Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Windows 7: Lyrixeeker vollständig entfernt?

Windows 7: Lyrixeeker vollständig entfernt?


Plagegeister aller Art und deren Bekämpfung: Windows 7: Lyrixeeker vollständig entfernt?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 1 von 2 1 2
Alt 24.09.2013, 23:14   #1
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Frage

Windows 7: Lyrixeeker vollständig entfernt?


Vor ein paar Tagen tauchte ein Problem bei meinen Browsern "Firefox" und "Google Chrome" auf. Als Standard-Suchmaschine war plötzlich "Deltasearch" eingestellt.
Außerdem reagierte der PC nur noch sehr langsam und brauchte eine Ewigkeit beim Herunterfahren.
Nach dem Neustart lief er wieder einwandfrei.
"SUPERAntispyware", "Spyware Terminator" und "Norton Internet Security CBE" fanden nur harmlose Cookies, die ich alle enfernte.
Unter "Alle Programme" fand ich "Deltasearch" und "Lyrixeeker" und entfernte sie mit der Systemsteuerung.
Außerdem enfernte ich die "Delta Toolbar" und "Search the web" (Delta) nach diesen Anleitungen:
HTTP://info.delta-search.com/de/uninstall/firefox.html
und
HTTP://info.delta-search.com/de/uninstall/chrome.html

Wie kann ich jetzt testen, ob mein PC noch infiziert ist?
Geändert von Bernhard1 (24.09.2013 um 23:21 Uhr)

Alt 25.09.2013, 07:16   #2
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________
Alt 25.09.2013, 09:17   #3
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Hi, danke für die schnelle Antwort.
Bin jetzt etwas irritiert. Mit deinem Link landete ich auf der Seite "FilePony.de. Ich wollte natürlich die neueste Version von "Farbar Recovery Scan Tool FRST64" downloaden.
Beim Downloaden kam aber offensichtlich eine falsche Software:
iMeshSetup-r1487-w-bf.exe. Ich habe sie installiert und habe jetzt auch noch Imesh auf meinem PC :-(
Dann wollte ich doch die alte Version von "Farbar Recovery Scan Tool FRST64" verwenden.Allerdings kam dann diese Meldung.
„Your version of FRST64 ist outdated. It is strongly recommended to download the latest version. Click Yes to download the latest version. Click Not o continue without using FRST64.“
Ich entschied mich für "Yes" und landete auf dieser Seite:
hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Hier die gewünschte FRST.txt: (Addition.txt sende ich separat, sie ist offensichtlich zu groß.)
FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-09-2013
Ran by Bernhard (administrator) on BERNHARD-PC on 25-09-2013 09:45:21
Running from C:\Users\Bernhard\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(SUPERAntiSpyware.com) C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE
() C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO CORE TUNER 2\ACT2SERVICE.EXE
() C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO HDD CONTROL 2\AHDDC2_SERVICE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(NCH Software) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\PROGRAM FILES (X86)\COBIAN BACKUP 11\CBSERVICE.EXE
(DATA BECKER GmbH & Co KG) C:\PROGRAM FILES (X86)\COMMON FILES\DATA BECKER SHARED\DBSERVICE.EXE
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\WINDOWS\SYSWOW64\SVCHOST.EXE
(AnchorFree Inc.) C:\PROGRAM FILES (X86)\HOTSPOT SHIELD\BIN\OPENVPNAS.EXE
(AnchorFree Inc.) C:\PROGRAM FILES (X86)\HOTSPOT SHIELD\HSSWPR\HSSSRV.EXE
() C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.4.0.40\CCSVCHST.EXE
() C:\PROGRAM FILES\OCSTER BACKUP\BIN\BACKUPSERVICE-OX.EXE
(Symantec Corporation) C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.4.0.40\CCSVCHST.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
() C:\PROGRAM FILES (X86)\PHOTKEY\PHOTKEY.EXE
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Star Finanz - Software Entwicklung und Vertriebs GmbH) C:\PROGRAM FILES (X86)\STARMONEY 8.0\OUSERVICE\STARMONEYONLINEUPDATE.EXE
() C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe
() C:\PROGRAM FILES (X86)\WATCHMI\TVDSERVICE.EXE
(Microsoft Corp.) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDSVC.EXE
(Intel® Corporation) C:\PROGRAM FILES\INTEL\WIFI\BIN\ZEROCONFIGSERVICE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\PROGRAM FILES (X86)\MICROSOFT APPLICATION VIRTUALIZATION CLIENT\SFTLIST.EXE
(CyberLink Corp.) C:\PROGRAM FILES (X86)\CYBERLINK\YOUCAM\YOUCAMSERVICE.EXE
(Microsoft Corporation) C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\VIRTUALIZATION HANDLER\CVHSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
() C:\PROGRAM FILES (X86)\PHOTKEY\POSD.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() c:\Program Files\Ocster Backup\bin\oxHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Ashampoo Development GmbH & Co. KG) C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO CORE TUNER 2\ACT2.EXE
(Ashampoo Development GmbH & Co. KG) C:\PROGRAM FILES (X86)\ASHAMPOO\ASHAMPOO HDD CONTROL 2\AHDDC2_GUARD.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\GOOGLETOOLBARNOTIFIER\GOOGLETOOLBARNOTIFIER.EXE
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Microsoft Corporation) C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE
(SUPERAntiSpyware) C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Dolby Laboratories Inc.) C:\PROGRAM FILES (X86)\DOLBY ADVANCED AUDIO V2\PCEE4.EXE
(CyberLink) C:\PROGRAM FILES (X86)\CYBERLINK\POWER2GO\CLMLSVC.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
() C:\PROGRAM FILES (X86)\1&1 SURF-STICK\UIEXEC.EXE
() C:\Program Files (x86)\OfficeAdRemover\OfficeAdRemover.exe
(AVM Berlin) C:\PROGRAM FILES (X86)\FRITZ!BOX MONITOR\FRITZBOXMONITOR.EXE
(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.EXE
(Hewlett-Packard Co.) C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\BIN\HPQSTE08.EXE
(OpenOffice.org) C:\PROGRAM FILES (X86)\OPENOFFICE.ORG 3\PROGRAM\SOFFICE.BIN
(Hewlett-Packard Co.) C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\BIN\HPQBAM08.EXE
(Hewlett-Packard) C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\BIN\HPQGPC01.EXE
(Nokia) C:\PROGRAM FILES (X86)\PC CONNECTIVITY SOLUTION\SERVICELAYER.EXE
(Intel Corporation) C:\PROGRAM FILES\INTEL\BLUETOOTHHS\BTHSAMPPALSERVICE.EXE
(Intel(R) Corporation) C:\PROGRAM FILES\INTEL\BLUETOOTHHS\BTHSSECURITYMGR.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) RAPID STORAGE TECHNOLOGY\IASTORDATAMGRSVC.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\LMS\LMS.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE
(Microsoft Corporation) C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\VIRTUALIZATION HANDLER\CVH.EXE
() Q:\140066.DEU\OFFICE14\EXCELC.EXE
() C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\VIRTUALIZATION HANDLER\OFFICEVIRT.EXE
(Microsoft Corporation) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\OFFICESOFTWAREPROTECTIONPLATFORM\OSPPSVC.EXE
() Q:\140066.DEU\OFFICE14\OFFSPON.EXE
() Q:\140066.DEU\OFFICE14\WINWORDC.EXE
() Q:\140066.DEU\OFFICE14\OFFSPON.EXE
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE
(RealNetworks, Inc.) C:\PROGRAM FILES (X86)\REAL\REALPLAYER\UPDATE\REALSCHED.EXE
(Mozilla Corporation) C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE
(Adobe Systems, Inc.) C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASHPLAYERPLUGIN_11_8_800_168.EXE
(Adobe Systems, Inc.) C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASHPLAYERPLUGIN_11_8_800_168.EXE
(Nokia) C:\PROGRAM FILES (X86)\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLUSBSRV64.EXE
(Nokia) C:\PROGRAM FILES (X86)\PC CONNECTIVITY SOLUTION\TRANSPORTS\NCLMSBTSRVEX.EXE
(Microsoft Corporation) C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
(Google Inc.) C:\PROGRAM FILES (X86)\GOOGLE\GOOGLE TOOLBAR\GOOGLETOOLBARUSER_32.EXE
(Hewlett-Packard Co.) C:\PROGRAM FILES (X86)\HP\DIGITAL IMAGING\SMART WEB PRINTING\HPSWP_CLIPBOOK.EXE
(Farbar) C:\USERS\BERNHARD\DOWNLOADS\FRST64 (1).EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2884880 2012-02-23] (Synaptics Incorporated)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [Ocster Backup] - C:\Program Files\Ocster Backup\bin\backupClient-ox.exe [311240 2012-12-05] ()
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM\...\Run: [Ashampoo Core Tuner 2] - C:\Program Files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2.exe [5220768 2011-08-22] (Ashampoo Development GmbH & Co. KG)
HKLM\...\Run: [Ashampoo HDD-Control 2 Guard] - C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Guard.exe [3783592 2012-07-30] (Ashampoo Development GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-03] (Google Inc.)
HKCU\...\Run: [Google Update] - C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-21] (Google Inc.)
HKCU\...\Run: [] - [x]
HKCU\...\Run: [BRAVIS-{DC0F6114-52CD-420E-BAEB-ECC5BFB0B110}] - "C:\Users\Bernhard\Downloads\bravis.exe" --autostart
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [SUPERAntiSpyware] - C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE [6581488 2013-08-18] (SUPERAntiSpyware)
MountPoints2: {172a6875-4b9d-11e2-a384-e840f2b4d16c} - F:\Install.exe
MountPoints2: {cd5fcea5-d967-11e2-b82d-e840f2b4d16c} - F:\iStudio.exe
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-21] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [HP Software Update] - C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [UIExec] - C:\Program Files (x86)\1&1 Surf-Stick\UIExec.exe [139088 2010-09-30] ()
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [AVMFBoxMonitor] - C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [1503232 2009-07-06] (AVM Berlin)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-03-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Cobian Backup 11 interface] - C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [4407808 2012-12-05] (Luis Cobian, CobianSoft)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [1686528 2012-03-27] (Wondershare)
HKU\Admin\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-05-03] (Google Inc.)
HKU\Admin\...\Run: [Google Update] - C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-21] (Google Inc.)
HKU\Admin\...\Run: [BRAVIS-{DC0F6114-52CD-420E-BAEB-ECC5BFB0B110}] - "C:\Users\Bernhard\Downloads\bravis.exe" --autostart
HKU\Admin\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20097696 2013-06-27] (Google)
HKU\Admin\...\Run: [] - [x]
HKU\Admin\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKU\Admin\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
Startup: C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk
ShortcutTarget: OpenOffice.org 3.4.1.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Stickies.lnk
ShortcutTarget: Stickies.lnk -> C:\Program Files (x86)\Stickies\stickies.exe (Zhorn Software)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3214568&CUI=UN39919113852500012
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
URLSearchHook: (No Name) - {adca5064-9e30-43fe-9856-58b07a3149fe} -  No File
URLSearchHook: (No Name) - {c95a4e8e-816d-4655-8c79-d736da1adb6d} -  No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=8CC900FF143AE573&affID=119357&tsp=5013
SearchScopes: HKCU - {1BD434D9-3938-4222-82CA-9131A398E177} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1561552
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll (AnchorFree Inc.)
BHO-x32: No Name - {02478D38-C3F9-4efb-9B51-7695ECA05670} -  No File
BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: FreemakeTB Toolbar - {adca5064-9e30-43fe-9856-58b07a3149fe} - C:\Program Files (x86)\FreeMake\prxtbFre0.dll (Conduit Ltd.)
BHO-x32: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHot2.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: holasearch Helper Object - {DFF9B2DA-EF99-4B26-83CB-7058299999D8} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll (holasearch.com)
BHO-x32: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.)
BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - FreemakeTB Toolbar - {adca5064-9e30-43fe-9856-58b07a3149fe} - C:\Program Files (x86)\FreeMake\prxtbFre0.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files (x86)\Hotspot_Shield\prxtbHot2.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM-x32 - Holasearch Toolbar - {C510DFFB-0AFE-484C-BA40-CED5B74C4EEF} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchTlbr.dll (holasearch.com)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU -  No Name - {ADCA5064-9E30-43FE-9856-58B07A3149FE} -  No File
Toolbar: HKCU -  No Name - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} -  No File
Toolbar: HKCU -  No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default
FF user.js: detected! => C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\user.js
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=3 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.bdupdater.com/BonanzaDealsLive Update;version=9 - C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\npGoogleUpdate3.dll (BonanzaDeals)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=3 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.dpliveupdate.com/DealPlyLive Update;version=9 - C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (DealPly Technologies Ltd)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @citrixonline.com/appdetectorplugin - C:\Users\Bernhard\AppData\Local\Citrix\Plugins\104\npappdetector.dll (Citrix Online)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Bernhard\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Bernhard\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\searchplugins\safesearch.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Deutsches Wörterbuch - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\de-DE@dictionaries.addons.mozilla.org
FF Extension: No Name - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe}
FF Extension: DownloadHelper - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Bitdefender QuickScan - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: clearConsole - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\clearConsole@penzil.com.xpi
FF Extension: firefox - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\firefox@ghostery.com.xpi
FF Extension: No Name - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
FF Extension: Hotspot Shield Helper (Please allow this installation) - C:\Program Files (x86)\Mozilla Firefox\extensions\afurladvisor@anchorfree.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.gmx.net/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Users\Bernhard\AppData\Local\Google\Chrome\Application\29.0.1547.76\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Bernhard\AppData\Local\Google\Chrome\Application\29.0.1547.76\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Bernhard\AppData\Local\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll No File
CHR Plugin: (RealPlayer Download Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\nprpplugin.dll (RealPlayer)
CHR Plugin: (Google Talk Plugin) - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
CHR Plugin: (Google Talk Plugin Video Accelerator) - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
CHR Plugin: (Google Talk Plugin Video Renderer) - C:\Users\Bernhard\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll No File
CHR Plugin: (Nokia Suite Enabler Plugin) - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
CHR Plugin: (Protect Disc License Acquisition Plugin) - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (FileConverter 1.3) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\engeblojhfeingnjnfpiceofljnjpldp\10.19.2.505_0
CHR Extension: (AdBlock) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.8_0
CHR Extension: (Norton Identity Protection) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk\2013.4.3.4_1
CHR Extension: (Chrome In-App Payments service) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [ejnmnhkgiphcaeefbaooconkceehicfi] - C:\Program Files (x86)\DealPly\DealPly.crx
CHR HKLM-x32\...\Chrome\Extension: [engeblojhfeingnjnfpiceofljnjpldp] - C:\Users\Bernhard\AppData\Local\CRE\engeblojhfeingnjnfpiceofljnjpldp.crx
CHR HKLM-x32\...\Chrome\Extension: [fagpjgjmoaccgkkpjeoinehnoaimnbla] - C:\Users\Bernhard\AppData\Roaming\BabSolution\CR\hola.crx
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM-x32\...\Chrome\Extension: [ieadcoanfjloocmfafkebdnfefmohngj] - C:\Program Files (x86)\BonanzaDeals\BonanzaDeals.crx
CHR HKLM-x32\...\Chrome\Extension: [kgficikadnmmefckdecajlmffkbagomp] - C:\Users\Bernhard\AppData\Local\CRE\kgficikadnmmefckdecajlmffkbagomp.crx
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\Exts\Chrome.crx

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE [143088 2013-05-08] (SUPERAntiSpyware.com)
R2 ACT2_Service; C:\Program Files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe [1421216 2011-08-22] ()
R2 AHDDC2; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [1518504 2012-07-30] ()
R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
S2 bonanzadealslive; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-09-22] (BonanzaDeals)
S3 bonanzadealslivem; C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [148976 2013-09-22] (BonanzaDeals)
R2 BroadCamService; C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe [2563808 2012-12-19] (NCH Software)
R2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2012-12-05] (CobianSoft, Luis Cobian)
R2 CobianBackup11; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [1131008 2012-12-05] (Luis Cobian, CobianSoft)
S4 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
S4 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 DBService; C:\Program Files (x86)\Common Files\DATA BECKER Shared\DBService.exe [187456 2013-05-02] (DATA BECKER GmbH & Co KG)
S2 dealplylive; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-09-21] (DealPly Technologies Ltd)
S3 dealplylivem; C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [148000 2013-09-21] (DealPly Technologies Ltd)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe [570664 2013-04-26] (AnchorFree Inc.)
S3 HssTrayService; C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE [78512 2013-04-24] ()
R2 HssWd; C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe [390440 2013-04-26] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2011-12-08] ()
R2 NIS; C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-21] (Symantec Corporation)
R2 ocster_backup; c:\Program Files\Ocster Backup\bin\backupService-ox.exe [22472 2012-12-05] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)
R2 StarMoney 8.0 OnlineUpdate; C:\Program Files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [699680 2012-12-21] (Star Finanz - Software Entwicklung und Vertriebs GmbH)
R2 UI Assistant Service; C:\Program Files (x86)\1&1 Surf-Stick\AssistantServices.exe [253264 2010-09-30] ()
S2 updatesvca; C:\Windows\system32\updatesvca.dll [209920 2013-03-04] (Digital Dynamic)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2012-01-31] ()
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel® Corporation)
S2 FreemakeVideoCapture; "C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe" [x]

