Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet

Beatrica · 15.12.2014, 10:46

So,nachdem es hier ganz gut lief seit der letzten Reinigung durch das T-Board habe ich mir scheints wieder was eingefangen.

Ich bitte hiermit noch einmal um Hilfe

cosinus · 15.12.2014, 11:24

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Beatrica · 15.12.2014, 11:35

Hallo Cosinus .

Hier das Gewünschte :

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2014 01
Ran by Bea (administrator) on BEA-PC on 15-12-2014 11:29:05
Running from C:\Users\Bea\Desktop
Loaded Profile: Bea (Available profiles: Bea & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE
(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updaterinfo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Yahoo! Inc.) C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
() C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-25] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520 2014-07-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE [283232 2014-01-16] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3986288 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google+ Auto Backup] => C:\Users\Bea\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3701064 2014-03-11] (Google Inc.)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google Update] => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-10-11] (Google Inc.)
Startup: C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updaterinfo.exe ()
BootExecute: sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2003399624-2568068236-90850429-1001] => localhost:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://google.com/
URLSearchHook: HKLM-x32 - Default Value = {3B81079D-2AC9-425f-A494-A1C7D93AFA3C}
URLSearchHook: HKLM-x32 - (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} - No File
URLSearchHook: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 - YTNavAssistPlugin Class - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn3\yt.dll (Yahoo! Inc.)
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {18834523-2FB0-49DB-A5F4-BD350E710BC3} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {26D76483-E15E-4132-970B-33C8714389CC} URL = https://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {79B22172-20EE-4ACB-9A89-C6F9E1271063} URL = https://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie11
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\.DEFAULT -> No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
Toolbar: HKU\.DEFAULT -> No Name - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @exent.com/npExentCtl,version=7.0.0.0 -> C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\searchplugins\allgameshome.xml
FF Extension: Adblock Plus - C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-23]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://zattoo.com/#phoenix", "hxxp://google/", "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=hp&installDate=13/10/2013", "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll No File
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
CHR Profile: C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-02]
CHR Extension: (Google Wallet) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
U4 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-19] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-10-25] (Synaptics Incorporated)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 X5XSEx; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-15 11:28 - 2014-12-15 11:28 - 02119168 _____ (Farbar) C:\Users\Bea\Desktop\FRST64.exe
2014-12-15 10:04 - 2014-12-15 10:35 - 00079227 _____ () C:\Users\Bea\Desktop\Addition.txt
2014-12-15 10:02 - 2014-12-15 11:29 - 00020852 _____ () C:\Users\Bea\Desktop\FRST.txt
2014-12-15 09:57 - 2014-12-15 10:00 - 00000000 ____D () C:\Users\Bea\Desktop\Trojaner
2014-12-15 09:56 - 2014-12-15 09:56 - 02119168 _____ (Farbar) C:\Users\Bea\Downloads\FRST64 (1).exe
2014-12-13 13:53 - 2014-12-13 13:53 - 00001056 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-13 13:53 - 2014-12-13 13:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-12 08:03 - 2014-12-12 08:03 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:26 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:26 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 20:57 - 2014-12-10 20:57 - 03248489 _____ () C:\Users\Bea\Downloads\2147493270.zip
2014-12-10 20:52 - 2014-12-10 20:52 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (2).zip
2014-12-10 20:51 - 2014-12-10 20:51 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (1).zip
2014-12-10 20:50 - 2014-12-10 20:50 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951.zip
2014-12-10 20:50 - 2014-12-10 20:50 - 00000000 ____D () C:\Users\Bea\Downloads\Texturen
2014-12-10 20:24 - 2014-12-10 21:34 - 00000000 ____D () C:\Users\Bea\Desktop\Texturen
2014-12-10 17:42 - 2014-12-10 17:42 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih (1).exe
2014-12-10 17:39 - 2014-12-10 17:39 - 00001148 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00001136 _____ () C:\Users\Public\Desktop\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\Documents\Mixpad Projects
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\NCH Software
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:38 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\NCH Software
2014-12-10 17:38 - 2014-12-10 17:39 - 00000000 ____D () C:\Program Files (x86)\NCH Software
2014-12-10 17:38 - 2014-12-10 17:38 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2014-12-10 17:38 - 2014-12-10 17:38 - 00001140 _____ () C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2014-12-10 17:26 - 2014-12-10 17:26 - 00949784 _____ (NCH Software) C:\Users\Bea\Downloads\wpsetup.exe
2014-12-10 16:02 - 2014-12-10 16:02 - 00232145 _____ () C:\Users\Bea\Downloads\1286818485.svg
2014-12-10 15:57 - 2014-12-10 15:57 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (2).svg
2014-12-10 15:52 - 2014-12-10 15:53 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (1).svg
2014-12-10 15:51 - 2014-12-10 15:51 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope.svg
2014-12-10 15:04 - 2014-12-10 15:04 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551 (1).svg
2014-12-10 15:03 - 2014-12-10 15:03 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551.svg
2014-12-10 13:03 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 13:03 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 13:03 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 13:03 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 13:03 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 13:03 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 13:03 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 13:03 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 13:03 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 13:03 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 13:03 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 13:03 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 13:03 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 13:03 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 13:03 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 13:03 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 13:03 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 13:03 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 13:03 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 13:03 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 13:03 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 13:03 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 13:00 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 13:00 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 12:59 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 12:57 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 12:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 12:57 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 12:57 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 12:57 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 12:57 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 11:07 - 2014-12-10 11:07 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih.exe
2014-12-02 20:27 - 2014-12-02 20:50 - 00000000 ____D () C:\Users\Bea\Desktop\WASSER DES LEBENS
2014-12-02 15:12 - 2014-12-02 15:15 - 00000000 ____D () C:\Users\Bea\Desktop\BÄR
2014-11-27 10:57 - 2014-12-15 09:23 - 00003332 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-27 10:57 - 2014-12-15 09:23 - 00003194 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-23 17:39 - 2014-11-23 17:39 - 320911980 _____ () C:\Windows\MEMORY.DMP
2014-11-22 18:01 - 2014-11-22 18:01 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-22 18:01 - 2014-11-22 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-19 13:29 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 13:29 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 22:08 - 2014-11-18 22:12 - 00000000 ____D () C:\Users\Bea\Desktop\wollthread
2014-11-18 13:42 - 2014-11-19 17:34 - 00000000 ____D () C:\Users\Bea\Desktop\JOSIE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-15 11:29 - 2013-12-13 16:04 - 00000000 ____D () C:\FRST
2014-12-15 11:27 - 2012-02-02 20:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-15 11:23 - 2014-10-11 18:57 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job
2014-12-15 10:58 - 2012-04-16 06:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-15 09:45 - 2013-04-20 13:10 - 01547349 _____ () C:\Windows\WindowsUpdate.log
2014-12-15 09:39 - 2012-03-01 16:32 - 00000000 ____D () C:\Windows\Minidump
2014-12-15 09:31 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-15 09:31 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-15 09:23 - 2012-02-02 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-15 09:22 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-14 20:23 - 2014-10-11 18:56 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job
2014-12-14 15:07 - 2014-05-15 20:03 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C682669D-5F76-48D9-BE04-BB579627B5F2}
2014-12-14 14:24 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-12-13 20:45 - 2012-04-08 16:52 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Skype
2014-12-13 13:53 - 2014-01-14 20:40 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-12 09:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 08:03 - 2014-05-06 23:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 22:39 - 2013-08-10 21:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:28 - 2012-02-05 08:42 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 15:05 - 2013-04-10 22:17 - 00867840 ___SH () C:\Users\Bea\Downloads\Thumbs.db
2014-12-04 08:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-03 16:54 - 2014-11-04 12:01 - 00000000 ____D () C:\Users\Bea\Desktop\Neues Forum
2014-12-03 13:19 - 2014-08-23 17:19 - 00000000 ____D () C:\Users\Bea\Desktop\ROSENGARTEN
2014-12-03 13:07 - 2013-04-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-03 13:06 - 2014-10-27 19:55 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1414436089
2014-11-30 14:51 - 2014-05-06 20:05 - 00000000 ____D () C:\Users\Bea\Desktop\STRÄUßE
2014-11-26 17:48 - 2012-04-16 06:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 17:48 - 2012-04-16 06:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 17:48 - 2012-02-02 20:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 20:17 - 2014-11-04 15:11 - 00000000 ____D () C:\Users\Bea\Desktop\Taschen
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ____D () C:\ProgramData\Skype
2014-11-21 06:28 - 2014-10-29 21:32 - 00000000 ____D () C:\Users\Bea\Desktop\WILDROSEN
2014-11-21 06:21 - 2014-05-04 09:13 - 00000000 ____D () C:\Users\Bea\Desktop\SONNEN
2014-11-19 14:51 - 2014-11-01 22:19 - 00000000 ____D () C:\Users\Bea\Desktop\SNIPPINGTOOL
2014-11-18 19:59 - 2014-10-27 19:55 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 26.lnk
2014-11-17 20:18 - 2014-10-11 18:57 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA
2014-11-17 20:18 - 2014-10-11 18:57 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core

