - 00000000 ____D () C:\Program Files\Enigma Software Group 2014-05-07 06:40 - 2014-05-07 06:40 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer (1).exe 2014-05-07 06:36 - 2014-05-06 07:19 - 00000000 ____D () C:\AdwCleaner 2014-05-07 06:34 - 2014-05-07 06:33 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner_www.INSTALKI.pl.exe 2014-05-06 22:06 - 2014-05-06 11:50 - 00001121 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk 2014-05-06 21:21 - 2014-05-06 21:21 - 00000000 ____D () C:\Windows\system32\log 2014-05-06 21:20 - 2014-05-06 21:20 - 11825832 _____ (Elex do Brasil cenzura!ções Ltda) C:\Users\ADA\Downloads\yet_another_cleaner_sk.exe 2014-05-06 21:03 - 2014-05-06 21:03 - 00613720 _____ () C:\Users\ADA\Downloads\SpyHunter_4.2.24 (10176).exe 2014-05-06 19:02 - 2014-05-06 19:02 - 00000000 _____ () C:\autoexec.bat 2014-05-06 18:58 - 2014-05-06 18:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\ADA\Downloads\SpyHunter-Installer.exe 2014-05-06 16:18 - 2014-05-06 16:18 - 00041580 _____ () C:\Users\ADA\Downloads\1353409 (1).perl 2014-05-06 16:13 - 2014-05-06 16:13 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (2).txt 2014-05-06 16:03 - 2014-05-06 16:03 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (2).exe 2014-05-06 15:34 - 2014-05-06 15:34 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64 (1).exe 2014-05-06 15:30 - 2014-05-06 15:30 - 00041580 _____ () C:\Users\ADA\Downloads\1353409.perl 2014-05-06 14:22 - 2014-05-06 14:22 - 00053680 _____ () C:\Users\ADA\Downloads\FRST (1).txt 2014-05-06 14:19 - 2010-07-29 13:31 - 00000000 ____D () C:\Program Files (x86)\Google 2014-05-06 12:47 - 2014-05-06 12:47 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64(1).exe 2014-05-06 12:41 - 2014-05-06 12:41 - 02063872 _____ (Farbar) C:\Users\ADA\Downloads\FRST64.exe 2014-05-06 11:51 - 2014-05-06 11:51 - 00000000 ____D () C:\Users\ADA\AppData\Local\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro 2014-05-06 11:50 - 2014-05-06 11:50 - 00000000 ____D () C:\Program Files\VS Revo Group 2014-05-06 11:50 - 2014-05-06 11:49 - 10619688 _____ (VS Revo Group ) C:\Users\ADA\Downloads\RevoUninProSetup.exe 2014-05-06 11:42 - 2014-05-06 11:42 - 00075421 _____ () C:\Users\ADA\Documents\bookmarks_06.05.2014.html 2014-05-06 07:24 - 2014-05-06 07:24 - 01316991 _____ () C:\Users\ADA\Downloads\AdwCleaner (1).exe 2014-05-06 07:19 - 2014-05-06 07:18 - 01316991 _____ () C:\Users\ADA\Downloads\adwcleaner.exe 2014-05-05 12:36 - 2014-05-05 12:35 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (2).zip 2014-05-05 12:31 - 2014-05-05 12:31 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014 (1).zip 2014-05-05 12:30 - 2014-05-05 12:30 - 00094624 _____ () C:\Users\ADA\Downloads\Center AG Video-on-Demand Andrzej Dyczka 05.05.2014.zip 2014-05-05 09:40 - 2013-11-02 21:47 - 00000000 ____D () C:\ProgramData\CanonIJPLM 2014-05-02 23:47 - 2010-12-03 09:25 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Skype 2014-05-02 22:35 - 2014-05-02 22:35 - 00081976 _____ () C:\Users\ADA\Desktop\Lego Star Wars 3 ... The Clone Wars.txt 2014-04-24 06:37 - 2010-12-11 11:03 - 00000000 ____D () C:\Update 2014-04-24 06:36 - 2009-07-14 07:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-23 16:37 - 2014-04-20 10:14 - 00000000 ____D () C:\Users\ADA\Desktop\Neuer Ordner 2014-04-23 12:19 - 2014-05-06 21:21 - 00043520 _____ (Elex do Brasil cenzura!