Combo Fix

ComboFix 16-01-19.01 - cosmo 01/21/2016 3:08.1.
8 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.16061.8459 [GMT -8:00]
Running from: c:\users\cosmo\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other
Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\{0209395A-8E4A-48E1-A5E3-C830292F263C}\mia.lib
c:\programdata\{0221FDDB-41E3-4971-AC93-5048F8D7CAAC}\mia.lib
c:\programdata\{03149E88-061F-4C01-98FF-736811F5AEF5}\mia.lib
c:\programdata\{03697879-2B80-4810-9B4D-D8EF1EE777F0}\mia.lib
c:\programdata\{15C74247-7198-4F43-B5A7-4D9278F308F6}\mia.lib
c:\programdata\{18869C94-495B-4D97-8C75-E405CF6509CB}\mia.lib
c:\programdata\{1C7A6EB7-BED0-4444-B0DA-4BFDCF83C380}\mia.lib
c:\programdata\{1CCB05D7-901D-4CCB-816F-73AC0098D30A}\mia.lib
c:\programdata\{229D9A22-9BEA-4D2B-813E-85E0FACBA99C}\mia.lib
c:\programdata\{2FF04994-9599-464E-AD99-B09CBE2122AE}\mia.lib
c:\programdata\{34163C5E-1AE4-49D8-B5F9-A3C2422AAB96}\mia.lib
c:\programdata\{35B46D49-85E2-40EA-8EC6-43B281EDD8E7}\mia.lib
c:\programdata\{3DFBC806-D62A-4312-81FF-5F343DDCB5DC}\mia.lib
c:\programdata\{43D1C1F4-8E90-4B5F-8388-D1E602AABF0E}\mia.lib
c:\programdata\{499D67BC-046E-4931-8BFB-D5ABB500E67C}\mia.lib
c:\programdata\{4AD6F65B-2A15-4CFF-9AF7-830F277D0157}\mia.lib
c:\programdata\{4C01754A-32F9-4A34-8B9F-E06DD553B755}\mia.lib
c:\programdata\{4C99B1DC-0B59-43A6-8537-9CE9286685A3}\mia.lib
c:\programdata\{5309003E-4102-4141-A0C9-7507F0E10F52}\mia.lib
c:\programdata\{5A23829C-A66E-47B0-AD50-21A3FFE6C325}\mia.lib
c:\programdata\{6032CB49-DE54-4192-9F71-65859D0B544F}\mia.lib
c:\programdata\{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF}\mia.lib
c:\programdata\{63E9A1A4-8FB4-4448-B7E1-E635AD5344FF}\mia.lib
c:\programdata\{63F2E427-F976-4EE0-BB21-8FA7DAC2E7F2}\mia.lib
c:\programdata\{6495CC1D-C10B-40C5-A92B-241A2B2C8D20}\mia.lib
c:\programdata\{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171}\mia.lib
c:\programdata\{6B991D2A-5E91-44B4-BE28-CFDCED1835AB}\mia.lib
c:\programdata\{6F97656F-AAA1-4E21-96D6-52E5526E59D2}\mia.lib
c:\programdata\{727F248C-CA81-4A68-8E01-27236ED99D98}\mia.lib
c:\programdata\{786FEDEA-8E71-4900-8D2F-40933D86B376}\mia.lib
c:\programdata\{78915E0A-25F8-47A2-9793-CEBC2D28F274}\mia.lib
c:\programdata\{7AFFCFD3-F022-420B-8E87-BBAED1C983C8}\mia.lib
c:\programdata\{7B7672F5-5EA2-4D83-BC77-1AFCA8846266}\mia.lib
c:\programdata\{7C702C5F-ADE3-4D28-9619-90BA76D4E1ED}\mia.lib
c:\programdata\{7E15FB3A-A743-4BAD-9286-E6F67959668B}\mia.lib
c:\programdata\{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668}\mia.lib
c:\programdata\{80A0A482-175E-4DE8-9D32-C8C8463D1362}\mia.lib
c:\programdata\{80E1859D-389E-4D4B-8377-121DB4A144EA}\mia.lib
c:\programdata\{81B3FE58-8826-44EC-8271-083D201CEA19}\mia.lib
c:\programdata\{849C3EA7-6C44-4D64-BFD2-FC5AF841BE83}\mia.lib
c:\programdata\{879F8AE4-E6E3-47A2-864B-EAF51C5ACC43}\mia.lib
c:\programdata\{87A1E31E-1C63-4A99-AEEA-EA57A3043C1D}\mia.lib
c:\programdata\{8A9976F0-1DB6-4A1D-823B-E9E459F6EE39}\mia.lib
c:\programdata\{926BF989-2A51-492D-8A6A-E9D533417C34}\mia.lib
c:\programdata\{929A2A2C-EEDF-4FD7-830C-278E194D1B53}\mia.lib
c:\programdata\{93015F0A-7AF2-4308-A5B3-13D4FCE429C6}\mia.lib
c:\programdata\{98F83ED2-DF89-465B-8EB3-F87E179CFA56}\mia.lib
c:\programdata\{9C588B44-42B6-434D-90BD-824BBB1F328A}\mia.lib
c:\programdata\{A360C0DF-3552-4969-AF3D-A6533A68ACA5}\mia.lib
c:\programdata\{A6377726-7317-464A-87EB-693294E9F383}\mia.lib
c:\programdata\{A793ECF9-34FC-47F0-8CBE-0B3DEA468C01}\mia.lib
c:\programdata\{A9FC06D6-E75C-4DA2-B8D2-8D91C1A269C3}\mia.lib
c:\programdata\{AD7B6000-2063-4CF8-A07D-49A34A4164E7}\mia.lib
c:\programdata\{B0CAD5CC-867E-473E-B55F-339F9635A45D}\mia.lib
c:\programdata\{B0DF9098-245E-479F-A4ED-B5F91EA4948B}\mia.lib
c:\programdata\{B49C92CB-1A73-4A41-A84C-5091582E7AA8}\mia.lib
c:\programdata\{B54CEF12-4612-4E77-B06C-403C662468E7}\mia.lib
c:\programdata\{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}\mia.lib
c:\programdata\{B7CF1107-3BD9-48BA-BC77-54B909022641}\mia.lib
c:\programdata\{B8AB470F-A90B-4652-A8F5-160A08FD7411}\mia.lib
c:\programdata\{B96A0118-1095-4E34-9C27-D87092B77F67}\mia.lib
c:\programdata\{BA0B7444-2ABA-463C-862A-7EC7F0AD0FA2}\mia.lib
c:\programdata\{BCE70080-8C44-4FE4-9CEE-9ABE71A36E7E}\mia.lib
c:\programdata\{C5CAF473-C900-4049-BCE5-A93E0EBA7EF2}\mia.lib
c:\programdata\{C693A367-F08F-4F42-A5DE-8996D6AC24F0}\mia.lib
c:\programdata\{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}\mia.lib
c:\programdata\{D3CD7CDD-9759-4CF4-BE92-BA89914360B5}\mia.lib
c:\programdata\{D53B5F71-B715-494C-AFD4-BB0C94C787E5}\mia.lib