Some content of TEMP:
====================
C:\Users\Bea\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-09 13:42

==================== End Of Log ============================

--- --- ---

--- --- ---

Code:

ATTFilter

   Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2014 01
Ran by Bea at 2014-12-15 10:04:38
Running from C:\Users\Bea\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo WinOptimizer 2013 v.1.0.0 (HKLM-x32\...\{4209F371-7B85-60AD-E5CE-E4409D39E3DE}_is1) (Version: 1.00.00 - Ashampoo GmbH & Co. KG)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Benutzerhandbuch EPSON SX235 Series (HKLM-x32\...\EPSON SX235 Series Useg) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DriverBoost (HKLM-x32\...\{044E78D2-8F54-4F6F-AD2B-A122F8111EDB}) (Version: 8.1 - DriverBoost)
EnvisioKnit Design Studio Demo 1.2.3 (HKLM-x32\...\EnvisioKnit Design Studio Demo) (Version: 1.2.3 - Blue Sheep Software LLC)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX235 Series Printer Uninstall (HKLM\...\EPSON SX235 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Gekko Mahjongg (HKLM-x32\...\GEKKO Mahjongg) (Version:  - )
Gekko Mahjongg (Oster-Edition) (HKLM-x32\...\Gekko Mahjongg (Oster-Edition)) (Version:  - )
Gekko Mahjongg (Weihnachts-Edition) (HKLM-x32\...\Gekko Mahjongg (Weihnachts-Edition)) (Version:  - )
GIMP 2.6.12 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.12 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Google+ Auto Backup) (Version: 1.0.24.118 - Google, Inc.)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 17 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417017FF}) (Version: 7.0.170 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.670 - Oracle)
Java(TM) SE Development Kit 7 Update 2 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170020}) (Version: 1.7.0.20 - Oracle)
JavaFX 2.0.2 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
JavaFX 2.0.2 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Knit Visualizer Demo 2.1 (HKLM-x32\...\Knit Visualizer Demo 2.1) (Version:  - The Knit Foundry)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version: 3.59 - NCH Software)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Lite (HKLM-x32\...\{8c059ece-05be-48d5-867e-8a9c14aad244}) (Version:  - Nero AG)
Netzwerkhandbuch EPSON SX235 Series (HKLM-x32\...\EPSON SX235 Series Netg) (Version:  - )
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 26.0.1656.32 (HKLM-x32\...\Opera 26.0.1656.32) (Version: 26.0.1656.32 - Opera Software ASA)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Strickmuster 1 (HKLM-x32\...\Strickmuster 1) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.8 - Synaptics Incorporated)
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.49 - Creative Island Media, LLC) <==== ATTENTION
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.91 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Yahoo Toolbar (HKLM-x32\...\Yahoo! Companion) (Version:  - Yahoo Inc.)
Zipeg (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Zipeg) (Version: 2.9.3.1316 - hxxp://zipeg.com)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{9BD87338-AA34-B27F-A04C-2C1CE92F163F}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