ções Ltda) C:\Windows\system32\Drivers\iSafeKrnlBoot.sys 2014-04-22 18:04 - 2014-04-22 17:16 - 00000000 ____D () C:\Users\ADA\Documents\SelfMV 2014-04-22 18:04 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Local\Samsung 2014-04-22 18:02 - 2014-04-22 18:02 - 00002002 _____ () C:\Users\Public\Desktop\Samsung Kies (Lite).lnk 2014-04-22 18:02 - 2014-04-22 18:02 - 00001992 _____ () C:\Users\Public\Desktop\Samsung Kies.lnk 2014-04-22 18:01 - 2013-04-08 19:42 - 00000000 ____D () C:\Program Files (x86)\Samsung 2014-04-22 17:59 - 2014-04-22 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2014-04-22 17:59 - 2013-04-08 19:42 - 00000000 ____D () C:\ProgramData\Samsung 2014-04-22 17:59 - 2010-07-12 23:29 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyCleaner 2014-04-22 17:49 - 2014-04-22 17:49 - 00000000 ____D () C:\Program Files (x86)\ToniArts 2014-04-22 17:48 - 2014-04-22 17:48 - 02951802 _____ (InstallShield Software Corporation) C:\Users\ADA\Downloads\EClea2_0.exe 2014-04-22 17:43 - 2013-04-08 19:46 - 00000000 ____D () C:\Users\ADA\AppData\Roaming\Samsung 2014-04-22 17:40 - 2014-04-22 17:38 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (3).exe 2014-04-22 17:21 - 2014-04-22 17:42 - 74322432 _____ () C:\Users\ADA\Downloads\Samsung Kies.msi 2014-04-22 17:21 - 2014-04-22 17:42 - 00022492 _____ () C:\Users\ADA\Downloads\0x0409.ini 2014-04-22 17:21 - 2014-04-22 17:42 - 00003584 _____ () C:\Users\ADA\Downloads\1033.MST 2014-04-22 17:18 - 2014-04-22 17:16 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (2).exe 2014-04-22 17:15 - 2014-04-22 17:13 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (2).exe 2014-04-22 17:13 - 2014-04-22 17:11 - 41310112 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup (1).exe 2014-04-22 17:12 - 2014-04-22 17:10 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup (1).exe 2014-04-22 17:03 - 2014-04-22 17:02 - 41315792 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\Kies3Setup.exe 2014-04-22 16:59 - 2014-04-22 16:57 - 75397136 _____ (Samsung Electronics Co., Ltd.) C:\Users\ADA\Downloads\KiesSetup.exe 2014-04-22 16:59 - 2013-04-08 19:31 - 00000000 ____D () C:\Users\ADA\AppData\Local\Downloaded Installations 2014-04-21 21:25 - 2014-04-21 20:56 - 00000000 ____D () C:\Users\ADA\Desktop\KOMUNIA 2014-04-20 12:30 - 2010-07-29 13:45 - 00000000 ____D () C:\SPLASH.000 2014-04-19 22:00 - 2014-04-19 22:00 - 00036170 _____ () C:\Users\ADA\Downloads\eBayISAPI.gz 2014-04-15 14:07 - 2014-04-15 13:25 - 00000000 ____D () C:\Users\ADA\Desktop\Fotos0001 ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-06 09:28 ==================== End Of Log ============================