==================== Drivers (Whitelisted) ====================

R2 ACT2PM; C:\Program Files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys [15160 2011-06-10] ()
R2 ACT2PM; C:\Program Files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys [15160 2011-06-10] ()
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [1525336 2013-09-04] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys [169048 2013-04-16] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-08-27] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [46792 2013-04-24] (AnchorFree Inc.)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130924.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130924.001\IDSvia64.sys [520280 2013-08-21] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130924.009\ENG64.SYS [126040 2013-09-16] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130924.009\ENG64.SYS [126040 2013-09-16] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130924.009\EX64.SYS [2099288 2013-09-16] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130924.009\EX64.SYS [2099288 2013-09-16] (Symantec Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527872 2007-11-08] (PixArt Imaging Inc.)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)
S3 RRNetCap; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-04-24] (RapidSolution Software AG)
R3 RRNetCapMP; C:\Windows\System32\DRIVERS\rrnetcap.sys [37480 2013-04-24] (RapidSolution Software AG)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2013-05-25] (Windows (R) Win 7 DDK provider)
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1404000.028\SRTSP64.SYS [796760 2013-05-16] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1404000.028\SRTSPX64.SYS [36952 2013-03-05] (Symantec Corporation)
R3 stdriver; C:\Windows\System32\DRIVERS\stdriverx64.sys [32536 2013-01-28] ()
R0 SymDS; C:\Windows\System32\drivers\NISx64\1404000.028\SYMDS64.SYS [493656 2013-05-21] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-23] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-06-20] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS [224416 2013-03-05] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS [433752 2013-04-25] (Symantec Corporation)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.)
S3 Bulk1528; System32\Drivers\Bulk1528.sys [x]
S2 Ca1528av; System32\Drivers\Ca1528av.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-25 09:44 - 2013-09-25 09:44 - 00000000 ____D C:\FRST
2013-09-25 09:43 - 2013-09-25 09:43 - 01955802 _____ (Farbar) C:\Users\Bernhard\Downloads\FRST64 (1).exe
2013-09-25 09:31 - 2013-09-25 09:32 - 01916712 _____ (Farbar) C:\Users\Bernhard\Downloads\FRST64.exe
2013-09-25 09:17 - 2013-09-25 09:17 - 00001192 _____ C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iMesh.lnk
2013-09-25 09:17 - 2013-09-25 09:17 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\MusicNet
2013-09-25 09:16 - 2013-09-25 09:19 - 00000000 ____D C:\Users\Bernhard\AppData\Local\iMesh
2013-09-25 09:16 - 2013-09-25 09:16 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-09-23 22:20 - 2013-09-23 22:56 - 00000000 ____D C:\Users\Bernhard\Desktop\0
2013-09-23 21:56 - 2013-09-23 21:57 - 22537616 _____ (Mozilla) C:\Users\Bernhard\Downloads\Firefox Setup 24.0.exe
2013-09-23 06:31 - 2013-09-23 06:31 - 00000000 ____D C:\Users\Bernhard\AppData\Local\avgchrome
2013-09-23 00:20 - 2013-09-23 00:37 - 119794958 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO10.mp4
2013-09-23 00:20 - 2013-09-23 00:31 - 89717645 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO9.mp4
2013-09-23 00:19 - 2013-09-23 00:38 - 141707724 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO8.mp4
2013-09-22 20:22 - 2013-09-22 20:22 - 00001150 _____ C:\Users\Bernhard\Desktop\Continue CamStudio Installation.lnk
2013-09-22 20:15 - 2013-09-25 09:20 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-09-22 20:15 - 2013-09-24 20:20 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-09-22 20:15 - 2013-09-22 20:15 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-09-22 20:15 - 2013-09-22 20:15 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-09-22 20:15 - 2013-09-22 20:15 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-09-22 20:15 - 2013-09-22 20:15 - 00001860 _____ C:\Users\Bernhard\Desktop\Search.lnk
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Users\Bernhard\AppData\Local\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-09-22 20:12 - 2013-09-22 20:12 - 03099532 _____ (CamStudio Open Source                                       ) C:\Users\Bernhard\Downloads\CamStudio_2.7_r316_setup.exe
2013-09-22 19:44 - 2013-09-22 20:16 - 00003406 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-22 19:44 - 2013-09-22 19:44 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\holasearch
2013-09-22 19:44 - 2013-09-22 19:44 - 00000000 ____D C:\Program Files (x86)\holasearch
2013-09-22 19:43 - 2013-09-24 15:02 - 00000282 _____ C:\Windows\Tasks\PC Performer_DEFAULT.job
2013-09-22 19:43 - 2013-09-24 15:01 - 00003118 _____ C:\Windows\System32\Tasks\PC Performer
2013-09-22 19:43 - 2013-09-23 22:33 - 00000290 _____ C:\Windows\Tasks\PC Performer_UPDATES.job
2013-09-22 19:43 - 2013-09-22 19:43 - 00003044 _____ C:\Windows\System32\Tasks\PC Performer_UPDATES
2013-09-22 19:43 - 2013-09-22 19:43 - 00002888 _____ C:\Windows\System32\Tasks\PC Performer_DEFAULT
2013-09-22 19:43 - 2013-09-22 19:43 - 00001058 _____ C:\Users\Public\Desktop\PC Performer.lnk
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\PerformerSoft
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Babylon
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\BabSolution
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\ProgramData\Babylon
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Program Files (x86)\PC Performer
2013-09-22 19:43 - 2013-06-19 14:58 - 00019456 _____ (PerformerSoft LLC) C:\Windows\system32\roboot64.exe
2013-09-22 19:42 - 2013-09-22 19:42 - 05379168 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Desktop\free-screen-recorder-softnic.exe
2013-09-22 19:42 - 2013-09-22 19:42 - 00743704 _____ () C:\Users\Bernhard\Desktop\PCPSetup-1-.exe
2013-09-22 19:40 - 2013-09-22 19:40 - 00400768 _____ (Softonic                                        ) C:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe
2013-09-22 19:32 - 2013-09-22 19:32 - 00449409 _____ C:\Users\Bernhard\Downloads\keyfinder98.zip
2013-09-22 19:21 - 2013-09-22 19:21 - 05372416 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder(1).exe
2013-09-22 08:02 - 2013-09-22 08:02 - 00189063 _____ C:\Users\Bernhard\Documents\Unbenannt (3).wma
2013-09-22 07:57 - 2013-09-22 07:57 - 00507853 _____ C:\Users\Bernhard\Documents\Unbenannt (2).wma
2013-09-22 07:55 - 2013-09-22 07:55 - 01618432 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_07 Sep. 22 07.55.avi
2013-09-22 07:53 - 2013-09-22 07:53 - 29769716 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_06 Sep. 22 07.53.avi
2013-09-22 07:52 - 2013-09-22 07:52 - 00505262 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_05 Sep. 22 07.52.avi
2013-09-22 07:49 - 2013-09-22 07:50 - 07443940 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_04 Sep. 22 07.50.avi
2013-09-21 16:23 - 2013-09-21 18:28 - 2470220573 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd(1).iso
2013-09-21 15:00 - 2013-09-21 16:18 - 00026018 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd.iso
2013-09-21 14:59 - 2013-09-21 16:18 - 1576121499 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd.iso.part
2013-09-21 14:37 - 2013-09-21 14:37 - 07445096 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_03 Sep. 21 14.37.avi
2013-09-21 14:35 - 2013-09-21 14:35 - 02373736 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_02 Sep. 21 14.35.avi
2013-09-21 14:34 - 2013-09-21 14:34 - 00000000 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_01 Sep. 21 14.35.avi
2013-09-21 14:33 - 2013-09-21 14:33 - 00002083 _____ C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\Admin\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\_ocster_backup_\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wisdom-soft AutoScreenRecorder 3 Pro
2013-09-21 14:33 - 2013-09-21 14:33 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft AutoScreenRecorder 3 Pro
2013-09-21 14:32 - 2013-09-21 14:32 - 04215463 _____ C:\Users\Bernhard\Downloads\setupautoscreenrecorder31375.exe
2013-09-21 14:27 - 2013-09-21 14:27 - 00000000 ____D C:\Users\Bernhard\AppData\Local\DVDVideoSoft_Ltd
2013-09-21 14:17 - 2013-09-25 09:22 - 00000910 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-09-21 14:17 - 2013-09-25 09:17 - 00000302 _____ C:\Windows\Tasks\Dealply.job
2013-09-21 14:17 - 2013-09-24 14:22 - 00000906 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-09-21 14:17 - 2013-09-21 14:17 - 00003906 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-09-21 14:17 - 2013-09-21 14:17 - 00003654 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-09-21 14:17 - 2013-09-21 14:17 - 00003254 _____ C:\Windows\System32\Tasks\Dealply
2013-09-21 14:17 - 2013-09-21 14:17 - 00001247 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Dealply
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Users\Bernhard\AppData\Local\DealPlyLive
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-09-21 14:16 - 2013-09-21 14:17 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\DVDVideoSoft
2013-09-21 14:16 - 2013-09-21 14:17 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-21 14:16 - 2013-09-21 14:16 - 00001375 _____ C:\Users\Public\Desktop\Free Screen Video Recorder.lnk
2013-09-21 14:16 - 2013-09-21 14:16 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\OpenCandy
2013-09-21 14:14 - 2013-09-21 14:15 - 16729816 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Bernhard\Downloads\FreeScreenVideoRecorder-7530725.exe
2013-09-21 13:52 - 2013-06-02 04:56 - 00031920 _____ (Wondershare) C:\Windows\system32\Drivers\Apowersoft_AudioDevice.sys
2013-09-21 13:51 - 2013-09-21 13:52 - 05372416 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder.exe
2013-09-21 13:39 - 2013-09-21 13:39 - 05375912 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder-chipde_1.2.4.exe
2013-09-21 13:30 - 2013-09-21 13:30 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (10)
2013-09-21 13:30 - 2013-09-21 13:30 - 00000000 ____D C:\Users\Bernhard\Apowersoft Aufnahmen
2013-09-21 00:29 - 2013-09-21 00:29 - 00001206 _____ C:\Users\Bernhard\Desktop\Format Factory.lnk
2013-09-21 00:29 - 2013-09-21 00:29 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2013-09-21 00:28 - 2013-09-21 00:28 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-09-20 23:14 - 2013-09-20 23:16 - 52657859 _____ C:\Users\Bernhard\Downloads\FFSetup3.1.1.exe
2013-09-20 22:47 - 2013-09-21 13:54 - 00000000 ____D C:\Users\Bernhard\www.apowersoft.com
2013-09-19 23:25 - 2013-09-19 23:25 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-19 14:51 - 2013-09-19 14:51 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{04EC5231-9FB4-4FF0-BCF3-64AAEBE98195}
2013-09-18 05:47 - 2013-09-18 05:48 - 21963912 _____ (Mozilla) C:\Users\Bernhard\Downloads\ThunderbirdSetup24.0.exe
2013-09-17 18:31 - 2013-08-10 07:22 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-17 18:31 - 2013-08-10 07:22 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-17 18:31 - 2013-08-10 07:22 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-17 18:31 - 2013-08-10 07:21 - 19246592 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-17 18:31 - 2013-08-10 07:21 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-17 18:31 - 2013-08-10 07:21 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-17 18:31 - 2013-08-10 07:20 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-17 18:31 - 2013-08-10 05:17 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-17 18:31 - 2013-08-10 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-17 18:31 - 2013-08-10 04:27 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-17 18:31 - 2013-08-10 04:17 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-17 17:58 - 2013-09-17 17:59 - 22537616 _____ (Mozilla) C:\Users\Bernhard\Downloads\FirefoxSetup24.0.exe
2013-09-17 09:41 - 2013-09-17 09:41 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{A248FFC5-3873-4B4B-83E8-0A6B25F640DA}
2013-09-16 21:41 - 2013-09-16 21:41 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{2DFAC4D2-C8BE-47FA-BB99-8415F2359589}
2013-09-16 09:40 - 2013-09-16 09:41 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{F2FEFDD6-2E57-459F-A28F-3ECB927EA1FF}
2013-09-15 20:08 - 2013-09-15 20:08 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{8449734D-515E-454A-AD40-C02E1458511F}
2013-09-15 08:07 - 2013-09-15 08:08 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{BDC77DAD-2476-43DB-80E1-362AAA90EED7}
2013-09-14 13:58 - 2013-09-14 13:59 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{AA732003-28D6-447A-85EE-C11FA049A90F}
2013-09-12 21:42 - 2013-08-05 04:25 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2013-09-12 21:42 - 2013-08-02 04:23 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-09-12 21:42 - 2013-08-02 04:15 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-09-12 21:42 - 2013-08-02 04:15 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2013-09-12 21:42 - 2013-08-02 04:15 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-09-12 21:42 - 2013-08-02 04:15 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2013-09-12 21:42 - 2013-08-02 04:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2013-09-12 21:42 - 2013-08-02 04:14 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2013-09-12 21:42 - 2013-08-02 04:13 - 01161216 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2013-09-12 21:42 - 2013-08-02 04:13 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 04:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:59 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-09-12 21:42 - 2013-08-02 03:59 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-09-12 21:42 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 21:42 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2013-09-12 21:42 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2013-09-12 21:42 - 2013-08-02 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 03:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2013-09-12 21:42 - 2013-08-02 02:59 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-09-12 21:42 - 2013-08-02 02:45 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-09-12 21:42 - 2013-08-02 02:45 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-09-12 21:42 - 2013-08-02 02:45 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-09-12 21:42 - 2013-08-02 02:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-09-12 21:42 - 2013-08-02 02:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 02:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 02:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2013-09-12 21:42 - 2013-08-02 02:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2013-09-12 21:41 - 2013-08-08 03:20 - 03155456 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-09-12 21:24 - 2013-07-26 04:24 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-09-12 21:24 - 2013-07-26 04:24 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-09-12 21:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-09-12 21:24 - 2013-07-26 03:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-09-12 20:26 - 2013-09-12 20:26 - 00002400 _____ C:\{2A54DFD9-7759-4AA8-B282-046BC90ADDA2}
2013-09-11 09:57 - 2013-09-11 09:58 - 00000000 ____D C:\Users\Bernhard\Desktop\Verschiedenes
2013-09-11 09:55 - 2013-09-11 09:55 - 00000000 ____D C:\Users\Bernhard\Desktop\Schlegelberg-Seminar
2013-09-11 09:49 - 2013-09-11 09:49 - 00000000 ____D C:\Users\Bernhard\Desktop\Syrien
2013-09-11 09:43 - 2013-09-11 09:43 - 00000000 ____D C:\Users\Bernhard\Desktop\Janine
2013-09-11 09:10 - 2013-09-11 09:12 - 51029376 _____ (Adobe Systems Incorporated) C:\Users\Bernhard\Downloads\AdbeRdr11004_de_DE.exe
2013-09-07 11:23 - 2013-09-07 11:24 - 02092792 _____ C:\Users\Bernhard\Downloads\avira_free_4052_antivirus.exe
2013-09-06 19:12 - 2013-09-06 19:28 - 291800020 _____ C:\Users\Bernhard\Downloads\business_ideen_videos.zip
2013-09-04 19:57 - 2013-09-04 19:57 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (9)
2013-09-04 15:56 - 2013-09-04 15:56 - 00000000 ____D C:\Users\Bernhard\Documents\My Albums
2013-09-04 15:55 - 2013-09-04 15:56 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\ArcSoft
2013-09-04 15:32 - 2013-09-04 15:32 - 00001982 _____ C:\Users\Public\Desktop\Video Impression 2.lnk
2013-09-04 15:32 - 2005-04-27 16:36 - 00245408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\unicows.dll
2013-09-04 15:30 - 2013-09-04 15:30 - 00002063 _____ C:\Users\Public\Desktop\Photo Impression 5.lnk
2013-09-04 15:30 - 2006-11-14 11:31 - 00022784 _____ (Arcsoft, Inc.) C:\Windows\SysWOW64\Drivers\afc.sys
2013-09-04 15:27 - 2013-09-04 15:31 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-09-04 15:27 - 1995-08-01 04:44 - 00212480 _____ (Eastman Kodak) C:\Windows\PCDLIB32.DLL
2013-09-04 15:26 - 2008-09-24 11:05 - 00014115 _____ C:\Windows\twspmm.ini
2013-09-04 15:26 - 2008-08-30 08:39 - 00005860 _____ C:\Windows\twspmm.src
2013-09-04 15:25 - 2013-09-04 15:26 - 00000000 ____D C:\Program Files (x86)\SPCA1528
2013-09-04 07:44 - 2013-09-04 07:44 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{BCCD16D7-DF9F-49FF-9F95-E47DACFEB8F3}
2013-09-04 06:08 - 2013-09-18 05:50 - 00002094 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-09-04 06:08 - 2013-09-18 05:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-09-04 06:08 - 2013-09-04 06:08 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Thunderbird
2013-09-04 06:08 - 2013-09-04 06:08 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Thunderbird
2013-09-04 06:06 - 2013-09-04 06:07 - 19681592 _____ (Mozilla) C:\Users\Bernhard\Downloads\Thunderbird_Setup_17.0.8.exe
2013-09-03 08:15 - 2013-09-03 08:15 - 00001148 _____ C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2013-09-03 08:14 - 2013-09-03 08:14 - 00993304 _____ (NCH Software) C:\Users\Bernhard\Downloads\wpsetup(1).exe
2013-09-03 07:45 - 2013-09-03 07:45 - 00176128 _____ C:\Users\Admin\Downloads\aacdec.exe
2013-09-03 07:45 - 2013-09-03 07:45 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-09-03 07:43 - 2013-09-03 07:43 - 00000000 ____D C:\Users\Admin\AppData\Local\Wondershare
2013-09-03 07:41 - 2013-09-03 07:41 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Systweak
2013-09-03 07:36 - 2013-09-03 07:36 - 00176128 _____ C:\Users\Bernhard\Downloads\aacdec.exe
2013-09-02 18:30 - 2013-09-02 18:59 - 614400000 _____ C:\Users\Bernhard\Downloads\rescue-system.iso
2013-09-02 18:21 - 2013-09-02 18:21 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\QuickScan
2013-09-02 16:34 - 2013-09-02 16:46 - 00000000 ____D C:\Users\Bernhard\Documents\Wondershare Video Editor
2013-09-02 16:34 - 2013-09-02 16:34 - 00001210 _____ C:\Users\Public\Desktop\Wondershare Video Editor.lnk
2013-09-02 16:34 - 2013-09-02 16:34 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Wondershare
2013-09-02 16:34 - 2013-09-02 16:34 - 00000000 ____D C:\Program Files (x86)\Wondershare
2013-09-02 07:31 - 2013-09-02 07:31 - 00000329 _____ C:\Users\Bernhard\Desktop\HP Druckerdiagnosetools.url
2013-09-01 18:04 - 2013-09-01 18:04 - 00001849 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-09-01 18:03 - 2013-09-01 18:04 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-09-01 18:03 - 2013-09-01 18:03 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-01 17:50 - 2013-09-01 17:54 - 41404760 _____ (Apple Inc.) C:\Users\Bernhard\Downloads\QuickTimeInstaller(2).exe
2013-08-28 08:00 - 2013-08-28 08:00 - 00452407 _____ C:\Users\Bernhard\Downloads\eff_flux_mail.zip
2013-08-27 14:22 - 2013-08-27 14:22 - 01392906 _____ C:\Users\Bernhard\Downloads\licensecrawler130.zip
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Bernhard\Downloads\licensecrawler130
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Neuer Ordner
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Kalender
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (8)

==================== One Month Modified Files and Folders =======

2013-09-25 09:44 - 2013-09-25 09:44 - 00000000 ____D C:\FRST
2013-09-25 09:43 - 2013-09-25 09:43 - 01955802 _____ (Farbar) C:\Users\Bernhard\Downloads\FRST64 (1).exe
2013-09-25 09:39 - 2012-11-28 07:54 - 00000000 ____D C:\Program Files (x86)\Hotspot_Shield
2013-09-25 09:39 - 2012-07-22 08:32 - 00000000 ____D C:\Program Files (x86)\FreeMake
2013-09-25 09:38 - 2012-05-03 10:48 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Google
2013-09-25 09:32 - 2013-09-25 09:31 - 01916712 _____ (Farbar) C:\Users\Bernhard\Downloads\FRST64.exe
2013-09-25 09:25 - 2013-06-04 07:41 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-25 09:25 - 2012-05-03 09:55 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-09-25 09:22 - 2013-09-21 14:17 - 00000910 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
2013-09-25 09:20 - 2013-09-22 20:15 - 00000930 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job
2013-09-25 09:19 - 2013-09-25 09:16 - 00000000 ____D C:\Users\Bernhard\AppData\Local\iMesh
2013-09-25 09:18 - 2012-10-24 11:53 - 00001132 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000UA.job
2013-09-25 09:17 - 2013-09-25 09:17 - 00001192 _____ C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iMesh.lnk
2013-09-25 09:17 - 2013-09-25 09:17 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\MusicNet
2013-09-25 09:17 - 2013-09-21 14:17 - 00000302 _____ C:\Windows\Tasks\Dealply.job
2013-09-25 09:16 - 2013-09-25 09:16 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-09-25 09:16 - 2012-05-03 09:49 - 01314038 _____ C:\Windows\WindowsUpdate.log
2013-09-25 09:12 - 2012-10-24 11:53 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000Core.job
2013-09-25 00:26 - 2012-05-24 00:30 - 00000000 ____D C:\Users\Bernhard\dwhelper
2013-09-24 23:31 - 2013-03-20 00:37 - 00003352 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000
2013-09-24 23:31 - 2013-03-20 00:37 - 00003224 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4070342091-3793343965-3738386277-1000
2013-09-24 22:58 - 2013-07-29 12:09 - 00000000 ____D C:\Program Files (x86)\StarMoney 8.0
2013-09-24 22:58 - 2013-05-25 14:55 - 00000000 ____D C:\ProgramData\Spyware Terminator
2013-09-24 20:20 - 2013-09-22 20:15 - 00000926 _____ C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job
2013-09-24 18:42 - 2013-07-30 21:17 - 00003246 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4070342091-3793343965-3738386277-1000
2013-09-24 18:42 - 2013-05-14 05:46 - 00003374 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000
2013-09-24 15:02 - 2013-09-22 19:43 - 00000282 _____ C:\Windows\Tasks\PC Performer_DEFAULT.job
2013-09-24 15:01 - 2013-09-22 19:43 - 00003118 _____ C:\Windows\System32\Tasks\PC Performer
2013-09-24 14:43 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-09-24 14:31 - 2012-05-03 09:55 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-24 14:22 - 2013-09-21 14:17 - 00000906 _____ C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
2013-09-24 08:11 - 2013-01-07 23:01 - 00000000 ____D C:\Users\Bernhard\Desktop\Linklisten
2013-09-23 22:56 - 2013-09-23 22:20 - 00000000 ____D C:\Users\Bernhard\Desktop\0
2013-09-23 22:42 - 2009-07-14 06:45 - 00017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-23 22:42 - 2009-07-14 06:45 - 00017264 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-23 22:36 - 2013-05-11 14:59 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Ocster Backup
2013-09-23 22:36 - 2012-11-06 13:14 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\stickies
2013-09-23 22:35 - 2012-05-03 10:09 - 00000000 ____D C:\Users\Bernhard\Documents\Youcam
2013-09-23 22:34 - 2013-07-26 12:30 - 00003156 _____ C:\Windows\System32\Tasks\AdvancedDriverUpdaterRunAtStartup
2013-09-23 22:33 - 2013-09-22 19:43 - 00000290 _____ C:\Windows\Tasks\PC Performer_UPDATES.job
2013-09-23 22:33 - 2013-05-09 23:21 - 00014639 _____ C:\Windows\setupact.log
2013-09-23 22:33 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-23 22:32 - 2013-05-26 17:30 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-23 22:32 - 2013-05-09 23:20 - 00031016 _____ C:\Windows\PFRO.log
2013-09-23 22:32 - 2013-03-19 17:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-23 22:30 - 2012-05-03 10:21 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\SoftGrid Client
2013-09-23 22:13 - 2012-06-04 23:21 - 00000000 ____D C:\Users\Bernhard\Documents\Gesundheit
2013-09-23 22:07 - 2013-03-19 17:39 - 00001155 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-09-23 21:57 - 2013-09-23 21:56 - 22537616 _____ (Mozilla) C:\Users\Bernhard\Downloads\Firefox Setup 24.0.exe
2013-09-23 21:19 - 2013-05-10 15:06 - 00000000 ____D C:\Users\Bernhard\AppData\Local\CrashDumps
2013-09-23 07:38 - 2012-02-21 20:50 - 00654852 _____ C:\Windows\system32\perfh007.dat
2013-09-23 07:38 - 2012-02-21 20:50 - 00130434 _____ C:\Windows\system32\perfc007.dat
2013-09-23 07:38 - 2009-07-14 07:13 - 01500294 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-23 06:31 - 2013-09-23 06:31 - 00000000 ____D C:\Users\Bernhard\AppData\Local\avgchrome
2013-09-23 00:38 - 2013-09-23 00:19 - 141707724 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO8.mp4
2013-09-23 00:37 - 2013-09-23 00:20 - 119794958 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO10.mp4
2013-09-23 00:31 - 2013-09-23 00:20 - 89717645 _____ C:\Users\Bernhard\Downloads\LFECELITEVIDEOSMONTHLYDELIVERYDEC2012VIDEO9.mp4
2013-09-22 20:42 - 2012-08-27 01:20 - 00000000 ____D C:\Users\Bernhard\Desktop\Coaches
2013-09-22 20:22 - 2013-09-22 20:22 - 00001150 _____ C:\Users\Bernhard\Desktop\Continue CamStudio Installation.lnk
2013-09-22 20:19 - 2013-03-11 21:32 - 00004542 _____ C:\Users\Bernhard\AppData\Roaming\CamStudio.cfg
2013-09-22 20:19 - 2013-03-11 21:32 - 00000408 _____ C:\Users\Bernhard\AppData\Roaming\CamShapes.ini
2013-09-22 20:19 - 2013-03-11 21:32 - 00000408 _____ C:\Users\Bernhard\AppData\Roaming\CamLayout.ini
2013-09-22 20:19 - 2013-03-11 21:32 - 00000122 _____ C:\Users\Bernhard\AppData\Roaming\Camdata.ini
2013-09-22 20:18 - 2013-01-11 10:46 - 00000000 ____D C:\Users\Bernhard\Desktop\1
2013-09-22 20:16 - 2013-09-22 19:44 - 00003406 _____ C:\Windows\System32\Tasks\EPUpdater
2013-09-22 20:15 - 2013-09-22 20:15 - 00003926 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA
2013-09-22 20:15 - 2013-09-22 20:15 - 00003674 _____ C:\Windows\System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore
2013-09-22 20:15 - 2013-09-22 20:15 - 00003392 _____ C:\Windows\System32\Tasks\BonanzaDealsUpdate
2013-09-22 20:15 - 2013-09-22 20:15 - 00001860 _____ C:\Users\Bernhard\Desktop\Search.lnk
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BonanzaDeals
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Users\Bernhard\AppData\Local\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\ProgramData\DSearchLink
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\ProgramData\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Program Files (x86)\BonanzaDealsLive
2013-09-22 20:15 - 2013-09-22 20:15 - 00000000 ____D C:\Program Files (x86)\BonanzaDeals
2013-09-22 20:15 - 2013-03-11 21:19 - 00000000 ____D C:\Program Files (x86)\CamStudio 2.7
2013-09-22 20:12 - 2013-09-22 20:12 - 03099532 _____ (CamStudio Open Source                                       ) C:\Users\Bernhard\Downloads\CamStudio_2.7_r316_setup.exe
2013-09-22 19:44 - 2013-09-22 19:44 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\holasearch
2013-09-22 19:44 - 2013-09-22 19:44 - 00000000 ____D C:\Program Files (x86)\holasearch
2013-09-22 19:43 - 2013-09-22 19:43 - 00003044 _____ C:\Windows\System32\Tasks\PC Performer_UPDATES
2013-09-22 19:43 - 2013-09-22 19:43 - 00002888 _____ C:\Windows\System32\Tasks\PC Performer_DEFAULT
2013-09-22 19:43 - 2013-09-22 19:43 - 00001058 _____ C:\Users\Public\Desktop\PC Performer.lnk
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\PerformerSoft
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Babylon
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\BabSolution
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\ProgramData\IBUpdaterService
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\ProgramData\Babylon
2013-09-22 19:43 - 2013-09-22 19:43 - 00000000 ____D C:\Program Files (x86)\PC Performer
2013-09-22 19:42 - 2013-09-22 19:42 - 05379168 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Desktop\free-screen-recorder-softnic.exe
2013-09-22 19:42 - 2013-09-22 19:42 - 00743704 _____ () C:\Users\Bernhard\Desktop\PCPSetup-1-.exe
2013-09-22 19:40 - 2013-09-22 19:40 - 00400768 _____ (Softonic                                        ) C:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe
2013-09-22 19:32 - 2013-09-22 19:32 - 00449409 _____ C:\Users\Bernhard\Downloads\keyfinder98.zip
2013-09-22 19:21 - 2013-09-22 19:21 - 05372416 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder(1).exe
2013-09-22 08:02 - 2013-09-22 08:02 - 00189063 _____ C:\Users\Bernhard\Documents\Unbenannt (3).wma
2013-09-22 07:57 - 2013-09-22 07:57 - 00507853 _____ C:\Users\Bernhard\Documents\Unbenannt (2).wma
2013-09-22 07:55 - 2013-09-22 07:55 - 01618432 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_07 Sep. 22 07.55.avi
2013-09-22 07:53 - 2013-09-22 07:53 - 29769716 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_06 Sep. 22 07.53.avi
2013-09-22 07:52 - 2013-09-22 07:52 - 00505262 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_05 Sep. 22 07.52.avi
2013-09-22 07:50 - 2013-09-22 07:49 - 07443940 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_04 Sep. 22 07.50.avi
2013-09-21 18:28 - 2013-09-21 16:23 - 2470220573 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd(1).iso
2013-09-21 16:18 - 2013-09-21 15:00 - 00026018 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd.iso
2013-09-21 16:18 - 2013-09-21 14:59 - 1576121499 _____ C:\Users\Bernhard\Downloads\chip-dvd-2013-04_heft-dvd.iso.part
2013-09-21 14:37 - 2013-09-21 14:37 - 07445096 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_03 Sep. 21 14.37.avi
2013-09-21 14:35 - 2013-09-21 14:35 - 02373736 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_02 Sep. 21 14.35.avi
2013-09-21 14:34 - 2013-09-21 14:34 - 00000000 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder_01 Sep. 21 14.35.avi
2013-09-21 14:33 - 2013-09-21 14:33 - 00002083 _____ C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\Bernhard\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\Admin\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00002059 _____ C:\Users\_ocster_backup_\Desktop\AutoScreenRecorder 3.1 Pro.lnk
2013-09-21 14:33 - 2013-09-21 14:33 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wisdom-soft AutoScreenRecorder 3 Pro
2013-09-21 14:33 - 2013-09-21 14:33 - 00000000 ____D C:\Program Files (x86)\Wisdom-soft AutoScreenRecorder 3 Pro
2013-09-21 14:32 - 2013-09-21 14:32 - 04215463 _____ C:\Users\Bernhard\Downloads\setupautoscreenrecorder31375.exe
2013-09-21 14:27 - 2013-09-21 14:27 - 00000000 ____D C:\Users\Bernhard\AppData\Local\DVDVideoSoft_Ltd
2013-09-21 14:17 - 2013-09-21 14:17 - 00003906 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
2013-09-21 14:17 - 2013-09-21 14:17 - 00003654 _____ C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
2013-09-21 14:17 - 2013-09-21 14:17 - 00003254 _____ C:\Windows\System32\Tasks\Dealply
2013-09-21 14:17 - 2013-09-21 14:17 - 00001247 _____ C:\Users\Public\Desktop\DVDVideoSoft Free Studio.lnk
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Dealply
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Users\Bernhard\AppData\Local\DealPlyLive
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\ProgramData\DealPlyLive
2013-09-21 14:17 - 2013-09-21 14:17 - 00000000 ____D C:\Program Files (x86)\DealPlyLive
2013-09-21 14:17 - 2013-09-21 14:16 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\DVDVideoSoft
2013-09-21 14:17 - 2013-09-21 14:16 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-09-21 14:16 - 2013-09-21 14:16 - 00001375 _____ C:\Users\Public\Desktop\Free Screen Video Recorder.lnk
2013-09-21 14:16 - 2013-09-21 14:16 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\OpenCandy
2013-09-21 14:15 - 2013-09-21 14:14 - 16729816 _____ (DVDVideoSoft Ltd.                                           ) C:\Users\Bernhard\Downloads\FreeScreenVideoRecorder-7530725.exe
2013-09-21 13:54 - 2013-09-20 22:47 - 00000000 ____D C:\Users\Bernhard\www.apowersoft.com
2013-09-21 13:54 - 2013-05-02 20:24 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Apowersoft
2013-09-21 13:52 - 2013-09-21 13:51 - 05372416 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder.exe
2013-09-21 13:39 - 2013-09-21 13:39 - 05375912 _____ (Apowersoft                                                  ) C:\Users\Bernhard\Downloads\free-screen-recorder-chipde_1.2.4.exe
2013-09-21 13:30 - 2013-09-21 13:30 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (10)
2013-09-21 13:30 - 2013-09-21 13:30 - 00000000 ____D C:\Users\Bernhard\Apowersoft Aufnahmen
2013-09-21 13:30 - 2012-05-03 10:03 - 00000000 ____D C:\Users\Bernhard
2013-09-21 00:29 - 2013-09-21 00:29 - 00001206 _____ C:\Users\Bernhard\Desktop\Format Factory.lnk
2013-09-21 00:29 - 2013-09-21 00:29 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2013-09-21 00:28 - 2013-09-21 00:28 - 00000000 ____D C:\Program Files (x86)\FreeTime
2013-09-20 23:16 - 2013-09-20 23:14 - 52657859 _____ C:\Users\Bernhard\Downloads\FFSetup3.1.1.exe
2013-09-20 23:00 - 2012-11-12 15:32 - 00000000 ____D C:\Windows\System32\Tasks\NCH Software
2013-09-20 09:11 - 2012-11-16 13:41 - 00000000 ____D C:\Users\Bernhard\Desktop\Internetmarketing
2013-09-20 08:24 - 2013-01-17 19:47 - 00002390 _____ C:\Users\Bernhard\Desktop\Google Chrome.lnk
2013-09-19 23:25 - 2013-09-19 23:25 - 03723656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2013-09-19 23:25 - 2013-06-04 07:41 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-19 23:25 - 2013-03-19 22:30 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-19 23:25 - 2013-03-19 22:30 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-19 14:51 - 2013-09-19 14:51 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{04EC5231-9FB4-4FF0-BCF3-64AAEBE98195}
2013-09-19 08:00 - 2012-05-23 23:28 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Mozilla
2013-09-19 07:19 - 2012-10-18 10:48 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Mozilla
2013-09-18 17:12 - 2012-05-03 10:04 - 00102808 _____ C:\Users\Bernhard\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-18 11:31 - 2012-06-04 23:18 - 00000000 ____D C:\Users\Bernhard\Documents\Ulla
2013-09-18 11:22 - 2013-07-15 11:22 - 00000296 _____ C:\Windows\Tasks\AdvancedDriverUpdater_UPDATES.job
2013-09-18 06:41 - 2012-09-11 20:34 - 00000000 ____D C:\Users\Bernhard\Desktop\Maria
2013-09-18 05:50 - 2013-09-04 06:08 - 00002094 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
2013-09-18 05:50 - 2013-09-04 06:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-09-18 05:48 - 2013-09-18 05:47 - 21963912 _____ (Mozilla) C:\Users\Bernhard\Downloads\ThunderbirdSetup24.0.exe
2013-09-17 18:42 - 2012-05-03 10:04 - 00000000 ___RD C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-17 18:42 - 2012-05-03 10:04 - 00000000 ___RD C:\Users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-17 18:40 - 2009-07-14 06:45 - 00407472 _____ C:\Windows\system32\FNTCACHE.DAT
2013-09-17 18:31 - 2013-08-09 05:39 - 00000000 ____D C:\Windows\system32\MRT
2013-09-17 18:31 - 2012-05-03 10:20 - 01527912 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-17 18:31 - 2012-05-03 10:20 - 00000000 ____D C:\Program Files (x86)\Microsoft Application Virtualization Client
2013-09-17 18:21 - 2012-02-21 21:44 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-17 17:59 - 2013-09-17 17:58 - 22537616 _____ (Mozilla) C:\Users\Bernhard\Downloads\FirefoxSetup24.0.exe
2013-09-17 14:34 - 2013-07-27 09:57 - 00000000 ____D C:\ProgramData\Live Aquarium HD
2013-09-17 14:33 - 2012-07-25 15:02 - 00074752 ___SH C:\Users\Bernhard\Thumbs.db
2013-09-17 09:41 - 2013-09-17 09:41 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{A248FFC5-3873-4B4B-83E8-0A6B25F640DA}
2013-09-16 21:41 - 2013-09-16 21:41 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{2DFAC4D2-C8BE-47FA-BB99-8415F2359589}
2013-09-16 18:57 - 2012-05-03 10:11 - 00000000 ____D C:\Users\Bernhard\Desktop\Musik
2013-09-16 09:41 - 2013-09-16 09:40 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{F2FEFDD6-2E57-459F-A28F-3ECB927EA1FF}
2013-09-15 20:08 - 2013-09-15 20:08 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{8449734D-515E-454A-AD40-C02E1458511F}
2013-09-15 08:08 - 2013-09-15 08:07 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{BDC77DAD-2476-43DB-80E1-362AAA90EED7}
2013-09-14 13:59 - 2013-09-14 13:58 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{AA732003-28D6-447A-85EE-C11FA049A90F}
2013-09-14 12:39 - 2012-11-29 10:45 - 00000000 ____D C:\Windows\System32\Tasks\NCH Swift Sound
2013-09-12 21:36 - 2013-05-27 17:51 - 00000000 ____D C:\Users\Bernhard\Desktop\Sigma
2013-09-12 20:26 - 2013-09-12 20:26 - 00002400 _____ C:\{2A54DFD9-7759-4AA8-B282-046BC90ADDA2}
2013-09-12 16:33 - 2013-07-30 20:44 - 00000000 ____D C:\Users\Bernhard\Desktop\Selbständigkeit
2013-09-11 12:12 - 2012-10-04 12:09 - 00000000 ____D C:\Users\Bernhard\Desktop\Löschen
2013-09-11 10:06 - 2012-07-31 06:21 - 00000000 __RSD C:\Users\Bernhard\Desktop\Korrespondenz
2013-09-11 09:58 - 2013-09-11 09:57 - 00000000 ____D C:\Users\Bernhard\Desktop\Verschiedenes
2013-09-11 09:55 - 2013-09-11 09:55 - 00000000 ____D C:\Users\Bernhard\Desktop\Schlegelberg-Seminar
2013-09-11 09:49 - 2013-09-11 09:49 - 00000000 ____D C:\Users\Bernhard\Desktop\Syrien
2013-09-11 09:43 - 2013-09-11 09:43 - 00000000 ____D C:\Users\Bernhard\Desktop\Janine
2013-09-11 09:12 - 2013-09-11 09:10 - 51029376 _____ (Adobe Systems Incorporated) C:\Users\Bernhard\Downloads\AdbeRdr11004_de_DE.exe
2013-09-07 17:53 - 2012-11-29 10:29 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2013-09-07 11:24 - 2013-09-07 11:23 - 02092792 _____ C:\Users\Bernhard\Downloads\avira_free_4052_antivirus.exe
2013-09-06 19:28 - 2013-09-06 19:12 - 291800020 _____ C:\Users\Bernhard\Downloads\business_ideen_videos.zip
2013-09-04 19:57 - 2013-09-04 19:57 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (9)
2013-09-04 15:56 - 2013-09-04 15:56 - 00000000 ____D C:\Users\Bernhard\Documents\My Albums
2013-09-04 15:56 - 2013-09-04 15:55 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\ArcSoft
2013-09-04 15:32 - 2013-09-04 15:32 - 00001982 _____ C:\Users\Public\Desktop\Video Impression 2.lnk
2013-09-04 15:31 - 2013-09-04 15:27 - 00000000 ____D C:\Program Files (x86)\ArcSoft
2013-09-04 15:31 - 2012-02-22 00:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-04 15:30 - 2013-09-04 15:30 - 00002063 _____ C:\Users\Public\Desktop\Photo Impression 5.lnk
2013-09-04 15:26 - 2013-09-04 15:25 - 00000000 ____D C:\Program Files (x86)\SPCA1528
2013-09-04 07:44 - 2013-09-04 07:44 - 00000000 ____D C:\Users\Bernhard\AppData\Local\{BCCD16D7-DF9F-49FF-9F95-E47DACFEB8F3}
2013-09-04 06:08 - 2013-09-04 06:08 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\Thunderbird
2013-09-04 06:08 - 2013-09-04 06:08 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Thunderbird
2013-09-04 06:07 - 2013-09-04 06:06 - 19681592 _____ (Mozilla) C:\Users\Bernhard\Downloads\Thunderbird_Setup_17.0.8.exe
2013-09-03 08:15 - 2013-09-03 08:15 - 00001148 _____ C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2013-09-03 08:15 - 2012-11-12 15:32 - 00000000 ____D C:\Program Files (x86)\NCH Software
2013-09-03 08:15 - 2012-11-12 15:24 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\NCH Software
2013-09-03 08:14 - 2013-09-03 08:14 - 00993304 _____ (NCH Software) C:\Users\Bernhard\Downloads\wpsetup(1).exe
2013-09-03 07:47 - 2012-12-08 23:04 - 00000000 ____D C:\Users\Admin\AppData\Roaming\NCH Software
2013-09-03 07:45 - 2013-09-03 07:45 - 00176128 _____ C:\Users\Admin\Downloads\aacdec.exe
2013-09-03 07:45 - 2013-09-03 07:45 - 00000000 ____D C:\Users\Admin\AppData\Roaming\RealNetworks
2013-09-03 07:43 - 2013-09-03 07:43 - 00000000 ____D C:\Users\Admin\AppData\Local\Wondershare
2013-09-03 07:42 - 2012-12-06 09:04 - 00102808 _____ C:\Users\Admin\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-03 07:41 - 2013-09-03 07:41 - 00000000 ____D C:\Users\Admin\AppData\Roaming\Systweak
2013-09-03 07:41 - 2012-12-06 09:04 - 00001429 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-03 07:36 - 2013-09-03 07:36 - 00176128 _____ C:\Users\Bernhard\Downloads\aacdec.exe
2013-09-02 18:59 - 2013-09-02 18:30 - 614400000 _____ C:\Users\Bernhard\Downloads\rescue-system.iso
2013-09-02 18:21 - 2013-09-02 18:21 - 00000000 ____D C:\Users\Bernhard\AppData\Roaming\QuickScan
2013-09-02 16:46 - 2013-09-02 16:34 - 00000000 ____D C:\Users\Bernhard\Documents\Wondershare Video Editor
2013-09-02 16:34 - 2013-09-02 16:34 - 00001210 _____ C:\Users\Public\Desktop\Wondershare Video Editor.lnk
2013-09-02 16:34 - 2013-09-02 16:34 - 00000000 ____D C:\Users\Bernhard\AppData\Local\Wondershare
2013-09-02 16:34 - 2013-09-02 16:34 - 00000000 ____D C:\Program Files (x86)\Wondershare
2013-09-02 15:44 - 2012-09-24 19:37 - 00000000 ____D C:\Users\Bernhard\Desktop\PC
2013-09-02 15:10 - 2013-07-12 07:50 - 00000000 ____D C:\Users\Bernhard\Desktop\Lotoscafe
2013-09-02 15:07 - 2012-06-05 00:39 - 00000000 ____D C:\Users\Bernhard\Documents\L
2013-09-02 14:43 - 2012-09-23 14:16 - 00000000 ____D C:\Users\Bernhard\Desktop\TA
2013-09-02 07:31 - 2013-09-02 07:31 - 00000329 _____ C:\Users\Bernhard\Desktop\HP Druckerdiagnosetools.url
2013-09-01 18:04 - 2013-09-01 18:04 - 00001849 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2013-09-01 18:04 - 2013-09-01 18:03 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-09-01 18:03 - 2013-09-01 18:03 - 00000000 ____D C:\ProgramData\Apple Computer
2013-09-01 17:54 - 2013-09-01 17:50 - 41404760 _____ (Apple Inc.) C:\Users\Bernhard\Downloads\QuickTimeInstaller(2).exe
2013-08-28 08:00 - 2013-08-28 08:00 - 00452407 _____ C:\Users\Bernhard\Downloads\eff_flux_mail.zip
2013-08-27 14:22 - 2013-08-27 14:22 - 01392906 _____ C:\Users\Bernhard\Downloads\licensecrawler130.zip
2013-08-27 14:22 - 2013-08-27 14:22 - 00000000 ____D C:\Users\Bernhard\Downloads\licensecrawler130
2013-08-27 13:15 - 2013-04-29 06:44 - 00000000 ____D C:\Users\Bernhard\Desktop\Zitate
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Neuer Ordner
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Kalender
2013-08-26 08:03 - 2013-08-26 08:03 - 00000000 ____D C:\Users\Bernhard\Desktop\Neuer Ordner (8)
2013-08-26 07:38 - 2013-01-06 22:48 - 00000000 ____D C:\Users\Bernhard\Desktop\PC Homepage

