ClickCaption_1.10.0.2 deinstallieren

Sello30 · 27.11.2014, 22:48

Hallo,

ich habe versucht mit Kaspersky internet Security o. g. Programm zu entfernen. Hat leider nicht geklappt. Bin dann über Google auf euer Forum gestoßen mit einer Anleitung zur Entfernung des Programms.

Siehe folgenden Link: http://www.trojaner-board.de/160932-...e-werbung.html
Habe die Anweisung laut Seite 1 - bis auf ESET und Security check (ESET läuft momentan, danach Security Check) befolgt und möchte gerne wissen, ob alles nun bereinigt ist.
Wie folgt die Posts.

Momentan läuft noch Eset. Den Post dazu sende ich nach:

Würde mich über ein Feedback freuen!

THX!

cosinus · 27.11.2014, 23:49

Hi und

Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Sello30 · 29.11.2014, 10:59

Hi,

hatte leider gestern kein Internet - KD Problem.

Hier nochmal die Logfiles - wie gewünscht ;-)

ADW Cleaner

Code:

ATTFilter

# AdwCleaner v4.102 - Bericht erstellt am 27/11/2014 um 21:57:56
# Aktualisiert 23/11/2014 von Xplode
# Database : 2014-11-27.1 [Live]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Zghal SM - ZGHALSM-PC
# Gestartet von : C:\Users\Zghal SM\Downloads\AdwCleaner_4.102.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalTorrent
Ordner Gelöscht : C:\Program Files (x86)\Amazon\ABB
Ordner Gelöscht : C:\Program Files (x86)\FinalTorrent
Ordner Gelöscht : C:\Program Files (x86)\PC Speed Maximizer
Ordner Gelöscht : C:\Program Files (x86)\VideoConverter
Ordner Gelöscht : C:\Program Files (x86)\{453F315F-32EA-43BA-9BD1-AFCD98DBB380}
Ordner Gelöscht : C:\Program Files (x86)\{62DE6D93-F50B-4693-8FB0-C9DB8E1DA0CA}
Ordner Gelöscht : C:\Program Files\{9BC53DAC-A8DA-4D82-AB1C-00DBFE3EBDD8}
Ordner Gelöscht : C:\Program Files\{D5F00F98-A524-4D8C-9FA6-3DAA69D41068}
Ordner Gelöscht : C:\Users\ZGHALS~1\AppData\Local\Temp\Greener Web
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Local\FileTypeAssistant
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Roaming\0D0S1L2Z1P1B
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Roaming\Advanced System Protector
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Roaming\FinalTorrent
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Roaming\Systweak
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Video Converter
Ordner Gelöscht : C:\Users\Zghal SM\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Zghal SM\Documents\Updater
Ordner Gelöscht : C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\mncmlaegfbjphcfomidklbjlciallmhc
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Zghal SM\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Video Converter.lnk
Datei Gelöscht : C:\Users\Zghal SM\Desktop\Video Converter.lnk
Datei Gelöscht : C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\user.js
Datei Gelöscht : C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_www.superfish.com_0.localstorage-journal

***** [ Tasks ] *****

Task Gelöscht : EPUpdater

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\engeblojhfeingnjnfpiceofljnjpldp
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{065C1A21-97F8-45FB-A9F0-861B60FACEC8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3204358F-5904-46A6-841F-D6B5BE3EF4E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3AE67737-0E3E-44AA-AA5E-46A68BF017FF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3EE5B726-044A-48D2-AA7B-049BD9A0F62A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{60FBBE03-57FF-49D8-B38E-053D3F489825}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6A5182F1-C0B8-42B8-96CC-7F329CD46913}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6C153418-8E4D-4FAF-AF27-5201E38463A7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A26A2F05-AC4D-4A1E-9531-9125F7309B78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CC5D6240-7DF0-435D-9B9B-F8586A99DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F343045E-E20A-46E1-82D8-9962C43EFC9E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FBB360DC-CB6C-4D6A-808A-2C773151BFFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FFD7DDAC-EC28-42A5-8D39-917B9078604B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{C654F3FE-8E84-4BB7-87CF-8D9171FC3C73}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKCU\Software\Bitberry Software
Schlüssel Gelöscht : HKCU\Software\Bitberry
Schlüssel Gelöscht : HKCU\Software\FileTypeAssistant
Schlüssel Gelöscht : HKCU\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Wpm
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Video Converter
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Doko Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dokotoolbar
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ac225167-00fc-452d-94c5-bb93600e7d9a}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Greener Web
Daten Gelöscht : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - SM\AppData\Local\Smartbar\Application\Resources\crdlil.dll
Daten Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - SM\AppData\Local\Smartbar\Application\Resources\crdlil64.dll
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17420

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]

-\\ Mozilla Firefox v33.1.1 (x86 de)

[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("browser.newtab.url", "hxxp://feed.safefinder.com/?p=mKO_AwFzXIpYRak5VLd2-qQdkN5729vVFWx_GxS66P_6EEo2VgpCoAhNIdBnT9n_wOB2cvwiKV-ykBlBkL2EN7eR2FcdTaUyMkVpp7BYo-pEMlDP6xVpdUAakOsHc0bng7eqT3QmO[...]
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.DockingPositionDown", false);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.SmartbarDisabled", false);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.Visibility", false);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.backPageCapacity", 3);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.backPageCounter", 0);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.backPageDay", 26);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.backPageLastEvent", "1416837809099");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.backPageMinInterval", 15);
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.barcodeid", "154079");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.countryiso", "de");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.downloadprovider", "irssf100");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.fromautoupdate", "false");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.installationid", "6daace03-f8db-e71e-1c84-2df92e824c7f");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.installdate", "26/11/2014");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.iswinxp", "false");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.keepAliveLastevent", "1417010464");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.lastExternalJsUpdate", "1416963670966");
[x6t1zlsj.default\prefs.js] - Zeile gelöscht : user_pref("extensions.helperbar.publisher", "irssf");

-\\ Google Chrome v

[C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\preferences] - Gelöscht [Extension] : mncmlaegfbjphcfomidklbjlciallmhc

*************************

AdwCleaner[R0].txt - [45955 octets] - [19/10/2013 13:58:53]
AdwCleaner[R1].txt - [46075 octets] - [19/10/2013 14:00:49]
AdwCleaner[R2].txt - [5563 octets] - [18/12/2013 20:26:50]
AdwCleaner[R3].txt - [11918 octets] - [27/11/2014 21:55:35]
AdwCleaner[S0].txt - [320 octets] - [19/10/2013 13:59:43]
AdwCleaner[S1].txt - [41010 octets] - [19/10/2013 14:01:25]
AdwCleaner[S2].txt - [5393 octets] - [18/12/2013 20:27:37]
AdwCleaner[S3].txt - [11478 octets] - [27/11/2014 21:57:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [11539 octets] ##########