Dodano 14.05.2014 17:25:34:

Kod: Zaznacz wszystko: Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-05-2014 01 Ran by ADA at 2014-05-14 18:23:22 Running from C:\Users\ADA\Desktop Boot Mode: Normal ========================================================== ==================== Security Center ======================== AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== "SubEdit-Player" (HKLM-x32\...\"SubEdit-Player") (Version: - ) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.3.9130 - Adobe Systems Inc.) Adobe AIR (x32 Version: 1.5.3.9130 - Adobe Systems Inc.) Hidden Adobe Flash Player 11 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.170 - Adobe Systems Incorporated) Adobe Photoshop Elements 8.0 (HKLM-x32\...\Adobe Photoshop Elements 8.0) (Version: 8.0 - Adobe Systems Incorporated) Adobe Photoshop Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden Adobe Premiere Elements 8.0 (HKLM-x32\...\PremElem80) (Version: 8.0 - Adobe Systems Incorporated) Adobe Premiere Elements 8.0 (x32 Version: 8.0 - Adobe Systems Incorporated) Hidden Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated) Any Video Converter 3.3.3 (HKLM-x32\...\Any Video Converter_is1) (Version: - Any-Video-Converter.com) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.115 - ArcSoft) ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.390 - ArcSoft) Ashampoo Burning Studio 6 FREE v.6.81 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.1 - Ashampoo GmbH & Co. KG) ATI Catalyst Install Manager (HKLM\...\{5BC83141-83DD-07BE-C940-04B385540F04}) (Version: 3.0.769.0 - ATI Technologies, Inc.) AVS Video Editor 6 (HKLM-x32\...\AVS Video Editor_is1) (Version: 6.3.2.234 - Online Media Technologies Ltd.) BlazeDTV 6.0 (HKLM-x32\...\BlazeDTV 6.0_is1) (Version: - ) Canon Utilities ZoomBrowser EX (HKLM-x32\...\ZoomBrowser EX) (Version: 6.7.0.24 - Canon Inc.) Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden Catalyst Control Center Core Implementation (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Full New (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Light (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0920.2143.37117 - ATI) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0209.16.306 - ATI Technologies, Inc.) Hidden Catalyst Control Center InstallProxy (x32 Version: 2010.0920.2143.37117 - ATI Technologies, Inc.) Hidden Catalyst Control Center Localization All (x32 Version: 2010.0920.2143.37117 - ATI) Hidden CCC Help Chinese Standard (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Chinese Traditional (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Czech (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Danish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Dutch (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help English (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Finnish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help French (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help German (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Greek (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Hungarian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Italian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Japanese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Korean (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Norwegian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Polish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Portuguese (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Russian (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Spanish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Swedish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Thai (x32 Version: 2010.0920.2142.37117 - ATI) Hidden CCC Help Turkish (x32 Version: 2010.0920.2142.37117 - ATI) Hidden ccc-core-static (x32 Version: 2010.0920.2143.37117 - Ihr Firmenname) Hidden ccc-utility64 (Version: 2010.0920.2143.37117 - ATI) Hidden CCleaner (HKLM\...\CCleaner) (Version: 4.08 - Piriform) Deutsch Translator 2 (HKLM-x32\...\DT2) (Version: - ) EasyCleaner (HKLM-x32\...\{F5346614-B7C4-4E94-826A-E2363155233D}) (Version: 2.0.6.380 - ToniArts) Eusing Free Registry Cleaner (HKLM-x32\...\Eusing Free Registry Cleaner) (Version: - Eusing Software) Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.4.2224 - Evernote Corp.) FastStone Image Viewer 4.4 (HKLM-x32\...\FastStone Image Viewer) (Version: 4.4 - FastStone Soft) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.) Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden IncrediMail (x32 Version: 6.2.8.4960 - IncrediMail) Hidden IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.2.8.4960 - IncrediMail Ltd.) Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.0.1014 - Intel Corporation) Intel(R) Turbo Boost Technology Driver (HKLM-x32\...