Files to move or delete:
====================
C:\Users\Bernhard\AppData\Roaming\CamLayout.ini
C:\Users\Bernhard\AppData\Roaming\CamShapes.ini
C:\Users\Bernhard\AppData\Roaming\CamStudio.Producer.Data.ini


Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Bernhard\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Bernhard\AppData\Local\Temp\bitdefender_isecurity_[quickscan].exe
C:\Users\Bernhard\AppData\Local\Temp\finishInstall_nsn2664.tmp_.exe
C:\Users\Bernhard\AppData\Local\Temp\ICReinstall_CamStudio2.7r316.exe
C:\Users\Bernhard\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Bernhard\AppData\Local\Temp\ox1075422086.tmp.exe
C:\Users\Bernhard\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Bernhard\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-24 10:12

==================== End Of Log ============================
--- --- ---
__________________
Alt 25.09.2013, 09:20   #4
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Hi,
hier die Adittion.txt:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 24-09-2013
Ran by Bernhard at 2013-09-25 09:46:39
Running from C:\Users\Bernhard\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security CBE (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security CBE (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security CBE (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

1&1 Surf-Stick (x32 Version: 1.0.0.2)
4500_G510gm_Help (x32 Version: 000.0.440.000)
4500G510gm (x32 Version: 000.0.423.000)
4500G510gm_Software_Min (x32 Version: 000.0.423.000)
64 Bit HP CIO Components Installer (Version: 7.2.8)
Adobe AIR (x32 Version: 3.1.0.4880)
Adobe Digital Editions 2.0 (x32 Version: 2.0)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.175)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.168)
Adobe Reader XI (11.0.04) - Deutsch (x32 Version: 11.0.04)
Advanced Driver Updater (x32 Version: 2.1.1086.15261)
ALDI SÜD Mah Jong (x32)
Amazon Kindle (HKCU)
AMI VR-pulse OS Switcher (Version: 1.1)
Any Video Converter 5.0.5 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Software Update (x32 Version: 2.1.3.127)
ArcSoft PhotoImpression 5 (x32)
ArcSoft VideoImpression 2 (x32)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Core Tuner 2 v.2.0.1 (x32 Version: 2.01)
Ashampoo HDD Control 2 v.2.1.0 (x32 Version: 2.1.0)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Ashampoo Video Styler 2013 v.1.0.1 (x32 Version: 1.0.1)
Ashampoo WinOptimizer 10 v.10.2.5 (x32 Version: 10.02.05)
Audacity 2.0.2 (x32 Version: 2.0.2)
Audials (x32 Version: 10.2.19305.500)
AVM FRITZ!Box Monitor (x32)
Balabolka (x32 Version: 2.6.0.538)
Biet-O-Matic v2.14.10 (x32 Version: 2.14.10)
Bonanza Deals (remove only) (x32 Version: 5.0.1.0)
BrainWave Generator (x32)
BroadCam Video Streaming Server (x32)
BufferChm (x32 Version: 130.0.331.000)
CamStudio version 2.7 (x32 Version: 2.7)
CCleaner (Version: 3.25)
Cobian Backup 11 Gravity (x32)
ColorPage-SF600  (x32 Version: V4.3.0)
concept/design onlineTV 8 (x32 Version: 8.2.0.1)
concept/design Video Jukebox (x32 Version: Video Jukebox)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414a)
CyberLink PhotoDirector 2011 (x32 Version: 2.0.2430)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3621)
CyberLink PowerDirector (x32 Version: 9.0.0.3621)
CyberLink PowerDVD 10 (x32 Version: 10.0.3622.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.2219)
D3DX10 (x32 Version: 15.4.2368.0902)
DarkWave Studio 4.0.9 (x32 Version: 4.0.9)
Dealply (HKCU)
Debut Video Capture Software (x32)
Destinations (x32 Version: 130.0.0.0)
DeviceDiscovery (x32 Version: 130.0.372.000)
DocMgr (x32 Version: 130.0.000.000)
DocProc (x32 Version: 13.0.0.0)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.11)
Express Burn (x32)
Express Dictate (x32)
Express Rip (x32)
f4 2012 (x32)
Fax (x32 Version: 130.0.418.000)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (x32 Version: 15.4.5722.2)
FormatFactory 3.1.1 (x32 Version: 3.1.1)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free PDF to Word Converter 2.0 (x32)
Free PDF to Word Doc Converter v1.1 (x32 Version: 1.1)
Free Screen Video Recorder version 2.5.30.725 (x32 Version: 2.5.30.725)
FreeMake Toolbar (x32 Version: 6.8.9.0)
FreeMind (x32 Version: 0.9.0)
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Golden Records Schallplatten in CD Konverter (x32)
Google Chrome (HKCU Version: 29.0.1547.76)
Google Drive (x32 Version: 1.11.4865.2530)
Google Earth (x32 Version: 7.1.1.1888)
Google Talk Plugin (x32 Version: 4.6.3.15268)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
GoToMeeting 5.5.0.1133 (HKCU Version: 5.5.0.1133)
GPBaseService2 (x32 Version: 130.0.371.000)
hola Chrome Toolbar (x32)
holasearch toolbar   (x32 Version: 1.8.16.16)
Hotspot Shield 2.93 (x32 Version: 2.93)
Hotspot Shield Toolbar (x32 Version: 6.10.2.5)
HP Customer Participation Program 13.0 (Version: 13.0)
HP Document Manager 2.0 (Version: 2.0)
HP Imaging Device Functions 13.0 (Version: 13.0)
HP Officejet 4500 G510g-m (Version: 13.0)
HP Smart Web Printing 4.5 (Version: 4.5)
HP Solution Center 13.0 (Version: 13.0)
HP Update (x32 Version: 4.000.011.006)
HPDiagnosticAlert (x32 Version: 1.00.0000)
HPProductAssistant (x32 Version: 130.0.371.000)
HPSSupply (x32 Version: 130.0.371.000)
iMesh (HKCU Version: 12.0.0.133554)
Intel PROSet Wireless
Intel(R) Management Engine Components (x32 Version: 8.0.0.1351)
Intel(R) OpenCL CPU Runtime (x32)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2618)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (Version: 15.0.0.0059)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 2.0.0.0086)
Intel(R) Rapid Storage Technology (x32 Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (x32 Version: 1.0.1.209)
Intel(R) WiDi (x32 Version: 3.0.12.0)
Intel(R) Wireless Display
Intel® PROSet/Wireless WiFi Software (Version: 15.00.0000.0642)
Intel® Trusted Connect Service Client (Version: 1.23.216.0)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.0)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kastor - All Video Downloader V 5.2.0 (x32 Version: 5.2.0.0)
Kastor - Stream Recorder V 1.0 (x32 Version: 1.0.0.0)
K-Lite Codec Pack 5.2.0 (Full) (x32 Version: 5.2.0)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Live Aquarium HD (x32 Version: 3)
MarketResearch (x32 Version: 130.0.374.000)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme (x32 Version: 12.0.4518.1014)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000)
Microsoft Reader (x32)
Microsoft Reader Text-to-Speech deutsch (x32 Version: 01.00.0000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1)
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1)
MixPad Audiodatei-Mixer (x32)
Mozilla Firefox 20.0.1 (x86 en-US) (x32 Version: 20.0.1)
Mozilla Firefox 24.0 (x86 de) (x32 Version: 24.0)
Mozilla Maintenance Service (x32 Version: 24.0)
Mozilla Thunderbird 24.0 (x86 de) (x32 Version: 24.0)
MSVC80_x64_v2 (Version: 1.0.3.0)
MSVC80_x86_v2 (x32 Version: 1.0.3.0)
MSVC90_x64 (Version: 1.0.1.2)
MSVC90_x86 (x32 Version: 1.0.1.2)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
Network64 (Version: 130.0.550.000)
Network64 (Version: 140.0.221.000)
No23 Recorder (x32 Version: 2.1.0.3)
No23Live (x32 Version: 1.0.4.19)
Nokia Connectivity Cable Driver (x32 Version: 7.1.101.0)
Nokia Suite (x32 Version: 3.7.22.0)
Norton Internet Security CBE (x32 Version: 20.4.0.40)
OCR Software by I.R.I.S. 13.0 (Version: 13.0)
Ocster Backup Pro (Version: 7.10)
OfficeAdRemover (x32)
OpenOffice.org 3.4.1 (x32 Version: 3.41.9593)
Orga-Nicer (x32 Version: 3.3.0.0)
PC Connectivity Solution (x32 Version: 12.0.76.0)
PC Performer (x32 Version: 11.10)
PCSUITE SHREDDER (x32)
PHotkey (x32 Version: 1.00.0055)
PhotoStage Slideshow Producer (x32)
PhraseExpress v9.1.8 (x32 Version: 9.1.8)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922)
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Prism Video File Converter (x32)
Protect Disc License Helper 1.0.118 (x32 Version: 1.0.118)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.11)
QuickTime (x32 Version: 7.74.80.86)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Rainbow Folders (x32 Version: 2.05)
RealDownloader (x32 Version: 1.3.1)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0)
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0)
RealPlayer (x32 Version: 16.0.0)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6559)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30127)
RealUpgrade 1.1 (x32 Version: 1.1.0)
RecordPad Audiorekorder (x32)
SAMSUNG Intelli-studio (x32 Version: 3.1.32.1)
Scan (x32 Version: 13.0.0.0)
Shop for HP Supplies (Version: 13.0)
Skype™ 6.6 (x32 Version: 6.6.106)
SmartWebPrinting (x32 Version: 130.0.373.000)
SolutionCenter (x32 Version: 130.0.373.000)
SoundTap Audiostream-Rekorder (x32)
SPCA1528 PC Driver (x32 Version: 2.2.2.0)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Spyware Terminator 2012 (x32 Version: 3.0.0.82)
StarMoney (x32 Version: 3.0.6.28)
StarMoney 8.0  (x32 Version: 8.0)
Status (x32 Version: 130.0.373.000)
Stickies 7.1d (x32)
StreamTransport version: 1.0.2.2171 (x32)
SUPERAntiSpyware (Version: 5.6.1020)
Switch Audiodatei-Konverter (x32)
Symantec Threat Monitor, Powered By DeepSight Screen Saver (x32)
Synaptics Pointing Device Driver (Version: 16.0.0.3)
Telescope Driver (x32 Version: 10.30.09)
Toolbox (x32 Version: 130.0.648.000)
TrayApp (x32 Version: 130.0.376.000)
TreeSize Free V2.7 (x32 Version: 2.7)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Verbose Text to Speech (x32)
Video DVD Maker v3.30.0.75 (x32)
VideoPad Video Editor (x32)
VirtualDJ Home FREE (x32 Version: 7.4)
VirusTotal Uploader 2.0 (x32)
watchmi (x32 Version: 3.0.0)
WavePad Audio-Editor (x32 Version: 5.58)
WebReg (x32 Version: 130.0.132.017)
WinDirStat 1.1.2 (HKCU)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3555.0308)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3555.0308)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8)
Windows Speech Recognition Macros (x32 Version: 1.0.6862.19)
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver  (05/31/2012 7.1.2.0) (Version: 05/31/2012 7.1.2.0)
Windows-Treiberpaket - Product Image  (05/02/2002 1.0.1.1) (Version: 05/02/2002 1.0.1.1)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001)
Wisdom-soft AutoScreenRecorder 3.1 Pro (x32)
Wondershare Video Editor(Build 3.1.1) (x32 Version: 3.1.1.1)