JRT

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.9 (11.15.2014:2)
OS: Windows 7 Home Premium x64
Ran by Zghal SM on 27.11.2014 at 22:05:39,40
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\util greener web



~~~ Files

Successfully deleted: [File] "C:\Windows\wininit.ini"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\pcdr"
Successfully deleted: [Folder] "C:\Users\Zghal SM\AppData\Roaming\pcdr"
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{18EBF49C-081B-4BD2-9D3E-45ED4A32C8E7}
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{23B5D0A6-6BAB-485A-A886-65401540C428}
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{275C324A-C559-4924-8D81-22F580C6B5A3}
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{4F74283D-3973-4763-972F-5A2FDBA3375F}
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{E1D53FB2-6D0D-4453-8E4D-D0C399285942}
Successfully deleted: [Empty Folder] C:\Users\Zghal SM\appdata\local\{FD58E6EF-01F4-490D-BE6A-FF6D0BE3AA81}



~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted the following from C:\Users\Zghal SM\AppData\Roaming\mozilla\firefox\profiles\x6t1zlsj.default\prefs.js

user_pref("extensions.AMAZONNEW_NS_PH.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\n  <replacements>\n    <replacement>\n      <key><![CDATA[__REGIO
Emptied folder: C:\Users\Zghal SM\AppData\Roaming\mozilla\firefox\profiles\x6t1zlsj.default\minidumps [16 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 27.11.2014 at 22:13:02,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ESET

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=d65ea41e4925e84f9279830149a8108e
# engine=21299
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-28 06:56:50
# local_time=2014-11-28 07:56:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1292 16777213 100 100 39363 48635832 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 38403 168787660 0 0
# scanned=310395
# found=72
# cleaned=0
# scan_time=34415
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"
sh=9CD9DBA6B99C6C88E8CACD8A4A72AC1778B86010 ft=1 fh=a14d33dbdf868e65 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarApp.dll.vir"
sh=7936A5CBADA4B1C422E8D6C9394973F57D392331 ft=1 fh=1aeea73a71c1ef61 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarEng.dll.vir"
sh=654FB351A6D1E721030768CAEEC5D3E16CCDC6E1 ft=1 fh=34c93af138f65726 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarsrv.exe.vir"
sh=B87210DB7408A251B0F9F0E90E07E01B30BA90E6 ft=1 fh=924d6f191c6ebfd3 vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarTlbr.dll.vir"
sh=1C2427F2899C57C2A6CB9E95F8F15AAEA5716841 ft=1 fh=0ce554b6dc5aec4d vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\uninstall.exe.vir"
sh=ADFC9FA91DFF03C98690C7D0A8833C404C9B75FE ft=1 fh=2a0cd34600ad4288 vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\bh\dokotoolbar.dll.vir"
sh=F48266A97BDB7F58C5B54469B2245CACD46577D0 ft=1 fh=c4efab275ed5eda7 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\Components\NCHToolbars\conduit\ConduitInstaller.exe.vir"
sh=72F28F0A95BE5DE99FB1F7682107D70D5F595DD4 ft=1 fh=a5d7f75bcd1cfec2 vn="Win32/Toolbar.SearchSuite.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll.vir"
sh=E575D3AEB8B448F759DFCBDB9F7B6E694C062C16 ft=1 fh=956437993316e867 vn="Variante von Win32/Toolbar.SearchSuite.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngr.dll.vir"
sh=5D65A8FEF17F3A82EFEB93ED01BAAA484754015D ft=1 fh=c1700cd30525d259 vn="Variante von Win32/Toolbar.SearchSuite.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe.vir"
sh=6A5D717DAB44602AA78A256C3DA9E17A37736CAC ft=1 fh=3ed1e855ec02addc vn="Variante von Win32/Toolbar.SearchSuite.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\DnsBHO.dll.vir"
sh=F749B47BB5D8AC83CE5B5ECABC655DBF9ED72356 ft=1 fh=44c341bd8cfcd4d5 vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll.vir"
sh=F6C0B8AAB9D57C283500C2BC0F13BB5035935077 ft=1 fh=c71c0011a573a014 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF10.dll.vir"
sh=44F872D2B23C81967AC728E2A5552B9FF3C6ED1B ft=1 fh=c71c00116674a20e vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF11.dll.vir"
sh=4D890D6BCE80D64396A61A3D5103AA2B41D9D78A ft=1 fh=c71c00113e48ea58 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF12.dll.vir"
sh=8F23E296E3926B79330B604F4E7F21F8BE725435 ft=1 fh=c71c0011f9f0c849 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF13.dll.vir"
sh=CE745721420B5FFC4672A4416741CE47CA2E7A17 ft=1 fh=c71c0011a9dbba1d vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF14.dll.vir"
sh=D2F264746CD23606EA7DB99A43950C7B36D2CA20 ft=1 fh=c71c0011ce516762 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF3.dll.vir"
sh=13D3E69C0F093EDF74CBABF9305CFFB4A9C655E8 ft=1 fh=c71c001172759bdc vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF4.dll.vir"
sh=F99F459E862762C76E1A1FF8833DC01456AB7FC8 ft=1 fh=c71c00110d2c3a07 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF5.dll.vir"
sh=71B6F4E3C234D97909D27537931E6607701D26C6 ft=1 fh=c71c0011aa39c8ed vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF6.dll.vir"
sh=CA821F2158846DD0FF0D7AEAB81AC9E37FBC25E9 ft=1 fh=c71c0011e565107b vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF7.dll.vir"
sh=4A11A7A648D870DE6511F01A59B17B8BBC9D0C77 ft=1 fh=c71c0011a7258e3a vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF8.dll.vir"
sh=C2ED27AA162C127DC549D1ADB3ED0736C2B4C01C ft=1 fh=c71c0011aae56ae1 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF9.dll.vir"
sh=B81BAAC9D35824000ADB556418067A9220C40F01 ft=1 fh=23a12d968d390125 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe.vir"
sh=5618448E0195BA9251A1A0A5132CE2612037D630 ft=1 fh=ccf0f11a65c989b1 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchquband.dll.vir"
sh=9069C1AE362702A5CFD0947D07C49791244CF7E1 ft=1 fh=b2a7890de2375dad vn="Variante von Win32/Toolbar.Visicom.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll.vir"
sh=F4D18D6C51F979617F550B3206BE40E8A8CF70F7 ft=1 fh=d20550a1865ff508 vn="Variante von Win64/Toolbar.SearchSuite.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\datamngr.dll.vir"
sh=33852C0D03A4F356825F914995A90CF35263B357 ft=1 fh=ce1eede529840c69 vn="Win64/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll.vir"
sh=6F3A3B433459E6773C9FBE8CFB154DB6534EFA86 ft=1 fh=60bff0ff01dbe663 vn="Variante von Win32/InstallCore.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoConverter\VideoConverter.exe.vir"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoConverter\Uninstall\__Uninstall_.exe.vir"
sh=0F6BEEA50DD6A26313AD06F7F077C0FD48A40C4F ft=1 fh=f3c5c917663ce1eb vn="Variante von Win32/ELEX.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\eSafe\eGdpSvc.exe.vir"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\0D0S1L2Z1P1B\Video Converter Packages\uninstaller.exe.vir"
sh=D8F10BDFCF1D7203A10EDD44BFA91E63429F7509 ft=1 fh=125879de58b34aa1 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir"
sh=84FE61ACEE90134C6BFBD3CECF1FB07BC22C997C ft=1 fh=dc261decc3a37fad vn="Variante von Win32/DealPly.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\digitalsite\UpdateProc\UpdateTask.exe.vir"
sh=C2E045472BAED5AB41EDD065BC0385A1F400A4C6 ft=1 fh=14c79beef2647658 vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\Extensions\ffxtlbr@dokotoolbar.com\uninstall.exe.vir"
sh=8879BFA6BB9730415D8E4BA58C690B0A7077F57C ft=1 fh=b71f2d19d9d9ceb1 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\Extensions\{b106b661-3e1b-4015-af5c-195e909f35c6}\Plugins\npConduitFirefoxPlugin.dll.vir"
sh=0F6BEEA50DD6A26313AD06F7F077C0FD48A40C4F ft=1 fh=f3c5c917663ce1eb vn="Variante von Win32/ELEX.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\ZGHALS~1\AppData\Local\Temp\eIntaller\BA1F2495BEB648fdAF168D34536DB73D\eGdpSvc.exe.vir"
sh=D2D0960141264AADADA9EA668ABAFEE534FCC766 ft=1 fh=506c1c5f214272dd vn="Variante von Win64/TrojanDownloader.Agent.F Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\GFilterSvc.exe.vir"
sh=C5AA96F17ED2B68CA4C839EA7394F4534B4F5C3F ft=1 fh=57a85fb4fd4bc01c vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=6927CAE232857693FBB7F7EB7CFEA9E48D636897 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaeinjhbdppaflecjhhmkghkpmikigg\2.2.6_0\dp.js"
sh=B9276CCB99D02DF2AB5E3B289230782ACE0901CE ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaeinjhbdppaflecjhhmkghkpmikigg\2.2.6_0\g.js"
sh=99E93B2D12C1779755C96DA009AE1602458BDA29 ft=1 fh=08bc38c4f93a6c43 vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\ICReinstall_SoftwareUpdateSetup.exe"
sh=E6D4E4518E2D8803497E0CE11BBB9F5106C80C64 ft=1 fh=af5c5f68141fa96d vn="Variante von Win32/InstallCore.QF evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\PDFArchitectUpdateSetup.exe"
sh=99E93B2D12C1779755C96DA009AE1602458BDA29 ft=1 fh=08bc38c4f93a6c43 vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\SoftwareUpdateSetup.exe"
sh=534999ED85CB0AE3C21385B37B538044EA2AB339 ft=1 fh=28e16a9d033375cd vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is-CS29M.tmp\PDFCreator-1_7_3_setup.exe"
sh=9AC9A36804188C4A410043FFD8AB21E529B5163A ft=1 fh=41b8173fede15ab3 vn="Variante von Win32/TrojanDropper.MsiDrop.B Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is140275273\6988C690_stp\Installer.exe"
sh=115D5FD4D93B070D24126C3976874FA6B903FFDF ft=1 fh=b7d094930b7c7df3 vn="Variante von Win32/FileTypeAssistant.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is1914646434\18172703_stp.EXE"
sh=D12DB4438118C857E220AA0C932CEC1E9D49B561 ft=1 fh=7660c3acc48a82d0 vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is1914646434\18173041_stp\rcpsetup_adppi14_adppi14.exe"
sh=BC668D47384072468E7AB4EAEA6A78FBEC8F019D ft=1 fh=ed8314eeabe1b8dc vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=44FEE72FFAC4B4A658B131C53868964A10E73D2B ft=1 fh=10653d1fdbae9cce vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_29.dll"
sh=4722CC57FDDD5A50E13D089002DBA452017BCA77 ft=1 fh=ed5c7d2434c17785 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_30.dll"
sh=2DCF650E5327A58D830636830BF9A93A13108564 ft=1 fh=1acd9e0ef744e2a4 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_31.dll"
sh=6F8CDA9C50B30624C81255CAF2D7A278E46FDF87 ft=1 fh=f28f083921054d02 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_32.dll"
sh=5B7D578A1E95E9DC02E605B698810944493D43A8 ft=1 fh=0f04652229135ed9 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_33.dll"
sh=4B948F59CC1026642FFB021042DDA6446F0BABFC ft=1 fh=9ae7f7a1ed83874c vn="Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\BOM2148h_setup.exe"
sh=C69DF437CBFFA220DBD2669B2D2A391F33D203A5 ft=1 fh=fc565a03233d7ff6 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\FileConverter_1_3.exe"
sh=115D5FD4D93B070D24126C3976874FA6B903FFDF ft=1 fh=b7d094930b7c7df3 vn="Variante von Win32/FileTypeAssistant.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\FinalTorrentSetup [1].exe"
sh=9434866971DD357600C9F2B1E31B7893C3A070F0 ft=1 fh=4f14aeb246e47811 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\PDFArchitect-P2991285-Setup.exe"
sh=5E13FDBFFB293D15D14937A6405483BE15F24F05 ft=1 fh=43d823a179c804fa vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\TouchFreeze-Downloader (1).exe"
sh=FF4BB094DECCD2B4C86ED27EFB82B459ACDC2300 ft=1 fh=a0f9444e79c804fa vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\TouchFreeze-Downloader.exe"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\VideoConverterSetup (1).exe"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\VideoConverterSetup.exe"