08-12-2014 18:53:27 Windows Update
09-12-2014 22:35:38 Windows Update
10-12-2014 21:24:02 Windows Update
12-12-2014 22:32:31 Windows Update
13-12-2014 22:33:24 Windows Update
14-12-2014 22:31:22 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00E48A74-D809-4481-8025-68596CAC1873} - System32\Tasks\{0B0B3EDD-9658-4FFA-B350-DBE0D47C5B6A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0337D85F-FCDF-4E83-8363-396C3876E55A} - System32\Tasks\{FB54E8E6-773D-436D-A6F9-36F7FEDED622} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {038B7533-86FE-4D03-913A-BF0C370596C8} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {05056166-5B27-4E4B-A5A4-53FB6B5344A9} - System32\Tasks\{ED1F04CA-6848-4348-90E8-E87702B726CB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0558CCB1-9E9B-491F-9EE2-D513E3401A14} - System32\Tasks\{FAA1CDEE-9EE9-4EDE-BF12-6A48D6A3A661} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {057EBF7C-6BE8-45DD-BA40-B314FF8F12FF} - System32\Tasks\DriverBoost-RTMScanRunOnce => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {069DCFBB-6AAA-4603-BFF7-672B6C0BC3D1} - System32\Tasks\{35036A0D-FB88-4580-B795-3E9B9BE7098F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {06C35FD8-7941-4F42-A62A-444E57EC6618} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {071C249F-DFD1-4C04-8D6A-8B91108F7C93} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {0793F9F5-7E5E-4421-9744-7911D321EC4B} - System32\Tasks\{4E08B5F9-E2FA-4EBC-8C69-E9D1A7E6FB25} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {07F51E0A-57D2-4EDB-B4AF-4EEA86EFFF6B} - System32\Tasks\{C82DED95-CC83-44C4-B62D-88C5613A83A5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {080264BC-0B86-4D70-B6C4-C6045A2B5AD0} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {086985DA-8A79-4454-ADE8-160B8A0B855E} - System32\Tasks\{1934A7B5-4B79-4F84-AADA-5D90BD077B6D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {09D74DB8-1A00-49C5-9F0E-54027BE0F818} - System32\Tasks\{C8B69D9A-3438-4B2F-B2FD-47DF40363618} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0C6CB150-2D46-4EE1-AF39-FB57376BA629} - System32\Tasks\{D41AE0F8-8A87-4915-8584-AC4B0338FFB2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0C7CD12F-6E54-494F-9773-0963309DEC00} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {0C8FA779-D80D-41F9-A8C5-082FBE4987FE} - System32\Tasks\{376D9B18-AD63-4185-ABB8-BEDE89AA029C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0CFED245-555E-49C3-BCAF-E702A50C1E7B} - System32\Tasks\{36F1C0D4-BC3C-45B6-AF92-934633458E3A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0D506EC2-BF14-4A85-A0EE-2308A7C3BD34} - System32\Tasks\{5FA28724-DFD9-4DAD-873C-F3F694422F8D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0DA471FB-C4EC-41FB-9AEB-2EC9E781B503} - System32\Tasks\{A13A76CE-C204-41B5-ADD6-18123F4D973F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0E421171-B18D-4703-8BE5-5FCAC046B842} - System32\Tasks\{3BB30939-C419-4671-898E-252A338C5018} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0FD345A4-F392-411C-9B2C-55CD0BD3A93D} - System32\Tasks\{E6F60CCB-0F87-473C-9E86-24D4786EF14B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0FF6806A-7BCE-4C38-A8C1-912CA53D65B8} - System32\Tasks\{BE872116-F3F6-4557-B781-E13D153D991C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {12883BE4-2B95-401B-B378-1652A1E16487} - System32\Tasks\{F98A1514-0020-4D56-8F7F-EA0A741FC665} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {12A617A1-3892-4C6C-95F5-33933C9C5BB1} - System32\Tasks\{2E76ED16-BC61-4F30-A211-E409F2E54949} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1349C52D-9434-41C7-9E62-E1F1BEABEBF3} - System32\Tasks\{51111F08-57DA-476E-8E28-307D6FA4D566} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {13849A10-10DA-4671-8557-73629F6088F5} - System32\Tasks\{D04C3F71-6F8A-482A-9ED2-C43AF9D72D20} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {13F1754D-C08C-40C4-95B3-DCF3041D5F39} - System32\Tasks\{57D9E0AC-7898-4AF0-89B6-46BE805096C8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {15C7CA7B-ADB0-47F0-B50E-8CF6CCDB9830} - System32\Tasks\{AC245833-22A1-4851-BD67-3DF2FBAD22E9} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {17D305EF-90C7-4058-A567-649417F59B5E} - System32\Tasks\{D6404B74-AF8F-4232-B24F-973481441C84} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1DDF171D-4129-4761-8853-8B11D1015CAB} - System32\Tasks\{37647C6E-42B3-4C00-8348-CF4B5DC20432} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1E6D2B82-DD49-45A6-B9D2-AF734B0D41B0} - System32\Tasks\{6A801AFB-63AB-4541-B2BA-7FEF8457D1CF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1F007331-4172-4B36-89B8-5DD19ECB8A17} - System32\Tasks\{76F313BC-21B9-4738-BB68-9E479FF602D0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {208F3A5F-74BF-4B49-98D4-26F2CC6638DD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {2288AF63-464A-4E4E-9324-4458D64AC5BD} - System32\Tasks\Opera scheduled Autoupdate 1414436089 => C:\Program Files (x86)\Opera\launcher.exe [2014-11-25] (Opera Software)
Task: {22DA4053-CC92-44BA-995F-F984B15952C1} - System32\Tasks\{00EB6C71-556D-4678-8BB4-D73B478BC0F6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2521569B-383C-40D4-975F-96765BF9DEB6} - System32\Tasks\{3112554B-503E-4935-B772-832874961800} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2A544743-18A2-4D3A-ABE3-6D64386A4CE5} - System32\Tasks\{27215C39-D1EC-42CE-BC17-AE1BC3B69E18} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2A5E603F-D4A5-4C33-8A80-A2A0F84C8EBF} - System32\Tasks\{CC163CC6-8CBD-46C5-AA2A-9ACEE0B5B264} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2B4487B5-5DAD-43DC-8E6F-CB1DD532F85C} - System32\Tasks\{69AB6745-4417-478E-B177-91CD3932C7AA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2ECFF7AC-BF39-425A-AB73-0CCD40C68418} - System32\Tasks\{773E3712-D098-43BA-8F2F-6BCE362BB1E6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2EFAF5BE-1158-4A35-8F0F-3D06D95522A7} - System32\Tasks\{A120C0AC-6BB7-4F88-8ECF-3DB3385D8061} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2F59B9A2-2D77-4774-8657-1E1AF04C48AF} - System32\Tasks\{068D5C70-BBA0-42C6-8958-B22EE6CE73BF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {31C65C5C-AE01-4112-B74D-E729BCDF617A} - System32\Tasks\{0D94E9D4-1FE0-44F8-B429-08479F1DF603} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {328EBE29-64E8-43CC-AC8D-B89C59CD27DB} - System32\Tasks\{F92FC198-5CD5-4899-81E9-C2C9FC05C9D4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3470B1C9-91A9-4C2C-86E7-D50F1F2F0E1D} - System32\Tasks\{7DE92704-490B-4ACD-B1DB-8C91F62379EB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {34A3B5E4-D5F2-4500-A635-29968317C5F1} - System32\Tasks\{E48220DF-9723-43A5-AEB9-3F02924BAED2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {36C9E62F-F0CA-4865-A10A-2BE7FB6A268E} - System32\Tasks\NCH Software\WavePadSevenDays => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe [2014-06-05] (NCH Software)