\{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}) (Version: 01.02.00.1002 - Intel Corporation) Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation) InterVideo DeviceService (HKLM-x32\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo) Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217045FF}) (Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden K-Lite Codec Pack 7.0.0 (Standard) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 7.0.0 - ) L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version: - ) MAGIX Video deluxe MX Download Version (x32 Version: 11.0.1.4 - MAGIX AG) Hidden Malwarebytes Anti-Malware wersja 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation) Media Gallery (Version: 1.3.0 - Sony Corporation) Hidden Media Gallery (x32 Version: 1.3.0.06230 - Sony Corporation) Hidden Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation) Microsoft SQL Server Desktop Engine (SONY_MEDIAMGR) (HKLM-x32\...\{E09B48B5-E141-427A-AB0C-D3605127224A}) (Version: 8.00.761 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mozilla Firefox 21.0 (x86 pl) (HKLM-x32\...\Mozilla Firefox 21.0 (x86 pl)) (Version: 21.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 21.0 - Mozilla) MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden MSVCRT Redists (x32 Version: 1.0 - Sony Creative Software Inc.) Hidden MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Odkurzacz (HKLM-x32\...\Odkurzacz 13.4_is1) (Version: 13.4.0.1685 - FranmoSoftware - Maciej Opaliñski) Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.9 - Pando Networks Inc.) Philips Media Converter (x32 Version: 1.03 - Philips) Hidden PhotoMizer (HKLM-x32\...\{A00F8237-F496-44D2-0001-E3CCF8CD58AE}) (Version: 1.0.10.1236 - Engelmann Media GmbH) PhotoScape (HKLM-x32\...\PhotoScape) (Version: - ) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayStation(R)Network Downloader (HKLM-x32\...\{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}) (Version: 2.06.00741 - Sony Computer Entertainment Inc.) PlayStation(R)Store (HKLM-x32\...\{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}) (Version: 4.3.3.12540 - Sony Computer Entertainment Inc.) PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.3.00.06040 - Sony Corporation) PMB VAIO Edition Guide (x32 Version: 1.5.00.03020 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (Version: 1.5.10.05300 - Sony Corporation) Hidden PMB VAIO Edition Plug-in (x32 Version: 1.5.10.06150 - Sony Corporation) Hidden QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.) Realtek HDMI Audio Driver for ATI (HKLM-x32\...\{5449FB4F-1802-4D5B-A6D8-087DB1142147}) (Version: 6.0.1.6034 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6098 - Realtek Semiconductor Corp.) Remote Play mit PlayStation®3 (HKLM-x32\...\{07441A52-E208-478A-92B7-5C337CA8C131}) (Version: 1.0.2.06210 - Sony Corporation) Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210 - Sony Corporation) Hidden Remote-Tastatur mit PlayStation 3 (HKLM-x32\...\{65B138AE-F636-4D4C-BA5D-A06E21E47C53}) (Version: 1.0.2.06170 - Sony Corporation) Revo Uninstaller 1.94 (HKLM-x32\...\Revo Uninstaller) (Version: 1.94 - VS Revo Group) Revo Uninstaller Pro 3.0.8 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.0.8 - VS Revo Group, Ltd.) Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Samsung Kies (x32 Version: 2.6.2.14014_7 - Samsung Electronics Co., Ltd.) Hidden SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.33.0 - SAMSUNG Electronics Co., Ltd.) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) SmartSound Common Data (HKLM-x32\...\InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}) (Version: 1.1.0 - SmartSound Software Inc.) SmartSound Common Data (x32 Version: 1.1.0 - SmartSound Software Inc.) Hidden SmartSound Quicktracks 5 (HKLM-x32\...\InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}) (Version: 5.1.8 - SmartSound Software Inc.) SmartSound Quicktracks 5 (x32 Version: 5.1.8 - SmartSound Software Inc.) Hidden SmartSound Quicktracks for Premiere Elements 8.0 (HKLM-x32\...\InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}) (Version: 3.11.3090 - SmartSound Software Inc) SmartSound Quicktracks for Premiere Elements 8.0 (x32 Version: 3.11.3090 - SmartSound Software Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.9.0 - Synaptics Incorporated) Total Commander Ultima Prime 4.7.0.0 (HKLM-x32\...\TC UP) (Version: 4.7.0.0 - ULTIMA PRIME) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation) VAIO - Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.3.0.06230 - Sony Corporation) VAIO - PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{339F9B4D-00CB-4C1C-BED8-EC86A9AB602A}) (Version: 1.5.00.03020 - Sony Corporation) VAIO - PMB VAIO Edition Plug-in (HKLM-x32\...\InstallShield_{22008CF9-2B54-4022-AFD8-3B7D42C89E6B}) (Version: 1.5.10.06150 - Sony Corporation) VAIO Care (HKLM\...