sh=F05C2B41911258E7786DA3775DFAFBDEEC4E24B7 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Windows\Installer\{6A4EB2CB-9C44-41F3-B68C-29A47F482606}\cggaeinjhbdppaflecjhhmkghkpmikiggrx"
sh=6C561FE55577DA2DE87B4536C91ACDE7E6D943F8 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Windows\Installer\{DAD64557-209D-45B3-8957-75B23DE7508D}\ccgfenigkbaddcocjlhjldkadfoaommmprx"
sh=E4333469F3070D049E4FDA053756B96B9F59569B ft=1 fh=5e9b3d881266bb41 vn="Win32/Distromatic evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-2[1]"
sh=63981687FFC14608CDAE65C7EFEA1B24ACAF1DF4 ft=1 fh=c82ffca9f6717ccb vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-3[1]"
sh=E4333469F3070D049E4FDA053756B96B9F59569B ft=1 fh=5e9b3d881266bb41 vn="Win32/Distromatic evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-2[1]"
sh=63981687FFC14608CDAE65C7EFEA1B24ACAF1DF4 ft=1 fh=c82ffca9f6717ccb vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-3[1]"
sh=64131EBCE68286BAAEFAC74F12628EBFC159B7CB ft=1 fh=252d3f247af8095f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="E:\Downloads\PDFCreator-1_6_1_setup.exe"
sh=8EE6B4036A3C5AB7438F26DF7C47EC9FF2B546D5 ft=1 fh=bb987f66835980d6 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="E:\Downloads\SoftonicDownloader_fuer_xmedia-recode.exe"

Security Check

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7623
# api_version=3.0.2
# EOSSerial=d65ea41e4925e84f9279830149a8108e
# engine=21299
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-11-28 06:56:50
# local_time=2014-11-28 07:56:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1292 16777213 100 100 39363 48635832 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 38403 168787660 0 0
# scanned=310395
# found=72
# cleaned=0
# scan_time=34415
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"
sh=9CD9DBA6B99C6C88E8CACD8A4A72AC1778B86010 ft=1 fh=a14d33dbdf868e65 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarApp.dll.vir"
sh=7936A5CBADA4B1C422E8D6C9394973F57D392331 ft=1 fh=1aeea73a71c1ef61 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarEng.dll.vir"
sh=654FB351A6D1E721030768CAEEC5D3E16CCDC6E1 ft=1 fh=34c93af138f65726 vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarsrv.exe.vir"
sh=B87210DB7408A251B0F9F0E90E07E01B30BA90E6 ft=1 fh=924d6f191c6ebfd3 vn="Variante von Win32/Toolbar.Montiera.F evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\dokotoolbarTlbr.dll.vir"
sh=1C2427F2899C57C2A6CB9E95F8F15AAEA5716841 ft=1 fh=0ce554b6dc5aec4d vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\uninstall.exe.vir"
sh=ADFC9FA91DFF03C98690C7D0A8833C404C9B75FE ft=1 fh=2a0cd34600ad4288 vn="Variante von Win32/Toolbar.Escort.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Doko-Toolbar\dokotoolbar\1.8.26.9\bh\dokotoolbar.dll.vir"
sh=F48266A97BDB7F58C5B54469B2245CACD46577D0 ft=1 fh=c4efab275ed5eda7 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\NCH Software\Components\NCHToolbars\conduit\ConduitInstaller.exe.vir"
sh=72F28F0A95BE5DE99FB1F7682107D70D5F595DD4 ft=1 fh=a5d7f75bcd1cfec2 vn="Win32/Toolbar.SearchSuite.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\BrowserConnection.dll.vir"
sh=E575D3AEB8B448F759DFCBDB9F7B6E694C062C16 ft=1 fh=956437993316e867 vn="Variante von Win32/Toolbar.SearchSuite.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngr.dll.vir"
sh=5D65A8FEF17F3A82EFEB93ED01BAAA484754015D ft=1 fh=c1700cd30525d259 vn="Variante von Win32/Toolbar.SearchSuite.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\datamngrUI.exe.vir"
sh=6A5D717DAB44602AA78A256C3DA9E17A37736CAC ft=1 fh=3ed1e855ec02addc vn="Variante von Win32/Toolbar.SearchSuite.R evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\DnsBHO.dll.vir"
sh=F749B47BB5D8AC83CE5B5ECABC655DBF9ED72356 ft=1 fh=44c341bd8cfcd4d5 vn="Win32/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\IEBHO.dll.vir"
sh=F6C0B8AAB9D57C283500C2BC0F13BB5035935077 ft=1 fh=c71c0011a573a014 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF10.dll.vir"
sh=44F872D2B23C81967AC728E2A5552B9FF3C6ED1B ft=1 fh=c71c00116674a20e vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF11.dll.vir"
sh=4D890D6BCE80D64396A61A3D5103AA2B41D9D78A ft=1 fh=c71c00113e48ea58 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF12.dll.vir"
sh=8F23E296E3926B79330B604F4E7F21F8BE725435 ft=1 fh=c71c0011f9f0c849 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF13.dll.vir"
sh=CE745721420B5FFC4672A4416741CE47CA2E7A17 ft=1 fh=c71c0011a9dbba1d vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF14.dll.vir"
sh=D2F264746CD23606EA7DB99A43950C7B36D2CA20 ft=1 fh=c71c0011ce516762 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF3.dll.vir"
sh=13D3E69C0F093EDF74CBABF9305CFFB4A9C655E8 ft=1 fh=c71c001172759bdc vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF4.dll.vir"
sh=F99F459E862762C76E1A1FF8833DC01456AB7FC8 ft=1 fh=c71c00110d2c3a07 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF5.dll.vir"
sh=71B6F4E3C234D97909D27537931E6607701D26C6 ft=1 fh=c71c0011aa39c8ed vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF6.dll.vir"
sh=CA821F2158846DD0FF0D7AEAB81AC9E37FBC25E9 ft=1 fh=c71c0011e565107b vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF7.dll.vir"
sh=4A11A7A648D870DE6511F01A59B17B8BBC9D0C77 ft=1 fh=c71c0011a7258e3a vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF8.dll.vir"
sh=C2ED27AA162C127DC549D1ADB3ED0736C2B4C01C ft=1 fh=c71c0011aae56ae1 vn="Variante von Win32/Toolbar.SearchSuite.D evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\FirefoxExtension\components\DataMngrHlpFF9.dll.vir"
sh=B81BAAC9D35824000ADB556418067A9220C40F01 ft=1 fh=23a12d968d390125 vn="Variante von Win32/Toolbar.Visicom.C evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\dtUser.exe.vir"
sh=5618448E0195BA9251A1A0A5132CE2612037D630 ft=1 fh=ccf0f11a65c989b1 vn="Variante von Win32/Toolbar.Visicom.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchquband.dll.vir"
sh=9069C1AE362702A5CFD0947D07C49791244CF7E1 ft=1 fh=b2a7890de2375dad vn="Variante von Win32/Toolbar.Visicom.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\ToolBar\searchqudtx.dll.vir"
sh=F4D18D6C51F979617F550B3206BE40E8A8CF70F7 ft=1 fh=d20550a1865ff508 vn="Variante von Win64/Toolbar.SearchSuite.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\datamngr.dll.vir"
sh=33852C0D03A4F356825F914995A90CF35263B357 ft=1 fh=ce1eede529840c69 vn="Win64/Toolbar.SearchSuite evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Searchqu Toolbar\Datamngr\x64\IEBHO.dll.vir"
sh=6F3A3B433459E6773C9FBE8CFB154DB6534EFA86 ft=1 fh=60bff0ff01dbe663 vn="Variante von Win32/InstallCore.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoConverter\VideoConverter.exe.vir"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\VideoConverter\Uninstall\__Uninstall_.exe.vir"
sh=0F6BEEA50DD6A26313AD06F7F077C0FD48A40C4F ft=1 fh=f3c5c917663ce1eb vn="Variante von Win32/ELEX.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\eSafe\eGdpSvc.exe.vir"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\0D0S1L2Z1P1B\Video Converter Packages\uninstaller.exe.vir"
sh=D8F10BDFCF1D7203A10EDD44BFA91E63429F7509 ft=1 fh=125879de58b34aa1 vn="Win32/Toolbar.Babylon.I evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\BabSolution\Shared\BabMaint.exe.vir"
sh=84FE61ACEE90134C6BFBD3CECF1FB07BC22C997C ft=1 fh=dc261decc3a37fad vn="Variante von Win32/DealPly.H evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\digitalsite\UpdateProc\UpdateTask.exe.vir"
sh=C2E045472BAED5AB41EDD065BC0385A1F400A4C6 ft=1 fh=14c79beef2647658 vn="Win32/Toolbar.Montiera.B evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\Extensions\ffxtlbr@dokotoolbar.com\uninstall.exe.vir"
sh=8879BFA6BB9730415D8E4BA58C690B0A7077F57C ft=1 fh=b71f2d19d9d9ceb1 vn="Variante von Win32/Conduit.SearchProtect.N evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\Extensions\{b106b661-3e1b-4015-af5c-195e909f35c6}\Plugins\npConduitFirefoxPlugin.dll.vir"
sh=0F6BEEA50DD6A26313AD06F7F077C0FD48A40C4F ft=1 fh=f3c5c917663ce1eb vn="Variante von Win32/ELEX.S evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\ZGHALS~1\AppData\Local\Temp\eIntaller\BA1F2495BEB648fdAF168D34536DB73D\eGdpSvc.exe.vir"
sh=D2D0960141264AADADA9EA668ABAFEE534FCC766 ft=1 fh=506c1c5f214272dd vn="Variante von Win64/TrojanDownloader.Agent.F Trojaner" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\GFilterSvc.exe.vir"
sh=C5AA96F17ED2B68CA4C839EA7394F4534B4F5C3F ft=1 fh=57a85fb4fd4bc01c vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Windows\System32\roboot64.exe.vir"
sh=6927CAE232857693FBB7F7EB7CFEA9E48D636897 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaeinjhbdppaflecjhhmkghkpmikigg\2.2.6_0\dp.js"
sh=B9276CCB99D02DF2AB5E3B289230782ACE0901CE ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaeinjhbdppaflecjhhmkghkpmikigg\2.2.6_0\g.js"
sh=99E93B2D12C1779755C96DA009AE1602458BDA29 ft=1 fh=08bc38c4f93a6c43 vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\ICReinstall_SoftwareUpdateSetup.exe"
sh=E6D4E4518E2D8803497E0CE11BBB9F5106C80C64 ft=1 fh=af5c5f68141fa96d vn="Variante von Win32/InstallCore.QF evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\PDFArchitectUpdateSetup.exe"
sh=99E93B2D12C1779755C96DA009AE1602458BDA29 ft=1 fh=08bc38c4f93a6c43 vn="Win32/InstallCore.PC evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\SoftwareUpdateSetup.exe"
sh=534999ED85CB0AE3C21385B37B538044EA2AB339 ft=1 fh=28e16a9d033375cd vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is-CS29M.tmp\PDFCreator-1_7_3_setup.exe"
sh=9AC9A36804188C4A410043FFD8AB21E529B5163A ft=1 fh=41b8173fede15ab3 vn="Variante von Win32/TrojanDropper.MsiDrop.B Trojaner" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is140275273\6988C690_stp\Installer.exe"
sh=115D5FD4D93B070D24126C3976874FA6B903FFDF ft=1 fh=b7d094930b7c7df3 vn="Variante von Win32/FileTypeAssistant.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is1914646434\18172703_stp.EXE"
sh=D12DB4438118C857E220AA0C932CEC1E9D49B561 ft=1 fh=7660c3acc48a82d0 vn="Win32/Systweak.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Local\Temp\is1914646434\18173041_stp\rcpsetup_adppi14_adppi14.exe"
sh=BC668D47384072468E7AB4EAEA6A78FBEC8F019D ft=1 fh=ed8314eeabe1b8dc vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_28.dll"
sh=44FEE72FFAC4B4A658B131C53868964A10E73D2B ft=1 fh=10653d1fdbae9cce vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_29.dll"
sh=4722CC57FDDD5A50E13D089002DBA452017BCA77 ft=1 fh=ed5c7d2434c17785 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_30.dll"
sh=2DCF650E5327A58D830636830BF9A93A13108564 ft=1 fh=1acd9e0ef744e2a4 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_31.dll"
sh=6F8CDA9C50B30624C81255CAF2D7A278E46FDF87 ft=1 fh=f28f083921054d02 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_32.dll"
sh=5B7D578A1E95E9DC02E605B698810944493D43A8 ft=1 fh=0f04652229135ed9 vn="Variante von Win32/Toolbar.Linkury.D evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f}\components\SmartbarFireFoxRemotePlugin_33.dll"
sh=4B948F59CC1026642FFB021042DDA6446F0BABFC ft=1 fh=9ae7f7a1ed83874c vn="Variante von Win32/InstallShare.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\BOM2148h_setup.exe"
sh=C69DF437CBFFA220DBD2669B2D2A391F33D203A5 ft=1 fh=fc565a03233d7ff6 vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\FileConverter_1_3.exe"