Task: {39491E61-093B-4989-B5A6-B9C75724B3B7} - System32\Tasks\{07B140C6-6FEB-49C1-A870-23C7C810AC8C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3A523A2D-48B2-4945-91D8-C73487502ACF} - System32\Tasks\{4FE356D1-EF23-460B-A687-2E1D691FB2E4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3BEFA41D-1A63-44C1-B4C6-F62C7013AA25} - System32\Tasks\{674A2C65-C169-4C1C-9DC4-6E76A8509138} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F2EEA56-268A-40E7-B389-AB726CB1A576} - System32\Tasks\{0665AD30-93DF-4E6E-A470-1D8FCE674194} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F509107-E6BA-429D-9458-7C3DD59EC4B1} - System32\Tasks\{A335D717-B87F-406C-A864-4B62FCD0C12C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F893DB3-58E3-4370-8166-B948199E653C} - System32\Tasks\{FB74FC4F-9CD1-4876-9A0F-E09103BC725D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4010040E-65F9-432A-903C-8F5B75688C89} - System32\Tasks\{843C6618-74C4-49EE-AA17-BF3320AAC9B0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {410EF2A5-E499-4130-96DA-655C17E589C5} - System32\Tasks\{D21F8E95-D1FD-4A3D-BE9B-DA606F83314F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {41D1AB1E-576E-4CB9-84BB-0058A2B07884} - System32\Tasks\{095377D2-D1ED-4565-817A-468ADE14335D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {42A2D7E4-2937-4FDF-B4FE-9C72E5684495} - System32\Tasks\{AB00715C-DE00-4D0F-A891-56860A4CF2E2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {47A091E5-B814-46BD-8963-EA36D7AF161C} - System32\Tasks\{FCB42498-EA1E-4D41-ADD4-88ABD220036E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {481BB006-37B1-4164-8311-FB74163DF8CC} - System32\Tasks\{2632AA36-A7BD-4B44-AD4A-C635259DA78F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {487E5800-2619-4DCF-9EC7-C2A9F7B3E749} - System32\Tasks\{EE3BB75E-852B-4B8F-8532-24CC7C41C511} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {488AEE90-951B-43EC-A4CA-2B25572D0EE0} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {4AB94841-C782-44BD-9342-83AC7D5E322C} - System32\Tasks\{379FF990-69F5-493B-BB30-5B970B652ECF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4DA80280-7E6B-49F5-AD17-81C296E7512C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {4DB650B9-5518-410E-8D26-82089D9371B2} - System32\Tasks\{2CC0DC41-8225-4C48-BF88-5B705F1EFFFF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4DFCA046-A6DA-4069-AF2A-4127DBEA74BA} - System32\Tasks\{FE96BD5F-4EDB-4FA6-84EA-690BF98B8F76} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4F85CAB3-2016-4D51-9A9A-1B8242AD131F} - System32\Tasks\{D929088F-AB77-48EC-A43A-91D529740D07} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {50221CAD-8353-47DC-9046-AD0DD5AA8E0A} - System32\Tasks\{D260E38C-7BF3-4752-8A50-BB1ED737ADDC} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5030B7ED-28CE-4AED-B936-937C518E172B} - System32\Tasks\{B8978B22-58A0-428D-8192-E631AC815274} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {51F9236A-3C70-4099-B607-1F9A9C1A9FC7} - System32\Tasks\{FD507C23-5395-41EA-96BC-BE46ED3A9CD4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5707BCE3-C815-4DD7-8999-A6A1E7DC3016} - System32\Tasks\{11198214-916D-4DB2-BA28-8083314B9215} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {58DBF6C0-34D2-416F-A3BF-FBA27D2FAFF8} - System32\Tasks\{36EC5BBA-D88A-4CBE-91E2-D9B5951C08E4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {59E82115-C9A1-429A-882A-E130BDFDE937} - System32\Tasks\{C330B2D8-F91E-4FBC-BD6E-DCD05868D264} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5AD20F76-99E4-4D78-9AEE-561461576167} - System32\Tasks\{60D26756-47DC-41A2-B748-CD3B98568795} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5F795BFA-6F42-4A64-B6C0-EF62CE3CAFDB} - System32\Tasks\{411CD354-1D1A-4718-9380-6DCD70631067} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {611C06AA-33EE-46C1-80D4-5CE0B1262A55} - System32\Tasks\{0664A21C-DD50-4AD5-A157-74CE7165130B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {61297BEB-B030-478F-B7AE-4A0F7A49B29C} - System32\Tasks\{5DAF37BC-2564-4F5E-AAA2-C366B92B2C14} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {61F08A6B-89FD-429B-99BF-AABEC57C22B9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {6283F88F-4BE7-439E-A51E-8F8E1C45E432} - System32\Tasks\{CB77CEC1-28D0-4AA4-AB57-5A8725C8110A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {641E8853-522D-48EE-9F47-B97FDBC5E2FA} - System32\Tasks\{839ED26E-3465-4468-9540-088B0F77C452} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {64C22673-45D6-4FB0-81B7-E8C94071B663} - System32\Tasks\{F83B7E33-69D8-4761-BAEE-43FF9C61FB12} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {65A7B469-DC63-4DB6-9400-60CDB14EE2A2} - System32\Tasks\{130FF7A0-DF70-4E81-B938-5B2AF5C9295D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {68A5355C-858E-4896-8724-6BEF7EE45717} - System32\Tasks\{A46C5233-7063-46B8-ACB8-30F8BDF58843} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {69243B6B-9D5F-4DBA-8779-0F922BDB0C82} - System32\Tasks\{2D63CA8E-E47E-44FC-96F7-C50BFAA539C9} => pcalua.exe -a "C:\Program Files (x86)\OXXOGames\UKGplayer\\MyInstall.exe" -c UInstAllGPAndDS
Task: {6AE300C8-A831-406A-BCFB-BCC805893253} - System32\Tasks\{9385EFDF-DCDF-4037-A584-3C1EDCF1A028} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6CADC28E-4072-4448-AF41-8AC5512E2EF8} - System32\Tasks\{9C96AFBE-FBBD-4BD7-9A47-6F2C6288BBFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6DD98664-CDFF-43CE-B5FE-E057B243844A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.)
Task: {6FF33F30-10F0-4BDC-AC21-844695884157} - System32\Tasks\{981E5C0C-5F37-4098-A935-81816D0AB6D3} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {703414C6-E983-450C-A1A5-77684AB5BF70} - System32\Tasks\{3E38D18F-C05C-4B91-9156-CE8780B8B6BA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7122E757-849E-4B4C-A95D-4947316ABC31} - System32\Tasks\{1CC2B3A6-CFC8-4127-BFBE-E94045599F6E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72313D7C-6CE5-46F4-963D-AB89E8A17B16} - System32\Tasks\{D6FD59E4-E7AF-4F0B-8A11-F174F1D340F1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72CCE807-0040-4479-96D8-E6BB0DD8535F} - System32\Tasks\{DE32BB11-2C64-4336-95AD-B9BD07AB022E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7394D6DD-5231-45AC-82FA-0CD9E12C2629} - System32\Tasks\{0FADA578-A257-4CFC-997A-812F9DFA4098} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {743BFC77-5928-4338-BBEA-76D008FC96C2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {745E4C64-B11C-4C70-BC95-11C7D7A5D137} - System32\Tasks\{A44DE70F-66DA-404C-B311-968B5604A5F2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7486C134-5368-4A1C-B362-54A2CB6A656E} - System32\Tasks\{99B5A430-83C4-4F8B-8746-BC546F8E59EA} => c:\program files (x86)\safari\safari.exe
Task: {76123703-3BB4-47A8-8A0D-CBA7EF02AF8A} - System32\Tasks\{30A71961-6DAA-414A-B7FD-03B441363FE1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {77780FA1-3A20-48D8-9D1C-61B90CF765D4} - System32\Tasks\{5DC901B1-089F-44DD-AB70-5DFA60261341} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7A397562-4F66-4751-80F2-B23A33E8D459} - System32\Tasks\{5004C0D6-7EC6-4C8C-BC29-852EEAC12E1A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CA2304D-7EA8-47FB-B0D1-1A7ACD56CE21} - System32\Tasks\{552566FD-6C06-4B25-8E75-A00BCC5DD3D8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CF3A444-896C-4E09-BE61-97EBD5EF30EB} - System32\Tasks\{EE3A63F1-AA3A-41AB-A9D3-0FECB9779DB0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7D35C753-EC1C-447C-801E-4D13A9F58458} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2014-07-16] (RealNetworks, Inc.)
Task: {7DD50473-6DBE-403C-9332-E46AE08DFB2C} - System32\Tasks\{FF366040-F1A7-4A0C-AB7D-26A51A861D01} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EA75B00-D228-4D29-A379-33FBD8ED3EDD} - \Plus-HD-3.8-firefoxinstaller No Task File <==== ATTENTION