c:\programdata\{D5E8D2A2-A2FF-4A0C-A4F7-E8EF5C9B29EA}\mia.lib
c:\programdata\{DB1D6CD1-3172-48C0-B63A-490B0D2C6D72}\mia.lib
c:\programdata\{DEBC0451-D249-4B4C-B907-F6510028BC75}\mia.lib
c:\programdata\{DFAB8828-7DA2-4573-A254-15D802A10A7E}\mia.lib
c:\programdata\{E051D9C8-9503-489B-8E90-21CEB1DF11C1}\mia.lib
c:\programdata\{E2A3D3D3-946E-4752-90FB-AF37CC248734}\mia.lib
c:\programdata\{E753D955-673D-4851-B06F-9A9D0C44C02C}\mia.lib
c:\programdata\{ECD5EDEB-48B5-47BB-BD2E-1F95422B2C33}\mia.lib
c:\programdata\{EFEC7DCC-2F91-4828-B49D-8506F9F0D9FF}\mia.lib
c:\programdata\{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}\mia.lib
c:\programdata\{F2026C51-8509-47B4-816D-CCD2DB993FC1}\mia.lib
c:\programdata\{F409EA92-6713-4D2D-AF88-0C51B1CF1D2A}\mia.lib
c:\programdata\{F4C30B44-15B7-482B-8B80-38AA0AB0956A}\mia.lib
c:\programdata\{F57C376F-E7ED-4527-9EE2-4D50799418BC}\mia.lib
c:\programdata\{F92C204F-6C39-4D56-B100-EC929C871966}\mia.lib
c:\programdata\{FB5C60A0-15D1-4DEF-A6EF-3366AC37909F}\mia.lib
c:\users\cosmo\AppData\Roaming\DRPSu
c:\users\cosmo\AppData\Roaming\DRPSu\diagnostics\soft
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Asmedia_1.16.29.1-WinAll-1.14.1-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Asmedia_1.16.29.1-WinAll-drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Intel-FORCED-Chipset-NTx64-10.1.1.13-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DRIVERS\Intel_Chipset_9.3.0-FORCED-7x64-USB-
drp.zip
c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
c:\users\cosmo\AppData\Roaming\DRPSu\Logs\log___2016-01-18-07-41-12.html
c:\users\cosmo\AppData\Roaming\DRPSu\PROGRAMS\OperaBlink.exe
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_finished_15817.txt
c:\users\cosmo\AppData\Roaming\DRPSu\temp\wget_log_15817.log
c:\users\cosmo\SetupChipset.exe
c:\windows\SysWow64\hookdll.dll
.
----- File Replicators -----
.
c:\program files (x86)\Google\Update\1.3.29.1\GoogleUpdateSetup.exe
c:\programdata\AudioUTOPiA\Uninstall64.exe
c:\users\All Users\AudioUTOPiA\Uninstall64.exe
c:\users\cosmo\AppData\Local\Apps\2.0\L657HWCH.HB1\R6VOJ8YD.TAK\clic...exe_86fd5b6b
43e66935_0001.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
c:\users\cosmo\AppData\Local\Apps\2.0\L657HWCH.HB1\R6VOJ8YD.TAK\goog...app_86fd5b6b
43e66935_0001.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSet
up.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
c:\users\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.ex
e
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
c:\users\cosmo\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\Application
Data\Application Data\Application Data\Application Data\Application
Data\Application Data\MAGIX\Sequoia 13\zip.exe
Data\Application Data\Application Data\Application Data\Application Data\ASUS\AI
Suite II\Setup.exe
Data\AudioUTOPiA\Uninstall64.exe
Data\MAGIX\Sequoia 13\unzip.exe
Data\MAGIX\Sequoia 13\zip.exe
Data\Application Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
Data\Application Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
Data\Application Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
Data\Application Data\Application Data\ASUS\AI Suite II\Setup.exe
Data\Application Data\Application Data\AudioUTOPiA\Uninstall64.exe
Data\Application Data\Application Data\MAGIX\Sequoia 13\unzip.exe
Data\Application Data\Application Data\MAGIX\Sequoia 13\zip.exe
Data\Application Data\ASUS\AI Suite II\Setup.exe
Data\Application Data\AudioUTOPiA\Uninstall64.exe
Data\Application Data\MAGIX\Sequoia 13\unzip.exe
Suite II\Setup.exe
Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\Documents and Settings\All Users\Application
c:\windows.old\Documents and Settings\All Users\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\Documents and Settings\All Users\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\Documents and Settings\All Users\ASUS\AI Suite II\Setup.exe
c:\windows.old\Documents and Settings\All Users\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Documents and Settings\All Users\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Documents and Settings\All Users\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Application
Data\Application Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-
A18F-2C81C26D81F9}\ISBEW64.exe
Data\Application Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-
87A3-9C11D5E647CF}\ISBEW64.exe
Data\Application Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-
A614-44065904FD7A}\setup.exe
Data\Application Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-
81CD-21F875B08934}\setup.exe