sh=115D5FD4D93B070D24126C3976874FA6B903FFDF ft=1 fh=b7d094930b7c7df3 vn="Variante von Win32/FileTypeAssistant.A evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\FinalTorrentSetup [1].exe"
sh=9434866971DD357600C9F2B1E31B7893C3A070F0 ft=1 fh=4f14aeb246e47811 vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\PDFArchitect-P2991285-Setup.exe"
sh=5E13FDBFFB293D15D14937A6405483BE15F24F05 ft=1 fh=43d823a179c804fa vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\TouchFreeze-Downloader (1).exe"
sh=FF4BB094DECCD2B4C86ED27EFB82B459ACDC2300 ft=1 fh=a0f9444e79c804fa vn="Variante von Win32/OpenInstall evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\TouchFreeze-Downloader.exe"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\VideoConverterSetup (1).exe"
sh=024AA076DCA92FAABEBA980A05DD67E09F98F912 ft=1 fh=c71c00115dc96d25 vn="Variante von Win32/InstallCore.BY evtl. unerwünschte Anwendung" ac=I fn="C:\Users\Zghal SM\Downloads\VideoConverterSetup.exe"
sh=F05C2B41911258E7786DA3775DFAFBDEEC4E24B7 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Windows\Installer\{6A4EB2CB-9C44-41F3-B68C-29A47F482606}\cggaeinjhbdppaflecjhhmkghkpmikiggrx"
sh=6C561FE55577DA2DE87B4536C91ACDE7E6D943F8 ft=0 fh=0000000000000000 vn="JS/GFilter.A Trojaner" ac=I fn="C:\Windows\Installer\{DAD64557-209D-45B3-8957-75B23DE7508D}\ccgfenigkbaddcocjlhjldkadfoaommmprx"
sh=E4333469F3070D049E4FDA053756B96B9F59569B ft=1 fh=5e9b3d881266bb41 vn="Win32/Distromatic evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-2[1]"
sh=63981687FFC14608CDAE65C7EFEA1B24ACAF1DF4 ft=1 fh=c82ffca9f6717ccb vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-3[1]"
sh=E4333469F3070D049E4FDA053756B96B9F59569B ft=1 fh=5e9b3d881266bb41 vn="Win32/Distromatic evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-2[1]"
sh=63981687FFC14608CDAE65C7EFEA1B24ACAF1DF4 ft=1 fh=c82ffca9f6717ccb vn="Variante von Win32/Distromatic.C evtl. unerwünschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\distro-search-protect-fix-3[1]"
sh=64131EBCE68286BAAEFAC74F12628EBFC159B7CB ft=1 fh=252d3f247af8095f vn="Win32/InstallMonetizer.AQ evtl. unerwünschte Anwendung" ac=I fn="E:\Downloads\PDFCreator-1_6_1_setup.exe"
sh=8EE6B4036A3C5AB7438F26DF7C47EC9FF2B546D5 ft=1 fh=bb987f66835980d6 vn="Win32/SoftonicDownloader.E evtl. unerwünschte Anwendung" ac=I fn="E:\Downloads\SoftonicDownloader_fuer_xmedia-recode.exe"

Freue mich über Feedback!

Bis dann..

Bei Security Check ist mir ein Fehler beim kopieren unterlaufen.

Wie folgt das korrekte Logfile

Code:

ATTFilter

 UNSUPPORTED OPERATING SYSTEM! ABORTED!

cosinus · 29.11.2014, 14:15

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Sello30 · 29.11.2014, 14:47

OK. Wie folgt die Logs.

FRST

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-11-2014 01
Ran by Zghal SM (administrator) on ZGHALSM-PC on 29-11-2014 14:42:19
Running from C:\Users\Zghal SM\Downloads
Loaded Profiles: UpdatusUser & Zghal SM (Available profiles: UpdatusUser & Zghal SM)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\System32\wdigestd.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Toaster.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\TouchFreeze\TouchFreeze.exe
() C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\chrome.exe
(PC-Doctor, Inc.) C:\Program Files\My Dell\pcdrcui.exe
(PC-Doctor, Inc.) C:\Program Files\My Dell\pcdrrealtime.p5x
(RealNetworks, Inc.) C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NVHotkey] => rundll32.exe C:\Windows\system32\nvHotkey.dll,Start
HKLM\...\Run: [IntelPAN] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-11-01] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Stage Remote] => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe [2022976 2011-06-28] ()
HKLM-x32\...\Run: [Dell Registration] => C:\Program Files (x86)\System Registration\prodreg.exe [4165440 2011-08-04] (Dell, Inc.)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1465910209-2680476309-2651782132-1000\...\Run: [AVG-Secure-Search-Update_JUNE2013_TB] => "C:\Program Files (x86)\AVG Secure Search\AVG-Secure-Search-Update_JUNE2013_TB.exe"  /PROMPT /CMPID=JUNE2013_TB
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\Run: [TouchFreeze] => C:\Program Files (x86)\TouchFreeze\TouchFreeze.exe [45056 2005-04-29] ()
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\Run: [Google Update] => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-11] (Google Inc.)
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [1106288 2013-05-23] (Samsung)
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\MountPoints2: {50b0f552-a140-11e3-8a5b-4ceb420e84fd} - G:\LGAutoRun.exe
AppInit_DLLs: C:\Users\Zghal => C:\Users\Zghal File Not Found
AppInit_DLLs-x32: C:\Users\Zghal => "C:\Users\Zghal" File Not Found
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1465910209-2680476309-2651782132-1000\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\Software\Microsoft\Internet Explorer\Main,Start Page Restore = hxxp://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.de/search?q={searchTerms}&hl=de&gl=de&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin -> {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default
FF DefaultSearchUrl: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF SearchEngineOrder.1: Amazon
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.de?hl=de&gl=de
FF Keyword.URL: hxxp://www.google.de/search?hl=de&gl=de&lr=&ie=UTF-8&oe=UTF-8&meta=lr=lang_de&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKU\S-1-5-21-1465910209-2680476309-2651782132-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Zghal SM\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKU\S-1-5-21-1465910209-2680476309-2651782132-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-1465910209-2680476309-2651782132-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Extension: SafeFinder Smartbar - C:\Users\Zghal SM\AppData\Roaming\Mozilla\Firefox\Profiles\x6t1zlsj.default\Extensions\{6daace03-f8db-e71e-1c84-2df92e824c7f} [2014-11-26]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2012-12-24]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-10-02]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: 卡巴斯基網址顧問 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\url_advisor@kaspersky.com [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: 虛擬鍵盤 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: 惡意網站攔截器 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\content_blocker@kaspersky.com [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Chặn quảng cáo - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\anti_banner@kaspersky.com [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\FFExt\online_banking@kaspersky.com [2014-06-14]
FF HKLM-x32\...\Firefox\Extensions: [{61998FCC-33B0-4C5B-A99E-CCB31FAE3CDE}] - C:\Windows\Installer\{ED46B303-190B-49EA-B78D-A833DBB40C88}\{61998FCC-33B0-4C5B-A99E-CCB31FAE3CDE}.xpi
FF Extension: Download Protect - C:\Windows\Installer\{ED46B303-190B-49EA-B78D-A833DBB40C88}\{61998FCC-33B0-4C5B-A99E-CCB31FAE3CDE}.xpi [2014-11-27]
FF Extension: No Name - C:\Windows\Installer\{98DAEAA2-C2E7-4295-BAA3-7F7562FE0773}\{24D12073-3707-44A1-8B52-C8CD51C6005E}.xpi [Not Found]
FF Extension: No Name - {24D12073-3707-44A1-8B52-C8CD51C6005E} [Not Found]

Chrome: 
=======
CHR Profile: C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (Kaspersky Protection) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkdnmdcafmfhinpmnlhhddbepgkeaa [2014-06-14]
CHR Extension: (Google-Suche) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-21]
CHR Extension: (Modul zur Link-Untersuchung) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2014-06-14]
CHR Extension: (Download Protect) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggaeinjhbdppaflecjhhmkghkpmikigg [2014-11-27]
CHR Extension: (Sicherer Zahlungsverkehr) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh [2014-06-14]
CHR Extension: (Modul zum Sperren von gefährlichen Webseiten) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail [2014-11-27]
CHR Extension: (RealDownloader) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-04-22]
CHR Extension: (Virtual Keyboard) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2014-06-14]
CHR Extension: (WEB.DE MailCheck) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2013-02-21]
CHR Extension: (Google Wallet) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-18]
CHR Extension: (Anti-Banner) - C:\Users\Zghal SM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2014-06-14]
CHR HKLM-x32\...\Chrome\Extension: [blbkdnmdcafmfhinpmnlhhddbepgkeaa] - https://chrome.google.com/webstore/detail/blbkdnmdcafmfhinpmnlhhddbepgkeaa []
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\urladvisor.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\online_banking_chrome.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\content_blocker_chrome.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\virtkbd.crx [2014-05-28]
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\ChromeExt\ab.crx [2014-05-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-01-12] (Adobe Systems) [File not signed]
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe [214512 2014-05-28] (Kaspersky Lab ZAO)
R2 clip64; C:\Windows\system32\wdigestd.exe [106496 2012-08-09] () [File not signed]
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2013-01-10] (Macrovision Europe Ltd.) [File not signed]
R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-11-01] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [46368 2013-10-02] (AVG Technologies)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458336 2014-05-28] (Kaspersky Lab ZAO)
S4 klflt; C:\Windows\System32\DRIVERS\klflt.sys [115296 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [625248 2014-05-28] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [29792 2014-05-28] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2014-05-28] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2013-05-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178272 2014-05-28] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-11-29] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-29 14:42 - 2014-11-29 14:42 - 00026679 _____ () C:\Users\Zghal SM\Downloads\FRST.txt
2014-11-29 14:42 - 2014-11-29 14:42 - 00000000 ____D () C:\FRST
2014-11-29 14:41 - 2014-11-29 14:41 - 02117632 _____ (Farbar) C:\Users\Zghal SM\Downloads\FRST64.exe
2014-11-29 14:39 - 2014-11-29 14:40 - 01109504 _____ (Farbar) C:\Users\Zghal SM\Downloads\FRST.exe
2014-11-29 10:44 - 2014-11-29 10:44 - 00000041 _____ () C:\Users\Zghal SM\Desktop\checkup.txt
2014-11-29 10:42 - 2014-11-29 10:42 - 00854414 _____ () C:\Users\Zghal SM\Downloads\SecurityCheck.exe
2014-11-28 16:18 - 2014-11-28 16:18 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\PCDr
2014-11-28 16:17 - 2014-11-29 13:26 - 00000000 ____D () C:\ProgramData\PCDr
2014-11-27 22:19 - 2014-11-27 22:19 - 02347384 _____ (ESET) C:\Users\Zghal SM\Downloads\esetsmartinstaller_deu.exe
2014-11-27 22:14 - 2014-11-27 22:14 - 01707532 _____ (Thisisu) C:\Users\Zghal SM\Downloads\JRT (1).exe
2014-11-27 22:14 - 2014-11-27 22:14 - 00002080 _____ () C:\Users\Zghal SM\Desktop\JRT1.txt
2014-11-27 22:13 - 2014-11-27 22:13 - 00002080 _____ () C:\Users\Zghal SM\Desktop\JRT.txt
2014-11-27 22:05 - 2014-11-27 22:05 - 00000000 ____D () C:\Windows\ERUNT