Task: {7ED8B6A4-AA9A-47A4-9A01-F55C24A8DC96} - System32\Tasks\{8B5BA5E1-F81A-4EFA-B374-42AEB9261E2B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EF08107-10D2-4ABD-9397-16BFA4233278} - System32\Tasks\{B5D9F37D-2BD2-423D-A3AC-0A2E1B09C871} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EF1E3DD-3AD8-4983-874D-B9FF143A6850} - System32\Tasks\{1DC08519-AA9B-45CF-9699-15DE435F81D1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {80C12F4B-15C3-4983-93D7-6286CC8EE926} - System32\Tasks\{C414FB38-17CD-41DE-BE63-68DF8DA11AD2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {81C769CE-91E2-475E-8D37-99019A9C8D3C} - System32\Tasks\{C1E59F7F-E12B-4FDB-86A4-8F519E660C9E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {83F80ADB-A8D1-4AE8-9C2C-16DF64AE7992} - System32\Tasks\{B6B72C70-941A-42F5-B547-F9936A721661} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {880F6DA5-854C-4109-9A6F-BCFCB3AB257E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {88A18359-149F-407F-B067-C3BCB1E5C258} - System32\Tasks\{4F68AFF1-228D-441E-9AFD-AADD4AE64A0C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8994AB55-FE66-4DE3-9F9F-3F7F6AC4DEF6} - System32\Tasks\{41843AA5-531F-4BA5-A129-0A367D977218} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8ABDA275-209B-411E-80F8-B697915A1791} - System32\Tasks\{0467F6AF-AFB8-4B28-8087-B7E591DACA09} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8BE589AA-0827-4DDE-8014-3C71D6D36E7B} - System32\Tasks\{88D49099-83B6-4F94-9CA5-705177505B4E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8C33F88F-14ED-4112-B1F0-69020CD1D99D} - System32\Tasks\NCH Software\MixPadSevenDays => C:\Program Files (x86)\NCH Software\MixPad\MixPad.exe [2014-11-25] (NCH Software)
Task: {8E1DF6B1-20C8-4671-BB21-0D016E4B8F4E} - System32\Tasks\{52A597DD-01E8-47DE-B3A1-393D194C7E9C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8FD2E5EF-A38B-4650-B2EB-6CEEA6F37DA1} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {9108231B-AE62-4C86-9BE5-020369EF7DA6} - System32\Tasks\{65BD397B-7229-4876-88F4-0C8E09C64FDC} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {93F1E0D9-726F-40EC-A0B9-13779B51C81E} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25] (Oracle Corporation)
Task: {9676441E-216E-4B27-9547-1E1394599BFD} - System32\Tasks\{7698AF58-3053-4836-87DF-F3E298AEADFB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {96D63560-618E-446A-8FDF-3B90EAA33A0C} - System32\Tasks\{F33854A9-015D-4CA3-8F8F-D00DFCAC94DE} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {97143293-E5AA-4920-B67B-453257DE8878} - System32\Tasks\{8D658C7C-2C78-46B6-8413-75C76CFAC385} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {980DC558-8B48-4BED-91A7-AC088BAEC0BC} - System32\Tasks\{8F9B489D-D9B1-4A59-B03A-DEC1B8B2B769} => pcalua.exe -a "C:\Remote Programs\Treasures of Montezuma\GPlrLanc.exe" -c -LOpCode 2 /RemoveContent cid=466550;name=The Treasures of Montezuma;dir=C:\Remote Programs\Treasures of Montezuma\;prvid=143;cmdid=1;prvdir=Default
Task: {99AF3794-9409-4A9B-8DC2-6607E8EE540C} - System32\Tasks\{FD07A979-CAB9-4939-A649-9596B701AF82} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {99DE50F5-6551-4FF0-8EC4-5684E0ECF749} - System32\Tasks\{B041002A-7966-4835-B102-0608A25B3FFD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9A201188-6137-42B3-9D53-13F78CAAF841} - System32\Tasks\{98392CCB-998A-4835-9FAB-EA02E49C5D49} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9BB87BC1-F687-4D45-BFC4-89C2DE74158A} - System32\Tasks\{77E01EEE-7419-442B-ACF0-01CE190104ED} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9D211C67-8DF0-4A55-A669-846967D9CC0D} - \Plus-HD-3.8-chromeinstaller No Task File <==== ATTENTION
Task: {9EBB31DB-2CB8-45D2-B250-B4A31C8A12BA} - System32\Tasks\{48039137-58F0-46E0-A594-0BA0FD03FEA1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9FC81B17-83B0-451E-9DD4-0A2F5873D10B} - System32\Tasks\{32557FB8-3CE1-438B-84C8-71088AB0FB3E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A0E0027E-FFD8-4549-80F9-83E70390F0D2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.)
Task: {A1B6F098-F7DF-4734-A8BE-D18A5006C221} - System32\Tasks\{B4E1800A-BC4F-47AF-8AE0-80FAA09D2ADD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A1CC1C1D-8357-4769-A232-F38C97D5A5FA} - System32\Tasks\{A263E82E-6F3D-4F25-BE62-E10980C8E5A0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A24EFC89-A28A-4DDB-AB52-87D88362E68E} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {A38CF3B6-7B19-47D3-88D8-8367BC3F8D04} - System32\Tasks\{7E9C4FDE-7B86-4126-9B95-959445739834} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A5EF7ECF-B068-4083-BA42-3ACAD1BBD9F3} - System32\Tasks\{01A34135-B51E-454C-8555-69BF5A4F0343} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A647A251-EB0B-49B3-A4BB-A80A573BC972} - System32\Tasks\{64C1EBA1-DEEA-4E10-8660-853C6B0D48C6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A6B5F256-D83E-4B33-99E1-CA930E1D581C} - System32\Tasks\{BABAC766-CE18-42A6-9F1C-4A336777FB33} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A98250E7-73D1-457B-8544-B1767EFFB84E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {AA018863-B3E5-42F2-AC83-E7D31261ACBF} - System32\Tasks\{D2DB943F-0B98-4858-9A0A-F99C11849200} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AAF593F3-57F6-4DCE-AA46-58DC15E15CD6} - System32\Tasks\{0A7BB5F8-EABA-46E2-A971-6D1620A6C5C8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ABEF17D1-0E31-472F-A730-18C9C617ECCD} - System32\Tasks\{125A74E5-6E8E-4120-946F-003ED4134863} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ACA3CA40-E209-4D96-A67F-0DBBA76EBCAE} - System32\Tasks\{0D8DF657-1531-4E5E-B8F6-E66745CF2A35} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ACF5DA3E-1B1A-41BD-B036-98B811D92620} - System32\Tasks\{F206FB20-0BEE-4F2C-A445-0A762F9154DF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AD093C38-6E8F-493A-8C92-32265E0FF6DA} - System32\Tasks\{A3B34E44-577B-43BD-97D0-DFB0922A727C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AD89C23C-6A8D-48DA-8798-C7449075AABA} - System32\Tasks\{80121625-6DBB-4857-99DF-4D0B5A7C2706} => C:\Program Files\CCleaner\CCleaner64.exe [2013-10-22] (Piriform Ltd)
Task: {AE7749D3-523A-4CA1-B978-A21EE3EFAFF4} - System32\Tasks\{89DE21C3-6C9B-4358-82E8-DD237784CE53} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AF585E13-72EC-402B-A930-AE9E025BCEEC} - System32\Tasks\{59BF2BCE-42F6-48AB-8484-BD212BE03385} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B02349C9-FB23-4460-BFBF-B427D073546E} - System32\Tasks\{5C9320D6-6857-4EC1-A227-6E693A074FAB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B154686A-6E80-45E1-867A-11CB299EBC6A} - System32\Tasks\{57CFD7D3-C78C-4B3A-8118-6E4ED36123E7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B1DE3F0A-90F3-41E7-83A3-51950EAE2535} - System32\Tasks\{47182963-F0A3-445C-9914-2C7453BBD0EB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B7B820A3-9947-4AB2-9168-6C6BF3E5DF33} - System32\Tasks\DriverBoost-RTMScan => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {BBA1CE1F-60C0-410D-BF74-4805225A0AA2} - System32\Tasks\{414D4777-A752-421D-B61F-645325EB0F8B} => c:\program files (x86)\safari\safari.exe
Task: {BD3EA370-2BE6-4589-97D0-8EA11228EE01} - System32\Tasks\{D9272F83-3446-4E69-A852-446839DBBB34} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BDC64789-955B-412B-AD0F-99EE69309400} - System32\Tasks\{BC499BDE-48D4-4029-91DA-00E4659978B0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BF89F7D2-3C73-45B2-8CCD-75FE4B111B42} - System32\Tasks\{75E06E16-E411-4D72-9C65-758C485ABC00} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C009CE10-4EC1-4110-AEA2-F6A6F4B07BA2} - System32\Tasks\{6833CD72-C7FC-4777-B901-172FEEE7EF59} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C0ACC909-BAE7-40D6-A56E-9BE7042A3070} - System32\Tasks\{449BBEC9-28AF-41F8-BA48-2635EB2E4991} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C1520CF9-02D2-49AF-B9DD-95DD21E7AD50} - System32\Tasks\{77FD761C-5550-4839-888F-4897496C97B1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C1E3BED5-5487-4EF9-B23C-E7C197049DEC} - System32\Tasks\{0583033E-3DFF-4C91-AD68-CFB0C2B27CCD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C22D7E55-CB2A-41A2-B9DB-5D88416D89BB} - System32\Tasks\{5CB83CBF-B9E8-435E-967A-2D271E8EB5E5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C5F63F5B-D72D-417B-A2D6-E60EB71D35BB} - System32\Tasks\{C05AC38A-2C94-4831-810D-188A5B0B2066} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C824CA6F-7A19-4150-A034-C680F23EADF3} - System32\Tasks\{232FBD6C-6F2B-4B1F-A6EA-5B108011083A} => c:\program files (x86)\safari\safari.exe