Data\Application Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-
81A8-3A50078C2D58}\ISBEW64.exe
81A8-3A50078C2D58}\ISBEWI64.exe
81A8-3A50078C2D58}\ISBEWX64.exe
Data\Application Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-
2C81C26D81F9}\ISBEW64.exe
Data\Application Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-
9C11D5E647CF}\ISBEW64.exe
Data\Application Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-
44065904FD7A}\setup.exe
Data\Application Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-
21F875B08934}\setup.exe
Data\Application Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-
3A50078C2D58}\ISBEW64.exe
3A50078C2D58}\ISBEWI64.exe
3A50078C2D58}\ISBEWX64.exe
Data\Application Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
Data\Application Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
Data\Application Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
Data\Application Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
Data\Application Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b78cb
ae13c700816\GoogleUpdateSetup.exe
Data\Application Data\Application Data\Application Data\Application Data\Temp\
{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
Data\Application Data\Application Data\Application
Data\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_none_
f26368b358f225e4\GoogleUpdateSetup.exe
Data\Application Data\Application
Data\Application
Data\Application
Data\Temp\{55EABE31-72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
Data\Temp\{5E9E7411-1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
Data\Temp\{680AFC97-4DCE-4909-A614-44065904FD7A}\setup.exe
Data\Temp\{7283AB5C-0307-4427-81CD-21F875B08934}\setup.exe
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
Data\Temp\{B8F58690-1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Documents and Settings\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_00
01.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_00
01.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{55EABE31-72A9-
4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{5E9E7411-1CEB-
433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{680AFC97-4DCE-
4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{7283AB5C-0307-
4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEW64.exe
4B77-81A8-3A50078C2D58}\ISBEWI64.exe
4B77-81A8-3A50078C2D58}\ISBEWX64.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Application
Data\Application
Data\Application
c:\windows.old\Documents and Settings\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_n
one_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b
78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{55EABE31-
72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{5E9E7411-
1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{680AFC97-
4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{7283AB5C-
0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Documents and Settings\cosmic law\Local Settings\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\ProgramData\Application Data\Application Data\Application
Suite II\Setup.exe
Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\ProgramData\Application Data\Application
c:\windows.old\ProgramData\Application Data\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\ProgramData\Application Data\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\ProgramData\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\ProgramData\ASUS\AI Suite II\Setup.exe
c:\windows.old\ProgramData\AudioUTOPiA\Uninstall64.exe
c:\windows.old\ProgramData\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\ProgramData\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\Application
Suite II\Setup.exe
Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application Data\ASUS\AI Suite
II\Setup.exe
c:\windows.old\Users\All Users\Application Data\Application
c:\windows.old\Users\All Users\Application Data\Application Data\MAGIX\Sequoia
13\unzip.exe
c:\windows.old\Users\All Users\Application Data\Application Data\MAGIX\Sequoia
13\zip.exe
c:\windows.old\Users\All Users\Application Data\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\Application Data\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\Application Data\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\All Users\Application Data\MAGIX\Sequoia 13\zip.exe
c:\windows.old\Users\All Users\ASUS\AI Suite II\Setup.exe
c:\windows.old\Users\All Users\AudioUTOPiA\Uninstall64.exe
c:\windows.old\Users\All Users\MAGIX\Sequoia 13\unzip.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Application