\{EC635BC0-0D7C-4CA2-9B87-2A330C298CB2}) (Version: 8.1.0.10120 - Sony Corporation) VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.3.0.05310 - Sony Corporation) VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.4.0.05240 - Sony Corporation) VAIO Data Restore Tool (x32 Version: 1.4.0.05240 - Sony Corporation) Hidden VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.4.00.05300 - Sony Corporation) VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 2.4.0.06210 - Sony Corporation) VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 2.2.0.07020 - Sony Corporation) VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230 - Sony Corporation) Hidden VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.1.0.18210 - Sony Corporation) VAIO Media plus (Version: 2.1.0 - Sony Corporation) Hidden VAIO Media plus (x32 Version: 2.1.0.18210 - Sony Corporation) Hidden VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 2.1.0.13220 - Sony Corporation) VAIO Movie Story Template Data (HKLM-x32\...\InstallShield_{6FA8BA2C-052B-4072-B8E2-2302C268BE9E}) (Version: 2.5.00.05300 - Sony Corporation) VAIO Movie Story Template Data (x32 Version: 2.3.00.06040 - Sony Corporation) Hidden VAIO Quick Web Access (HKLM-x32\...\splashtop) (Version: 1.3.4.2 - Sony Corporation) VAIO Quick Web Access (x32 Version: 1.3.4.2 - Sony Corporation) Hidden VAIO Sample Contents (HKLM-x32\...\{547C9EB4-4CA6-402F-9D1B-8BD30DC71E44}) (Version: 1.3.0.06041 - Sony Corporation) VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.3.1.08110 - Sony Corporation) VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.3.1.10120 - Sony Corporation) VAIO-Handbuch (HKLM-x32\...\{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}) (Version: 1.1.0.05280 - Sony Corporation) VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.2.0.06230 - Sony Corporation) VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden WebCam (HKLM-x32\...\{ED1674F5-5165-49BF-B546-AE5343111540}) (Version: 5.1.0.0 - ETRON) WebTV (x32 Version: 3.4.1 - XStream Incorporated) Hidden WIDCOMM Bluetooth Software (HKLM\...\{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}) (Version: 6.3.0.5600 - Broadcom Corporation) Windows Live Sync (HKLM-x32\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation) Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.3.0 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Wisdom-soft Set up ScreenHunter 5.1 Free (HKLM-x32\...\Wisdom-soft Set up ScreenHunter 5.1 Free) (Version: - Wisdom Software Inc.) X-DVD_Player (HKLM-x32\...\X-DVD_Player) (Version: - ) ==================== Restore Points ========================= 07-05-2014 04:57:15 Revo Uninstaller Pro's restore point - SpyHunter 07-05-2014 04:57:46 Removed SpyHunter 07-05-2014 13:26:51 Revo Uninstaller Pro's restore point - Advanced System Protector 07-05-2014 13:28:54 Revo Uninstaller Pro's restore point - AnyProtect 07-05-2014 13:30:18 Revo Uninstaller Pro's restore point - Free Download Manager 3.9.4 07-05-2014 13:35:44 Revo Uninstaller Pro's restore point - MyPC Backup 07-05-2014 13:41:39 Revo Uninstaller Pro's restore point - RegClean Pro 07-05-2014 13:46:45 Revo Uninstaller Pro's restore point - BrowserSafeguard with RocketTab 07-05-2014 13:48:41 Revo Uninstaller Pro's restore point - qone8 uninstaller 07-05-2014 13:50:10 Revo Uninstaller Pro's restore point - Plus-HD-9.3 07-05-2014 13:51:38 Revo Uninstaller Pro's restore point - VO Package 07-05-2014 13:54:38 Revo Uninstaller Pro's restore point - VisualBee for Microsoft PowerPoint 07-05-2014 16:51:14 Wiederherstellungsvorgang 07-05-2014 19:03:43 zoek.exe restore point 10-05-2014 18:29:02 ComboFix created restore point 11-05-2014 11:26:22 Revo Uninstaller Pro's restore point - WinRAR 5.01 (64-bitowy) 11-05-2014 17:58:35 Revo Uninstaller Pro's restore point - MediaFire Desktop 11-05-2014 18:06:18 Revo Uninstaller Pro's restore point - MediaFire Desktop 11-05-2014 18:30:01 Revo Uninstaller Pro's restore point - MediaFire Desktop ==================== Hosts content: ========================== 2009-07-14 04:34 - 2014-05-12 16:56 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= Task: {08467DEC-BA6E-4BAA-9E5C-87E13289B7E0} - System32\Tasks\Sony Corporation\VAIO Care\VCSelfHeal => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {0885AE72-75F9-43DF-BDBD-589259EB1DF0} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {15C2BA37-1546-45E1-A823-DCB117AFB4AE} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {18D8AE03-4A62-4478-AD25-28DCF5B1D82D} - System32\Tasks\{56F30C7D-460F-4D12-9F39-35CC13C90A74} => Chrome.exe http://ui.skype.com/ui/0/6.0.0.126/pl/go/help.faq.installer?LastError=1601 Task: {194405C1-A14F-4493-AC1A-4CF728FF984C} - System32\Tasks\{AB7E4BE0-4924-4631-93F0-FDDC6B05ED55} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {2F90065B-220D-4B57-B45C-BDB2146B4E4B} - System32\Tasks\{A487AF0B-1475-439F-924E-DB8DB46FE1AB} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {391B5D82-2435-4ED3-A7C2-1B9B359CC009} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-06-21] (Sony Corporation) Task: {455E224E-BB83-491A-9C35-8CD5C542D11E} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-09-27] (Sony Corporation) Task: {5EA3C9A7-C21B-4DDD-8EC2-613183356F33} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {71F67D36-6168-40F4-918B-6BBAA87B9964} - System32\Tasks\{AD87D38F-9BBB-446F-A3A4-A9C7E276E908} => Chrome.exe http://ui.skype.com/ui/0/6.6.0.106/pl/abandoninstall?page=tsMain