2014-11-27 22:03 - 2014-11-27 22:03 - 01707532 _____ (Thisisu) C:\Users\Zghal SM\Downloads\JRT.exe
2014-11-27 22:02 - 2014-11-27 22:02 - 00000000 ____D () C:\Program Files\{BAAE122C-DD1C-4C11-98C1-9C24DBD2BC34}
2014-11-27 22:02 - 2014-11-27 22:02 - 00000000 ____D () C:\Program Files (x86)\{E29691DF-3E19-49F0-848C-605096AE1524}
2014-11-27 22:01 - 2014-11-27 22:01 - 00011676 _____ () C:\Users\Zghal SM\Desktop\AdwCleaner[S3].txt
2014-11-27 21:54 - 2014-11-27 21:55 - 02148864 _____ () C:\Users\Zghal SM\Downloads\AdwCleaner_4.102.exe
2014-11-27 21:28 - 2014-11-27 21:28 - 01664975 _____ () C:\Users\Zghal SM\Downloads\Vu mit Netzwerkfreigabe verbinden (1).zip
2014-11-27 21:12 - 2014-11-29 14:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-27 21:11 - 2014-11-27 21:11 - 00001108 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-11-27 21:11 - 2014-11-27 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-11-27 21:11 - 2014-11-27 21:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-27 21:11 - 2014-11-27 21:11 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-11-27 21:11 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-27 21:11 - 2014-10-01 11:11 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-27 21:11 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-27 21:10 - 2014-11-27 21:10 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\Zghal SM\Downloads\mbam-setup-2.0.3.1025.exe
2014-11-27 21:03 - 2014-11-27 21:03 - 00001270 _____ () C:\Users\Zghal SM\Desktop\Revo Uninstaller.lnk
2014-11-27 21:03 - 2014-11-27 21:03 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-11-27 21:02 - 2014-11-27 21:02 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Zghal SM\Downloads\revosetup95.exe
2014-11-27 20:51 - 2014-11-27 20:51 - 00002740 _____ () C:\Windows\System32\Tasks\AutoKMSDaily
2014-11-27 20:48 - 2014-11-27 22:06 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-11-27 20:39 - 2014-11-27 20:40 - 00286832 _____ () C:\Windows\Minidump\112714-20373-01.dmp
2014-11-27 20:39 - 2014-11-27 20:39 - 755283552 _____ () C:\Windows\MEMORY.DMP
2014-11-27 20:39 - 2014-11-27 20:39 - 00000000 ____D () C:\Windows\Minidump
2014-11-26 14:54 - 2014-11-26 14:38 - 17810632 _____ (pdfforge GmbH) C:\Users\Zghal SM\Downloads\PDFArchitect-P2991285-Setup.exe
2014-11-26 13:18 - 2014-11-29 13:20 - 00002978 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Zghal SM
2014-11-26 13:18 - 2014-11-29 13:20 - 00000378 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Zghal SM.job
2014-11-26 13:18 - 2014-11-29 12:19 - 00002982 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Zghal SM
2014-11-26 13:18 - 2014-11-29 12:19 - 00000382 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Zghal SM.job
2014-11-26 13:18 - 2014-11-29 11:05 - 00000388 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Zghal SM.job
2014-11-26 13:18 - 2014-11-26 13:18 - 00003628 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Zghal SM
2014-11-26 13:18 - 2014-11-26 13:18 - 00002686 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Zghal SM
2014-11-25 10:16 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files\{6196FA2E-46E1-4E1E-81A0-FDF26C87F20B}
2014-11-25 10:16 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files (x86)\{F5DA95E3-4237-4D12-A42D-439E85512661}
2014-11-22 12:32 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files (x86)\{C0C30305-D821-49FA-B442-F8C34800E50B}
2014-11-19 23:30 - 2014-11-19 23:30 - 04825334 _____ () C:\Users\Zghal SM\Downloads\OpenStore-MyMetrix_2.0.14-full.ipk
2014-11-19 23:14 - 2014-11-19 23:14 - 00027956 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1416350753.log
2014-11-19 23:14 - 2014-11-19 23:14 - 00027956 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1416350668.log
2014-11-19 23:11 - 2014-11-19 23:11 - 00027956 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1416350696.log
2014-11-19 23:11 - 2014-11-19 23:11 - 00027956 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1416350639.log
2014-11-19 21:02 - 2014-11-19 21:02 - 06057862 _____ (Tim Kosse) C:\Users\Zghal SM\Downloads\FileZilla_3.9.0.5_win32-setup.exe
2014-11-19 20:58 - 2014-11-19 20:58 - 01753330 _____ () C:\Users\Zghal SM\Downloads\enigma2-plugin-extensions-mediacenter_0.9.3_mipsel.rar
2014-11-19 16:07 - 2014-11-19 16:07 - 00001134 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player FREE.lnk
2014-11-19 16:07 - 2014-11-19 16:07 - 00001128 _____ () C:\Users\Public\Desktop\BS.Player FREE.lnk
2014-11-19 16:07 - 2014-11-19 16:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BS.Player
2014-11-19 16:06 - 2014-11-19 16:07 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\BSplayer
2014-11-19 16:06 - 2014-11-19 16:06 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\BSplayer Pro
2014-11-19 16:06 - 2014-11-19 16:06 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-11-19 16:04 - 2014-11-19 16:04 - 00000000 __SHD () C:\Users\Zghal SM\AppData\Local\EmieBrowserModeList
2014-11-19 16:01 - 2014-11-19 16:01 - 00000143 _____ () C:\Users\Zghal SM\Downloads\stream (6).m3u
2014-11-19 15:59 - 2014-11-19 15:59 - 00000143 _____ () C:\Users\Zghal SM\Downloads\stream (5).m3u
2014-11-19 15:54 - 2014-11-19 15:54 - 00000161 _____ () C:\Users\Zghal SM\Downloads\stream (4).m3u
2014-11-19 15:51 - 2014-11-19 15:51 - 00000161 _____ () C:\Users\Zghal SM\Downloads\stream (3).m3u
2014-11-19 15:49 - 2014-11-19 15:49 - 00000161 _____ () C:\Users\Zghal SM\Downloads\stream (2).m3u
2014-11-19 15:48 - 2014-11-19 15:48 - 00000161 _____ () C:\Users\Zghal SM\Downloads\stream (1).m3u
2014-11-18 19:42 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-18 19:42 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-18 19:42 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-18 19:42 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-17 16:49 - 2014-11-17 16:53 - 00000000 ____D () C:\Users\Zghal SM\Downloads\Anhänge_20141117
2014-11-16 17:58 - 2014-11-16 17:58 - 01664975 _____ () C:\Users\Zghal SM\Downloads\Vu mit Netzwerkfreigabe verbinden.zip
2014-11-16 17:48 - 2014-11-27 22:02 - 00003372 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001
2014-11-16 17:48 - 2014-11-27 22:02 - 00003244 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1465910209-2680476309-2651782132-1001
2014-11-14 23:59 - 2014-11-26 14:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-14 23:40 - 2014-11-14 23:40 - 00000238 _____ () C:\Users\Zghal SM\Downloads\chunklist_b1100000 (1).m3u8
2014-11-14 23:38 - 2014-11-14 23:38 - 00000238 _____ () C:\Users\Zghal SM\Downloads\chunklist_b1100000.m3u8
2014-11-14 23:03 - 2014-11-14 23:03 - 00002791 _____ () C:\Users\Zghal SM\Downloads\keymap.rar
2014-11-14 19:49 - 2014-11-14 19:49 - 00000508 _____ () C:\Users\Zghal SM\Downloads\minidlna.conf.txt
2014-11-14 18:53 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files\{94F7B76A-742E-4CA4-973D-40BAC1E841BB}
2014-11-14 13:45 - 2014-11-14 13:45 - 00035684 _____ () C:\Users\Zghal SM\Downloads\udpxy_0.23+git83+e8219e1-r0_mips32el.ipk
2014-11-12 19:19 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 19:19 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-12 19:19 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 19:19 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 19:19 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 19:19 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 19:19 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 19:19 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 19:19 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 19:19 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 19:19 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 19:19 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 19:19 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 19:19 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 19:19 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 19:19 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 19:19 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-12 19:19 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 19:19 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 19:19 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 19:19 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-12 19:19 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-12 19:19 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-12 19:19 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-12 19:19 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-12 19:19 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 19:19 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-12 19:19 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-12 19:19 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-12 19:19 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 19:19 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-12 19:19 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 19:19 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-12 19:19 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-12 19:19 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 19:19 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-12 19:19 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-12 19:19 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 19:19 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 19:19 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 19:19 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 19:19 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-12 19:19 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-12 19:19 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-12 19:19 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 19:19 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-12 19:19 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-12 19:19 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-12 19:19 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-12 19:19 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 19:19 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 19:19 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-12 19:19 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 19:19 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-12 19:19 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-12 19:19 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-12 19:19 - 2014-11-05 18:56 - 00304640 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 19:19 - 2014-11-05 18:56 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 19:19 - 2014-11-05 18:52 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 19:19 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 19:19 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 19:19 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-12 19:19 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-12 19:18 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 19:18 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 19:18 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 19:18 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 19:18 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 19:18 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-12 19:18 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-12 19:18 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-12 19:18 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-12 19:17 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 19:17 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 19:17 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 19:17 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 19:17 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 19:17 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-12 19:17 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-12 19:17 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-12 19:17 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 19:17 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 19:17 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-12 19:17 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-12 19:17 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-12 19:17 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-12 19:16 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 19:16 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-12 19:16 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 19:16 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-12 19:16 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 19:00 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files\{7F3711AC-7726-4100-9B6C-D85D4CB4E9D0}