==================== Restore Points  =========================

08-05-2013 07:35:18 Windows Defender Checkpoint
15-05-2013 15:45:27 Geplanter Prüfpunkt
16-05-2013 09:13:36 Installed Java 7 Update 21
24-05-2013 12:34:14 Geplanter Prüfpunkt
24-05-2013 16:37:04 OpenOffice.org 3.4.1 wird installiert
29-05-2013 13:25:27 Installiert YouCam
31-05-2013 06:59:34 Windows Update
31-05-2013 11:50:58 Installed VirtualDJ Home FREE
12-06-2013 07:33:41 Geplanter Prüfpunkt
14-06-2013 10:50:42 Windows Update
12-07-2013 08:45:09 Windows Update
19-07-2013 05:48:14 Windows Update
26-07-2013 04:17:13 Removed Java 7 Update 17 (64-bit)
26-07-2013 04:18:41 Removed Java 7 Update 21
26-07-2013 04:25:15 Installed Java 7 Update 25
29-07-2013 10:07:14 Installiert StarMoney
09-08-2013 03:38:29 Windows Update
01-09-2013 15:57:19 Installed QuickTime
01-09-2013 16:01:43 Installed QuickTime
02-09-2013 05:28:53 Installed Network64
03-09-2013 04:58:36 Windows Update
04-09-2013 13:25:20 Installed SPCA1528 PC Driver
04-09-2013 13:27:30 Installiert PhotoImpression
04-09-2013 13:31:03 Installed VideoImpression
17-09-2013 16:12:59 Windows Update
21-09-2013 11:52:52 Gerätetreiber-Paketinstallation: Apowersoft Audio-, Video- und Gamecontroller

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02F28652-2F57-42FE-9F45-7C9E8E91E7A5} - System32\Tasks\EPUpdater => C:\Users\Bernhard\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-08-04] ()
Task: {03094DBB-E3F2-4765-8557-51EB0230CDE0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-03] (Google Inc.)
Task: {09710D90-1ACD-4C46-A9FA-2DEDE5D2A8E6} - System32\Tasks\PC Performer_UPDATES => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2013-06-19] (PerformerSoft LLC)
Task: {0D8F44A2-12F9-4D2D-810C-416C83F570A6} - System32\Tasks\{7F7E2F3B-EF44-43AA-9947-935E9B56B37C} => C:\Program Files (x86)\ColorPage-SF600\DigiScan.exe [2011-03-25] (PLUSTEK)
Task: {108CA268-9E3F-444E-940B-285A983F26EF} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000UA => C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-21] (Google Inc.)
Task: {1253A9A4-F396-498A-8533-D5593CE77E41} - System32\Tasks\{86587C49-245F-4A8B-9A0A-486EB72072C1} => C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [2009-07-06] (AVM Berlin)
Task: {12DB083D-1898-4115-9A3C-C25235466514} - System32\Tasks\Dealply => C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe [2013-04-12] ()
Task: {143E9C67-70DB-45A4-824C-F6F026A9BDD2} - System32\Tasks\{99E55DA8-7CB1-41BA-A0D1-C985A76C7213} => C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [2009-07-06] (AVM Berlin)
Task: {183F8C73-8574-4E3F-8D32-BDA5C03C02D1} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2012-10-29] (CyberLink Corp.)
Task: {1CB02D47-A114-4C62-97DF-1D65A1922E38} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000Core => C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-21] (Google Inc.)
Task: {33F49D50-8D2D-43B4-975A-8F3BC0C0F4EF} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {347DB677-28B4-475A-91D5-030F4F7DAF3D} - System32\Tasks\Norton Internet Security CBE\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {34972354-32B6-4AA0-8B09-A11B6B59EC88} - System32\Tasks\{485E4FEF-32A1-4B05-8080-C4F815720167} => C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [2009-07-06] (AVM Berlin)
Task: {3AD1B4E5-F55E-41C2-AAA6-11129474AD39} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-19] (Adobe Systems Incorporated)
Task: {40C79675-1C06-453B-9CCB-19FE4D13E76B} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineCore => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-09-22] (BonanzaDeals)
Task: {557F0C11-B806-4D10-B325-CDAE6DEA71F4} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-03-06] (RealNetworks, Inc.)
Task: {5B04776D-F2FC-4941-B435-DE63FB9B90BA} - System32\Tasks\{1D1A8A18-7950-41F2-BD97-5641FB750FB2} => C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [2009-07-06] (AVM Berlin)
Task: {5FAE9FF5-BC24-41EF-A40D-75730FA50529} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {6ED8E656-2FB6-4426-A7E5-957801F1FE4A} - System32\Tasks\BonanzaDealsLiveUpdateTaskMachineUA => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe [2013-09-22] (BonanzaDeals)
Task: {7790F5CA-8F62-47E6-A91D-5E99D9D90CED} - System32\Tasks\{BB4D84AD-6D4A-4AE9-8BDD-6E099740DBD6} => C:\Program Files (x86)\ColorPage-SF600\DigiScan.exe [2011-03-25] (PLUSTEK)
Task: {82B8EC57-EBE3-44C0-9E69-B67E091D1FD6} - \DealPlyUpdate No Task File
Task: {83F3BC3F-2863-4629-B3CF-D614EA574C89} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {841F8042-D954-43C9-BDC7-A6D2AB14A29E} - System32\Tasks\PC Performer => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2013-06-19] (PerformerSoft LLC)
Task: {96480441-EFC8-411C-8FA9-1D73D888B756} - System32\Tasks\{2DD33BBB-46F0-4858-A078-E254CE47E6B3} => C:\Program Files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe [2009-07-06] (AVM Berlin)
Task: {A71326E8-9E9F-42A3-BBDE-C42B56A0D748} - System32\Tasks\NCH Software\prismShakeIcon => C:\Program Files (x86)\NCH Software\Prism\Prism.exe [2012-11-22] (NCH Software)
Task: {A77BF09F-90A6-4495-A888-09B18C3584C2} - System32\Tasks\AdvancedDriverUpdater_UPDATES => C:\Program Files (x86)\Advanced Driver Updater\adu.exe [2013-04-18] (Systweak Inc)
Task: {AB6EB7EA-CC34-42A8-AB2C-806E13212C6F} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\WSCStub.exe [2013-06-04] (Symantec Corporation)
Task: {ADC7B9D6-7BB7-42D3-A480-2C00227B6B37} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {AFCD851D-DBE8-4F3C-8654-A8E704EF6308} - System32\Tasks\PC Performer_DEFAULT => C:\Program Files (x86)\PC Performer\PCPerformer.exe [2013-06-19] (PerformerSoft LLC)
Task: {B9C5450C-ADA4-4F8B-A70C-AA1EC55124AC} - System32\Tasks\DealPlyLiveUpdateTaskMachineCore => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-09-21] (DealPly Technologies Ltd)
Task: {BE3DD460-FECC-489E-AD28-B30A9B70A580} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {BE86AB73-4975-47ED-BE85-E9AF3B730546} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {BFF44E6B-0E2B-40C4-87A7-48A8D337F257} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {CBB5779C-CD71-4D3A-B6CC-565C1E5492AF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-11-24] (Piriform Ltd)
Task: {CDF3F9DD-47A6-4D1C-ACA3-4B69FEB88881} - System32\Tasks\{753244C6-DC45-427A-8BCE-FAF0BEDAC406} => C:\Program Files (x86)\ColorPage-SF600\DigiScan.exe [2011-03-25] (PLUSTEK)
Task: {D24B29CC-37A2-4F0D-8F8C-8BF9B56CC610} - System32\Tasks\NCH Swift Sound\wavepadDowngrade => C:\Program Files\WavePad\wavepad.exe [2011-10-17] (NCH Software)
Task: {DD9E7AF3-2FEC-4132-B34D-50DE9132323F} - System32\Tasks\Norton Internet Security CBE\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\SymErr.exe [2013-06-04] (Symantec Corporation)
Task: {E1904FFF-A3F8-4228-875A-C154A5B636C5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-05-03] (Google Inc.)
Task: {E1DAFA67-B28E-4EF4-A8BF-6FB11392E41B} - System32\Tasks\BonanzaDealsUpdate => C:\Program
Task: {E25FC79C-D625-4267-A978-B7A9459D83EA} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {F1934EDC-62E8-4E47-8CA5-E82CCF9D4E27} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4070342091-3793343965-3738386277-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-03-06] (RealNetworks, Inc.)
Task: {F5D61797-8777-40D7-9444-E81A2100B22F} - System32\Tasks\AdvancedDriverUpdaterRunAtStartup => C:\Program Files (x86)\Advanced Driver Updater\adu.exe [2013-04-18] (Systweak Inc)
Task: {FD471BF7-FFA8-4910-93CE-114A00866C72} - System32\Tasks\DealPlyLiveUpdateTaskMachineUA => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-09-21] (DealPly Technologies Ltd)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AdvancedDriverUpdater_UPDATES.job => C:\Program Files (x86)\Advanced Driver Updater\adu.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\BonanzaDealsLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\BonanzaDealsLive\Update\BonanzaDealsLive.exe
Task: C:\Windows\Tasks\Dealply.job => C:\Users\Bernhard\AppData\Roaming\Dealply\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job => C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000Core.job => C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000UA.job => C:\Users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PC Performer_DEFAULT.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe
Task: C:\Windows\Tasks\PC Performer_UPDATES.job => C:\Program Files (x86)\PC Performer\PCPerformer.exe

==================== Loaded Modules (whitelisted) =============

2012-02-22 00:09 - 2012-01-06 03:31 - 00438784 _____ (Intel Corporation) C:\Windows\system32\igfxrDEU.lrc
2013-07-28 15:52 - 2013-05-15 15:22 - 00117096 _____ (TODO: <Company name>) C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 10\WinOptimizerContextHandler64.dll
2013-05-25 14:55 - 2013-04-03 03:06 - 00167560 _____ (Crawler.com) C:\Program Files (x86)\Spyware Terminator\STShell64.dll
2012-04-06 20:36 - 2012-04-06 20:36 - 00360720 ____N (Ilya Morozov) C:\Program Files (x86)\Balabolka\BFileExt.dll
2012-12-05 20:36 - 2012-12-05 20:36 - 03951560 _____ () c:\Program Files\Ocster Backup\bin\ox.dll
2012-06-11 21:57 - 2012-06-11 21:57 - 00641024 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxmsw28u_xrc_vc_ox.dll
2012-06-11 21:57 - 2012-06-11 21:57 - 00622592 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxmsw28u_html_vc_ox.dll
2012-06-11 21:56 - 2012-06-11 21:56 - 03663872 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxmsw28u_core_vc_ox.dll
2012-06-11 21:55 - 2012-06-11 21:55 - 01488384 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxbase28u_vc_ox.dll
2012-06-11 21:56 - 2012-06-11 21:56 - 00875520 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxmsw28u_adv_vc_ox.dll
2012-06-11 21:57 - 2012-06-11 21:57 - 00157696 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxbase28u_xml_vc_ox.dll
2012-06-11 21:55 - 2012-06-11 21:55 - 00152576 _____ (wxWidgets development team) c:\Program Files\Ocster Backup\bin\wxbase28u_net_vc_ox.dll
2012-02-22 00:09 - 2012-01-06 03:24 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-02-22 17:58 - 2010-11-03 19:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2012-02-22 17:58 - 2012-01-20 14:07 - 03845736 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2011-12-21 03:01 - 2011-12-21 03:01 - 01079648 ____N (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4c.dll
2011-12-21 03:01 - 2011-12-21 03:01 - 00034656 ____N (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\Dolby.Interop.dll
2012-02-22 17:58 - 2011-05-02 15:27 - 00118104 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
2011-12-21 03:00 - 2011-12-21 03:00 - 00030560 ____N (Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\de\pcee4c.resources.dll
2013-09-12 21:42 - 2013-08-02 03:51 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-09-12 21:42 - 2013-08-02 03:50 - 01114112 _____ (Microsoft Corporation) C:\Windows\syswow64\kernel32.dll
2013-09-12 21:42 - 2013-08-02 03:50 - 00274944 _____ (Microsoft Corporation) C:\Windows\syswow64\KERNELBASE.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\USER32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00311296 _____ (Microsoft Corporation) C:\Windows\syswow64\GDI32.dll
2009-07-14 01:25 - 2009-07-14 03:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\syswow64\LPK.dll
2013-01-17 13:12 - 2012-11-22 06:45 - 00626688 _____ (Microsoft Corporation) C:\Windows\syswow64\USP10.dll
2012-02-21 22:48 - 2011-12-16 09:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\syswow64\msvcrt.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\ADVAPI32.dll
2009-07-14 01:11 - 2009-07-14 03:16 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2013-08-19 00:04 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\syswow64\RPCRT4.dll
2012-07-11 07:13 - 2012-06-02 06:34 - 00096768 _____ (Microsoft Corporation) C:\Windows\syswow64\SspiCli.dll
2009-07-14 01:12 - 2009-07-14 03:15 - 00036864 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPTBASE.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00828928 _____ (Microsoft Corporation) C:\Windows\syswow64\MSCTF.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\SHLWAPI.dll
2012-02-21 22:24 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\OLEAUT32.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00008704 _____ (Microsoft Corporation) C:\Windows\syswow64\NSI.dll
2013-09-12 21:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\SHELL32.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\WININET.dll
2009-07-14 01:15 - 2009-07-14 03:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\syswow64\normaliz.DLL
2013-09-17 18:31 - 2013-08-10 05:58 - 02048000 _____ (Microsoft Corporation) C:\Windows\syswow64\iertutil.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\syswow64\urlmon.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\COMDLG32.dll
2013-08-19 08:41 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\syswow64\CRYPT32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00034304 _____ (Microsoft Corporation) C:\Windows\syswow64\MSASN1.dll
2012-05-24 07:48 - 2012-03-01 07:33 - 00159232 _____ (Microsoft Corporation) C:\Windows\syswow64\imagehlp.dll
2013-08-19 08:41 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\syswow64\WINTRUST.dll
2009-07-14 01:44 - 2009-07-14 03:15 - 00522240 _____ (Microsoft Corporation) C:\Windows\syswow64\CLBCatQ.DLL
2010-11-21 05:23 - 2010-11-21 05:23 - 01667584 _____ (Microsoft Corporation) C:\Windows\syswow64\SETUPAPI.dll
2012-02-21 22:09 - 2011-05-24 12:39 - 00145920 _____ (Microsoft Corporation) C:\Windows\syswow64\CFGMGR32.dll
2012-02-21 22:09 - 2011-05-24 12:40 - 00064512 _____ (Microsoft Corporation) C:\Windows\syswow64\DEVOBJ.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00269824 _____ (Microsoft Corporation) C:\Windows\syswow64\WLDAP32.dll
2013-06-09 10:07 - 2012-05-30 08:51 - 00699280 ____R () C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.4.0.40\wincfi39.dll
2012-02-22 20:12 - 2011-11-21 11:14 - 00017704 _____ (TODO: <Company name>) C:\Program Files (x86)\CyberLink\YouCam\Custom\Lang\DEU\IM.dll
2009-07-14 02:03 - 2009-07-14 03:15 - 00066560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\devenum.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINMM.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00190976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qcap.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00120320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVFW32.dll
2009-07-14 01:41 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VERSION.dll
2012-02-21 22:41 - 2011-10-26 06:32 - 01328128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00485888 _____ (Microsoft Corporation) C:\Windows\syswow64\comdlg32.dll
2012-02-21 22:24 - 2011-08-27 06:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\syswow64\oleaut32.dll
2013-09-12 21:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.dll
2010-11-21 05:23 - 2010-11-21 05:23 - 00206848 _____ (Microsoft Corporation) C:\Windows\syswow64\WS2_32.dll
2013-07-15 11:21 - 2013-06-04 11:27 - 04393288 _____ (Ashampoo) C:\Program Files (x86)\Ashampoo\Ashampoo Core Tuner 2\ash_inet2.dll
2009-07-14 01:15 - 2009-07-14 03:16 - 00006144 _____ (Microsoft Corporation) C:\Windows\syswow64\PSAPI.DLL
2010-11-21 05:23 - 2010-11-21 05:23 - 00350208 _____ (Microsoft Corporation) C:\Windows\syswow64\shlwapi.DLL
2009-07-14 01:33 - 2009-07-14 03:17 - 00249680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcryptprimitives.dll
2010-08-04 01:39 - 2010-08-04 01:39 - 00619816 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2010-08-04 01:39 - 2010-08-04 01:39 - 00013096 ____N () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2013-09-04 00:26 - 2013-09-04 00:26 - 00197560 _____ (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130903.002\UMEngx86.dll
2013-02-08 20:03 - 2009-07-06 03:00 - 00368640 ____N (AVM Berlin) C:\Program Files (x86)\FRITZ!Box Monitor\fBoxAcc.dll
2013-02-08 20:03 - 2009-07-06 03:00 - 00266240 ____N (AVM Berlin) C:\Program Files (x86)\FRITZ!Box Monitor\avmcsock.dll
2013-02-08 20:03 - 2009-07-06 03:00 - 00012800 ____N (AVM Berlin) C:\Program Files (x86)\FRITZ!Box Monitor\avmssl.dll
2013-02-08 20:03 - 2009-07-06 03:00 - 00184320 ____N (AVM Berlin) C:\Program Files (x86)\FRITZ!Box Monitor\upnpapicli.dll
2009-07-14 01:15 - 2009-07-14 03:10 - 00002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SFC.DLL
2012-08-10 16:51 - 2012-08-10 16:51 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00119808 _____ (Microsoft Corporation) C:\Windows\syswow64\IMM32.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00257024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.DLL
2012-07-11 07:13 - 2012-06-02 06:40 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 14332928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2009-07-14 01:29 - 2009-07-14 03:16 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qmgrprxy.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-17 18:31 - 2013-08-10 05:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\syswow64\wininet.dll
2013-05-25 14:55 - 2013-05-25 14:55 - 01900544 _____ (Crawler.com) C:\Program Files (x86)\Spyware Terminator\TorrentDll.dll
2013-05-26 17:30 - 2013-09-11 04:26 - 03279768 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2013-07-24 06:08 - 2013-09-25 09:17 - 00388512 _____ (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\components\ipsff23.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00309760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\thumbcache.dll
2012-02-21 22:24 - 2011-08-27 06:26 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleacc.dll
2013-09-25 09:17 - 2013-08-21 07:09 - 01259424 _____ (Symantec Corporation) C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130924.001\Scxpx86.dll
2013-09-10 20:25 - 2013-09-10 20:25 - 16177544 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00833024 _____ (Microsoft Corporation) C:\Windows\syswow64\user32.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\USERENV.dll
2009-07-14 01:12 - 2009-07-14 03:16 - 00031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\profapi.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00320000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WINSPOOL.DRV
2009-07-14 01:55 - 2009-07-14 03:15 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MPR.dll
2013-09-12 21:42 - 2013-08-02 03:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\AppPatch\AcWow64.DLL
2013-09-22 19:43 - 2013-09-03 12:44 - 00431600 _____ () C:\Users\Bernhard\AppData\Roaming\BabSolution\Shared\BUSolution.dll
2009-07-14 01:55 - 2009-07-14 03:16 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSOCK32.dll
2012-08-16 15:12 - 2012-08-16 15:12 - 00773968 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MSVCR100.dll
2011-06-11 02:58 - 2011-06-11 02:58 - 00421200 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MSVCP100.dll
2009-07-14 01:24 - 2009-07-14 03:15 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00640512 _____ (Microsoft Corporation) C:\Windows\syswow64\advapi32.DLL
2013-09-12 21:24 - 2013-07-26 03:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\syswow64\shell32.DLL
2010-11-21 05:24 - 2010-11-21 05:24 - 01414144 _____ (Microsoft Corporation) C:\Windows\syswow64\ole32.DLL
2011-05-09 10:49 - 2011-05-09 10:49 - 00176936 ____N (Conduit Ltd.) C:\Program Files (x86)\FreeMake\prxtbFree.dll
2013-04-14 14:35 - 2013-04-14 14:35 - 00335136 _____ (Conduit Ltd.) C:\Users\Bernhard\AppData\LocalLow\FreeMake\ldrtbFre2.dll
2013-04-14 14:35 - 2013-04-14 14:35 - 05071648 _____ (Conduit Ltd.) C:\Users\Bernhard\AppData\LocalLow\FreeMake\tbFre2.dll
2013-04-14 14:35 - 2013-04-14 14:35 - 01092384 _____ (Conduit Ltd.) C:\Users\Bernhard\AppData\LocalLow\FreeMake\hktbFre2.dll
2011-05-09 10:49 - 2011-05-09 10:49 - 00176936 ____N (Conduit Ltd.) C:\Program Files (x86)\Hotspot_Shield\prxtbHots.dll
2013-04-14 14:35 - 2013-04-14 14:35 - 00335136 _____ (Conduit Ltd.) C:\Users\Bernhard\AppData\LocalLow\Hotspot_Shield\ldrtbHot0.dll
2013-04-14 14:35 - 2013-04-14 14:35 - 05071648 _____ (Conduit Ltd.) C:\Users\Bernhard\AppData\LocalLow\Hotspot_Shield\tbHot0.dll
2010-11-21 05:24 - 2010-11-21 05:24 - 00380416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SXS.DLL
2009-05-21 22:54 - 2009-05-21 22:54 - 00381440 ____N (sqlite.org) C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\xre\components\sqlite3.dll
2009-05-21 22:54 - 2009-05-21 22:54 - 00596992 ____N (Netscape Communications Corporation) C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\xre\components\js3250.dll
2013-03-13 12:43 - 2013-03-13 12:43 - 00255896 _____ (holasearch.com) C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll
2012-11-28 07:52 - 2013-04-22 21:11 - 00233288 _____ (AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll
2011-06-23 15:20 - 2011-06-23 15:20 - 00638560 ____N (Conduit Ltd.) C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll
2011-10-06 12:13 - 2011-10-06 12:13 - 00390520 ____N (PriceGong) C:\Users\Bernhard\AppData\LocalLow\FreeMake\plugins\{5E1360DC-8FA8-40df-A8CD-FC3831B3634B}\3.5.3\bin\PriceGongIE.dll
2013-07-12 11:09 - 2013-07-12 11:09 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2013-06-09 10:07 - 2012-05-30 08:51 - 00699280 ____R () C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\wincfi39.dll
2013-03-13 12:43 - 2013-03-13 12:43 - 00724888 _____ (holasearch.com) C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchApp.dll
2013-03-13 12:43 - 2013-03-13 12:43 - 00596376 _____ (holasearch.com) C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll
2013-03-13 12:43 - 2013-03-13 12:43 - 00329624 _____ (holasearch.com) C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchTlbr.dll
2013-09-17 18:31 - 2013-08-10 05:58 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWow64\jscript.dll
2009-07-14 01:27 - 2009-07-14 03:16 - 00561664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uiautomationcore.dll
2013-09-19 23:25 - 2013-09-19 23:25 - 16244616 ____R (Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_8_800_175.ocx
2013-07-12 11:09 - 2013-07-12 11:09 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dxtrans.dll
2009-07-14 01:28 - 2009-07-14 03:15 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ddrawex.dll
2009-07-14 01:27 - 2009-07-14 03:15 - 00531968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DDRAW.dll
2009-07-14 01:25 - 2009-07-14 03:15 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DCIMAN32.dll
2013-07-12 11:09 - 2013-07-12 11:09 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Dxtmsft.dll
2009-07-14 02:14 - 2009-07-14 03:14 - 00070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ATL.DLL

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (09/25/2013 09:41:51 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/23/2013 10:34:27 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/23/2013 10:33:42 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/23/2013 10:30:46 PM) (Source: AHDDC2_Service.exe) (User: )
Description: Cannot terminate an externally created thread

Error: (09/23/2013 09:19:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: EXPLORER.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4
Name des fehlerhaften Moduls: msi.dll, Version: 5.0.7601.17807, Zeitstempel: 0x4f80321a
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000220815
ID des fehlerhaften Prozesses: 0x624
Startzeit der fehlerhaften Anwendung: 0xEXPLORER.EXE0
Pfad der fehlerhaften Anwendung: EXPLORER.EXE1
Pfad des fehlerhaften Moduls: EXPLORER.EXE2
Berichtskennung: EXPLORER.EXE3

Error: (09/23/2013 06:28:46 AM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (09/22/2013 08:16:06 PM) (Source: MsiInstaller) (User: Bernhard-PC)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\GoogleUpdateHelper.msi

Error: (09/22/2013 07:40:49 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/22/2013 07:40:46 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (09/22/2013 07:40:38 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (09/24/2013 00:25:30 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (09/23/2013 10:33:30 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "FreemakeVideoCapture" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/23/2013 10:33:27 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SPCA1528 Video Camera Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/23/2013 10:31:34 PM) (Source: Application Popup) (User: )
Description: Treiber ACPI hat eine ungültige ID für das untergeordnete Gerät (1) zurückgegeben.