Data\Application
Data\Application
c:\windows.old\Users\cosmic law\AppData\Local\Application
c:\windows.old\Users\cosmic law\AppData\Local\Application
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{55EABE31-72A9-
4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{5E9E7411-1CEB-
433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{680AFC97-4DCE-
4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{7283AB5C-0307-
4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Application Data\Temp\{B8F58690-1DAB-
4B77-81A8-3A50078C2D58}\ISBEW64.exe
4B77-81A8-3A50078C2D58}\ISBEWI64.exe
4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_00
01.0003_none_f26368b358f225e4\GoogleUpdateSetup.exe
law\AppData\Local\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_00
01.0003_b78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{55EABE31-72A9-4FC6-A18F-
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{5E9E7411-1CEB-433E-87A3-
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{680AFC97-4DCE-4909-A614-
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{7283AB5C-0307-4427-81CD-
c:\windows.old\Users\cosmic law\AppData\Local\Temp\{B8F58690-1DAB-4B77-81A8-
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Others\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Install\Win8\AsusSetup.exe
law\Intel_Rapid_V11101006_V11501207_XPWin7_8\Makedisk\AsusSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Application
Data\Application
Data\Application
c:\windows.old\Users\cosmic law\Local Settings\Application
c:\windows.old\Users\cosmic law\Local Settings\Application
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{55EABE31-
72A9-4FC6-A18F-2C81C26D81F9}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{5E9E7411-
1CEB-433E-87A3-9C11D5E647CF}\ISBEW64.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{680AFC97-
4DCE-4909-A614-44065904FD7A}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{7283AB5C-
0307-4427-81CD-21F875B08934}\setup.exe
c:\windows.old\Users\cosmic law\Local Settings\Application Data\Temp\{B8F58690-
1DAB-4B77-81A8-3A50078C2D58}\ISBEW64.exe
1DAB-4B77-81A8-3A50078C2D58}\ISBEWI64.exe
1DAB-4B77-81A8-3A50078C2D58}\ISBEWX64.exe
c:\windows.old\Users\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\clic...exe_86fd5b6b43e66935_0001.0003_n
one_f26368b358f225e4\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local
Settings\Apps\2.0\5K884YX2.K39\ANXD91J6.YZ0\goog...app_86fd5b6b43e66935_0001.0003_b
78cbae13c700816\GoogleUpdateSetup.exe
c:\windows.old\Users\cosmic law\Local Settings\Temp\{55EABE31-72A9-4FC6-A18F-
c:\windows.old\Users\cosmic law\Local Settings\Temp\{5E9E7411-1CEB-433E-87A3-
c:\windows.old\Users\cosmic law\Local Settings\Temp\{680AFC97-4DCE-4909-A614-
c:\windows.old\Users\cosmic law\Local Settings\Temp\{7283AB5C-0307-4427-81CD-
c:\windows.old\Users\cosmic law\Local Settings\Temp\{B8F58690-1DAB-4B77-81A8-
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.e
xe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
c:\windows\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\AsusSetup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\Setup.exe
d:\cosmo last\AI_SuiteII_V20101_P8Z77-V-LK_XPWin7_8\TurboV
EVO\AppSetup\MEIInstall\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
d:\cosmo
last\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
d:\cosmo last\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win32\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\KB979903\AsusSetup.exe
d:\cosmo last\Intel_Graphics_V917102828_Win7_8\Win64\Install\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Chipset\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\hotfix\KB2505454_x64\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\32\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\64\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usb\AsusSetup.exe
d:\cosmo\Intel_Chipset_V9301019_LK_XPWin7\Driver\Usbcopy\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win32\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\hotfix\KB979903\AsusSetup.exe
d:\cosmo\Intel_Graphics_V917102828_Win7_8\Win64\Install\AsusSetup.exe
.
.
((((((((((((((((((((((((( Files Created from 2015-12-21 to 2016-01-
21 )))))))))))))))))))))))))))))))
.
.
2016-01-21 11:19 . 2016-01-21 11:19 -------- d-----w-
c:\users\Default\AppData\Local\temp
2016-01-21 10:49 . 2016-01-21 10:49 -------- d-----w- C:\AdwCleaner
2016-01-21 10:27 . 2016-01-21 10:27 -------- d-----w- c:\programdata\Kaspersky
Lab