2014-11-12 19:00 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files (x86)\{32C8CE1A-57DA-46B6-A0A2-B716351E876B}
2014-11-09 12:23 - 2014-11-09 12:23 - 01054912 _____ (Adobe) C:\Users\Zghal SM\Downloads\install_flashplayer15x32au_mssa_aaa_aih.exe
2014-11-09 11:59 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files\{419DC4F8-52AC-40AB-B6D4-BE69A8D50187}
2014-11-09 11:59 - 2014-11-27 21:35 - 00000000 ____D () C:\Program Files (x86)\{30E0C851-B350-4C35-84C6-E20D88F76531}
2014-11-07 19:59 - 2014-11-07 19:59 - 00001017 _____ () C:\Users\Zghal SM\Desktop\dreamboxEDIT.lnk
2014-11-07 19:59 - 2014-11-07 19:59 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dreamboxEDIT
2014-11-03 22:02 - 2014-11-03 22:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-11-03 21:51 - 2014-11-03 21:54 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\Notepad++
2014-11-03 21:51 - 2014-11-03 21:51 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-11-03 21:51 - 2014-11-03 21:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2014-11-03 21:49 - 2014-11-03 21:49 - 07920355 _____ () C:\Users\Zghal SM\Downloads\notepad++ 6.6.8.zip
2014-11-03 21:32 - 2014-11-03 21:32 - 00000862 _____ () C:\Windows\system32\termcap
2014-11-03 21:26 - 2014-11-26 22:14 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\FileZilla
2014-11-03 21:26 - 2014-11-03 21:26 - 06126536 _____ (Tim Kosse) C:\Users\Zghal SM\Downloads\FileZilla_3.9.0.6_win32-setup.exe
2014-11-03 20:21 - 2014-11-03 20:21 - 00024509 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1374574633.log
2014-11-03 20:20 - 2014-11-03 20:20 - 00024509 _____ () C:\Users\Zghal SM\Downloads\dvbapp2_crash_1374574661.log
2014-11-01 21:19 - 2014-11-01 21:19 - 00061055 _____ () C:\Users\Zghal SM\Downloads\Nachbestellung und Reklamation.xlsx

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-29 14:38 - 2012-09-15 18:23 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA.job
2014-11-29 14:38 - 2012-09-08 16:15 - 00000940 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA.job
2014-11-29 14:38 - 2012-06-29 22:14 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-29 14:38 - 2012-06-27 11:39 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-29 13:35 - 2012-02-13 01:08 - 01591839 _____ () C:\Windows\WindowsUpdate.log
2014-11-29 13:26 - 2013-05-26 12:26 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-11-29 12:42 - 2014-06-14 20:11 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-11-29 11:13 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-29 11:13 - 2009-07-14 05:45 - 00028128 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-29 11:04 - 2013-05-31 16:50 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2014-11-29 11:04 - 2012-12-26 13:53 - 00000206 _____ () C:\Windows\Tasks\AutoKMS.job
2014-11-29 11:04 - 2012-06-29 22:14 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-29 11:04 - 2012-02-13 09:01 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-11-29 11:04 - 2012-02-13 09:01 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-11-29 11:04 - 2012-02-13 08:56 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-11-29 11:04 - 2012-02-13 01:09 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-29 11:03 - 2014-03-02 13:07 - 00310090 _____ () C:\Windows\PFRO.log
2014-11-29 11:03 - 2014-03-01 23:17 - 00021156 _____ () C:\Windows\setupact.log
2014-11-29 11:03 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-29 10:46 - 2012-09-15 18:23 - 00001080 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core.job
2014-11-29 10:39 - 2012-09-08 16:15 - 00000918 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core.job
2014-11-29 10:25 - 2014-10-03 20:01 - 00000202 _____ () C:\Windows\Tasks\AutoKMSDaily.job
2014-11-28 17:02 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-11-28 07:04 - 2010-11-21 07:50 - 00700118 _____ () C:\Windows\system32\perfh007.dat
2014-11-28 07:04 - 2010-11-21 07:50 - 00149968 _____ () C:\Windows\system32\perfc007.dat
2014-11-28 07:04 - 2009-07-14 06:13 - 01622228 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-27 21:57 - 2013-10-19 13:58 - 00000000 ____D () C:\AdwCleaner
2014-11-27 21:57 - 2012-12-24 16:43 - 00000000 ____D () C:\Program Files (x86)\Amazon
2014-11-27 21:35 - 2014-10-24 12:27 - 00000000 ____D () C:\Program Files\{E15AAB2F-A34E-41FB-8C6A-CD6809903ABB}
2014-11-27 21:35 - 2014-10-24 12:27 - 00000000 ____D () C:\Program Files (x86)\{1A8EB556-59A5-4970-8307-BA3EF4ED5A10}
2014-11-27 21:35 - 2014-09-10 19:08 - 00000000 ____D () C:\Program Files (x86)\{36E21A12-48DC-4AFC-8D8C-8623A602DDF8}
2014-11-27 21:35 - 2014-09-10 19:07 - 00000000 ____D () C:\Program Files\{1BE43B7C-E501-47CB-9556-B2F6DF22DAAF}
2014-11-27 21:35 - 2014-08-06 19:27 - 00000000 ____D () C:\Program Files\{E8B2AF45-A40A-4087-A7CA-2EE76E74CD21}
2014-11-27 21:35 - 2014-08-06 19:27 - 00000000 ____D () C:\Program Files (x86)\{C977ED31-F33D-4C65-8D8D-C015B3107306}
2014-11-27 21:35 - 2014-07-31 20:00 - 00000000 ____D () C:\Program Files\{664AC2CA-A4D7-4EE2-BFBC-9EAF3ED2EA1A}
2014-11-27 21:35 - 2014-07-31 20:00 - 00000000 ____D () C:\Program Files (x86)\{96885CEE-B0C0-4FC4-8058-654C4F00880E}
2014-11-27 21:35 - 2014-07-30 19:21 - 00000000 ____D () C:\Program Files (x86)\{104DDF56-A659-4874-8399-586A79797E10}
2014-11-27 21:35 - 2014-07-30 19:20 - 00000000 ____D () C:\Program Files\{4C22F449-5398-448A-BEEB-0204740A47C5}
2014-11-27 21:35 - 2014-07-26 19:52 - 00000000 ____D () C:\Program Files\{B68412AD-7BE3-441F-A0BE-AB7A12ED76CA}
2014-11-27 21:35 - 2014-07-26 19:52 - 00000000 ____D () C:\Program Files (x86)\{6A4A744F-1932-4FAA-AE2C-5B13B640CAD1}
2014-11-27 21:35 - 2014-07-13 19:05 - 00000000 ____D () C:\Program Files (x86)\{4758E51B-EE31-4724-B27A-3CB2B033893E}
2014-11-27 20:50 - 2014-03-02 13:12 - 00054235 _____ () C:\Windows\AutoKMS.log
2014-11-27 20:08 - 2012-06-27 11:26 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\Skype
2014-11-27 13:15 - 2012-10-21 17:55 - 01466368 ___SH () C:\Users\Zghal SM\Desktop\Thumbs.db
2014-11-26 16:04 - 2012-09-15 18:24 - 00002381 _____ () C:\Users\Zghal SM\Desktop\Google Chrome.lnk
2014-11-26 11:30 - 2012-06-27 11:39 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 11:30 - 2012-06-27 11:39 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 11:30 - 2012-02-13 08:19 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-19 19:00 - 2012-06-27 11:55 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\vlc
2014-11-19 16:09 - 2013-04-22 18:22 - 00003350 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001
2014-11-19 16:09 - 2013-04-22 18:22 - 00003222 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1465910209-2680476309-2651782132-1001
2014-11-19 13:44 - 2012-06-27 11:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-19 01:00 - 2012-07-07 19:14 - 00000000 ____D () C:\Users\Zghal SM\AppData\Local\Adobe
2014-11-18 20:13 - 2012-06-27 10:34 - 00000000 ____D () C:\Users\Zghal SM\AppData\Roaming\Adobe
2014-11-16 21:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-16 17:43 - 2012-06-29 22:14 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-11-16 17:43 - 2012-06-29 22:14 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-11-14 23:57 - 2012-09-15 18:23 - 00004108 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA
2014-11-14 23:57 - 2012-09-15 18:23 - 00003712 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core
2014-11-13 20:17 - 2012-06-27 10:21 - 00104264 _____ () C:\Users\Zghal SM\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 20:14 - 2009-07-14 05:45 - 00395048 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 20:11 - 2014-05-06 19:19 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-12 22:15 - 2012-12-24 16:00 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-12 22:12 - 2013-08-16 19:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-12 22:08 - 2012-10-03 13:16 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-04 14:30 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.18832.dll


Some content of TEMP:
====================
C:\Users\Zghal SM\AppData\Local\Temp\CleanSchedule.exe
C:\Users\Zghal SM\AppData\Local\Temp\ICReinstall_SoftwareUpdateSetup.exe
C:\Users\Zghal SM\AppData\Local\Temp\npp.6.6.9.Installer.exe
C:\Users\Zghal SM\AppData\Local\Temp\PDFArchitectUpdateSetup.exe
C:\Users\Zghal SM\AppData\Local\Temp\Quarantine.exe
C:\Users\Zghal SM\AppData\Local\Temp\SoftwareUpdateSetup.exe
C:\Users\Zghal SM\AppData\Local\Temp\sqlite3.dll
C:\Users\Zghal SM\AppData\Local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-11-26 11:57

==================== End Of Log ============================

--- --- ---

--- --- ---

ADDITIONAL

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-11-2014 01
Ran by Zghal SM at 2014-11-29 14:43:17
Running from C:\Users\Zghal SM\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Acrobat 8 Professional - English, Français, Deutsch (HKLM-x32\...\Adobe Acrobat 8 Professional - English, Français, Deutsch) (Version: 8.0.0 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.4.0.2710 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe GoLive CS2 Deutsch (HKLM-x32\...\Adobe GoLive CS2 Deutsch) (Version: 8.0 - Ihr Firmenname)
Adobe Illustrator CS2 (HKLM-x32\...\Adobe Illustrator CS2) (Version: 12.000.000 - Adobe Systems Inc.)
Adobe InCopy CS2 (HKLM-x32\...\Adobe InCopy CS2 - {C35B3785-531C-4D00-9EFA-44A130BFF73F}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe InDesign CS2 (HKLM-x32\...\Adobe InDesign CS2 - {7F4C8163-F259-49A0-A018-2857A90578BC}) (Version: 004.000.000 - Adobe Systems Incorporated)
Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0407-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.)
Adobe Premiere Pro 2.0 (HKLM-x32\...\Adobe Premiere Pro 2.0) (Version: 2.000.000 - Adobe Systems, Inc.)
Adobe Reader X MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.0.0 - Adobe Systems Incorporated)
Adobe SVG Viewer 3.0 (HKLM-x32\...\Adobe SVG Viewer) (Version:  3.0 - Adobe Systems, Inc.)