Task: {75D14FD0-FE04-46D6-A6AB-4E909312B8CD} - System32\Tasks\{394962AA-8DC2-42F9-BFEC-B190A86D67A5} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {7D0449A6-CFA5-4D56-9E8E-15A395D8A47A} - System32\Tasks\{A7A03983-977D-49EA-A547-D8F0FB525996} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {89363FA7-68C1-4163-8AA8-4E53105CD20D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-11-22] (Piriform Ltd) Task: {8B739A8A-7D03-428F-8655-3B74EB84C5CA} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music ADA => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2010-01-20] (Sony Corporation) Task: {9B84AC86-B7D2-4B99-B4F6-67261DF81A80} - System32\Tasks\{F07F3B3F-FE2A-439A-8E93-600D98BCE545} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () Task: {AADAE9E2-2B0C-441D-AD3F-F78FF221DD4D} - \PC Optimizer Pro64 startups No Task File <==== ATTENTION Task: {AE31F376-8A3F-4597-AD1C-D5CE26B921B2} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation) Task: {B57F37DE-120E-48F8-9EF0-331C863FF356} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {B5ECC4A0-199B-4C91-96BC-F3E02EBFC248} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {B7C7D2D0-3108-40E9-A38A-A1E8471248DB} - System32\Tasks\{FEB03A85-18F5-4C86-B2B4-6D5EAE744C55} => Firefox.exe http://ui.skype.com/ui/0/5.5.0.124.259/en/abandoninstall?page=tsPlugin&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;disabled Task: {BFD1709B-0FFE-4A39-BE68-2CA40FDA6A17} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {C1EAEF35-3E92-42AA-8261-DC9779B3B432} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {C8C5F0FB-E945-468D-99B9-40E737A4EC27} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-10-12] (Sony Corporation) Task: {CAFC96C4-A0ED-45AD-92A4-C2032768CD52} - System32\Tasks\{1D1EA841-6BFD-4022-A87F-97A4EB7C6A20} => Chrome.exe http://ui.skype.com/ui/0/6.14.0.104/pl/abandoninstall?source=lightinstaller&page=tsProgressBar Task: {D04F9636-7D65-4AAB-AD44-356BCF1430DE} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe Task: {DB8BCBD7-53AB-47C2-841D-BB3D4CE92F7A} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation) Task: {DD529932-CF27-4DE8-8F28-F548B9E95C17} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation) Task: {EC9B56C2-5659-45AE-912D-41969BB0862C} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation) Task: {F7A9D5F4-467C-4164-9733-75D24A954BCA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-09-19] (Sony Corporation) Task: {F85274D6-EC22-4323-BBE3-171F01924590} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-06-21] (Sony Corporation) Task: {FBE4A347-9B07-40CC-B297-E8A715C50C9A} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {FCF2339C-FB56-4E8A-87B7-D1600BB28220} - System32\Tasks\{6F8132D4-87B9-43D8-931F-55EBDA0CC4E9} => C:\Program Files\Sony\MFU\iGoogle.exe [2010-07-02] () ==================== Loaded Modules (whitelisted) ============= 2012-08-25 21:25 - 2012-12-19 16:34 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2011-02-05 16:21 - 2010-08-19 18:43 - 00386344 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2010-06-12 10:27 - 2010-06-12 10:27 - 00135168 _____ () C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\Extension\MrsMpegParser.dll 2010-07-29 13:19 - 2010-05-31 19:18 - 00013824 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll 2010-07-29 13:19 - 2010-05-31 19:18 - 00013312 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll 2014-03-01 14:53 - 2014-03-01 14:53 - 00170496 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\d89f0252d910d617de1de783a812f840\IsdiInterop.ni.dll 2010-07-12 23:29 - 2010-03-04 05:08 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00065352 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\chrome_elf.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00674632 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libglesv2.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\libegl.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 04081480 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\pdf.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 00390472 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ppGoogleNaClPluginChrome.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 01647432 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\ffmpegsumo.dll 2014-05-06 14:19 - 2014-04-24 02:33 - 13692232 _____ () C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.131\PepperFlash\pepflashplayer.dll ==================== Alternate Data Streams (whitelisted) ========= ==================== Safe Mode (whitelisted) =================== ==================== EXE Association (whitelisted) ============= ==================== Disabled items from MSCONFIG ============== MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk => C:\Windows\pss\Bluetooth.lnk.CommonStartup MSCONFIG\startupreg: Elbserver => C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe /Stay MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SHTtray.exe => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe MSCONFIG\startupreg: Sidebar => C:\Program Files\Windows Sidebar\sidebar.exe /autoRun MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: VRLPHelper => C:\Program Files (x86)\Sony\Media Gallery\VRLPHelper.exe /Stay ==================== Faulty Device Manager Devices ============= Name: Teredo Tunneling Pseudo-Interface Description: Microsoft-Teredo-Tunneling-Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (05/14/2014 04:39:39 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/14/2014 02:21:04 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/14/2014 02:19:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/14/2014 02:13:09 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/14/2014 00:33:56 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/14/2014 00:25:56 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/13/2014 10:43:33 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/13/2014 09:14:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/13/2014 08:44:16 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. Error: (05/13/2014 08:42:14 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: Die Namenszeichenfolgenwert für den Leistungsindikator in der Registrierung ist falsch formatiert. Die falsch formatierte Zeichenfolge ist "䀀". Das erste DWORD im Datenbereich enthält den Indexwert für die falsch formatierte Zeichenfolge, während das zweite und dritte DWORD im Datenbereich die letzten gültigen Indexwerte enthalten. System errors: ============= Error: (05/14/2014 04:39:42 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 02:21:07 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 02:19:16 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 02:13:12 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 00:33:59 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 00:26:02 PM) (Source: Service Control Manager) (User: ) (EventID: 7003) Description: Der Dienst "Intel(R) Management & Security Application User Notification Service" ist von folgendem Dienst abhängig: LMS. Dieser Dienst ist eventuell nicht installiert. Error: (05/14/2014 00:26:02 PM) (Source: Service Control Manager) (User: ) (EventID: 7023) Description: Der Dienst "WMI-Leistungsadapter" wurde mit folgendem Fehler beendet: %%-2147467259 Error: (05/14/2014 00:24:39 PM) (Source: DCOM) (User: NT-AUTORITÄT) (EventID: 10016) Description: AnwendungsspezifischLokalStart{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC) Error: (05/14/2014 00:23:43 PM) (Source: Service Control Manager) (User: ) (EventID: 7026) Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: VD_FileDisk Error: (05/14/2014 00:23:11 PM) (Source: Application Popup) (User: ) (EventID: 1060) Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\Drivers\VD_FileDisk.SYS nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten. Microsoft Office Sessions: ========================= Error: (05/14/2014 04:39:39 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/14/2014 02:21:04 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/14/2014 02:19:13 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/14/2014 02:13:09 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/14/2014 00:33:56 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/14/2014 00:25:56 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/13/2014 10:43:33 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/13/2014 09:14:18 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/13/2014 08:44:16 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 Error: (05/13/2014 08:42:14 PM) (Source: Microsoft-Windows-LoadPerf) (User: NT-AUTORITÄT) (EventID: 3001) Description: 䀀1600000000FAAF0000FBAF0000600B0000 CodeIntegrity Errors: =================================== Date: 2014-05-10 21:22:13.645 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.557 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.465 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 21:22:13.375 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 20:44:39.562 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-10 20:44:39.473 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.948 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ADA\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.792 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Users\ADA\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.588 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2013-01-06 23:02:46.425 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Percentage of memory in use: 51% Total physical RAM: 3950.1 MB Available physical RAM: 1925.95 MB Total Pagefile: 7898.33 MB Available Pagefile: 5238.77 MB Total Virtual: 8192 MB Available Virtual: 8191.85 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:452.32 GB) (Free:13.86 GB) NTFS Drive d: (Mój dysk) (CDROM) (Total:3.95 GB) (Free:0 GB) CDFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: AA1C306D) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=452 GB) - (Type=07 NTFS) ==================== End Of Log ============================