Task: {CA05749E-0FE8-47E5-8A21-4C7584528BBA} - System32\Tasks\{1565FF7E-97EF-479C-A05D-11082443CC3F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CAE8B42D-25C6-411E-9073-445695D9B37B} - System32\Tasks\{99262E8A-611E-453C-BF8D-C0B8E9A99002} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CBEA48BC-85C5-43FE-9C3D-01B7FF90E3D3} - System32\Tasks\DriverBoost-RTMRules => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {CC70AAB9-AC72-4C85-94BE-31835FB1A627} - System32\Tasks\{C533EFD3-A88A-484E-9DC8-82BEF0090E19} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CD4A6A8D-7302-4D78-92CD-FB97E48A8EFA} - System32\Tasks\{73EFDD38-0D6A-4ECA-821A-7F8155A05632} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CED8CC34-2F7D-4B64-BA96-E6DC297D5DE4} - System32\Tasks\{D014E918-3C20-4CC6-A8F2-73207B64447D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D1855E84-1625-4FA5-82B5-E0F13A0BD3A4} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
Task: {D226A7EE-F274-4505-9942-D920DE18702B} - System32\Tasks\{87391B9C-F87B-4BD9-9DBB-F0C655B507F6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D3618EDB-8057-4A42-B3BD-C17B8821C235} - System32\Tasks\{C1AD9A0B-B469-4F0C-8C78-B4EF55F679DA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D38ECAF7-78FB-4928-BD15-19AE125AC2D2} - System32\Tasks\{050D4E08-07C4-4E5D-B6F3-923C90922E0B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D40500B9-4980-4D4C-8AB4-98409115CF59} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {D63E8610-0A2C-4A34-BDAF-8630862656FC} - System32\Tasks\{AA95DFF2-4B48-4B99-BEDA-9BF408BCBD90} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D65733E0-0443-42A4-A3D6-E147501C0A4E} - System32\Tasks\{A5B25836-EFE6-4B45-B2DF-74F0420BA7FE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D6A40F1E-96F3-4B81-B5F7-558E0AE71DFB} - System32\Tasks\{27877D47-FD6F-450A-A6BD-28F9A2C2D066} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsMain
Task: {D7532BE0-4CDA-413B-8F19-F4B02CFA12D1} - System32\Tasks\{50D471B7-9780-46E0-8CA8-1B9460E57527} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D7E7CAAA-B4AA-4926-92BE-9D259FA44FA3} - System32\Tasks\{D8733CFA-D44D-4CD9-9F49-E2BFF57F7F34} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DCAC8567-405E-4B6B-9452-B61E4DC8F429} - System32\Tasks\DriverBoost-RTMUpdater => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {DFA31178-B004-48FE-95AD-7F7C00B494D9} - System32\Tasks\{D5E6F391-39BD-4B64-8856-F82B8E70F685} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E1362F3A-EE8B-4972-9857-3EB6991260E3} - System32\Tasks\{583E0534-C834-4838-92A0-912F668F46EF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E340B54D-9B92-45D3-9CBE-05151E3CC1BD} - System32\Tasks\{BE11B904-8855-4174-9935-CB52241EC8A3} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E45D7107-F65F-4679-8E3E-4BB47199828B} - System32\Tasks\{8958FADC-3BF3-454D-A01E-B8E3A510D8FB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E534794A-71A9-4A48-9843-D02AF47FFAF0} - System32\Tasks\{5CCF6BD9-6DFD-4615-8B50-33EA08799F0D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E81CA374-1F16-4134-86E1-ADBC2F2FE4DD} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {E8B6073A-2A1E-4550-BBBA-536BC7BB6D88} - System32\Tasks\{ADB62009-EA52-4D38-A399-AF85D60BC69A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EB4E001B-AF80-4BB1-BBBA-9C2FC434107E} - System32\Tasks\{E6F8B192-69A5-4DF9-82C0-807663C4252A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EDC2FD63-7761-423B-8CDC-EE7F12EFCA6D} - System32\Tasks\{683CEF6B-00C9-4265-884E-BF6948AB6084} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EE6CE28C-93C4-495D-8A05-678FA0CBA6CC} - System32\Tasks\{1BC9D0FC-5B87-4D10-87D5-2097EFE89838} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EE9679C8-16C0-43F9-B5E2-C7C71CA1D5C3} - System32\Tasks\{CD4F3AC0-6489-4A0F-BC4D-E2899BC6F26E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EECA02EC-5293-4696-89C7-3956F1E2CEB9} - System32\Tasks\{5D23B130-AC64-410A-B1FD-B30DA6DA57DE} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F0C6C882-41B6-400B-83A3-6432AF1DD90C} - System32\Tasks\{D2E50FF1-52A5-4950-A4EC-692640EDEDD5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F2DC4186-F6FA-4F6C-AF35-0EC34A44DA4B} - System32\Tasks\{1FF40C7A-CED3-44FD-904A-5E6875844C00} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3A16C7F-49B8-4CDE-A372-77F68E4D01AC} - System32\Tasks\{F8717B3E-B886-497F-B55F-E80515610532} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F5235FFA-0221-4457-BC05-D5AE081B0658} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: {F58C7E37-B885-4A33-B7A1-70ED1A1853EF} - System32\Tasks\{B72079E5-98D7-428C-9822-7F16BE60EE64} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F75EA8A8-12BC-4A85-928A-5BEC9C3DDC6B} - System32\Tasks\{BC4F59E5-EC5F-49F4-AA41-5951BAD0B276} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F871A8BB-7AB8-4D1D-BD09-BA7CA86093A7} - System32\Tasks\{01B4DBBA-2081-42D3-A455-0C8DBB44FEDA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F9F1047F-A3A7-44EF-957D-ABA1EE49E92A} - System32\Tasks\{892DF552-B4C0-40C5-87C8-BA0853C0EC50} => c:\program files (x86)\safari\safari.exe
Task: {FC1581AD-7DD3-430E-B83F-85C4C1C198FB} - System32\Tasks\{8C4BBAEF-5649-4E4B-8202-D3F6B4A4327E} => pcalua.exe -a "C:\Remote Programs\Jewel Quest 3\GPlrLanc.exe" -c -LOpCode 2 /RemoveContent cid=642550;name=Jewel Quest 3;dir=C:\Remote Programs\Jewel Quest 3\;prvid=143;cmdid=1;prvdir=Default
Task: {FF82F985-621B-4B3E-9C64-3D6FB83AFF3E} - System32\Tasks\{3A5F338E-E1CA-4F29-B906-BED9C9C4743D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-05-06 10:39 - 2011-10-04 21:43 - 00087552 _____ () C:\Windows\System32\custmon64i.dll
2012-07-04 15:54 - 2010-10-28 18:04 - 06619256 _____ () C:\Program Files\ipswitch\WS_FTP 12\res0407.dll
2013-09-19 08:55 - 2013-09-19 08:55 - 00703880 _____ () C:\Program Files (x86)\DriverBoost\DriverBoost\ThemePack.DriverBoost.dll
2013-09-19 08:31 - 2013-09-19 08:31 - 00412064 _____ () C:\Program Files (x86)\DriverBoost\DriverBoost\Agent.Communication.XmlSerializers.dll
2012-12-10 20:10 - 2013-01-22 22:09 - 00031232 _____ () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updaterinfo.exe
2014-12-03 13:06 - 2014-12-03 12:59 - 00535160 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2012-07-04 15:54 - 2010-10-28 17:52 - 00948496 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\LIBEAY32.dll
2012-07-04 15:54 - 2010-10-28 17:52 - 00153360 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\SSLEAY32.dll
2014-12-03 13:04 - 2014-12-03 12:57 - 01358456 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libglesv2.dll
2014-12-03 13:04 - 2014-12-03 12:57 - 00219256 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libegl.dll
2014-12-03 13:06 - 2014-12-03 12:59 - 09312888 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\pdf.dll
2014-12-03 13:01 - 2014-12-03 12:57 - 00991352 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\ffmpegsumo.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:07BF512B
AlternateDataStreams: C:\ProgramData\TEMP:18C53152
AlternateDataStreams: C:\ProgramData\TEMP:29CD416B
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:616D21DE
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
AlternateDataStreams: C:\ProgramData\TEMP:B96C57D4