Error: (09/23/2013 02:44:37 PM) (Source: DCOM) (User: )
Description: {4EB61BAC-A3B6-4760-9581-655041EF4D69}

Error: (09/23/2013 02:44:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BonanzaDealsLive-Dienst (bonanzadealslive)" wurde mit folgendem Fehler beendet: 
%%-2147467243

Error: (09/23/2013 02:44:08 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "DealPly Live-Dienst (dealplylive)" wurde mit folgendem Fehler beendet: 
%%-2147467243

Error: (09/23/2013 06:29:23 AM) (Source: DCOM) (User: )
Description: {9EA8702C-EEDB-4731-BE68-E9A167DD3597}

Error: (09/23/2013 06:29:23 AM) (Source: DCOM) (User: )
Description: {F48FC5B2-094A-44C7-B48C-289738C9582D}

Error: (09/23/2013 06:28:53 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BonanzaDealsLive-Dienst (bonanzadealslive)" wurde mit folgendem Fehler beendet: 
%%-2147467243


Microsoft Office Sessions:
=========================
Error: (09/25/2013 09:41:51 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe

Error: (09/23/2013 10:34:27 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/23/2013 10:33:42 PM) (Source: MemeoBackgroundService)(User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (09/23/2013 10:30:46 PM) (Source: AHDDC2_Service.exe)(User: )
Description: Cannot terminate an externally created thread

Error: (09/23/2013 09:19:51 PM) (Source: Application Error)(User: )
Description: EXPLORER.EXE6.1.7601.175674d672ee4msi.dll5.0.7601.178074f80321ac0000005000000000022081562401ceb568413ebc62C:\WINDOWS\EXPLORER.EXEC:\Windows\system32\msi.dll1e0e4fac-2485-11e3-9c24-d2deef194b79

Error: (09/23/2013 06:28:46 AM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (09/22/2013 08:16:06 PM) (Source: MsiInstaller)(User: Bernhard-PC)
Description: Product: Google Update Helper -- Error 1316. A network error occurred while attempting to read from the file: C:\Program Files (x86)\BonanzaDealsLive\Update\1.3.23.0\GoogleUpdateHelper.msi(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (09/22/2013 07:40:49 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe

Error: (09/22/2013 07:40:46 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe

Error: (09/22/2013 07:40:38 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe


==================== Memory info =========================== 

Percentage of memory in use: 61%
Total physical RAM: 8086.48 MB
Available physical RAM: 3087.32 MB
Total Pagefile: 16171.15 MB
Available Pagefile: 11433.85 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:414.66 GB) (Free:2.9 GB) NTFS
Drive d: (Recover) (Fixed) (Total:50 GB) (Free:15.71 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=415 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=50 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================

Alt 25.09.2013, 18:13   #5
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 25.09.2013, 21:14   #6
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Danke, hier die ComboFix.txt:
Code:
ATTFilter
ComboFix 13-09-24.02 - Bernhard 25.09.2013  21:32:33.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8086.3427 [GMT 2:00]
ausgeführt von:: c:\users\Bernhard\Downloads\ComboFix.exe
AV: Norton Internet Security CBE *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security CBE *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security CBE *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\DSearchLink
c:\programdata\DSearchLink\DSearchLink.exe
c:\programdata\Roaming
c:\users\Admin\AppData\Roaming\.#
c:\users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Bernhard\AppData\Local\lame_enc.dll
c:\users\Bernhard\AppData\Local\no23xwrapper.dll
c:\users\Bernhard\AppData\Local\ogg.dll
c:\users\Bernhard\AppData\Local\vorbis.dll
c:\users\Bernhard\AppData\Local\vorbisenc.dll
c:\users\Bernhard\AppData\Local\vorbisfile.dll
c:\users\Bernhard\AppData\Roaming\.#
c:\users\Bernhard\AppData\Roaming\.#\MBX@132C@672740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@132C@672770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@139BC@6B2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@139BC@6B2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1490@1FF2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1490@1FF2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@14CBC@232740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@14CBC@232770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1AD8@2022740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1AD8@2022770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1C50@2C2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1C50@2C2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1CB4@1D82740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@1CB4@1D82770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2234@292740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2234@292770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2444@1FB2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2444@1FB2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@24F0@2A2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@24F0@2A2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@257C@20F2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@257C@20F2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2854@702740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2854@702770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2B40@20A2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2B40@20A2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2CA0@2092740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@2CA0@2092770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@31D8@1EE2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@31D8@1EE2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@331C@2A2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@331C@2A2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@36310@1F12740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@36310@1F12770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@36B24@2082740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@36B24@2082770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3944@1F82740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3944@1F82770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3960@1F22740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3960@1F22770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3BC8@21D2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3BC8@21D2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3C14@2082740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3C14@2082770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3E2C@1FD2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@3E2C@1FD2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@5146C@6A2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@5146C@6A2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@54C@362740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@54C@362770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@844@1F2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@844@1F2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@A9C@2F2740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@A9C@2F2770.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@FD8@2142740.###
c:\users\Bernhard\AppData\Roaming\.#\MBX@FD8@2142770.###
c:\users\Bernhard\AppData\Roaming\Microsoft\Windows\Recent\Your Software Deals.url
c:\users\Bernhard\Documents\~WRL1922.tmp
c:\windows\SysWow64\NSREG.DLL
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-08-25 bis 2013-09-25  ))))))))))))))))))))))))))))))
.
.
2013-09-25 19:39 . 2013-09-25 19:39	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-09-25 19:39 . 2013-09-25 19:39	--------	d-----w-	c:\users\_ocster_backup_\AppData\Local\temp
2013-09-25 07:44 . 2013-09-25 07:44	--------	d-----w-	C:\FRST
2013-09-25 07:17 . 2013-09-25 07:17	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\MusicNet
2013-09-25 07:16 . 2013-09-25 07:19	--------	d-----w-	c:\users\Bernhard\AppData\Local\iMesh
2013-09-25 07:16 . 2013-09-25 07:16	--------	d-----w-	c:\program files (x86)\iMesh Applications
2013-09-23 20:06 . 2013-09-11 02:28	271256	----a-w-	c:\program files (x86)\Mozilla Firefox\browser\components\browsercomps.dll
2013-09-23 04:31 . 2013-09-23 04:31	--------	d-----w-	c:\users\Bernhard\AppData\Local\avgchrome
2013-09-22 18:15 . 2013-09-22 18:15	--------	d-----w-	c:\users\Bernhard\AppData\Local\BonanzaDealsLive
2013-09-22 18:15 . 2013-09-22 18:15	--------	d-----w-	c:\programdata\BonanzaDealsLive
2013-09-22 18:15 . 2013-09-25 14:23	--------	d-----w-	c:\program files (x86)\BonanzaDeals
2013-09-22 17:43 . 2013-09-22 17:43	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\PerformerSoft
2013-09-22 17:43 . 2013-09-22 17:43	--------	d-----w-	c:\programdata\IBUpdaterService
2013-09-22 17:43 . 2013-06-19 12:58	19456	----a-w-	c:\windows\system32\roboot64.exe
2013-09-22 17:43 . 2013-09-22 17:43	--------	d-----w-	c:\program files (x86)\PC Performer
2013-09-22 17:43 . 2013-09-22 17:43	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\Babylon
2013-09-22 17:43 . 2013-09-22 17:43	--------	d-----w-	c:\programdata\Babylon
2013-09-21 12:33 . 2013-09-21 12:33	--------	d-----w-	c:\program files (x86)\Wisdom-soft AutoScreenRecorder 3 Pro
2013-09-21 12:27 . 2013-09-21 12:27	--------	d-----w-	c:\users\Bernhard\AppData\Local\DVDVideoSoft_Ltd
2013-09-21 12:17 . 2013-09-21 12:17	--------	d-----w-	c:\users\Bernhard\AppData\Local\DealPlyLive
2013-09-21 12:17 . 2013-09-21 12:17	--------	d-----w-	c:\programdata\DealPlyLive
2013-09-21 12:17 . 2013-09-21 12:17	--------	d-----w-	c:\program files (x86)\DealPlyLive
2013-09-21 12:17 . 2013-09-21 12:17	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\Dealply
2013-09-21 12:16 . 2013-09-21 12:16	--------	d-----w-	c:\program files (x86)\Common Files\DVDVideoSoft
2013-09-21 12:16 . 2013-09-21 12:16	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\OpenCandy
2013-09-21 12:16 . 2013-09-21 12:17	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\DVDVideoSoft
2013-09-21 12:16 . 2013-09-21 12:17	--------	d-----w-	c:\program files (x86)\DVDVideoSoft
2013-09-21 11:52 . 2013-06-02 02:56	31920	----a-w-	c:\windows\system32\drivers\Apowersoft_AudioDevice.sys
2013-09-21 11:30 . 2013-09-21 11:30	--------	d-----w-	c:\users\Bernhard\Apowersoft Aufnahmen
2013-09-20 22:28 . 2013-09-20 22:28	--------	d-----w-	c:\program files (x86)\FreeTime
2013-09-20 20:47 . 2013-09-21 11:54	--------	d-----w-	c:\users\Bernhard\www.apowersoft.com
2013-09-19 21:25 . 2013-09-19 21:25	3723656	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-09-12 19:41 . 2013-08-08 01:20	3155456	----a-w-	c:\windows\system32\win32k.sys
2013-09-12 19:24 . 2013-07-26 02:24	14172672	----a-w-	c:\windows\system32\shell32.dll
2013-09-12 19:24 . 2013-07-26 02:24	197120	----a-w-	c:\windows\system32\shdocvw.dll
2013-09-05 14:04 . 2013-09-05 14:04	209272	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
2013-09-05 14:04 . 2013-09-05 14:04	209272	----a-w-	c:\program files (x86)\Internet Explorer\Plugins\nppdf32.dll
2013-09-04 13:55 . 2013-09-04 13:56	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\ArcSoft
2013-09-04 13:32 . 2005-04-27 14:36	245408	----a-w-	c:\windows\SysWow64\unicows.dll
2013-09-04 13:31 . 2013-09-04 13:31	--------	d-----w-	c:\program files (x86)\Common Files\ArcSoft
2013-09-04 13:30 . 2006-11-14 09:31	22784	----a-w-	c:\windows\SysWow64\drivers\afc.sys
2013-09-04 13:27 . 1995-08-01 02:44	212480	----a-w-	c:\windows\PCDLIB32.DLL
2013-09-04 13:27 . 2013-09-04 13:31	--------	d-----w-	c:\program files (x86)\ArcSoft
2013-09-04 13:25 . 2013-09-04 13:26	--------	d-----w-	c:\program files (x86)\SPCA1528
2013-09-04 04:08 . 2013-09-04 04:08	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\Thunderbird
2013-09-04 04:08 . 2013-09-04 04:08	--------	d-----w-	c:\users\Bernhard\AppData\Local\Thunderbird
2013-09-04 04:08 . 2013-09-18 03:50	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2013-09-03 05:45 . 2013-09-03 05:45	--------	d-----w-	c:\users\Admin\AppData\Roaming\RealNetworks
2013-09-03 05:43 . 2013-09-03 05:43	--------	d-----w-	c:\users\Admin\AppData\Local\Wondershare
2013-09-03 05:41 . 2013-09-03 05:41	--------	d-----w-	c:\users\Admin\AppData\Roaming\Systweak
2013-09-02 16:23 . 2013-09-02 16:23	--------	d-----w-	c:\program files (x86)\Common Files\Bitdefender
2013-09-02 16:21 . 2013-09-02 16:21	--------	d-----w-	c:\users\Bernhard\AppData\Roaming\QuickScan
2013-09-02 14:34 . 2013-09-02 14:34	--------	d-----w-	c:\users\Bernhard\AppData\Local\Wondershare
2013-09-02 14:34 . 2013-09-02 14:34	--------	d-----w-	c:\program files (x86)\Common Files\Wondershare
2013-09-02 14:34 . 2013-09-02 14:34	--------	d-----w-	c:\program files (x86)\Wondershare
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\npqtplugin5.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\npqtplugin4.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\npqtplugin3.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\npqtplugin2.dll
2013-09-01 16:04 . 2013-09-01 16:04	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\Plugins\npqtplugin.dll
2013-09-01 16:03 . 2013-09-01 16:04	--------	d-----w-	c:\program files (x86)\QuickTime
2013-09-01 16:03 . 2013-09-01 16:03	--------	d-----w-	c:\programdata\Apple Computer
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-25 08:05 . 2012-05-31 16:27	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\markup.dll
2013-09-25 08:05 . 2012-05-27 13:27	42776	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM\StartResources.dll
2013-09-23 13:45 . 2012-05-27 13:28	893552	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\markup.dll
2013-09-23 13:44 . 2012-05-31 16:27	42776	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCEClientUX\dSM-2\StartResources.dll
2013-09-19 21:25 . 2013-03-19 20:30	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-09-19 21:25 . 2013-03-19 20:30	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-09-17 16:21 . 2012-02-21 19:44	79143768	----a-w-	c:\windows\system32\MRT.exe
2013-09-07 06:59 . 2012-05-27 13:27	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2013-09-05 00:03 . 2012-05-31 16:27	1236816	----a-w-	c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2013-08-02 01:48 . 2013-09-12 19:42	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2013-07-26 04:25 . 2013-05-16 09:15	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-26 04:25 . 2012-02-21 21:33	867240	----a-w-	c:\windows\SysWow64\npdeployJava1.dll
2013-07-26 04:25 . 2012-02-21 21:33	789416	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-07-25 09:25 . 2013-08-18 22:04	1888768	----a-w-	c:\windows\system32\WMVDECOD.DLL
2013-07-25 08:57 . 2013-08-18 22:04	1620992	----a-w-	c:\windows\SysWow64\WMVDECOD.DLL
2013-07-19 01:58 . 2013-08-18 22:05	2048	----a-w-	c:\windows\system32\tzres.dll
2013-07-19 01:41 . 2013-08-18 22:05	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2013-07-12 09:09 . 2013-07-12 09:09	1054720	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-07-12 09:09 . 2013-07-12 09:09	97280	----a-w-	c:\windows\system32\mshtmled.dll
2013-07-12 09:09 . 2013-07-12 09:09	905728	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-07-12 09:09 . 2013-07-12 09:09	81408	----a-w-	c:\windows\system32\icardie.dll
2013-07-12 09:09 . 2013-07-12 09:09	762368	----a-w-	c:\windows\system32\ieapfltr.dll
2013-07-12 09:09 . 2013-07-12 09:09	73728	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-07-12 09:09 . 2013-07-12 09:09	719360	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-07-12 09:09 . 2013-07-12 09:09	61952	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-07-12 09:09 . 2013-07-12 09:09	599552	----a-w-	c:\windows\system32\vbscript.dll
2013-07-12 09:09 . 2013-07-12 09:09	523264	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-07-12 09:09 . 2013-07-12 09:09	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-07-12 09:09 . 2013-07-12 09:09	452096	----a-w-	c:\windows\system32\dxtmsft.dll
2013-07-12 09:09 . 2013-07-12 09:09	441856	----a-w-	c:\windows\system32\html.iec
2013-07-12 09:09 . 2013-07-12 09:09	38400	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-07-12 09:09 . 2013-07-12 09:09	361984	----a-w-	c:\windows\SysWow64\html.iec
2013-07-12 09:09 . 2013-07-12 09:09	281600	----a-w-	c:\windows\system32\dxtrans.dll
2013-07-12 09:09 . 2013-07-12 09:09	27648	----a-w-	c:\windows\system32\licmgr10.dll
2013-07-12 09:09 . 2013-07-12 09:09	270848	----a-w-	c:\windows\system32\iedkcs32.dll
2013-07-12 09:09 . 2013-07-12 09:09	247296	----a-w-	c:\windows\system32\webcheck.dll
2013-07-12 09:09 . 2013-07-12 09:09	235008	----a-w-	c:\windows\system32\url.dll
2013-07-12 09:09 . 2013-07-12 09:09	23040	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-07-12 09:09 . 2013-07-12 09:09	226304	----a-w-	c:\windows\system32\elshyph.dll
2013-07-12 09:09 . 2013-07-12 09:09	216064	----a-w-	c:\windows\system32\msls31.dll
2013-07-12 09:09 . 2013-07-12 09:09	197120	----a-w-	c:\windows\system32\msrating.dll
2013-07-12 09:09 . 2013-07-12 09:09	185344	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-07-12 09:09 . 2013-07-12 09:09	173568	----a-w-	c:\windows\system32\ieUnatt.exe
2013-07-12 09:09 . 2013-07-12 09:09	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-07-12 09:09 . 2013-07-12 09:09	158720	----a-w-	c:\windows\SysWow64\msls31.dll
2013-07-12 09:09 . 2013-07-12 09:09	1509376	----a-w-	c:\windows\system32\inetcpl.cpl
2013-07-12 09:09 . 2013-07-12 09:09	150528	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-07-12 09:09 . 2013-07-12 09:09	144896	----a-w-	c:\windows\system32\wextract.exe
2013-07-12 09:09 . 2013-07-12 09:09	1441280	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-07-12 09:09 . 2013-07-12 09:09	1400416	----a-w-	c:\windows\system32\ieapfltr.dat
2013-07-12 09:09 . 2013-07-12 09:09	138752	----a-w-	c:\windows\SysWow64\wextract.exe
2013-07-12 09:09 . 2013-07-12 09:09	137216	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-07-12 09:09 . 2013-07-12 09:09	12800	----a-w-	c:\windows\SysWow64\mshta.exe
2013-07-12 09:09 . 2013-07-12 09:09	110592	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-07-12 09:09 . 2013-07-12 09:09	102912	----a-w-	c:\windows\system32\inseng.dll
2013-07-12 09:09 . 2013-07-12 09:09	92160	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-07-12 09:09 . 2013-07-12 09:09	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-07-12 09:09 . 2013-07-12 09:09	62976	----a-w-	c:\windows\system32\pngfilt.dll
2013-07-12 09:09 . 2013-07-12 09:09	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-07-12 09:09 . 2013-07-12 09:09	51200	----a-w-	c:\windows\system32\imgutil.dll
2013-07-12 09:09 . 2013-07-12 09:09	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-07-12 09:09 . 2013-07-12 09:09	149504	----a-w-	c:\windows\system32\occache.dll
2013-07-12 09:09 . 2013-07-12 09:09	13824	----a-w-	c:\windows\system32\mshta.exe
2013-07-12 09:09 . 2013-07-12 09:09	136192	----a-w-	c:\windows\system32\iepeers.dll
2013-07-12 09:09 . 2013-07-12 09:09	135680	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-07-12 09:09 . 2013-07-12 09:09	12800	----a-w-	c:\windows\system32\msfeedssync.exe
2013-07-09 05:52 . 2013-08-19 06:41	224256	----a-w-	c:\windows\system32\wintrust.dll
2013-07-09 05:51 . 2013-08-18 22:04	1217024	----a-w-	c:\windows\system32\rpcrt4.dll
2013-07-09 05:46 . 2013-08-19 06:41	184320	----a-w-	c:\windows\system32\cryptsvc.dll
2013-07-09 05:46 . 2013-08-19 06:41	1472512	----a-w-	c:\windows\system32\crypt32.dll
2013-07-09 05:46 . 2013-08-19 06:41	139776	----a-w-	c:\windows\system32\cryptnet.dll
2013-07-09 04:52 . 2013-08-18 22:04	663552	----a-w-	c:\windows\SysWow64\rpcrt4.dll
2013-07-09 04:52 . 2013-08-19 06:41	175104	----a-w-	c:\windows\SysWow64\wintrust.dll
2013-07-09 04:46 . 2013-08-19 06:41	140288	----a-w-	c:\windows\SysWow64\cryptsvc.dll
2013-07-09 04:46 . 2013-08-19 06:41	1166848	----a-w-	c:\windows\SysWow64\crypt32.dll
2013-07-09 04:46 . 2013-08-19 06:41	103936	----a-w-	c:\windows\SysWow64\cryptnet.dll
2013-07-06 06:03 . 2013-08-18 22:04	1910208	----a-w-	c:\windows\system32\drivers\tcpip.sys
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{adca5064-9e30-43fe-9856-58b07a3149fe}"= "c:\program files (x86)\FreeMake\prxtbFre0.dll" [2013-09-11 226592]
"{c95a4e8e-816d-4655-8c79-d736da1adb6d}"= "c:\program files (x86)\Hotspot_Shield\prxtbHot2.dll" [2013-09-11 226592]
.
[HKEY_CLASSES_ROOT\clsid\{adca5064-9e30-43fe-9856-58b07a3149fe}]
.
[HKEY_CLASSES_ROOT\clsid\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{adca5064-9e30-43fe-9856-58b07a3149fe}]
2013-09-11 10:21	226592	----a-w-	c:\program files (x86)\FreeMake\prxtbFre0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
2013-09-11 10:21	226592	----a-w-	c:\program files (x86)\Hotspot_Shield\prxtbHot2.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2013-04-22 19:11	233288	----a-w-	c:\program files (x86)\Hotspot Shield\HssIE\HssIE.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{adca5064-9e30-43fe-9856-58b07a3149fe}"= "c:\program files (x86)\FreeMake\prxtbFre0.dll" [2013-09-11 226592]
"{c95a4e8e-816d-4655-8c79-d736da1adb6d}"= "c:\program files (x86)\Hotspot_Shield\prxtbHot2.dll" [2013-09-11 226592]
.
[HKEY_CLASSES_ROOT\clsid\{adca5064-9e30-43fe-9856-58b07a3149fe}]
.
[HKEY_CLASSES_ROOT\clsid\{c95a4e8e-816d-4655-8c79-d736da1adb6d}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2012-05-03 39408]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2012-12-21 1090040]
"SUPERAntiSpyware"="c:\program files\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE" [2013-08-18 6581488]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-05 291608]
"Dolby Advanced Audio v2"="c:\program files (x86)\Dolby Advanced Audio v2\pcee4.exe" [2011-12-21 507744]
"CLMLServer"="c:\program files (x86)\CyberLink\Power2Go\CLMLSvc.exe" [2010-08-03 107816]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"UIExec"="c:\program files (x86)\1&1 Surf-Stick\UIExec.exe" [2010-09-30 139088]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"AVMFBoxMonitor"="c:\program files (x86)\FRITZ!Box Monitor\FRITZBoxMonitor.exe" [2009-07-06 1503232]
"TkBellExe"="c:\program files (x86)\Real\RealPlayer\update\realsched.exe" [2013-03-19 295512]
"Cobian Backup 11 interface"="c:\program files (x86)\Cobian Backup 11\cbInterface.exe" [2012-12-05 4407808]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-05-11 958576]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"Wondershare Helper Compact.exe"="c:\program files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" [2012-03-27 1686528]
.
c:\users\Bernhard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.4.1.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-8-13 1199104]
Stickies.lnk - c:\program files (x86)\Stickies\stickies.exe [2012-11-6 1134592]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-5-21 275768]
OfficeAdRemover.lnk - c:\program files (x86)\OfficeAdRemover\OfficeAdRemover.exe [2012-10-28 1321472]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled\
DigiScan.lnk - c:\program files (x86)\ColorPage-SF600\DigiScan.exe [2013-1-10 323584]
PhraseExpress.lnk - c:\program files (x86)\PhraseExpress\phraseexpress.exe [2013-3-16 14129360]
watchmi tray.lnk - c:\windows\Installer\{F0559C5E-7912-4391-B1A0-6B975F0E5064}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe [2012-5-3 300928]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer7"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
R2 Ca1528av;SPCA1528 Video Camera Service;c:\windows\system32\Drivers\Ca1528av.sys;c:\windows\SYSNATIVE\Drivers\Ca1528av.sys [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 dealplylive;DealPly Live-Dienst (dealplylive);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 updatesvca;Update service for installed software;c:\windows\system32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
R3 AMPPALP;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Protocol;c:\windows\system32\DRIVERS\amppal.sys;c:\windows\SYSNATIVE\DRIVERS\amppal.sys [x]
R3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
R3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys;c:\windows\SYSNATIVE\DRIVERS\btmaux.sys [x]
R3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys;c:\windows\SYSNATIVE\DRIVERS\btmhsf.sys [x]
R3 Bulk1528;SPCA1528 Still Camera Service;c:\windows\system32\Drivers\Bulk1528.sys;c:\windows\SYSNATIVE\Drivers\Bulk1528.sys [x]
R3 dealplylivem;DealPly Live-Dienst (dealplylivem);c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe;c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [x]
R3 DfSdkS;Defragmentation-Service;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [x]
R3 ibtfltcoex;ibtfltcoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys;c:\windows\SYSNATIVE\DRIVERS\iBtFltCoex.sys [x]
R3 intaud_WaveExtensible;Intel WiDi Audio Device;c:\windows\system32\drivers\intelaud.sys;c:\windows\SYSNATIVE\drivers\intelaud.sys [x]
R3 massfilter;ZTE Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter.sys;c:\windows\SYSNATIVE\drivers\massfilter.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 nmwcdnsucx64;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsucx64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsucx64.sys [x]
R3 nmwcdnsux64;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsux64.sys;c:\windows\SYSNATIVE\drivers\nmwcdnsux64.sys [x]
R3 RRNetCap;RRNetCap Service;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R4 CyberLink PowerDVD 10 MS Monitor Service;CyberLink PowerDVD 10 MS Monitor Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [x]
R4 CyberLink PowerDVD 10 MS Service;CyberLink PowerDVD 10 MS Service;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe;c:\program files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 iusb3hcs;Intel(R) USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys;c:\windows\SYSNATIVE\drivers\iusb3hcs.sys [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1404000.028\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1404000.028\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\SYMEFA64.SYS [x]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130903.002\BHDrvx64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130903.002\BHDrvx64.sys [x]
S1 ccSet_NIS;Norton Internet Security CBE Settings Manager;c:\windows\system32\drivers\NISx64\1404000.028\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\ccSetx64.sys [x]
S1 HssDRV6;Hotspot Shield Routing Driver 6;c:\windows\system32\DRIVERS\hssdrv6.sys;c:\windows\SYSNATIVE\DRIVERS\hssdrv6.sys [x]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130924.001\IDSvia64.sys;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130924.001\IDSvia64.sys [x]
S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS;c:\program files\SUPERAntiSpyware\SASDIFSV64.SYS [x]
S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS;c:\program files\SUPERAntiSpyware\SASKUTIL64.SYS [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1404000.028\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1404000.028\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1404000.028\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1404000.028\SYMNETS.SYS [x]
S2 !SASCORE;SAS Core Service;c:\program files\SUPERANTISPYWARE\SASCORE64.EXE;c:\program files\SUPERANTISPYWARE\SASCORE64.EXE [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 ACT2_Service;Ashampoo Core Tuner 2 Service;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2Service.exe [x]
S2 ACT2PM;Ashampoo CoreTuner 2 ProcessMonitor Driver;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys;c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2ProcessMonitor64.sys [x]
S2 AHDDC2;Ashampoo HDD Control 2 Service;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe;c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [x]
S2 AMPPALR3;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe;c:\program files\Intel\BluetoothHS\BTHSAmpPalService.exe [x]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe;c:\program files (x86)\Intel\Bluetooth\obexsrv.exe [x]
S2 BroadCamService;BroadCam Video Streaming Server;c:\program files (x86)\NCH Software\BroadCam\broadcam.exe;c:\program files (x86)\NCH Software\BroadCam\broadcam.exe [x]
S2 BTHSSecurityMgr;Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe;c:\program files\Intel\BluetoothHS\BTHSSecurityMgr.exe [x]
S2 cbVSCService11;Cobian Backup 11 Volume Shadow Copy Requester Dienst;c:\program files (x86)\Cobian Backup 11\cbVSCService11.exe;c:\program files (x86)\Cobian Backup 11\cbVSCService11.exe [x]
S2 CobianBackup11;Cobian Backup 11 Gravity;c:\program files (x86)\Cobian Backup 11\cbService.exe;c:\program files (x86)\Cobian Backup 11\cbService.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DBService;DATA BECKER Update Service;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe;c:\program files (x86)\Common Files\DATA BECKER Shared\DBService.exe [x]
S2 GFNEXSrv;GFNEX Service;c:\program files (x86)\PHotkey\GFNEXSrv.exe;c:\program files (x86)\PHotkey\GFNEXSrv.exe [x]
S2 hshld;Hotspot Shield Service;c:\program files (x86)\Hotspot Shield\bin\openvpnas.exe;c:\program files (x86)\Hotspot Shield\bin\openvpnas.exe [x]
S2 HssWd;Hotspot Shield Monitoring Service;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe;c:\program files (x86)\Hotspot Shield\bin\hsswd.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 MemeoBackgroundService;MemeoBackgroundService;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe;c:\program files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe [x]
S2 NIS;Norton Internet Security CBE;c:\program files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe;c:\program files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe [x]
S2 ocster_backup;Ocster Backup;c:\program files\Ocster Backup\bin\backupService-ox.exe;c:\program files\Ocster Backup\bin\backupService-ox.exe [x]
S2 PEGAGFN;PEGAGFN;c:\program files (x86)\PHotkey\PEGAGFN.sys;c:\program files (x86)\PHotkey\PEGAGFN.sys [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);c:\program files\CyberLink\Shared files\RichVideo64.exe;c:\program files\CyberLink\Shared files\RichVideo64.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys;c:\windows\SYSNATIVE\DRIVERS\stflt.sys [x]
S2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [x]
S2 StarMoney 8.0 OnlineUpdate;StarMoney 8.0 OnlineUpdate;c:\program files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe;c:\program files (x86)\StarMoney 8.0\ouservice\StarMoneyOnlineUpdate.exe [x]
S2 UI Assistant Service;UI Assistant Service;c:\program files (x86)\1&1 Surf-Stick\AssistantServices.exe;c:\program files (x86)\1&1 Surf-Stick\AssistantServices.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 watchmi;watchmi service;c:\program files (x86)\watchmi\TvdService.exe;c:\program files (x86)\watchmi\TvdService.exe [x]
S2 ZeroConfigService;Intel(R) PROSet/Wireless Zero Configuration Service;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe;c:\program files\Intel\WiFi\bin\ZeroConfigService.exe [x]
S3 AMPPAL;Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Virtual Adapter;c:\windows\system32\DRIVERS\AMPPAL.sys;c:\windows\SYSNATIVE\DRIVERS\AMPPAL.sys [x]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [x]
S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys;c:\windows\SYSNATIVE\DRIVERS\clwvd.sys [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 iusb3hub;Intel(R) USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys;c:\windows\SYSNATIVE\drivers\iusb3hub.sys [x]
S3 iusb3xhc;Intel(R) USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys;c:\windows\SYSNATIVE\drivers\iusb3xhc.sys [x]
S3 iwdbus;IWD Bus Enumerator;c:\windows\system32\drivers\iwdbus.sys;c:\windows\SYSNATIVE\drivers\iwdbus.sys [x]
S3 RRNetCapMP;RRNetCapMP;c:\windows\system32\DRIVERS\rrnetcap.sys;c:\windows\SYSNATIVE\DRIVERS\rrnetcap.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 stdriver;SoundTap Filter Driver v6.05.00;c:\windows\system32\DRIVERS\stdriverx64.sys;c:\windows\SYSNATIVE\DRIVERS\stdriverx64.sys [x]
S3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2013-09-25 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-19 21:25]
.
2013-09-25 c:\windows\Tasks\AdvancedDriverUpdater_UPDATES.job
- c:\program files (x86)\Advanced Driver Updater\adu.exe [2013-07-15 13:23]
.
2013-09-25 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-09-21 12:17]
.
2013-09-25 c:\windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
- c:\program files (x86)\DealPlyLive\Update\DealPlyLive.exe [2013-09-21 12:17]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-03 07:55]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-05-03 07:55]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000Core.job
- c:\users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-24 12:11]
.
2013-09-25 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4070342091-3793343965-3738386277-1000UA.job
- c:\users\Bernhard\AppData\Local\Google\Update\GoogleUpdate.exe [2012-10-24 12:11]
.
2013-09-25 c:\windows\Tasks\PC Performer_DEFAULT.job
- c:\program files (x86)\PC Performer\PCPerformer.exe [2013-09-22 12:58]
.
2013-09-25 c:\windows\Tasks\PC Performer_UPDATES.job
- c:\program files (x86)\PC Performer\PCPerformer.exe [2013-09-22 12:58]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-06-27 14:11	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-12 398104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-12 440600]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2012-01-31 12446824]
"RtHDVBg_Dolby"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2011-11-15 1156712]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2011-12-20 11406608]
"PAC7302_Monitor"="c:\windows\PixArt\PAC7302\Monitor.exe" [2006-11-03 319488]
"Ocster Backup"="c:\program files\Ocster Backup\bin\backupClient-ox.exe" [2012-12-05 311240]
"SpywareTerminatorShield"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorShield.exe" [2013-04-03 2777736]
"SpywareTerminatorUpdater"="c:\program files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe" [2013-04-03 3684488]
"Ashampoo Core Tuner 2"="c:\program files (x86)\Ashampoo\Ashampoo Core Tuner 2\ACT2.exe" [2011-08-22 5220768]
"Ashampoo HDD-Control 2 Guard"="c:\program files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Guard.exe" [2012-07-30 3783592]
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT3214568&CUI=UN39919113852500012
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: {{0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - hxxp://rover.ebay.com/rover/1/707-37276-17534-31/4
FF - ProfilePath - c:\users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\
FF - ExtSQL: 2013-09-23 22:36; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn
FF - ExtSQL: 2013-09-25 09:17; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn
FF - ExtSQL: 2013-09-25 21:15; {b9db16a4-6edc-47ec-a1f4-b86292ed211d}; c:\users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF - ExtSQL: 2013-09-25 21:18; firefox@ghostery.com; c:\users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\extensions\firefox@ghostery.com.xpi
FF - ExtSQL: 2013-09-25 21:18; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF - ExtSQL: !HIDDEN! 2012-11-29 09:28; smartwebprinting@hp.com; c:\program files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKCU-Run-BRAVIS-{DC0F6114-52CD-420E-BAEB-ECC5BFB0B110} - c:\users\Bernhard\Downloads\bravis.exe
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled\McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
WebBrowser-{ADCA5064-9E30-43FE-9856-58B07A3149FE} - (no file)
WebBrowser-{C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
AddRemove-ALDI SÜD Mah Jong - c:\windows\system32\Uninstall ALDI SÜD Mah Jong.exe
AddRemove-RealPlayer 16.0 - c:\program files (x86)\real\realplayer\Update\r1puninst.exe
AddRemove-Symantec Threat Monitor, Powered By DeepSight - c:\windows\system32\Symantec Threat Monitor
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security CBE\Engine\20.4.0.40\diMaster.dll\" /prefetch:1"
"ImagePath"="\"c:\program files\CyberLink\Shared files\RichVideo64.exe\"\00Z
[\]^_’\00\00’\00\00\00\00HIJKLMNO\00\00\00\00\00\00\00\00\03\00\00\00|}~’\00\00’\00\00\00\00’\00\00\00\00\00\00\00\00‘’“"
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_8_800_175_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_8_800_175.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\PHotkey\ASLDRSrv.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Hotspot Shield\HssWPR\hsssrv.exe
c:\program files (x86)\PHotkey\PHotkey.exe
c:\program files (x86)\PHotkey\MsgTranAgt.exe
c:\program files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
c:\program files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
c:\program files (x86)\CyberLink\YouCam\YouCamService.exe
c:\program files (x86)\PHotkey\POSD.exe
c:\program files (x86)\Hotspot Shield\bin\openvpntray.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-09-25  21:58:35 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-09-25 19:58
.
Vor Suchlauf: 2.520.858.624 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 19.479.490.560 Bytes frei
.
- - End Of File - - 22D74763D21C5B0087F1CB388A8CA4E1