Any Video Converter 3.5.8 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Apple Application Support (HKLM-x32\...\{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}) (Version: 2.3.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.67.1076 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 3.27 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4291 - CDBurnerXP)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.61 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.61 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3255BC3F-32BA-41ED-93A0-B9AEB6CDD9E6}) (Version: 1.5.201.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.65 - ArcSoft)
Dell Product Registration (HKLM-x32\...\{2A0F2CC5-3065-492C-8380-B03AA7106B1A}) (Version: 1.1.3 - Dell Inc.)
Dell Stage (HKLM-x32\...\{56A0DD94-47D9-4AC8-B5A1-8A8CA77C4B89}) (Version: 1.5.201.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1209.101.204 - ALPS ELECTRIC CO., LTD.)
Dell VideoStage  (HKLM-x32\...\InstallShield_{DCE0E79A-B9AC-41AC-98C1-7EF0538BCA7F}) (Version: 1.2.0.1712 - CyberLink Corp.)
Dell VideoStage  (x32 Version: 1.2.0.1712 - CyberLink Corp.) Hidden
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.00.44 - Creative Technology Ltd)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
dreamboxEDIT -- The one and only settings editor for your Dreambox (HKLM-x32\...\dreamboxEDIT) (Version:  - )
eBay (HKLM-x32\...\{A8B88634-7F90-402F-B66A-86429755F6A5}) (Version: 1.4.0 - eBay Inc.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FileZilla Client 3.9.0.6 (HKLM-x32\...\FileZilla Client) (Version: 3.9.0.6 - Tim Kosse)
FinalTorrent 2012 (HKLM-x32\...\FinalTorrent_is1) (Version: 2012.12.09.27 - Bitberry Software)
FolderSort (HKLM-x32\...\FolderSort) (Version:  - )
Glary Utilities 2.48.0.1568 (HKLM-x32\...\Glary Utilities_is1) (Version: 2.48.0.1568 - Glarysoft Ltd)
Google Chrome (HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\Google Chrome) (Version: 39.0.2171.71 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)
High-Definition Video Playback (x32 Version: 7.3.10000.0.0 - Nero AG) Hidden
HP ENVY 110 series - Grundlegende Software für das Gerät (HKLM\...\{DC8A4058-3798-4B37-8D78-62624D2E1585}) (Version: 25.0.622.0 - Hewlett-Packard Co.)
HP ENVY 110 series Hilfe (HKLM-x32\...\{D4444B31-E9E9-4389-B35D-41B5BCA5E9FB}) (Version: 140.0.2.2 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.5192 - HP Photo Creations)
HP Update (HKLM-x32\...\{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}) (Version: 5.003.000.004 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2455 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{2ABA2E8D-23CF-418F-BC8F-2EC99FA51A3F}) (Version: 1.2.1.0608 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{D61E4101-9E15-4D0E-ABD1-1ABD36B43330}) (Version: 14.03.0000 - Intel Corporation)
Intel(R) WiDi (HKLM-x32\...\{0DD706AF-B542-438C-999E-B30C7F625C8D}) (Version: 2.1.39.0 - Intel Corporation)
iTunes (HKLM\...\{0225AD21-F3E2-4916-BFF3-65D3F9052582}) (Version: 11.0.2.26 - Apple Inc.)
Java(TM) 7 Update 1 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417001FF}) (Version: 7.0.10 - Oracle)
Java(TM) 7 Update 1 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217001FF}) (Version: 7.0.10 - Oracle)
Joe (HKLM-x32\...\{0AD3DEBC-5321-457E-8B43-8F546940169B}) (Version: 4.00.0050 - Wirth IT Design)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{6F6873E3-5C92-4049-B511-231A138DD090}) (Version: 14.0.0.4651 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 14.0.0.4651 - Kaspersky Lab) Hidden
LG United Mobile Driver (HKLM-x32\...\{2A3A4BD6-6CE0-4e2a-80D2-1D0FF6ACBFBA}) (Version: 3.10.1.0 - LG Electronics)
MagicCute Datenrettung 2012.1 (HKLM-x32\...\{E7B0A44B-AA6F-4052-9171-E5E674BD475E}}_is1) (Version: 2012.1 - MagicCute)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Home and Business 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
MiniTool Partition Wizard Home Edition 8.1.1 (HKLM-x32\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version:  - MiniTool Solution Ltd.)
Mozilla Firefox 33.1.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 33.1.1 (x86 de)) (Version: 33.1.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.4 - F.J. Wechselberger)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Treiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 268.30 - NVIDIA Corporation)
NVIDIA Grafiktreiber 268.30 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 268.30 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.18.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.18.0 - NVIDIA Corporation)
OnlineFotoservice (HKLM-x32\...\OnlineFotoservice) (Version: 5.0.1 - CEWE COLOR AG u Co. OHG)
ooVoo (HKLM-x32\...\{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}) (Version: 3.5.1072 - ooVoo LLC.)
PDF Architect (HKLM-x32\...\{30B41B7A-3C9D-44DE-A7A1-949011F33CC3}) (Version: 1.0.41.8362 - pdfforge)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.1 - pdfforge)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.207.0 - Tracker Software Products Ltd)
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
PixelNet Software 4.12.2 (HKLM-x32\...\PixelNet Software) (Version: 4.12.2 - ORWO Net)
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.0.15 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6353 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rossmann Fotowelt Software 4.12.1 (HKLM-x32\...\Rossmann Fotowelt Software) (Version: 4.12.1 - ORWO Net)
Roxio Creator Starter (HKLM-x32\...\{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}) (Version: 12.1.77.0 - Roxio)
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
SafeFinder Smartbar (HKLM-x32\...\{AF37B709-2A7A-467D-8139-C1DE4B2C8924}) (Version: 11.127.72.20713 - Linkury Ltd.) <==== ATTENTION
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13034_9 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.5.3.13034_9 - Samsung Electronics Co., Ltd.) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13052_1 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (x32 Version: 1.0.0.13052_1 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.24.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
SopCast 3.2.9 (HKLM-x32\...\SopCast) (Version: 3.2.9 - www.sopcast.com)
Studie zur Verbesserung von HP ENVY 110 series Produkten (HKLM\...\{FC87C2FD-540E-4AB5-807B-D4A172129C73}) (Version: 25.0.622.0 - Hewlett-Packard Co.)
SyncUP (HKLM-x32\...\{40F06490-8C14-43AA-99D3-EEEFDBAC3CFC}) (Version: 1.10.11100.8.106 - Nero AG)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.15400 - Nero AG)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.18051 - TeamViewer)
TouchFreeze (HKLM-x32\...\{D031E017-2434-40A7-A352-4DDD0199170D}) (Version: 1.0.2 - Ivan Zhakov)
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel)
Video Converter Packages (HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\Video Converter Packages) (Version:  - ) <==== ATTENTION
VLC media player 2.0.1 (HKLM-x32\...\VLC media player) (Version: 2.0.1 - VideoLAN)
WEB.DE MailCheck für Google Chrome (HKU\S-1-5-21-1465910209-2680476309-2651782132-1001\...\1&1 Mail & Media WEB.DE MailCheck GC) (Version: 1.0.0.0 - 1&1 Mail & Media GmbH)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
WinRAR 4.20 (32-Bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
XMedia Recode Version 3.1.3.6 (HKLM-x32\...\{DDA3C325-47B2-4730-9672-BF3771C08799}_is1) (Version: 3.1.3.6 - XMedia Recode)
Zinio Reader 4 (HKLM-x32\...\ZinioReader4) (Version: 4.2.4164 - Zinio LLC)
Zinio Reader 4 (x32 Version: 4.2.4164 - Zinio LLC) Hidden

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll No File
CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-1465910209-2680476309-2651782132-1001_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Zghal SM\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll No File

==================== Restore Points  =========================

12-11-2014 16:56:23 Windows Update
12-11-2014 21:07:01 Windows Update
18-11-2014 18:42:34 Windows Update
19-11-2014 12:50:56 Windows Update
26-11-2014 09:16:29 Windows Update
27-11-2014 20:05:57 Revo Uninstaller's restore point - Click Caption 1.10.0.2

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {1C7C42B6-40FB-4FA8-AE57-BE52CAE915B0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-29] (Google Inc.)
Task: {1E85D60E-3082-4899-AE69-922FC1CE2296} - System32\Tasks\Google Updater and Installer => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11] (Google Inc.)
Task: {21F7B213-A97C-49D7-9736-E605FF240E39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-01-23] (Piriform Ltd)
Task: {247B34D1-0710-4C58-A3DE-44163303E996} - System32\Tasks\ReclaimerUpdateFiles_Zghal SM => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [2014-11-25] (RealNetworks, Inc.)
Task: {481E43B4-E02C-4080-B555-F9B7E9116202} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {4C1C7C7E-AEC6-428D-8A58-7915EB995D1F} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core => C:\Users\Zghal SM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-08] (Facebook Inc.)
Task: {4DE40F11-240D-427D-AA79-37364A7D04FD} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2012-08-09] (Glarysoft Ltd)
Task: {4EE4FE69-C6CA-49AA-BDD7-CE080653FD38} - System32\Tasks\HP-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-03-24] (Hewlett-Packard)
Task: {52DE778A-7559-4685-AC01-5C18F34BF9AB} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {65EF7E89-0727-4286-A1F2-6F96266E1CE6} - System32\Tasks\AutoKMSDaily => C:\Windows\AutoKMS.exe
Task: {73D885E5-FCA2-4FAE-B67E-6345E33C679D} - System32\Tasks\JavaUpdateSched => %COMMONPROGRAMFILES(x86)%\Java\Java Update\jusched.exe
Task: {74ACB0AD-F04A-479F-B93A-90836B52F444} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {84A2C10B-4B72-4D44-A3BF-51E7C68D9202} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {8759519C-3EEF-4A95-A200-A50768544809} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{73D7F893-E3CB-4632-A35B-208C2A79DAC9}.exe
Task: {8C47ADCB-08FC-4AEC-8F15-45E77C210D37} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {9A8CFFE8-120F-4A8F-B97E-6418CC546837} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11] (Google Inc.)
Task: {9B63085C-3497-43B5-A55F-BFA198E9EECD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {9D696A61-5701-4095-8196-F15FB10B9DEE} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {A3093A03-34F5-4982-A43C-54E7E1D9A7F6} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA => C:\Users\Zghal SM\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-08] (Facebook Inc.)
Task: {A6174505-9E5D-497E-B21C-6EEF24E38757} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {AB13AAB2-CE6E-41B2-9A85-AB614E538804} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {B0497BCD-BB2F-4F25-9B71-F48404EF983D} - System32\Tasks\ReclaimerUpdateXML_Zghal SM => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [2014-11-25] (RealNetworks, Inc.)
Task: {BB6E9621-86C9-499F-B4C7-681024797251} - System32\Tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask => Sc.exe start osppsvc
Task: {BD002F80-A287-479B-9773-7DF3322479B4} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [2013-10-02] (RealNetworks, Inc.)
Task: {C0AF6CC2-C609-4C51-B102-817F08D7A90E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-11] (Google Inc.)
Task: {C11134CD-9044-4658-BD60-FCD41D630A11} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {C2B13801-23BB-4B9F-A902-909510EADEFD} - System32\Tasks\RNUpgradeHelperLogonPrompt_Zghal SM => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [2014-11-25] (RealNetworks, Inc.)