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: ARP64 => 2
MSCONFIG\Services: EpsonBidirectionalService => 2
MSCONFIG\Services: GFilterSvc => 2
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: IBUpdaterService => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\Services: Video Performer Manager => 2
MSCONFIG\Services: WajamUpdater => 2
MSCONFIG\Services: Web Assistant Updater => 2
MSCONFIG\Services: WebOptimizer => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
MSCONFIG\startupreg: Browser companion helper => C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=ibgfbdggapddbjjbopabhlhianklajie
MSCONFIG\startupreg: DataMgr => "C:\Users\Bea\AppData\Roaming\DataMgr\DataMgr.exe"
MSCONFIG\startupreg: Driver Pro => C:\Program Files (x86)\Driver Pro\DPLauncher.exe
MSCONFIG\startupreg: DriverBoost => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe /applicationMode:systemTray /showWelcome:false
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: Epson Stylus SX235(Netzwerk) => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Bea\AppData\Local\Temp\E_S695.tmp" /EF "HKCU"
MSCONFIG\startupreg: EPSON SX235 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Bea\AppData\Local\Temp\E_S5DA.tmp" /EF "HKCU"
MSCONFIG\startupreg: Exetender => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
MSCONFIG\startupreg: GoogleChromeAutoLaunch_140299A73DDFBEE682C1057A74DE4DC2 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: HF_G_Jul => "C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe"  /DoAction
MSCONFIG\startupreg: Iminent => C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
MSCONFIG\startupreg: IminentMessenger => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
MSCONFIG\startupreg: Intermediate => "C:\Users\Bea\AppData\Roaming\Intermediate\Intermediate.exe"
MSCONFIG\startupreg: Ocs_SM => C:\Users\Bea\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
MSCONFIG\startupreg: ooVoo.exe => C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
MSCONFIG\startupreg: ROC_roc_dec12 => "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
MSCONFIG\startupreg: ROC_ROC_JULY_P1 => "C:\Program Files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
MSCONFIG\startupreg: SCheck => "C:\Users\Bea\AppData\Roaming\SCheck\SCheck.exe" check 
MSCONFIG\startupreg: SDP => C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto 
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
MSCONFIG\startupreg: SSync => "C:\Users\Bea\AppData\Roaming\SSync\SSync.exe"
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-2003399624-2568068236-90850429-500 - Administrator - Disabled)
Bea (S-1-5-21-2003399624-2568068236-90850429-1001 - Administrator - Enabled) => C:\Users\Bea
Gast (S-1-5-21-2003399624-2568068236-90850429-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2003399624-2568068236-90850429-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: X5XSEx
Description: X5XSEx
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: X5XSEx
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (11/13/2014 10:14:00 AM) (Source: Application Hang) (EventID: 1002) (User: )