Alt 26.09.2013, 09:08   #7
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.09.2013, 08:10   #8
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Hi,
hier die Auswertungen:
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.27.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Bernhard :: BERNHARD-PC [Administrator]

27.09.2013 07:21:20
mbam-log-2013-09-27 (07-21-20).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 274690
Laufzeit: 6 Minute(n), 44 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 67
HKLM\SYSTEM\CurrentControlSet\Services\dealplylive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassSvc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
HKCR\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3COMClassService.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3COMClassService (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachineFallback (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CredentialDialogMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CredentialDialogMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoCreateAsync.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoCreateAsync (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebMachineFallback.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebMachineFallback (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoreMachineClass.1 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoreMachineClass (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.ProcessLauncher.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.ProcessLauncher (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.OnDemandCOMClassMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLive.OneClickCtrl.9 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLive.Update3WebControl.3 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLive.OneClickProcessLauncherMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLive.OneClickProcessLauncherMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoreClass.1 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.CoreClass (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebSvc.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebSvc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebMachine.1.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCR\DealPlyLiveUpdate.Update3WebMachine (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Dealply (PUP.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Performer_is1 (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
HKCR\AppID\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DataMngr_Toolbar (PUP.Optional.DataMngr.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
HKLM\SOFTWARE\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
HKLM\SYSTEM\CurrentControlSet\Services\dealplylivem (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.

Infizierte Registrierungswerte: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Daten: 0L1N1H2O1S -> Keine Aktion durchgeführt.

Infizierte Dateiobjekte der Registrierung: 1
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Start Page (PUP.Optional.Conduit) -> Bösartig: (hxxp://search.conduit.com?SearchSource=10&ctid=CT3214568&CUI=UN39919113852500012) Gut: (hxxp://www.google.com) -> Keine Aktion durchgeführt.

Infizierte Verzeichnisse: 24
C:\Users\Bernhard\AppData\Roaming\Babylon (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0 (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\Download (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\Install (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\Offline (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\Offline\{9B2BF840-F27F-4B41-A1E5-96152E4AD73D} (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\OpenCandy (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\OpenCandy\A619424BC82F4EB8B128882ADBE201B9 (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\IBUpdaterService (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 127
C:\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psmachine.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc\UpdateTask.exe (PUP.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\DarkWave-Studio-4.0.9.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\zp861free.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Local\Conduit\CT1561552\Hotspot_ShieldAutoUpdateHelper.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Local\Conduit\CT3214568\FreeMakeAutoUpdateHelper.exe (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Babylon\log_file.txt (PUP.Optional.Babylon.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\rcpupdate.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\ExcludeList.rcp (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\German_rcp.dat (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\log_09-22-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\log_09-23-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\log_09-24-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\log_09-25-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\log_09-26-2013.log (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\results.rcp (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\PerformerSoft\PC Performer\TempHLList.rcp (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\xmllite.dll (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Chinese_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\CleanSchedule.exe (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Danish_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Dutch_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\eng_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Finnish_rcp_fi.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\French_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\German_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\greek_rcp_el.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\install_left_image.bmp (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\isxdl.dll (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Italian_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Japanese_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\korean_rcp_ko.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Norwegian_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\PCPerformer.dll (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\PCPerformer.exe (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\polish_rcp_pl.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\portugese_rcp_pt.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Portuguese_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\russian_rcp_ru.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Spanish_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\Swedish_rcp.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\TraditionalCn_rcp_zh-tw.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\turkish_rcp_tr.ini (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\unins000.dat (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\unins000.exe (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\PC Performer\unins000.msg (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\PC Performer_DEFAULT.job (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\PC Performer_UPDATES.job (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc\STTL.DAT (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\Dealply\UpdateProc\TTL.DAT (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLive.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHandler.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHelper.msi (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdate.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psuser.dll (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\AppData\Roaming\OpenCandy\A619424BC82F4EB8B128882ADBE201B9\dp.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Desktop\PCPSetup-1-.exe (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\IBUpdaterService\repository.xml (Adware.InstallBrain) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
AdwCleaner[R0].txt:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Home Premium x64
Ran by Bernhard on 27.09.2013 at  8:25:46,71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] hshld 
Successfully deleted: [Service] hshld 
Successfully stopped: [Service] hsstrayservice 
Successfully deleted: [Service] hsstrayservice 
Successfully stopped: [Service] hsswd 
Successfully deleted: [Service] hsswd 



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4070342091-3793343965-3738386277-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1BD434D9-3938-4222-82CA-9131A398E177}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\shoEBBC.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\hotspot shield"
Successfully deleted: [Folder] "C:\Users\Bernhard\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Program Files (x86)\hotspot shield"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\wondershare"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{00246414-A149-45AE-BE97-3D8885AB9E20}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{022A62BB-D091-4572-8A4F-CB9C1B9C0D77}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{02BC68B2-75EB-4FC9-AE0D-82351E919806}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{04EC5231-9FB4-4FF0-BCF3-64AAEBE98195}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{09012F89-89D0-4D30-9F4F-2519A18A0363}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0BBD1509-BF1D-417E-8FC5-C0BBB3D56CFC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0CC3542C-71FE-4626-A0F9-9EA14B8FF45F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0FCC76C3-99DA-4951-AB6F-EDF97644BCA5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1382C7A7-AA12-4A40-854E-9052BDB5E768}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{150670B0-5217-4036-89B8-2A204AACC3CD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1978C529-5969-469D-978F-B854C762D1CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{19956A3F-FB48-4CCF-B962-CAEF4B845770}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1B32BC6B-BC22-4825-9FEA-D30F61A662CC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1C6B05D3-1C57-4F80-8FAA-5E8299160B22}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1CD29D06-AA5A-4C96-8A5D-22887A60ACC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1E91FCBE-DB75-4CF1-B3A8-D7EB866FFDFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1EB4078F-F705-4C6F-B4DB-1DD93026320A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1ED9CC16-65D4-4D77-B682-9F6019EA74A6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{23F8F85B-2B04-419C-B8EB-0799AF963E89}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{269759D0-1AF8-43EB-AA61-66D6885D87B1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{28D75E3F-D7A0-4CCE-8C69-4084380A23CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2902270E-EC17-4F0B-B579-7B6A40D398FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2A29BD80-6102-43BF-9F52-D841758BA329}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2B6F28A3-DB8B-4360-9424-05AD5D146B31}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C6D77EC-9714-405B-8F0F-2F1A2AC2F6A9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C83E885-600C-402E-BE6C-FA1E92FF4F68}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D2C47FB-B515-4314-AA68-827B5EB16300}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D857ABF-F255-4897-B0A3-F4520F30B7FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DB6E073-30E4-4FEF-B711-824A92B1CC9A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DFAC4D2-C8BE-47FA-BB99-8415F2359589}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{303B31B8-E799-4EF5-AA10-0984F8E362D8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{30C6CBB3-4453-4BD8-A65F-1B9392E61057}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{375464FA-49DD-433E-92F1-DD9AEEBDF850}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{385E83C1-DFA1-4F88-A03E-FCD65629267E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3A3D6D46-C316-4EF4-8A75-5E921F315990}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3BA27485-3FE0-4E15-BE27-B34C3BE58F7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3DFA1F77-48B6-4633-BAD7-38FCED4FFEB8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3FE829A0-354D-4D28-A45E-7B5EEBF42BD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{408A6A5C-5597-4F27-B1DA-9BEC9A92FEC5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{411E3EDE-12C6-49B5-976D-10FE5586885D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{42AF9C92-D723-4FC3-978B-F0137F4EB050}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43888FF7-A284-4E04-9DFB-698E1441B657}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43D0E1C9-7D9A-4E78-A011-9325E5EE00EA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{45D88ED4-9798-4E99-B6B6-69D6D5D3D668}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{46C70D72-102D-45F3-9E24-5C26BF02BF92}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{475CAA8C-B718-45D9-A79B-57BA49AAE3DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48BF5032-7ADE-423A-9831-A2AAAF619AEB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48FDD7A0-1F20-4797-AFAA-F4986F37A607}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{49651C35-41EE-4B6C-B786-43C10C8ADD86}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A421EE1-9571-49B7-A36C-0FA270BD2DCA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A9125E4-1DAC-4CFC-9148-969610BEDC18}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4ADF86E9-326A-4401-B0D2-9E9EF04CB6EF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4EFCC212-5461-4084-9EF1-BC05848F29DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F4FC56B-60D4-4AC3-A84F-C94AAB35CBE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F928A10-3D8C-4C85-9237-5B95816A8846}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4FB84250-8932-4322-A621-0B9A04024A7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{52D52A5F-4C7A-4577-8387-34077EA27EC6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{54F5C8B5-0FF3-4254-A8DD-A9716081F46E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5547020F-316E-48A6-BCFB-9490A98FE119}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{556A9F34-B2FB-4F08-B8CC-98B4814EAB39}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{576A2014-D95A-4311-9E14-406C582AFB83}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5850DD8D-F98B-4941-89D7-030A7B2BFABE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{58918D17-E8BC-4FC7-A5A5-C7F5563F63C7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{59AA16B8-E196-4D52-96F2-35FC6BE64763}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5C3FE8EE-EF9E-441F-B77F-DA6D53BA19FE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5CCD5182-9BD5-41F3-AA92-5FAB95ACF5E5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5E3EB442-432B-4B37-9B07-532F708C1DB4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5F9CFE2C-44CC-465A-A33F-4BCB4B9BD54C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FCEC9A0-BE38-4778-91EB-C2575B7601EB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FDA00C4-E216-4358-B2F3-DCEA4475A08A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{61223C6E-B917-4A48-B3CA-E53AFFBB9EFA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{626CB288-5E4D-4253-B9CF-76499E5C424F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{63010AD8-1827-4415-A35D-4299231AC390}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{64CC525B-486C-43C6-9979-726AC6410064}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{65E60FA7-62C5-47B4-BDD5-F5C9D070B225}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{66C74B72-74F9-4602-B515-AB195B201991}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{68AA91CD-FD73-4954-890F-F16FAEEA8CB0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A478483-48E1-4380-AE42-74940E0703D3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A9244F5-9D7B-4E20-80A5-D6CEBEE93BDE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6B14FE68-0527-48D2-AEC0-254C914AE1E8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6E90B978-E21A-417E-9ECA-A1A3C5EE82DF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6F423AC3-B18B-4444-8A1B-9662D1D504F6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7125B026-DD86-4ED4-A96F-DFAB231DC00F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7143AA44-7EA8-42CE-8D64-0F591243A36F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{727AB55B-D9C1-491D-8A63-A18BD54060FC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{734BFFCA-9356-42EC-9F6E-1738FC1E47FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{735C4482-E202-4570-BE39-D06A1CD42729}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7537E8E9-6326-4022-B79B-11E6A0F3633D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7542C96E-83F6-47FF-9858-BD26190DBBF2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{76E02180-D908-4E13-B947-61D05F17D3F4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{777E67FF-9C81-4BEC-B884-AE1430A3897D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79523608-5541-47FA-890E-2881D2F8856C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79A63ECC-01D4-446A-9DD7-B7330711B722}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7B528435-B809-4B15-9C16-5D3726408343}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7C7C98DD-AC1C-473A-8AA9-C262B3A87A10}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7D909BF3-9B73-41C3-B152-2A0A07BD8CCF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DA5B883-9397-49C7-B0EA-C650EF3F74EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DC5F8A5-CB51-4937-B11B-CAFCD78763BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FD79787-467A-4CD0-BE1F-A75FCFB3B925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FFA6FE8-70F1-4E27-9D96-C2DC85C9430C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{81DC5E39-30E8-498B-B224-40317C5810ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82394F65-E8C4-4A10-9CC6-8F058E795100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82CB75B7-8EAA-4032-9517-AAA67DBDFF70}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8375CB51-D8C9-41D6-8F54-D7A849355A37}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{83C44587-B660-44FA-87F2-5D491FF6578D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8449734D-515E-454A-AD40-C02E1458511F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{86DB7C5A-8A99-4DE6-B453-B116753D280A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{870610A9-AD14-42B8-A988-83414E38B359}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{89DCB70C-F8FA-43FB-A0E7-D9977C2CDE2F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8A0F6202-B2CF-453B-9F0B-7CFC3026AC84}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8C9E724D-146C-4260-9555-C7322B21A058}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8D713C4E-336D-4898-A727-7ECB11D6CC8F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E566D6B-B2D4-46F7-A2CE-6C65818E1C2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E913B21-CDA9-4DC0-BF9F-DC02D2D764DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{90570896-A6A3-4ECD-AC76-975D0420FFAD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{911967DF-7AB5-4769-9CAA-AAF997568BF8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{912659DE-C6BF-4656-BDB1-52428E1712BE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{92D61AE1-746D-4E65-B433-4F5319EBD400}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9409B729-282A-46F8-AF99-AD40492B27BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{951E2B02-4BD1-4145-8FC7-74DA236C7995}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{95F8A76F-91C8-4330-B417-0A01F711728B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{961462F5-47B6-4749-B196-4A87ED6F5945}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{96E69756-69BE-4CB8-B369-8613FCD7218B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{973938A7-A677-416F-92D7-FF702123829C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{97D72870-85A3-4532-9E74-84762B3591F0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{989F4C3F-C48C-428F-B519-4D95684D6F06}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9A33FC12-EAF8-4155-A6D4-E7823B428F9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9C4776D4-AC2C-4124-ABC9-8A97939EE275}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9EFBBBED-2AC1-4C06-B594-9F698F7E58C1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9F7A7658-18A9-4D44-BA4B-88CF77981D4B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9FB6F6D5-E1FE-4C6D-A572-D0FB63E06F0A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A152DFF8-163A-487E-BDD2-BE715D5F20B6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A179A074-8720-480E-9B1E-82FBE5DE061F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2031704-32CA-4443-9B79-2E6E6BA0316A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A248FFC5-3873-4B4B-83E8-0A6B25F640DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A27E964D-EBC1-42C6-9618-D865227071D9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2CD9DB5-C26C-480F-9FC7-1E4FD6C5B658}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A376087E-4CF9-4D66-B060-7B1E41CD7DFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A443D426-495E-4BE9-A6AB-F84A678AC89D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6C431F7-59A5-4012-8466-248BD676DE47}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6EA5846-484C-4AEB-9F9F-A9AD8743B4FA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6F48BCA-7D63-4D4F-BD6E-699A87AF8A6C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A73576CF-6E3C-4C61-AC63-30021EC5FD2B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A746D105-2E4E-4C70-8E08-DF399C256E73}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A853F431-B4C3-4B58-B293-3916BB798254}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A910658B-7FC8-4A44-AAE5-631CD22F06A5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A9DD4887-8B4B-43D9-A019-EA1020754385}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AA732003-28D6-447A-85EE-C11FA049A90F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AC192423-5E4D-4E49-8D28-FB4D69B2A820}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD352770-D828-4286-8946-FEF12B6DC2ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD6CFD7D-7C29-403B-BADA-384830F1238B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AF28F21B-C9D7-4E41-8610-8DFE4AACBAD8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B2A6D78A-D7F0-4283-9331-E19CF49E7992}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4955D9F-DA1A-40C2-A1E6-4C98FBEA4703}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4C7F93F-836F-4E83-A8E5-15596BA3E0C4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B5C5095A-EDE3-4448-A645-4734CC5299B2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B6841348-3987-43C5-B4F3-A08A04614732}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B77A58BA-BDEF-44BF-83F1-05E9D07E9E02}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BAB13812-68CF-4F2B-A74D-E8D3413FB940}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BB2DFE37-78FA-4C8C-A02E-621724433BDF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BBDF1B15-E05A-49D2-94E2-58A2AD86D870}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BCCD16D7-DF9F-49FF-9F95-E47DACFEB8F3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDBE5CA0-310E-408A-BB18-BC40DA6F767D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDC77DAD-2476-43DB-80E1-362AAA90EED7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BEA497FE-83AA-47A3-9379-B1C3BAD97818}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C3111971-E835-4BC0-A3FA-7FC17317ABBC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C33A7279-490E-455E-8882-4275D32BF0EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C6DBA045-E45A-47E0-AEF8-17DD73A94FB2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C70C1390-6909-4240-8F82-EB17CCAC1DD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C8C89CA2-F97D-4D1D-9A25-A71759A1E925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CA1A2DEC-5A22-4129-987B-79130DF66D9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB5677F2-481F-4C9E-8705-A39E54248D6D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB9C2A0A-293E-494F-A2BE-D876D03A4831}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CBF62FF0-12BA-4DB4-BAC2-1793F9E7447F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CC1ED0E7-D33C-4365-AB17-77D1EE639478}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CF8BE34E-5D05-4D9C-BAF2-9C6AB8C7FC7E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D085CB7E-0CA9-49A4-B320-E65C676EE841}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D810A079-04E9-4734-BF30-E7619B8A0100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DA31A80E-F04A-4F1F-9218-050B7C88EC2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DB77E033-5E39-4C28-BB86-4F77C918C5D6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DCAA6DC9-45A0-41AF-9C17-463E388E8DC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DF395E59-234D-4F2A-8BA3-4AE10741B89E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E06A81F7-CDDE-4A20-998F-B7CFB9133EF4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0BC97EB-5DE1-4F3A-9AD5-E4B61B3F3947}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C2BFDA-2D02-4EE9-9238-73616CF5099F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C92714-E4CE-4DC8-955A-7BA88450949B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E24C2084-61AD-4934-8E14-38601EADBF3F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E2A8279C-A15B-4A28-99AC-782072F96D12}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E313961D-030A-49DE-9DC9-C144D64D2EEC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E935FB-1FBD-4F09-B85D-87ADD4BF4A17}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E9D3BD-A556-4971-B440-0D5D81AF00C2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E494A448-0F15-4D61-8782-3D120702112C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E6D2545B-867D-4CBD-896A-604EFCD74B13}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EADC9943-9040-4D48-BD18-63906CEA8844}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{ED24245C-2FB5-4CAD-9F71-1305BCA9DA5A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EE349677-8225-4A30-B27E-5C4D6DEAF0DE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F14E4018-AC5F-410A-911C-0A14A0515CA7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2272D0F-90A6-4B05-B2B3-CEE16DBB666F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2D28E1E-778D-4FAA-AE5A-82304A509D1F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2FEFDD6-2E57-459F-A28F-3ECB927EA1FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F6CD25E8-A620-474B-8594-C259452B729B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F73CDBC6-0261-4C04-BFFD-85E3587BFDE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F86110D1-6FE2-47CA-AEE8-9BA0176F344B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FAF8EFF3-6CBB-4EAE-81DA-CC92AC26D733}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FC503780-30E9-4996-871C-F6206F4C15D1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FCD2B2E8-D295-4648-BB06-9C4F4A56C183}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FD06D60C-B821-4138-AE0C-0FCD6C55B63D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDE1EAC8-8A2A-49F8-9969-87A305162479}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDFCD6AA-7BC8-40CD-98FF-F1B29B99E091}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.09.2013 at  8:34:37,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
AdwCleaner[S0].txt:
Code:
ATTFilter
# AdwCleaner v3.005 - Bericht erstellt am 27/09/2013 um 07:57:12
# Updated 22/09/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Bernhard - BERNHARD-PC
# Gestartet von : C:\Users\Bernhard\Downloads\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : dealplylive
[#] Dienst Gelöscht : dealplylivem