2016-01-21 10:27 . 2016-01-21 10:27 -------- d-----w- c:\program files
(x86)\Kaspersky Lab
2016-01-21 10:25 . 2016-01-21 10:25 -------- d-----w- c:\programdata\Kaspersky
Lab Setup Files
2016-01-21 09:58 . 2015-05-29 04:15 33248 ----a-w-
c:\windows\system32\drivers\gwdrv.sys
2016-01-21 09:58 . 2016-01-21 09:58 -------- d-----w- c:\programdata\GlassWire
(x86)\GlassWire
(x86)\WonderFox Soft
2016-01-20 05:10 . 2015-11-16 15:18 16376 ----a-w-
c:\windows\system32\drivers\TVMonitor.sys
(x86)\TeamViewer
2016-01-20 03:50 . 2016-01-20 03:50 75888 ----a-w-
c:\programdata\Microsoft\Windows Defender\Definition Updates\{5E5C53A2-4F58-
4171-A4BD-59F9892CBBF1}\offreg.4808.dll
(x86)\ASIO4ALL v2
2016-01-20 01:47 . 2016-01-20 01:47 -------- d-----w- c:\program files\Image-
Line
(x86)\DSPRobotics
(x86)\Image-Line
2016-01-20 01:10 . 2016-01-20 01:10 -------- d-----w- c:\program files\Common
Files\Steinberg
2016-01-20 01:10 . 2016-01-20 01:53 -------- d-----w- c:\program
files\EastWest
2016-01-20 00:59 . 2016-01-20 00:59 -------- d-----w- c:\program files\Bonjour
(x86)\Bonjour
2016-01-20 00:58 . 2016-01-20 01:46 -------- d-----w- c:\programdata\East West
(x86)\EastWest
2016-01-20 00:27 . 2016-01-20 00:27 75888 ----a-w-
(x86)\Common Files\Adobe
2016-01-19 22:17 . 2016-01-20 00:17 -------- d-----w-
c:\programdata\boost_interprocess
2016-01-19 22:15 . 2016-01-21 11:18 -------- dc-h--w- c:\programdata\
{80E1859D-389E-4D4B-8377-121DB4A144EA}
{F4C30B44-15B7-482B-8B80-38AA0AB0956A}
{EFEC7DCC-2F91-4828-B49D-8506F9F0D9FF}
{7AFFCFD3-F022-420B-8E87-BBAED1C983C8}
{03149E88-061F-4C01-98FF-736811F5AEF5}
{AD7B6000-2063-4CF8-A07D-49A34A4164E7}
{3DFBC806-D62A-4312-81FF-5F343DDCB5DC}
{929A2A2C-EEDF-4FD7-830C-278E194D1B53}
{BCE70080-8C44-4FE4-9CEE-9ABE71A36E7E}
{4C99B1DC-0B59-43A6-8537-9CE9286685A3}
{6F97656F-AAA1-4E21-96D6-52E5526E59D2}
{F92C204F-6C39-4D56-B100-EC929C871966}
{43D1C1F4-8E90-4B5F-8388-D1E602AABF0E}
{63E9A1A4-8FB4-4448-B7E1-E635AD5344FF}
{E753D955-673D-4851-B06F-9A9D0C44C02C}
{C5CAF473-C900-4049-BCE5-A93E0EBA7EF2}
{B7072B15-6E80-42FF-A9AE-4E62AF2B2418}
{B0CAD5CC-867E-473E-B55F-339F9635A45D}
{CB28D9D3-6B5D-4AFA-BA37-B4AFAAAF71B9}
{5A23829C-A66E-47B0-AD50-21A3FFE6C325}
{E051D9C8-9503-489B-8E90-21CEB1DF11C1}
{87A1E31E-1C63-4A99-AEEA-EA57A3043C1D}
{34163C5E-1AE4-49D8-B5F9-A3C2422AAB96}
{ECD5EDEB-48B5-47BB-BD2E-1F95422B2C33}
{7E15FB3A-A743-4BAD-9286-E6F67959668B}
{6032CB49-DE54-4192-9F71-65859D0B544F}
{78915E0A-25F8-47A2-9793-CEBC2D28F274}
{98F83ED2-DF89-465B-8EB3-F87E179CFA56}
{7C702C5F-ADE3-4D28-9619-90BA76D4E1ED}
{A9FC06D6-E75C-4DA2-B8D2-8D91C1A269C3}
{C693A367-F08F-4F42-A5DE-8996D6AC24F0}
{DEBC0451-D249-4B4C-B907-F6510028BC75}
{849C3EA7-6C44-4D64-BFD2-FC5AF841BE83}
{DB1D6CD1-3172-48C0-B63A-490B0D2C6D72}
{03697879-2B80-4810-9B4D-D8EF1EE777F0}
{63F2E427-F976-4EE0-BB21-8FA7DAC2E7F2}
{B0DF9098-245E-479F-A4ED-B5F91EA4948B}
{0209395A-8E4A-48E1-A5E3-C830292F263C}
{F409EA92-6713-4D2D-AF88-0C51B1CF1D2A}
{80A0A482-175E-4DE8-9D32-C8C8463D1362}
{2FF04994-9599-464E-AD99-B09CBE2122AE}
{786FEDEA-8E71-4900-8D2F-40933D86B376}
{1C7A6EB7-BED0-4444-B0DA-4BFDCF83C380}
{926BF989-2A51-492D-8A6A-E9D533417C34}
{93015F0A-7AF2-4308-A5B3-13D4FCE429C6}
{B96A0118-1095-4E34-9C27-D87092B77F67}
{727F248C-CA81-4A68-8E01-27236ED99D98}
{DFAB8828-7DA2-4573-A254-15D802A10A7E}
2016-01-19 20:09 . 2016-01-19 20:09 75888 ----a-w-
{B8AB470F-A90B-4652-A8F5-160A08FD7411}
{7FC6C6B3-C2D5-4F17-BBEF-A11135E1A668}
{8A9976F0-1DB6-4A1D-823B-E9E459F6EE39}
{F2026C51-8509-47B4-816D-CCD2DB993FC1}
{624486AF-AD5B-4BB3-BEEE-A0D2D4D112DF}
{BA0B7444-2ABA-463C-862A-7EC7F0AD0FA2}
{4AD6F65B-2A15-4CFF-9AF7-830F277D0157}
{5309003E-4102-4141-A0C9-7507F0E10F52}
{B7CF1107-3BD9-48BA-BC77-54B909022641}
{1CCB05D7-901D-4CCB-816F-73AC0098D30A}
{A793ECF9-34FC-47F0-8CBE-0B3DEA468C01}
{6B3E9A08-404E-4FBF-A80D-1E9DA9E75171}
{4C01754A-32F9-4A34-8B9F-E06DD553B755}
{0221FDDB-41E3-4971-AC93-5048F8D7CAAC}
{499D67BC-046E-4931-8BFB-D5ABB500E67C}
{7B7672F5-5EA2-4D83-BC77-1AFCA8846266}
{229D9A22-9BEA-4D2B-813E-85E0FACBA99C}
{F036CC43-6BE8-4CBD-91C3-76F4BC8FFD6F}
{A6377726-7317-464A-87EB-693294E9F383}
{6B991D2A-5E91-44B4-BE28-CFDCED1835AB}
{18869C94-495B-4D97-8C75-E405CF6509CB}
{D53B5F71-B715-494C-AFD4-BB0C94C787E5}
{B54CEF12-4612-4E77-B06C-403C662468E7}
{35B46D49-85E2-40EA-8EC6-43B281EDD8E7}
{FB5C60A0-15D1-4DEF-A6EF-3366AC37909F}
2016-01-19 18:50 . 2015-12-11 18:57 1164800 ----a-w-
c:\windows\system32\aeinv.dll
2016-01-19 18:43 . 2015-12-16 18:15 11154520 ----a-w-
4171-A4BD-59F9892CBBF1}\mpengine.dll
(x86)\Common Files\Native Instruments
{E2A3D3D3-946E-4752-90FB-AF37CC248734}
{D3CD7CDD-9759-4CF4-BE92-BA89914360B5}
{A360C0DF-3552-4969-AF3D-A6533A68ACA5}