Task: {C9556AC2-A58B-4300-9134-EF257ADCE0A4} - System32\Tasks\RNUpgradeHelperResumePrompt_Zghal SM => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe [2014-11-25] (RealNetworks, Inc.)
Task: {D7C4C806-AB6C-4A09-8D8B-ABC5B9DAE36B} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {EC6B3A8C-A553-410D-9681-1C76FCEE084E} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {ECB90D5D-6D0D-4F6A-9DFE-100AE27B7D39} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1465910209-2680476309-2651782132-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {EF710B76-AC42-4768-9066-9E30639451FB} - System32\Tasks\HPCustParticipation HP ENVY 110 series => C:\Program Files\HP\HP ENVY 110 series\Bin\HPCustPartic.exe [2011-09-19] (Hewlett-Packard Co.)
Task: {FFB0AB2B-5CEA-48C7-B26F-49C39125F638} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-06-29] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{73D7F893-E3CB-4632-A35B-208C2A79DAC9}.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core.job => C:\Users\Zghal SM\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA.job => C:\Users\Zghal SM\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001Core.job => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1465910209-2680476309-2651782132-1001UA.job => C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ReclaimerUpdateFiles_Zghal SM.job => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerUpdateXML_Zghal SM.job => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe
Task: C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Zghal SM.job => C:\Users\Zghal SM\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.03\agent\rnupgagent.exe

==================== Loaded Modules (whitelisted) =============

2011-11-01 19:58 - 2011-11-01 19:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2014-05-01 20:29 - 2014-05-01 20:29 - 00098304 _____ () E:\Slim\VU\Control Center\Filzilla\FileZilla FTP Client\fzshellext_64.dll
2012-08-09 19:41 - 2012-08-09 19:41 - 00106496 _____ () C:\Windows\system32\wdigestd.exe
2013-08-14 14:19 - 2013-08-14 14:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2012-02-13 08:57 - 2011-09-22 17:14 - 02751808 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2011-11-01 19:58 - 2011-11-01 19:58 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2011-06-28 02:26 - 2011-06-28 02:26 - 02022976 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe
2005-04-29 16:15 - 2005-04-29 16:15 - 00045056 _____ () C:\Program Files (x86)\TouchFreeze\TouchFreeze.exe
2011-06-29 15:52 - 2011-06-29 15:52 - 00474176 _____ () C:\Program Files (x86)\Dell\Stage Remote\StageRemoteService.exe
2014-01-31 21:56 - 2014-01-31 21:56 - 00541432 _____ () C:\Program Files\My Dell\libAsapiCSharp.dll
2014-01-31 21:56 - 2014-01-31 21:56 - 00103160 _____ () C:\Program Files\My Dell\libCSharpCommonCS.dll
2014-01-31 21:56 - 2014-01-31 21:56 - 00090872 _____ () C:\Program Files\My Dell\libTonopahClientCSharp.dll
2014-01-31 21:56 - 2014-01-31 21:56 - 00086776 _____ () C:\Program Files\My Dell\libDataStoreCSharp.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-01-28 13:08 - 2013-01-28 13:08 - 01242512 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-06-17 11:35 - 2013-06-17 11:35 - 00478400 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\dblite.dll
2013-05-08 13:52 - 2013-05-08 13:52 - 01270464 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kpcengine.2.3.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 01926144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtCore4.dll
2010-03-22 22:52 - 2010-03-22 22:52 - 06776832 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtGui4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00635904 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtNetwork4.dll
2010-03-17 03:28 - 2010-03-17 03:28 - 00326144 _____ () C:\Program Files (x86)\Dell\Stage Remote\QtXml4.dll
2011-06-25 06:20 - 2011-06-25 06:20 - 00565968 _____ () C:\Program Files (x86)\Dell\Stage Remote\sqlite3.dll
2011-06-28 02:25 - 2011-06-28 02:25 - 00058944 _____ () C:\Program Files (x86)\Dell\Stage Remote\DataService.dll
2011-06-25 06:32 - 2011-06-25 06:32 - 00323136 _____ () C:\Program Files (x86)\Dell\Stage Remote\de-DE\UI\ManagerUI.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00028160 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qgif4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00031744 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qico4.dll
2010-03-05 22:07 - 2010-03-05 22:07 - 00125952 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qjpeg4.dll
2010-03-12 02:52 - 2010-03-12 02:52 - 00225280 _____ () C:\Program Files (x86)\Dell\Stage Remote\plugins\imageformats\qmng4.dll
2005-04-29 16:15 - 2005-04-29 16:15 - 00045056 _____ () C:\Program Files (x86)\TouchFreeze\TouchFreeze.dll
2014-08-07 20:14 - 2014-11-27 22:06 - 00012288 _____ () C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\WTSAPI32.dll
2014-10-16 10:15 - 2014-10-16 10:15 - 00035328 _____ () E:\Slim\VU\Control Center\Filzilla\FileZilla FTP Client\fzshellext.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00091648 _____ () E:\Slim\VU\Control Center\Filzilla\FileZilla FTP Client\libgcc_s_sjlj-1.dll
2014-05-24 17:41 - 2014-05-24 17:41 - 00892416 _____ () E:\Slim\VU\Control Center\Filzilla\FileZilla FTP Client\libstdc++-6.dll
2014-11-26 16:04 - 2014-11-25 07:39 - 01077064 _____ () C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\39.0.2171.71\libglesv2.dll
2014-11-26 16:04 - 2014-11-25 07:39 - 00211272 _____ () C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\39.0.2171.71\libegl.dll
2014-11-26 16:04 - 2014-11-25 07:39 - 09009480 _____ () C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\39.0.2171.71\pdf.dll
2014-11-26 16:04 - 2014-11-25 07:39 - 01677128 _____ () C:\Users\Zghal SM\AppData\Local\Google\Chrome\Application\39.0.2171.71\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Acrobat - Schnellstart.lnk => C:\Windows\pss\Adobe Acrobat - Schnellstart.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk => C:\Windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Zghal SM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk => C:\Windows\pss\Adobe Gamma.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Zghal SM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Tintenwarnungen überwachen - HP ENVY 110 series (Netzwerk).lnk => C:\Windows\pss\Tintenwarnungen überwachen - HP ENVY 110 series (Netzwerk).lnk.Startup
MSCONFIG\startupfolder: C:^Users^Zghal SM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk => C:\Windows\pss\Überwachungstool für die Intel® Turbo-Boost-Technik 2.0.lnk.Startup
MSCONFIG\startupreg: AccuWeatherWidget => "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: Apoint => C:\Program Files\DellTPad\Apoint.exe
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: Desktop Disc Tool => "C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: Facebook Update => "C:\Users\Zghal SM\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: Google Update => "C:\Users\Zghal SM\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HP ENVY 110 series (NET) => "C:\Program Files\HP\HP ENVY 110 series\Bin\ScanToPCActivationApp.exe" -scfn "HP ENVY 110 series (NET)" -AutoStart 1
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: ooVoo.exe => C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
MSCONFIG\startupreg: QuickSet => c:\Program Files\Dell\QuickSet\QuickSet.exe
MSCONFIG\startupreg: RoxWatchTray => "C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: TkBellExe => "c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-1465910209-2680476309-2651782132-500 - Administrator - Disabled)
Gast (S-1-5-21-1465910209-2680476309-2651782132-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1465910209-2680476309-2651782132-1003 - Limited - Enabled)
UpdatusUser (S-1-5-21-1465910209-2680476309-2651782132-1000 - Limited - Enabled) => C:\Users\UpdatusUser
Zghal SM (S-1-5-21-1465910209-2680476309-2651782132-1001 - Administrator - Enabled) => C:\Users\Zghal SM

==================== Faulty Device Manager Devices =============

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3541706

Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3541706

Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11919

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11919

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7004

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 00:21:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6006


System errors:
=============
Error: (11/29/2014 10:24:54 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (11/28/2014 08:40:02 AM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: NT-AUTORITÄT)
Description: 0x8000002a171\??\Volume{59c0dec5-55d6-11e1-be1d-806e6f6e6963}\System Volume Information\SPP\SppCbsHiveStore\{cd42efe1-f6f1-427c-b004-033192c625a4}{888F8E3A-4A2C-4491-A787-17461C5C2A80}

Error: (11/28/2014 07:00:24 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3541706

Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3541706

Error: (11/29/2014 02:38:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 11919

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 11919

Error: (11/29/2014 01:32:19 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7004

Error: (11/29/2014 00:21:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (11/29/2014 00:21:49 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 6006


CodeIntegrity Errors:
===================================
  Date: 2014-11-14 13:46:26.357
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 13:46:26.357
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 13:46:26.337
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 13:46:26.337
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 13:44:18.678
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-14 13:44:18.468
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-13 20:30:59.903
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-13 20:30:59.903
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-13 20:30:59.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-13 20:30:59.883
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-2670QM CPU @ 2.20GHz
Percentage of memory in use: 37%
Total physical RAM: 8086.17 MB
Available physical RAM: 5043.23 MB
Total Pagefile: 16170.52 MB
Available Pagefile: 12399.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:468.99 GB) (Free:343.71 GB) NTFS
Drive e: (Volume) (Fixed) (Total:442.89 GB) (Free:252.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 07F2837E)
Partition 1: (Not Active) - (Size=102 MB) - (Type=DE)
Partition 2: (Active) - (Size=19.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=469 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=442.9 GB) - (Type=OF Extended)

==================== End Of Log ============================

cosinus · 29.11.2014, 15:09

Zitat:

System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe

Ich seh da illegale/unlizenzierte Software, mindestens ein gecracktes MS-Office

Lesestoff:
Illegale Software: Cracks, Keygens und Co

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

ClickCaption_1.10.0.2 deinstallieren

Plagegeister aller Art und deren Bekämpfung: ClickCaption_1.10.0.2 deinstallieren