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BonanzaDealsLive
Ordner Gelöscht : C:\ProgramData\DealPlyLive
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\ProgramData\FreeMake
Ordner Gelöscht : C:\ProgramData\Hotspot Shield
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Performer
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
Ordner Gelöscht : C:\Program Files (x86)\BonanzaDealsLive
Ordner Gelöscht : C:\Program Files (x86)\Conduit
Ordner Gelöscht : C:\Program Files (x86)\DealPlyLive
Ordner Gelöscht : C:\Program Files (x86)\Hotspot_Shield
Ordner Gelöscht : C:\Program Files (x86)\PC Performer
Ordner Gelöscht : C:\Program Files (x86)\FreeMake
[!] Ordner Gelöscht : C:\Program Files (x86)\Hotspot Shield
Ordner Gelöscht : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Windows\SysWOW64\Hotspot Shield
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\BonanzaDealsLive
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\cre
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\DealPlyLive
Ordner Gelöscht : C:\Users\Bernhard\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Bernhard\AppData\LocalLow\holasearch
Ordner Gelöscht : C:\Users\Bernhard\AppData\LocalLow\Hotspot_Shield
Ordner Gelöscht : C:\Users\Bernhard\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Bernhard\AppData\LocalLow\FreeMake
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Bernhard\Documents\FreeMake
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\Hotspot_Shield
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Admin\AppData\LocalLow\FreeMake
Ordner Gelöscht : C:\Users\Admin\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\jetpack
Ordner Gelöscht : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\jetpack
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\engeblojhfeingnjnfpiceofljnjpldp
Ordner Gelöscht : C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\Extensions\kgficikadnmmefckdecajlmffkbagomp
Datei Gelöscht : C:\Users\Public\Desktop\PC Performer.lnk
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\searchplugins\safesearch.xml
Datei Gelöscht : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\user.js
Datei Gelöscht : C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineCore.job
Datei Gelöscht : C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineCore
Datei Gelöscht : C:\Windows\Tasks\DealPlyLiveUpdateTaskMachineUA.job
Datei Gelöscht : C:\Windows\System32\Tasks\DealPlyLiveUpdateTaskMachineUA
Datei Gelöscht : C:\Windows\Tasks\PC Performer_DEFAULT.job
Datei Gelöscht : C:\Windows\System32\Tasks\PC Performer_DEFAULT
Datei Gelöscht : C:\Windows\Tasks\PC Performer_UPDATES.job
Datei Gelöscht : C:\Windows\System32\Tasks\PC Performer_UPDATES

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Bernhard\Desktop\Search.lnk

***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\kgficikadnmmefckdecajlmffkbagomp
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\kgficikadnmmefckdecajlmffkbagomp
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\dealplylive.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickCtrl.9
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLive.Update3WebControl.3
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.coreclass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.credentialdialogmachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.credentialdialogmachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachinefallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclassmachinefallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.ondemandcomclasssvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\DealPlyLiveUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachinefallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3webmachinefallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3websvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\dealplyliveupdate.update3websvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=3
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@tools.dpliveupdate.com/DealPlyLive Update;version=9
Schlüssel Gelöscht : HKLM\SOFTWARE\53558dd0bc6ee443
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT1561552
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar.CT3214568
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{80FABB17-63AF-4655-9F07-B6509EE37AF2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{F48FC5B2-094A-44C7-B48C-289738C9582D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{0D89DE71-3D99-4288-84DC-F18F1047A7D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1E0C9B2A-6447-452C-B012-2314A0C29412}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{34A8CEB6-89BB-49F1-B5E4-0D0D6C21F3B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3A4DBD3A-98CC-41CE-AD21-352D42B6F754}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4F8A50F6-69DE-4BE3-A33A-A1079B9AC0DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{501CB57A-D4E2-4855-96AD-EDB0A9083395}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6FF2C4DD-77A4-4BB5-BA4C-B42DEFBF9137}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80FABB17-63AF-4655-9F07-B6509EE37AF2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{83ABA270-8390-4CA6-AE48-FC089F55629E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8B218A5F-1A3D-4347-94EF-A79575EB8094}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9BDB5E09-4BBA-4422-8C2B-529B281C32B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C536F080-57B7-46D6-8894-C647553F2889}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CA5D945F-E738-4D0B-A0B5-25AC51C64659}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F48FC5B2-094A-44C7-B48C-289738C9582D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F7698761-4ABA-45C2-A5BB-D2163922C725}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFCC53E6-2655-47FC-A89B-54E8D7F305D1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADCA5064-9E30-43FE-9856-58B07A3149FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{04CEFF5B-A46D-4417-8018-43A059BDF9A6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ADCA5064-9E30-43FE-9856-58B07A3149FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ADCA5064-9E30-43FE-9856-58B07A3149FE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{04CEFF5B-A46D-4417-8018-43A059BDF9A6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ADCA5064-9E30-43FE-9856-58B07A3149FE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{87EAB409-97D7-4889-ACFA-C548FC6F3ECF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{04CEFF5B-A46D-4417-8018-43A059BDF9A6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F1796B2-BEC6-427B-B734-F9C75ED94A80}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8C338DDB-19FC-4C1F-B74D-6931EE55F7A1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C536F080-57B7-46D6-8894-C647553F2889}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0B98F937-BE64-4519-95A5-DFAA169A25FB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F413CD4C-AAAC-440B-8A33-1F23C49FC5BB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9688AD85-C4A9-435A-904E-C797C05B5774}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2A4A56A9-9265-4663-9C7C-720191F463BD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{ADCA5064-9E30-43FE-9856-58B07A3149FE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{ADCA5064-9E30-43FE-9856-58B07A3149FE}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{ADCA5064-9E30-43FE-9856-58B07A3149FE}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{ADCA5064-9E30-43FE-9856-58B07A3149FE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}]
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\Conduit
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\dealplylive
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\Hotspot_Shield
Schlüssel Gelöscht : HKCU\Software\Imesh
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\PerformerSoft
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKCU\Software\Freemake
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Toolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Hotspot_Shield
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\SmartBar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Freemake
Schlüssel Gelöscht : HKLM\Software\Conduit
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\dealplylive
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\Hotspot_Shield
Schlüssel Gelöscht : HKLM\Software\PerformerSoft
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\Software\Freemake
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PC Performer_is1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeMake Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Hotspot_Shield Toolbar

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16686

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v24.0 (de)

[ Datei : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\6u58jmvs.default-1380136418242\prefs.js ]


[ Datei : C:\Users\Bernhard\AppData\Roaming\Mozilla\Firefox\Profiles\uz4grcvl.default\prefs.js ]

Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.id", "8cc98b8200000000000000ff143ae573");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15970");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.6");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.620:16:04");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5013");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v

[ Datei : C:\Users\Bernhard\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [23284 octets] - [27/09/2013 07:55:44]
AdwCleaner[S0].txt - [21248 octets] - [27/09/2013 07:57:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [21309 octets] ##########
Beim Download des Junkware Removal Tools wurde ich offensichtlich von Google Chrome zuerst zum Download von ZipExtraktorSetup.exe, dann zum Download von ImageEditorSetup.exe umgeleitet. Mit Mozilla Firefox kam ich auf die richtige Seite.

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Home Premium x64
Ran by Bernhard on 27.09.2013 at  8:25:46,71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] hshld 
Successfully deleted: [Service] hshld 
Successfully stopped: [Service] hsstrayservice 
Successfully deleted: [Service] hsstrayservice 
Successfully stopped: [Service] hsswd 
Successfully deleted: [Service] hsswd 



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4070342091-3793343965-3738386277-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1BD434D9-3938-4222-82CA-9131A398E177}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\shoEBBC.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\hotspot shield"
Successfully deleted: [Folder] "C:\Users\Bernhard\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Program Files (x86)\hotspot shield"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\wondershare"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{00246414-A149-45AE-BE97-3D8885AB9E20}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{022A62BB-D091-4572-8A4F-CB9C1B9C0D77}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{02BC68B2-75EB-4FC9-AE0D-82351E919806}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{04EC5231-9FB4-4FF0-BCF3-64AAEBE98195}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{09012F89-89D0-4D30-9F4F-2519A18A0363}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0BBD1509-BF1D-417E-8FC5-C0BBB3D56CFC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0CC3542C-71FE-4626-A0F9-9EA14B8FF45F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0FCC76C3-99DA-4951-AB6F-EDF97644BCA5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1382C7A7-AA12-4A40-854E-9052BDB5E768}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{150670B0-5217-4036-89B8-2A204AACC3CD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1978C529-5969-469D-978F-B854C762D1CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{19956A3F-FB48-4CCF-B962-CAEF4B845770}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1B32BC6B-BC22-4825-9FEA-D30F61A662CC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1C6B05D3-1C57-4F80-8FAA-5E8299160B22}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1CD29D06-AA5A-4C96-8A5D-22887A60ACC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1E91FCBE-DB75-4CF1-B3A8-D7EB866FFDFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1EB4078F-F705-4C6F-B4DB-1DD93026320A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1ED9CC16-65D4-4D77-B682-9F6019EA74A6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{23F8F85B-2B04-419C-B8EB-0799AF963E89}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{269759D0-1AF8-43EB-AA61-66D6885D87B1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{28D75E3F-D7A0-4CCE-8C69-4084380A23CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2902270E-EC17-4F0B-B579-7B6A40D398FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2A29BD80-6102-43BF-9F52-D841758BA329}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2B6F28A3-DB8B-4360-9424-05AD5D146B31}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C6D77EC-9714-405B-8F0F-2F1A2AC2F6A9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C83E885-600C-402E-BE6C-FA1E92FF4F68}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D2C47FB-B515-4314-AA68-827B5EB16300}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D857ABF-F255-4897-B0A3-F4520F30B7FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DB6E073-30E4-4FEF-B711-824A92B1CC9A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DFAC4D2-C8BE-47FA-BB99-8415F2359589}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{303B31B8-E799-4EF5-AA10-0984F8E362D8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{30C6CBB3-4453-4BD8-A65F-1B9392E61057}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{375464FA-49DD-433E-92F1-DD9AEEBDF850}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{385E83C1-DFA1-4F88-A03E-FCD65629267E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3A3D6D46-C316-4EF4-8A75-5E921F315990}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3BA27485-3FE0-4E15-BE27-B34C3BE58F7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3DFA1F77-48B6-4633-BAD7-38FCED4FFEB8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3FE829A0-354D-4D28-A45E-7B5EEBF42BD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{408A6A5C-5597-4F27-B1DA-9BEC9A92FEC5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{411E3EDE-12C6-49B5-976D-10FE5586885D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{42AF9C92-D723-4FC3-978B-F0137F4EB050}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43888FF7-A284-4E04-9DFB-698E1441B657}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43D0E1C9-7D9A-4E78-A011-9325E5EE00EA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{45D88ED4-9798-4E99-B6B6-69D6D5D3D668}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{46C70D72-102D-45F3-9E24-5C26BF02BF92}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{475CAA8C-B718-45D9-A79B-57BA49AAE3DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48BF5032-7ADE-423A-9831-A2AAAF619AEB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48FDD7A0-1F20-4797-AFAA-F4986F37A607}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{49651C35-41EE-4B6C-B786-43C10C8ADD86}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A421EE1-9571-49B7-A36C-0FA270BD2DCA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A9125E4-1DAC-4CFC-9148-969610BEDC18}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4ADF86E9-326A-4401-B0D2-9E9EF04CB6EF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4EFCC212-5461-4084-9EF1-BC05848F29DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F4FC56B-60D4-4AC3-A84F-C94AAB35CBE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F928A10-3D8C-4C85-9237-5B95816A8846}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4FB84250-8932-4322-A621-0B9A04024A7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{52D52A5F-4C7A-4577-8387-34077EA27EC6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{54F5C8B5-0FF3-4254-A8DD-A9716081F46E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5547020F-316E-48A6-BCFB-9490A98FE119}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{556A9F34-B2FB-4F08-B8CC-98B4814EAB39}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{576A2014-D95A-4311-9E14-406C582AFB83}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5850DD8D-F98B-4941-89D7-030A7B2BFABE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{58918D17-E8BC-4FC7-A5A5-C7F5563F63C7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{59AA16B8-E196-4D52-96F2-35FC6BE64763}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5C3FE8EE-EF9E-441F-B77F-DA6D53BA19FE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5CCD5182-9BD5-41F3-AA92-5FAB95ACF5E5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5E3EB442-432B-4B37-9B07-532F708C1DB4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5F9CFE2C-44CC-465A-A33F-4BCB4B9BD54C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FCEC9A0-BE38-4778-91EB-C2575B7601EB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FDA00C4-E216-4358-B2F3-DCEA4475A08A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{61223C6E-B917-4A48-B3CA-E53AFFBB9EFA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{626CB288-5E4D-4253-B9CF-76499E5C424F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{63010AD8-1827-4415-A35D-4299231AC390}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{64CC525B-486C-43C6-9979-726AC6410064}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{65E60FA7-62C5-47B4-BDD5-F5C9D070B225}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{66C74B72-74F9-4602-B515-AB195B201991}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{68AA91CD-FD73-4954-890F-F16FAEEA8CB0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A478483-48E1-4380-AE42-74940E0703D3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A9244F5-9D7B-4E20-80A5-D6CEBEE93BDE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6B14FE68-0527-48D2-AEC0-254C914AE1E8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6E90B978-E21A-417E-9ECA-A1A3C5EE82DF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6F423AC3-B18B-4444-8A1B-9662D1D504F6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7125B026-DD86-4ED4-A96F-DFAB231DC00F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7143AA44-7EA8-42CE-8D64-0F591243A36F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{727AB55B-D9C1-491D-8A63-A18BD54060FC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{734BFFCA-9356-42EC-9F6E-1738FC1E47FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{735C4482-E202-4570-BE39-D06A1CD42729}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7537E8E9-6326-4022-B79B-11E6A0F3633D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7542C96E-83F6-47FF-9858-BD26190DBBF2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{76E02180-D908-4E13-B947-61D05F17D3F4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{777E67FF-9C81-4BEC-B884-AE1430A3897D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79523608-5541-47FA-890E-2881D2F8856C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79A63ECC-01D4-446A-9DD7-B7330711B722}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7B528435-B809-4B15-9C16-5D3726408343}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7C7C98DD-AC1C-473A-8AA9-C262B3A87A10}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7D909BF3-9B73-41C3-B152-2A0A07BD8CCF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DA5B883-9397-49C7-B0EA-C650EF3F74EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DC5F8A5-CB51-4937-B11B-CAFCD78763BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FD79787-467A-4CD0-BE1F-A75FCFB3B925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FFA6FE8-70F1-4E27-9D96-C2DC85C9430C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{81DC5E39-30E8-498B-B224-40317C5810ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82394F65-E8C4-4A10-9CC6-8F058E795100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82CB75B7-8EAA-4032-9517-AAA67DBDFF70}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8375CB51-D8C9-41D6-8F54-D7A849355A37}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{83C44587-B660-44FA-87F2-5D491FF6578D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8449734D-515E-454A-AD40-C02E1458511F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{86DB7C5A-8A99-4DE6-B453-B116753D280A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{870610A9-AD14-42B8-A988-83414E38B359}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{89DCB70C-F8FA-43FB-A0E7-D9977C2CDE2F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8A0F6202-B2CF-453B-9F0B-7CFC3026AC84}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8C9E724D-146C-4260-9555-C7322B21A058}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8D713C4E-336D-4898-A727-7ECB11D6CC8F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E566D6B-B2D4-46F7-A2CE-6C65818E1C2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E913B21-CDA9-4DC0-BF9F-DC02D2D764DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{90570896-A6A3-4ECD-AC76-975D0420FFAD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{911967DF-7AB5-4769-9CAA-AAF997568BF8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{912659DE-C6BF-4656-BDB1-52428E1712BE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{92D61AE1-746D-4E65-B433-4F5319EBD400}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9409B729-282A-46F8-AF99-AD40492B27BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{951E2B02-4BD1-4145-8FC7-74DA236C7995}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{95F8A76F-91C8-4330-B417-0A01F711728B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{961462F5-47B6-4749-B196-4A87ED6F5945}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{96E69756-69BE-4CB8-B369-8613FCD7218B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{973938A7-A677-416F-92D7-FF702123829C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{97D72870-85A3-4532-9E74-84762B3591F0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{989F4C3F-C48C-428F-B519-4D95684D6F06}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9A33FC12-EAF8-4155-A6D4-E7823B428F9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9C4776D4-AC2C-4124-ABC9-8A97939EE275}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9EFBBBED-2AC1-4C06-B594-9F698F7E58C1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9F7A7658-18A9-4D44-BA4B-88CF77981D4B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9FB6F6D5-E1FE-4C6D-A572-D0FB63E06F0A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A152DFF8-163A-487E-BDD2-BE715D5F20B6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A179A074-8720-480E-9B1E-82FBE5DE061F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2031704-32CA-4443-9B79-2E6E6BA0316A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A248FFC5-3873-4B4B-83E8-0A6B25F640DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A27E964D-EBC1-42C6-9618-D865227071D9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2CD9DB5-C26C-480F-9FC7-1E4FD6C5B658}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A376087E-4CF9-4D66-B060-7B1E41CD7DFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A443D426-495E-4BE9-A6AB-F84A678AC89D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6C431F7-59A5-4012-8466-248BD676DE47}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6EA5846-484C-4AEB-9F9F-A9AD8743B4FA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6F48BCA-7D63-4D4F-BD6E-699A87AF8A6C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A73576CF-6E3C-4C61-AC63-30021EC5FD2B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A746D105-2E4E-4C70-8E08-DF399C256E73}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A853F431-B4C3-4B58-B293-3916BB798254}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A910658B-7FC8-4A44-AAE5-631CD22F06A5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A9DD4887-8B4B-43D9-A019-EA1020754385}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AA732003-28D6-447A-85EE-C11FA049A90F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AC192423-5E4D-4E49-8D28-FB4D69B2A820}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD352770-D828-4286-8946-FEF12B6DC2ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD6CFD7D-7C29-403B-BADA-384830F1238B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AF28F21B-C9D7-4E41-8610-8DFE4AACBAD8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B2A6D78A-D7F0-4283-9331-E19CF49E7992}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4955D9F-DA1A-40C2-A1E6-4C98FBEA4703}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4C7F93F-836F-4E83-A8E5-15596BA3E0C4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B5C5095A-EDE3-4448-A645-4734CC5299B2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B6841348-3987-43C5-B4F3-A08A04614732}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B77A58BA-BDEF-44BF-83F1-05E9D07E9E02}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BAB13812-68CF-4F2B-A74D-E8D3413FB940}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BB2DFE37-78FA-4C8C-A02E-621724433BDF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BBDF1B15-E05A-49D2-94E2-58A2AD86D870}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BCCD16D7-DF9F-49FF-9F95-E47DACFEB8F3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDBE5CA0-310E-408A-BB18-BC40DA6F767D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDC77DAD-2476-43DB-80E1-362AAA90EED7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BEA497FE-83AA-47A3-9379-B1C3BAD97818}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C3111971-E835-4BC0-A3FA-7FC17317ABBC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C33A7279-490E-455E-8882-4275D32BF0EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C6DBA045-E45A-47E0-AEF8-17DD73A94FB2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C70C1390-6909-4240-8F82-EB17CCAC1DD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C8C89CA2-F97D-4D1D-9A25-A71759A1E925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CA1A2DEC-5A22-4129-987B-79130DF66D9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB5677F2-481F-4C9E-8705-A39E54248D6D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB9C2A0A-293E-494F-A2BE-D876D03A4831}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CBF62FF0-12BA-4DB4-BAC2-1793F9E7447F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CC1ED0E7-D33C-4365-AB17-77D1EE639478}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CF8BE34E-5D05-4D9C-BAF2-9C6AB8C7FC7E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D085CB7E-0CA9-49A4-B320-E65C676EE841}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D810A079-04E9-4734-BF30-E7619B8A0100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DA31A80E-F04A-4F1F-9218-050B7C88EC2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DB77E033-5E39-4C28-BB86-4F77C918C5D6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DCAA6DC9-45A0-41AF-9C17-463E388E8DC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DF395E59-234D-4F2A-8BA3-4AE10741B89E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E06A81F7-CDDE-4A20-998F-B7CFB9133EF4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0BC97EB-5DE1-4F3A-9AD5-E4B61B3F3947}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C2BFDA-2D02-4EE9-9238-73616CF5099F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C92714-E4CE-4DC8-955A-7BA88450949B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E24C2084-61AD-4934-8E14-38601EADBF3F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E2A8279C-A15B-4A28-99AC-782072F96D12}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E313961D-030A-49DE-9DC9-C144D64D2EEC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E935FB-1FBD-4F09-B85D-87ADD4BF4A17}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E9D3BD-A556-4971-B440-0D5D81AF00C2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E494A448-0F15-4D61-8782-3D120702112C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E6D2545B-867D-4CBD-896A-604EFCD74B13}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EADC9943-9040-4D48-BD18-63906CEA8844}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{ED24245C-2FB5-4CAD-9F71-1305BCA9DA5A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EE349677-8225-4A30-B27E-5C4D6DEAF0DE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F14E4018-AC5F-410A-911C-0A14A0515CA7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2272D0F-90A6-4B05-B2B3-CEE16DBB666F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2D28E1E-778D-4FAA-AE5A-82304A509D1F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2FEFDD6-2E57-459F-A28F-3ECB927EA1FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F6CD25E8-A620-474B-8594-C259452B729B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F73CDBC6-0261-4C04-BFFD-85E3587BFDE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F86110D1-6FE2-47CA-AEE8-9BA0176F344B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FAF8EFF3-6CBB-4EAE-81DA-CC92AC26D733}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FC503780-30E9-4996-871C-F6206F4C15D1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FCD2B2E8-D295-4648-BB06-9C4F4A56C183}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FD06D60C-B821-4138-AE0C-0FCD6C55B63D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDE1EAC8-8A2A-49F8-9969-87A305162479}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDFCD6AA-7BC8-40CD-98FF-F1B29B99E091}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.09.2013 at  8:34:37,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 27.09.2013, 08:13   #9
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


JRT.txt war wieder mal zu lang.