{879F8AE4-E6E3-47A2-864B-EAF51C5ACC43}
{15C74247-7198-4F43-B5A7-4D9278F308F6}
{D5E8D2A2-A2FF-4A0C-A4F7-E8EF5C9B29EA}
(x86)\Soundtoys
2016-01-19 15:46 . 2016-01-21 11:18 -------- d-----w-
c:\programdata\AudioUTOPiA
2016-01-19 15:42 . 2016-01-19 15:42 -------- d-----w- c:\programdata\MRI
Squad
{81B3FE58-8826-44EC-8271-083D201CEA19}
{F57C376F-E7ED-4527-9EE2-4D50799418BC}
{B49C92CB-1A73-4A41-A84C-5091582E7AA8}
{6495CC1D-C10B-40C5-A92B-241A2B2C8D20}
{9C588B44-42B6-434D-90BD-824BBB1F328A}
2016-01-19 15:40 . 2016-01-19 22:15 -------- d-----w- c:\program files\Common
Files\Native Instruments
2016-01-19 15:40 . 2016-01-19 21:15 -------- d-----w- c:\program files\Native
Instruments
2016-01-19 15:40 . 2016-01-19 16:00 -------- d-----w- c:\programdata\Native
Instruments
2016-01-19 15:17 . 2015-02-03 03:31 1424896 ----a-w-
c:\windows\system32\WindowsCodecs.dll
2016-01-19 15:17 . 2015-02-03 03:12 1230848 ----a-w-
c:\windows\SysWow64\WindowsCodecs.dll
2016-01-19 15:08 . 2016-01-19 15:08 -------- d-s---w-
c:\windows\system32\CompatTel
2016-01-19 15:08 . 2016-01-19 15:08 -------- d-----w-
c:\windows\system32\appraiser
2016-01-18 23:15 . 2015-11-06 03:25 68288 ----a-w-
c:\windows\system32\vsocklib.dll
2016-01-18 23:15 . 2015-11-06 03:25 64192 ----a-w-
c:\windows\SysWow64\vsocklib.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M
Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-12-30 18:37 . 2016-01-18 15:55 44032 ----a-w-
c:\windows\apppatch\acwow64.dll
2015-12-09 21:59 . 2015-12-09 21:59 94208 ----a-w-
c:\windows\SysWow64\QuickTimeVR.qtx
2015-12-09 21:59 . 2015-12-09 21:59 69632 ----a-w-
c:\windows\SysWow64\QuickTime.qts
2015-12-02 21:18 . 2010-11-21 03:27 301728 ------w-
c:\windows\system32\MpSigStub.exe
2015-11-26 01:51 . 2015-11-26 01:51 49856 ----a-w-
c:\windows\system32\vnetinst.dll
2015-11-26 01:51 . 2015-11-26 01:51 81088 ----a-w-
c:\windows\system32\vmnetbridge.dll
2015-11-26 01:51 . 2015-11-26 01:51 48832 ----a-w-
c:\windows\system32\drivers\vmnetbridge.sys
2015-11-26 01:51 . 2015-11-26 01:51 28864 ----a-w-
c:\windows\system32\drivers\vmnetadapter.sys
2015-11-26 01:51 . 2015-11-26 01:51 27328 ----a-w-
c:\windows\system32\drivers\vmnet.sys
2015-11-11 03:03 . 2015-11-11 03:03 466728 ----a-w-
c:\windows\system32\coin99ip.dll
2015-11-06 03:25 . 2015-11-06 03:25 90816 ----a-w-
c:\windows\system32\drivers\vmci.sys
2015-10-29 17:50 . 2016-01-18 15:59 350208 ----a-w-
c:\windows\apppatch\AppPatch64\AcLayers.dll
2015-10-29 17:50 . 2016-01-18 15:59 309248 ----a-w-
c:\windows\apppatch\AppPatch64\AcGenral.dll
2015-10-29 17:50 . 2016-01-18 15:59 135168 ----a-w-
c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2015-10-29 17:50 . 2016-01-18 15:59 103424 ----a-w-
c:\windows\apppatch\AppPatch64\acspecfc.dll
2015-10-29 17:49 . 2016-01-18 15:59 562176 ----a-w-
c:\windows\apppatch\AcLayers.dll
2015-10-29 17:49 . 2016-01-18 15:59 470528 ----a-w-
c:\windows\apppatch\AcSpecfc.dll
2015-10-29 17:49 . 2016-01-18 15:59 2178560 ----a-w-
c:\windows\apppatch\AcGenral.dll
2015-10-29 17:49 . 2016-01-18 15:59 211968 ----a-w-
c:\windows\apppatch\AcXtrnal.dll
2015-10-29 17:39 . 2016-01-18 15:59 2560 ----a-w- c:\windows\apppatch\AcRes.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading
Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPLTarget\P0000000000000000"="c:\windows\system32\spool\DRIVERS\x64\3\E_YATIKLE.EX
E" [2013-09-12 298560]
"GlassWire"="c:\program files (x86)\GlassWire\glasswire.exe" [2015-12-25 10571776]
"KSS"="c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" [2015-
12-15 1556448]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application
Support\APSDaemon.exe" [2013-09-14 59720]
"AsioThk32Reg"="CTASIO.DLL" [2009-02-23 51712]
"CTHelper"="CTHELPER.EXE" [2009-02-23 23040]
"CTxfiHlp"="CTXFIHLP.EXE" [2009-02-23 23552]
"VirtualCloneDrive"="c:\program files (x86)\Elaborate
Bytes\VirtualCloneDrive\VCDDaemon.exe" [2013-03-10 88984]
"FUFAXRCV"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe" [2015-
01-20 650784]
"FUFAXSTM"="c:\program files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe" [2015-
01-20 863776]
"EEventManager"="c:\program files (x86)\Epson Software\Event
Manager\EEventManager.exe" [2014-06-11 1065024]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller
Driver\Application\iusb3mon.exe" [2012-05-21 291648]
"vmware-tray.exe"="c:\program files (x86)\VMware\VMware Workstation\vmware-
tray.exe" [2015-11-26 104128]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"KSS"="c:\program files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" [2015-
12-15 1556448]
.