**Posty:** 2183 · przez **NieWiem** 14 Maj 2014, 18:45

Wyłączę Ci co się da skryptem do FRST.

Pobierz załączony plik i umieść go obok FRST.

fixlist.txt: (625 Bajty) Ściągnięto 134 razy

Uruchom FRST jako administrator i wciśnij tym razem FIX.
Poczekaj aż ukończy zadanie.

Następnie poproszę raport z usuwania (fixlog.txt).

Coś jeszcze?

Jak nie, to dam instrukcje końcowe

**Posty:** 370 · przez **bracik1977** 14 Maj 2014, 18:52

Uzywam w przegladarce programu do blokowania reklam ABP. Ale tak i tak reklamy mi wyskakuja. Denerwuja mnie te reklamy czy jest inny sposob zeby sie je pozbyc albo zablokowac..Mam tez program Viao Care i mi sie uruchamia przy starciu a nie ma pojecia jak to wylaczyc. I przez to mi tez zamula .I tak na przyszlosc jaki antywirus dobrac zeby lepiej chronic kompa.Bo ja wole zapytac sie experta niz sciagac byle co . I znowu problemy z wirusami itd.

Dodano 14.05.2014 17:54:27:

Kod: Zaznacz wszystko: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-05-2014 01 Ran by ADA at 2014-05-14 18:54:00 Run:7 Running from C:\Users\ADA\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKU\S-1-5-21-293356991-225826379-2249491693-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ISBMgr.exe => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\APSDaemon => Value deleted successfully. HKU\S-1-5-21-293356991-225826379-2249491693-1000\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPDLR.exe => Value deleted successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dienst-Manager.lnk => Moved successfully. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sony MSS.lnk => Moved successfully. ==== End of Fixlog ====

**Posty:** 2183 · przez **NieWiem** 16 Maj 2014, 09:13

Powiem tak - nie wszystko można wyłączyć. Laptop jest brandowany, ma zainstalowane oprogramowanie od producenta i z wyłączaniem go byłbym ostrożny ponieważ niejednokrotnie działanie funkcji w systemie jest mocno powiązane z oprogramowaniem producenta.

Kto jest na forum