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.2 (09.22.2013:1)
OS: Windows 7 Home Premium x64
Ran by Bernhard on 27.09.2013 at  8:25:46,71
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] hshld 
Successfully deleted: [Service] hshld 
Successfully stopped: [Service] hsstrayservice 
Successfully deleted: [Service] hsstrayservice 
Successfully stopped: [Service] hsswd 
Successfully deleted: [Service] hsswd 



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4070342091-3793343965-3738386277-1000\Software\SweetIM
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\hotspotshield
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{1BD434D9-3938-4222-82CA-9131A398E177}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\shoEBBC.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\hotspot shield"
Successfully deleted: [Folder] "C:\Users\Bernhard\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Program Files (x86)\hotspot shield"
Successfully deleted: [Folder] "C:\Program Files (x86)\Common Files\wondershare"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{00246414-A149-45AE-BE97-3D8885AB9E20}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{022A62BB-D091-4572-8A4F-CB9C1B9C0D77}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{02BC68B2-75EB-4FC9-AE0D-82351E919806}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{04EC5231-9FB4-4FF0-BCF3-64AAEBE98195}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{09012F89-89D0-4D30-9F4F-2519A18A0363}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0BBD1509-BF1D-417E-8FC5-C0BBB3D56CFC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0CC3542C-71FE-4626-A0F9-9EA14B8FF45F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{0FCC76C3-99DA-4951-AB6F-EDF97644BCA5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1382C7A7-AA12-4A40-854E-9052BDB5E768}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{150670B0-5217-4036-89B8-2A204AACC3CD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1978C529-5969-469D-978F-B854C762D1CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{19956A3F-FB48-4CCF-B962-CAEF4B845770}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1B32BC6B-BC22-4825-9FEA-D30F61A662CC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1C6B05D3-1C57-4F80-8FAA-5E8299160B22}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1CD29D06-AA5A-4C96-8A5D-22887A60ACC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1E91FCBE-DB75-4CF1-B3A8-D7EB866FFDFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1EB4078F-F705-4C6F-B4DB-1DD93026320A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{1ED9CC16-65D4-4D77-B682-9F6019EA74A6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{23F8F85B-2B04-419C-B8EB-0799AF963E89}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{269759D0-1AF8-43EB-AA61-66D6885D87B1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{28D75E3F-D7A0-4CCE-8C69-4084380A23CE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2902270E-EC17-4F0B-B579-7B6A40D398FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2A29BD80-6102-43BF-9F52-D841758BA329}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2B6F28A3-DB8B-4360-9424-05AD5D146B31}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C6D77EC-9714-405B-8F0F-2F1A2AC2F6A9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2C83E885-600C-402E-BE6C-FA1E92FF4F68}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D2C47FB-B515-4314-AA68-827B5EB16300}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2D857ABF-F255-4897-B0A3-F4520F30B7FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DB6E073-30E4-4FEF-B711-824A92B1CC9A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{2DFAC4D2-C8BE-47FA-BB99-8415F2359589}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{303B31B8-E799-4EF5-AA10-0984F8E362D8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{30C6CBB3-4453-4BD8-A65F-1B9392E61057}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{375464FA-49DD-433E-92F1-DD9AEEBDF850}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{385E83C1-DFA1-4F88-A03E-FCD65629267E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3A3D6D46-C316-4EF4-8A75-5E921F315990}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3BA27485-3FE0-4E15-BE27-B34C3BE58F7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3DFA1F77-48B6-4633-BAD7-38FCED4FFEB8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{3FE829A0-354D-4D28-A45E-7B5EEBF42BD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{408A6A5C-5597-4F27-B1DA-9BEC9A92FEC5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{411E3EDE-12C6-49B5-976D-10FE5586885D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{42AF9C92-D723-4FC3-978B-F0137F4EB050}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43888FF7-A284-4E04-9DFB-698E1441B657}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{43D0E1C9-7D9A-4E78-A011-9325E5EE00EA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{45D88ED4-9798-4E99-B6B6-69D6D5D3D668}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{46C70D72-102D-45F3-9E24-5C26BF02BF92}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{475CAA8C-B718-45D9-A79B-57BA49AAE3DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48BF5032-7ADE-423A-9831-A2AAAF619AEB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{48FDD7A0-1F20-4797-AFAA-F4986F37A607}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{49651C35-41EE-4B6C-B786-43C10C8ADD86}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A421EE1-9571-49B7-A36C-0FA270BD2DCA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4A9125E4-1DAC-4CFC-9148-969610BEDC18}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4ADF86E9-326A-4401-B0D2-9E9EF04CB6EF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4EFCC212-5461-4084-9EF1-BC05848F29DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F4FC56B-60D4-4AC3-A84F-C94AAB35CBE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4F928A10-3D8C-4C85-9237-5B95816A8846}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{4FB84250-8932-4322-A621-0B9A04024A7C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{52D52A5F-4C7A-4577-8387-34077EA27EC6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{54F5C8B5-0FF3-4254-A8DD-A9716081F46E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5547020F-316E-48A6-BCFB-9490A98FE119}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{556A9F34-B2FB-4F08-B8CC-98B4814EAB39}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{576A2014-D95A-4311-9E14-406C582AFB83}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5850DD8D-F98B-4941-89D7-030A7B2BFABE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{58918D17-E8BC-4FC7-A5A5-C7F5563F63C7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{59AA16B8-E196-4D52-96F2-35FC6BE64763}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5C3FE8EE-EF9E-441F-B77F-DA6D53BA19FE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5CCD5182-9BD5-41F3-AA92-5FAB95ACF5E5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5E3EB442-432B-4B37-9B07-532F708C1DB4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5F9CFE2C-44CC-465A-A33F-4BCB4B9BD54C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FCEC9A0-BE38-4778-91EB-C2575B7601EB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{5FDA00C4-E216-4358-B2F3-DCEA4475A08A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{61223C6E-B917-4A48-B3CA-E53AFFBB9EFA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{626CB288-5E4D-4253-B9CF-76499E5C424F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{63010AD8-1827-4415-A35D-4299231AC390}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{64CC525B-486C-43C6-9979-726AC6410064}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{65E60FA7-62C5-47B4-BDD5-F5C9D070B225}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{66C74B72-74F9-4602-B515-AB195B201991}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{68AA91CD-FD73-4954-890F-F16FAEEA8CB0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A478483-48E1-4380-AE42-74940E0703D3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6A9244F5-9D7B-4E20-80A5-D6CEBEE93BDE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6B14FE68-0527-48D2-AEC0-254C914AE1E8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6E90B978-E21A-417E-9ECA-A1A3C5EE82DF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{6F423AC3-B18B-4444-8A1B-9662D1D504F6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7125B026-DD86-4ED4-A96F-DFAB231DC00F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7143AA44-7EA8-42CE-8D64-0F591243A36F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{727AB55B-D9C1-491D-8A63-A18BD54060FC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{734BFFCA-9356-42EC-9F6E-1738FC1E47FB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{735C4482-E202-4570-BE39-D06A1CD42729}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7537E8E9-6326-4022-B79B-11E6A0F3633D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7542C96E-83F6-47FF-9858-BD26190DBBF2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{76E02180-D908-4E13-B947-61D05F17D3F4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{777E67FF-9C81-4BEC-B884-AE1430A3897D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79523608-5541-47FA-890E-2881D2F8856C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{79A63ECC-01D4-446A-9DD7-B7330711B722}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7B528435-B809-4B15-9C16-5D3726408343}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7C7C98DD-AC1C-473A-8AA9-C262B3A87A10}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7D909BF3-9B73-41C3-B152-2A0A07BD8CCF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DA5B883-9397-49C7-B0EA-C650EF3F74EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7DC5F8A5-CB51-4937-B11B-CAFCD78763BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FD79787-467A-4CD0-BE1F-A75FCFB3B925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{7FFA6FE8-70F1-4E27-9D96-C2DC85C9430C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{81DC5E39-30E8-498B-B224-40317C5810ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82394F65-E8C4-4A10-9CC6-8F058E795100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{82CB75B7-8EAA-4032-9517-AAA67DBDFF70}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8375CB51-D8C9-41D6-8F54-D7A849355A37}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{83C44587-B660-44FA-87F2-5D491FF6578D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8449734D-515E-454A-AD40-C02E1458511F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{86DB7C5A-8A99-4DE6-B453-B116753D280A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{870610A9-AD14-42B8-A988-83414E38B359}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{89DCB70C-F8FA-43FB-A0E7-D9977C2CDE2F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8A0F6202-B2CF-453B-9F0B-7CFC3026AC84}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8C9E724D-146C-4260-9555-C7322B21A058}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8D713C4E-336D-4898-A727-7ECB11D6CC8F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E566D6B-B2D4-46F7-A2CE-6C65818E1C2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{8E913B21-CDA9-4DC0-BF9F-DC02D2D764DB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{90570896-A6A3-4ECD-AC76-975D0420FFAD}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{911967DF-7AB5-4769-9CAA-AAF997568BF8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{912659DE-C6BF-4656-BDB1-52428E1712BE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{92D61AE1-746D-4E65-B433-4F5319EBD400}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9409B729-282A-46F8-AF99-AD40492B27BB}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{951E2B02-4BD1-4145-8FC7-74DA236C7995}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{95F8A76F-91C8-4330-B417-0A01F711728B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{961462F5-47B6-4749-B196-4A87ED6F5945}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{96E69756-69BE-4CB8-B369-8613FCD7218B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{973938A7-A677-416F-92D7-FF702123829C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{97D72870-85A3-4532-9E74-84762B3591F0}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{989F4C3F-C48C-428F-B519-4D95684D6F06}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9A33FC12-EAF8-4155-A6D4-E7823B428F9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9C4776D4-AC2C-4124-ABC9-8A97939EE275}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9EFBBBED-2AC1-4C06-B594-9F698F7E58C1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9F7A7658-18A9-4D44-BA4B-88CF77981D4B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{9FB6F6D5-E1FE-4C6D-A572-D0FB63E06F0A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A152DFF8-163A-487E-BDD2-BE715D5F20B6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A179A074-8720-480E-9B1E-82FBE5DE061F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2031704-32CA-4443-9B79-2E6E6BA0316A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A248FFC5-3873-4B4B-83E8-0A6B25F640DA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A27E964D-EBC1-42C6-9618-D865227071D9}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A2CD9DB5-C26C-480F-9FC7-1E4FD6C5B658}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A376087E-4CF9-4D66-B060-7B1E41CD7DFF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A443D426-495E-4BE9-A6AB-F84A678AC89D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6C431F7-59A5-4012-8466-248BD676DE47}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6EA5846-484C-4AEB-9F9F-A9AD8743B4FA}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A6F48BCA-7D63-4D4F-BD6E-699A87AF8A6C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A73576CF-6E3C-4C61-AC63-30021EC5FD2B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A746D105-2E4E-4C70-8E08-DF399C256E73}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A853F431-B4C3-4B58-B293-3916BB798254}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A910658B-7FC8-4A44-AAE5-631CD22F06A5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{A9DD4887-8B4B-43D9-A019-EA1020754385}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AA732003-28D6-447A-85EE-C11FA049A90F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AC192423-5E4D-4E49-8D28-FB4D69B2A820}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD352770-D828-4286-8946-FEF12B6DC2ED}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AD6CFD7D-7C29-403B-BADA-384830F1238B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{AF28F21B-C9D7-4E41-8610-8DFE4AACBAD8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B2A6D78A-D7F0-4283-9331-E19CF49E7992}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4955D9F-DA1A-40C2-A1E6-4C98FBEA4703}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B4C7F93F-836F-4E83-A8E5-15596BA3E0C4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B5C5095A-EDE3-4448-A645-4734CC5299B2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B6841348-3987-43C5-B4F3-A08A04614732}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{B77A58BA-BDEF-44BF-83F1-05E9D07E9E02}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BAB13812-68CF-4F2B-A74D-E8D3413FB940}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BB2DFE37-78FA-4C8C-A02E-621724433BDF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BBDF1B15-E05A-49D2-94E2-58A2AD86D870}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BCCD16D7-DF9F-49FF-9F95-E47DACFEB8F3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDBE5CA0-310E-408A-BB18-BC40DA6F767D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BDC77DAD-2476-43DB-80E1-362AAA90EED7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{BEA497FE-83AA-47A3-9379-B1C3BAD97818}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C3111971-E835-4BC0-A3FA-7FC17317ABBC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C33A7279-490E-455E-8882-4275D32BF0EC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C6DBA045-E45A-47E0-AEF8-17DD73A94FB2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C70C1390-6909-4240-8F82-EB17CCAC1DD5}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{C8C89CA2-F97D-4D1D-9A25-A71759A1E925}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CA1A2DEC-5A22-4129-987B-79130DF66D9E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB5677F2-481F-4C9E-8705-A39E54248D6D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CB9C2A0A-293E-494F-A2BE-D876D03A4831}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CBF62FF0-12BA-4DB4-BAC2-1793F9E7447F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CC1ED0E7-D33C-4365-AB17-77D1EE639478}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{CF8BE34E-5D05-4D9C-BAF2-9C6AB8C7FC7E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D085CB7E-0CA9-49A4-B320-E65C676EE841}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{D810A079-04E9-4734-BF30-E7619B8A0100}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DA31A80E-F04A-4F1F-9218-050B7C88EC2E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DB77E033-5E39-4C28-BB86-4F77C918C5D6}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DCAA6DC9-45A0-41AF-9C17-463E388E8DC8}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{DF395E59-234D-4F2A-8BA3-4AE10741B89E}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E06A81F7-CDDE-4A20-998F-B7CFB9133EF4}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0BC97EB-5DE1-4F3A-9AD5-E4B61B3F3947}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C2BFDA-2D02-4EE9-9238-73616CF5099F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E0C92714-E4CE-4DC8-955A-7BA88450949B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E24C2084-61AD-4934-8E14-38601EADBF3F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E2A8279C-A15B-4A28-99AC-782072F96D12}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E313961D-030A-49DE-9DC9-C144D64D2EEC}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E935FB-1FBD-4F09-B85D-87ADD4BF4A17}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E3E9D3BD-A556-4971-B440-0D5D81AF00C2}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E494A448-0F15-4D61-8782-3D120702112C}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{E6D2545B-867D-4CBD-896A-604EFCD74B13}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EADC9943-9040-4D48-BD18-63906CEA8844}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{ED24245C-2FB5-4CAD-9F71-1305BCA9DA5A}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{EE349677-8225-4A30-B27E-5C4D6DEAF0DE}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F14E4018-AC5F-410A-911C-0A14A0515CA7}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2272D0F-90A6-4B05-B2B3-CEE16DBB666F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2D28E1E-778D-4FAA-AE5A-82304A509D1F}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F2FEFDD6-2E57-459F-A28F-3ECB927EA1FF}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F6CD25E8-A620-474B-8594-C259452B729B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F73CDBC6-0261-4C04-BFFD-85E3587BFDE3}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{F86110D1-6FE2-47CA-AEE8-9BA0176F344B}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FAF8EFF3-6CBB-4EAE-81DA-CC92AC26D733}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FC503780-30E9-4996-871C-F6206F4C15D1}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FCD2B2E8-D295-4648-BB06-9C4F4A56C183}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FD06D60C-B821-4138-AE0C-0FCD6C55B63D}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDE1EAC8-8A2A-49F8-9969-87A305162479}
Successfully deleted: [Empty Folder] C:\Users\Bernhard\appdata\local\{FDFCD6AA-7BC8-40CD-98FF-F1B29B99E091}



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\ejnmnhkgiphcaeefbaooconkceehicfi



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.09.2013 at  8:34:37,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Alt 27.09.2013, 10:24   #10
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 27.09.2013, 15:08   #11
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Ich habe noch einen Quick - Scan und einen vollständigen Scan mit Malwarebytes gemacht:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.27.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Bernhard :: BERNHARD-PC [Administrator]

27.09.2013 09:16:27
mbam-log-2013-09-27 (09-16-27).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 275348
Laufzeit: 9 Minute(n), 28 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 3
C:\Users\Bernhard\Downloads\DarkWave-Studio-4.0.9.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\zp861free.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

(Ende)
Code:
ATTFilter
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.09.27.01

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16686
Bernhard :: BERNHARD-PC [Administrator]

27.09.2013 09:30:31
mbam-log-2013-09-27 (09-30-31).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 528753
Laufzeit: 2 Stunde(n), 54 Minute(n), 20 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 75
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\DealPlyLive.exe.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLive.exe.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveBroker.exe.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveHandler.exe.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\DealPlyLiveOnDemand.exe.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdate.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_am.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ar.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bg.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_bn.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ca.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_cs.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_da.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_de.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_el.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en-GB.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_en.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es-419.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_es.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_et.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fa.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fi.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fil.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_fr.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_gu.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hi.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hr.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_hu.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_id.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_is.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_it.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_iw.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ja.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_kn.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ko.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lt.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_lv.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ml.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_mr.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ms.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_nl.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_no.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pl.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-BR.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_pt-PT.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ro.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ru.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sk.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sl.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sr.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sv.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_sw.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ta.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_te.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_th.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_tr.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_uk.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_ur.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_vi.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-CN.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\goopdateres_zh-TW.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\npGoogleUpdate3.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psmachine.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\DealPlyLive\Update\1.3.23.0\psuser.dll.vir (PUP.Optional.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\FreeMake\FreeMakeToolbarHelper1.exe.vir (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Hotspot_Shield\Hotspot_ShieldToolbarHelper1.exe.vir (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe.vir (PUP.Optional.Tarma.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Users\Bernhard\AppData\Local\Conduit\CT1561552\Hotspot_ShieldAutoUpdateHelper.exe.vir (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Users\Bernhard\AppData\Local\Conduit\CT3214568\FreeMakeAutoUpdateHelper.exe.vir (PUP.Optional.Conduit.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Users\Bernhard\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe.vir (PUP.DealPly.A) -> Keine Aktion durchgeführt.
C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir (PUP.Optional.PCPerformer.A) -> Keine Aktion durchgeführt.
C:\Qoobox\Quarantine\C\ProgramData\DSearchLink\DSearchLink.exe.vir (PUP.Optional.Delta.A) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\DarkWave-Studio-4.0.9.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\SoftonicDownloader_fuer_apowersoft-free-screen-recorder.exe (PUP.Optional.Softonic) -> Keine Aktion durchgeführt.
C:\Users\Bernhard\Downloads\zp861free.exe (PUP.Optional.OpenCandy) -> Keine Aktion durchgeführt.

(Ende)
Norton meldete folgende Sicherheitsrisiken:
jrt.exe (WS.Reputation.1)
860032.crdownload (Suspicious.Cloud.2)
402141.crdownload (Suspicious.Cloud.2)

Hi,
wie deaktiviere ich die Firewall?
Ist mein PC nicht extrem gefährdet, wenn ich Firewall und Anti-Virus-Programm deaktiviere und dann online gehe?


Schließe evtl. vorhandene externe Festplatten und/oder sonstigen Wechselmedien (z. B. evtl. vorhandene USB-Sticks) an den Rechner an.
Bitte während des Online-Scans Anti-Virus-Programm und Firewall deaktivieren.

Außerdem dauert der Scan einer großen, externen Festplatte sicher länger. Das bedeutet, dass der PC die ganze Zeit angreifbar ist. Gibt es nur einen Online-Scanner?

Alt 28.09.2013, 12:05   #12
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Firewall kannste anlassen, AV aus weil das sonst blockt. Wenn Du sonst nix machst am Rechner passiert nix.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.10.2013, 09:52   #13
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Danke für die Hilfe.

Leider habe ich ein neues, massiveres Problem. In den letzten Tagen traten zwei Bluescreens mit diesem Fehlercode auf:

0x0000007e (0xffffffffc0000005, 0xfffff88001b57d6e, 0xfffff8800bfcd7c8, 0xfffff8800bfcd020)

Ich habe mit Google danach gesucht und leider nichts gefunden.

Alt 16.10.2013, 11:24   #14
schrauber
/// the machine
/// TB-Ausbilder
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Wann genau, konntest du das an was festmachen?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.10.2013, 16:13   #15
Bernhard1
 
Windows 7: Lyrixeeker vollständig entfernt? - Standard

Windows 7: Lyrixeeker vollständig entfernt?


Weitere Fehlermeldung um 14.10.2013 14:34:44

Die Speicherabbilddatei unter dem Ort "C:\Windows\MEMORY.DMP" wurde gelöscht, da auf dem Volume weniger als 25 GB freier Speicher vorhanden war.

Zusatzinformation:
Unmittelbar vor dem Bluescreen am 11.Oktober hatte ich den Leawo Musik Recorder 1.0 installiert. Der Bluescreen trat bei der ersten Verwendung dieser installierten Software auf.
Nach dem Neustart habe ich die Software wieder deinstalliert.
Trotzdem hatte ich am 14. Oktober den zweiten Bluescreen.

Antwort
Seite 1 von 2 1 2

Themen zu Windows 7: Lyrixeeker vollständig entfernt?
adware.installbrain, browsern, cookies, lyrixeeker, norton internet security, plötzlich, programme, pup.dealply.a, pup.optional.babylon.a, pup.optional.conduit, pup.optional.conduit.a, pup.optional.datamngr.a, pup.optional.dealply.a, pup.optional.delta.a, pup.optional.installcore.a, pup.optional.opencandy, pup.optional.pcperformer.a, pup.optional.softonic, pup.optional.tarma.a, removal, search the web, superantispyware, testen, windows, windows 7


« Rar wird als exe runtergeladen | fake alert »


Ähnliche Themen: Windows 7: Lyrixeeker vollständig entfernt?


  1. crossbrowse u.ä. vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 29.06.2015 (46)
  2. PC Optimizer Pro vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 01.05.2014 (14)
  3. Windows 7 x64 sweet-page.com vollständig entfernt? evtl. andere schädlinge?
    Log-Analyse und Auswertung - 30.01.2014 (3)
  4. Lyrixeeker, Heurisric.shuriken ...gefunden unf entfernt. wars das?
    Log-Analyse und Auswertung - 26.09.2013 (10)
  5. GVU-Virus vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 20.07.2013 (18)
  6. GVU Trojaner - vollständig entfernt?
    Log-Analyse und Auswertung - 01.11.2012 (6)
  7. GVU-Trojaner - vollständig entfernt?
    Log-Analyse und Auswertung - 18.09.2012 (17)
  8. Incrdibar vollständig entfernt?
    Log-Analyse und Auswertung - 27.04.2012 (1)
  9. Windows 7 Recovery vollständig entfernt? Desktop wiederherstellen?
    Log-Analyse und Auswertung - 29.05.2011 (27)
  10. Windows Recovery - Vollständig entfernt?
    Log-Analyse und Auswertung - 04.05.2011 (9)
  11. Windows Recovery - vollständig entfernt?
    Log-Analyse und Auswertung - 03.05.2011 (3)
  12. TR/Dropper.Gen vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 13.01.2011 (6)
  13. ThinkPoint vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 18.11.2010 (23)
  14. Virus vollständig entfernt?
    Plagegeister aller Art und deren Bekämpfung - 15.03.2010 (1)
  15. Virus entfernt vollständig?
    Plagegeister aller Art und deren Bekämpfung - 21.10.2009 (6)
  16. Spylocked 3.3 vollständig entfernt?
    Log-Analyse und Auswertung - 19.04.2007 (15)
  17. Spyware vollständig entfernt???
    Log-Analyse und Auswertung - 01.03.2006 (12)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 7: Lyrixeeker vollständig entfernt? - Vor ein paar Tagen tauchte ein Problem bei meinen Browsern "Firefox" und "Google Chrome" auf. Als Standard-Suchmaschine war plötzlich "Deltasearch" eingestellt. Außerdem reagierte der PC nur noch sehr langsam und - Windows 7: Lyrixeeker vollständig entfernt?...
Archiv
Du betrachtest: Windows 7: Lyrixeeker vollständig entfernt? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129