c:\users\cosmo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Epson all-in-one Registration.lnk -
c:\users\cosmo\AppData\Roaming\Leadertech\PowerRegister\Epson all-in-one
Registration.exe /remind /language=ENU /PRNM="01246" /PRIN="all-in-one" [2016-1-18
3039248]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Kaspersky Software Updater Beta.lnk - c:\program files (x86)\Kaspersky
Lab\Kaspersky Software Updater Beta\ksu.exe -hide [2015-12-14 3529600]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows
nt\currentversion\drivers32]
"mixer"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN
v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\wind
ows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 kss;Kaspersky Security Scan Service;c:\program files (x86)\Kaspersky
Lab\Kaspersky Security Scan\kss.exe -r;c:\program files (x86)\Kaspersky
Lab\Kaspersky Security Scan\kss.exe -r [x]
R3
COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.SYS;c:\windows\SYSNATIVE\dri
vers\COMMONFX.SYS [x]
R3
CT20XUT.SYS;CT20XUT.SYS;c:\windows\System32\drivers\CT20XUT.SYS;c:\windows\SYSNATIV
E\drivers\CT20XUT.SYS [x]
R3
CT20XUT;CT20XUT;c:\windows\system32\drivers\CT20XUT.SYS;c:\windows\SYSNATIVE\driver
s\CT20XUT.SYS [x]
R3
CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\System32\drivers\CTAUDFX.SYS;c:\windows\SYSNATIV
E\drivers\CTAUDFX.SYS [x]
R3
CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.SYS;c:\windows\SYSNATIVE\driver
s\CTAUDFX.SYS [x]
R3
CTEAPSFX.SYS;CTEAPSFX.SYS;c:\windows\System32\drivers\CTEAPSFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEAPSFX.SYS [x]
R3
CTEAPSFX;CTEAPSFX;c:\windows\system32\drivers\CTEAPSFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEAPSFX.SYS [x]
R3
CTEDSPFX.SYS;CTEDSPFX.SYS;c:\windows\System32\drivers\CTEDSPFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPFX.SYS [x]
R3
CTEDSPFX;CTEDSPFX;c:\windows\system32\drivers\CTEDSPFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPFX.SYS [x]
R3
CTEDSPIO;CTEDSPIO;c:\windows\system32\drivers\CTEDSPIO.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPIO.SYS [x]
R3
CTEDSPSY;CTEDSPSY;c:\windows\system32\drivers\CTEDSPSY.SYS;c:\windows\SYSNATIVE\dri
vers\CTEDSPSY.SYS [x]
R3
CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\System32\drivers\CTERFXFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTERFXFX.SYS [x]
R3
CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTERFXFX.SYS [x]
R3
CTEXFIFX.SYS;CTEXFIFX.SYS;c:\windows\System32\drivers\CTEXFIFX.SYS;c:\windows\SYSNA
TIVE\drivers\CTEXFIFX.SYS [x]
R3
CTEXFIFX;CTEXFIFX;c:\windows\system32\drivers\CTEXFIFX.SYS;c:\windows\SYSNATIVE\dri
vers\CTEXFIFX.SYS [x]
R3
CTHWIUT.SYS;CTHWIUT.SYS;c:\windows\System32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIV
E\drivers\CTHWIUT.SYS [x]
R3
CTHWIUT;CTHWIUT;c:\windows\system32\drivers\CTHWIUT.SYS;c:\windows\SYSNATIVE\driver
s\CTHWIUT.SYS [x]
R3
CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\System32\drivers\CTSBLFX.SYS;c:\windows\SYSNATIV
E\drivers\CTSBLFX.SYS [x]
R3
CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.SYS;c:\windows\SYSNATIVE\driver
s\CTSBLFX.SYS [x]
R3
dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvs
c.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector
Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.
exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport
Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\driver
s\rdpvideominiport.sys [x]
R3
Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATI
VE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input
Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\termin
pt.sys [x]
R3
TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\dri
vers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB
Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD
.sys [x]
R3
tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\dri
vers\tsusbhub.sys [x]
R3
VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvg
kmd.sys [x]
R3 WatAdminSvc;Windows Activation Technologies
Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSv
c.exe [x]
S0
iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVER
S\iaStorA.sys [x]
S0
iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVER
S\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch
Driver;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3h
cs.sys [x]
S0 vmci;VMware VMCI Bus
Driver;c:\windows\system32\DRIVERS\vmci.sys;c:\windows\SYSNATIVE\DRIVERS\vmci.sys
[x]
S0 vsock;vSockets
Driver;c:\windows\system32\drivers\vsock.sys;c:\windows\SYSNATIVE\drivers\vsock.sys
[x]
S1 gwdrv;GlassWire
Driver;c:\windows\system32\DRIVERS\gwdrv.sys;c:\windows\SYSNATIVE\DRIVERS\gwdrv.sys
[x]
S2 DiagTrack;Diagnostics Tracking
Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 DigiNet;Digidesign Ethernet
Support;c:\windows\system32\DRIVERS\diginet.sys;c:\windows\SYSNATIVE\DRIVERS\digine
t.sys [x]
S2 EpsonCustomerResearchParticipation;EpsonCustomerResearchParticipation;c:\program
files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe;c:\program
files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe [x]
S2 EpsonScanSvc;Epson Scanner
Service;c:\windows\system32\EscSvc64.exe;c:\windows\SYSNATIVE\EscSvc64.exe [x]
S2 GlassWire;GlassWire Control Service;c:\program files
(x86)\GlassWire\GWCtlSrv.exe;c:\program files (x86)\GlassWire\GWCtlSrv.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes Anti-
Malware\mbamservice.exe [x]
S2 NIHardwareService;NIHardwareService;c:\program files\Common Files\Native
Instruments\Hardware\NIHardwareService.exe;c:\program files\Common Files\Native
Instruments\Hardware\NIHardwareService.exe [x]
S2 PaceLicenseDServices;PACE License Services;c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe;c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common
Files\VMware\USB\vmware-usbarbitrator64.exe;c:\program files (x86)\Common
Files\VMware\USB\vmware-usbarbitrator64.exe [x]
S2 VMwareHostd;VMware Workstation Server;c:\program files (x86)\VMware\VMware
Workstation\vmware-hostd.exe;c:\program files (x86)\VMware\VMware
Workstation\vmware-hostd.exe [x]
S2 vstor2-mntapi20-shared;Vstor2 MntApi 2.0 Driver
(shared);SysWOW64\drivers\vstor2-mntapi20-shared.sys;SysWOW64\drivers\vstor2-
mntapi20-shared.sys [x]
S3 asmthub3;ASMedia USB3 Hub
Service;c:\windows\system32\DRIVERS\asmthub3.sys;c:\windows\SYSNATIVE\DRIVERS\asmth
ub3.sys [x]
S3 asmtxhci;ASMEDIA XHCI
Service;c:\windows\system32\DRIVERS\asmtxhci.sys;c:\windows\SYSNATIVE\DRIVERS\asmtx
hci.sys [x]
S3
COMMONFX.SYS;COMMONFX.SYS;c:\windows\System32\drivers\COMMONFX.SYS;c:\windows\SYSNA
TIVE\drivers\COMMONFX.SYS [x]
S3
CTEDSPIO.SYS;CTEDSPIO.SYS;c:\windows\System32\drivers\CTEDSPIO.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPIO.SYS [x]
S3
CTEDSPSY.SYS;CTEDSPSY.SYS;c:\windows\System32\drivers\CTEDSPSY.SYS;c:\windows\SYSNA
TIVE\drivers\CTEDSPSY.SYS [x]
S3 int0800;Intel 28F320C3 Flash Update Device Driver
v6.4;c:\windows\system32\DRIVERS\flashud.sys;c:\windows\SYSNATIVE\DRIVERS\flashud.s
ys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub
Driver;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3h
ub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller
Driver;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3x
hc.sys [x]
S3
MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATI
VE\drivers\mbam.sys [x]
S3
MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\window
s\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]
S3
MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\w
indows\SYSNATIVE\drivers\mwac.sys [x]
S3 MonitorFunction;Driver for
Monitor;c:\windows\system32\DRIVERS\TVMonitor.sys;c:\windows\SYSNATIVE\DRIVERS\TVMo
nitor.sys [x]
S3 RTL8167;Realtek 8167 NT
Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64wi
n7.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - GWDRV
*NewlyCreated* - MBAMSWISSARMY
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\
{ed11a0ab-bd73-11e5-b5d7-ec7aa3240876}]
\shell\AutoRun\command - U:\mri.exe
.
Contents of the 'Scheduled Tasks' folder
.
2016-01-21 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-18
03:50]
.
2016-01-21 c:\windows\Tasks\EPSON WF-4630 Series Invitation {3E3E5777-E2D1-4177-
85A0-E3B1225A2AAE}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_YTSKLE.EXE [2016-01-18 09:20]
.
2016-01-21 c:\windows\Tasks\EPSON WF-4630 Series Update {3E3E5777-E2D1-4177-85A0-
E3B1225A2AAE}.job
- c:\windows\system32\spool\DRIVERS\x64\3\E_YTSKLE.EXE [2016-01-18 09:20]
.
2016-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18 16:03]
.
2016-01-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2016-01-18 16:03]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2015-06-04 173672]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2015-06-04 401512]
"Persistence"="c:\windows\system32\igfxpers.exe" [2015-06-04 444008]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
LSP: %windir%\system32\vsocklib.dll
TCP: DhcpNameServer = 75.75.76.76 75.75.75.75
.
- - - - ORPHANS REMOVED - - - -
.
Wow6432Node-HKCU-Run-DrvUpdater -
c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
AddRemove-Killer Bugs v3 for Pro Tools 10.3.7 5.7.7 - c:\program files
(x86)\Avid\Pro Tools\Uninstall.exe
AddRemove-DRPSu Updater - c:\users\cosmo\AppData\Roaming\DRPSu\DrvUpdater.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PaceLicenseDServices]
"ImagePath"="\"c:\program files (x86)\Common
Files\PACE\Services\LicenseServices\LDSvc.exe\" -u
https://activation.paceap.com/InitiateActivation"
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-D2C18CA0866F}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_286_
ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_20_0_0_286_ActiveX.exe"
.
D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{299817DA-1FAC-4CE2-8F48-
A108237013BD}]
@="IFlashBroker6"
.
A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B019E3BF-E7E5-453C-A2E4-
D2C18CA0866F}]
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_286_
ActiveX.exe,-101"
.
D2C18CA0866F}\Elevation]
"Enabled"=dword:00000001
.
D2C18CA0866F}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_20_0_0_286_ActiveX.exe"
.
D2C18CA0866F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-
444553540000}]
@="Shockwave Flash Object"
.
444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx"
"ThreadingModel"="Apartment"
.
444553540000}\MiscStatus]
@="0"
.
444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.20"
.
444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx, 1"
.
444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
444553540000}\Version]
@="1.0"
.
444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-
444553540000}]
@="Macromedia Flash Factory Object"
.
444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx"
"ThreadingModel"="Apartment"
.
444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_20_0_0_286.ocx, 1"
.
444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
444553540000}\Version]
@="1.0"
.
444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{299817DA-1FAC-4CE2-
8F48-A108237013BD}]
@="IFlashBroker6"
.
8F48-A108237013BD}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
8F48-A108237013BD}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2016-01-21 03:20:55
ComboFix-quarantined-files.txt 2016-01-21 11:20
.
Pre-Run: 795,592,507,392 bytes free
Post-Run: 795,873,841,152 bytes free
.
- - End Of File - - 2F8F8962AFCF9F959C8E58BA51775DD7
A36C5E4F47E84449FF07ED3517B43A31

Combo Fix

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Combo Fix

Hochgeladen von

Copyright:

Verfügbare Formate

ComboFix 16-01-19.01 - cosmo 01/21/2016 3:08.1.

Das könnte Ihnen auch gefallen