cosinus · 15.12.2014, 11:37

Was ist mit meiner Frage nach bisherigen Virenfunden?

Beatrica · 15.12.2014, 22:07

Ich hatte keine Virenfunde aktuell. Alles was vorher (im Oktober ) gefunden wurde ist hier zu sehen .

hxxp://www.trojaner-board.de/159811-windows-7-laedt-ungewoehnlich-lange-beim-srollen-haengt-seite.html

cosinus · 16.12.2014, 01:22

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Beatrica · 16.12.2014, 12:43

AdwCleaner Logfile:

Code:

ATTFilter

# AdwCleaner v4.105 - Bericht erstellt am 16/12/2014 um 12:06:25
# Aktualisiert 08/12/2014 von Xplode
# Database : 2014-12-13.4 [Live]
# Betriebssystem : Windows 7 Professional Service Pack 1 (64 bits)
# Benutzername : Bea - BEA-PC
# Gestartet von : C:\Users\Bea\Desktop\AdwCleaner_4.105.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : YahooAUService
Dienst Gelöscht : c2cautoupdatesvc
Dienst Gelöscht : c2cpnrsvc

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\NCH Software
Ordner Gelöscht : C:\ProgramData\Yahoo! Companion
Ordner Gelöscht : C:\Program Files (x86)\NCH Software
Ordner Gelöscht : C:\Users\Bea\AppData\LocalLow\Yahoo! Companion
Ordner Gelöscht : C:\Users\Bea\AppData\Roaming\NCH Software
Ordner Gelöscht : C:\Users\Bea\AppData\Roaming\SuperEasy Software

***** [ Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v32.0.3 (x86 de)


-\\ Google Chrome v37.0.2062.124

[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=49&cc=&mi=3e0460080000000000000024d24c0ae8&toi=16025
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=ds&q={searchTerms}&installDate=13/10/2013
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=de&q={searchTerms}&gu=18f257be14c346b895e9d54119176366&tu=10G90006A1B000c&sku=&tstsId=&ver=&
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=stonicrio&chnl=stonicrio&cd=2XzuyEtN2Y1L1QzutDtDtByE0DtByE0CtD0A0EzzyCtDtDzztN0D0Tzu0CtAtAtCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=151563121
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4112_8&babsrc=SP_clro&mntrId=3e0460080000000000000024d24c0ae8
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.delta-search.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E64656C74612D7365617263682E636F6D2F3F713D7B7365617263685465726D737D2661666649443D3131363938392674743D3237313231325F79685F353231325F34266261627372633D53505F7373266D6E747249643D3365303436303038303030303030303030303030303032346432346330616538&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.delta-search.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E64656C74612D7365617263682E636F6D2F3F713D7B7365617263685465726D737D2661666649443D3131363938392674743D3237313231325F79685F353231325F34266261627372633D53505F7373266D6E747249643D3365303436303038303030303030303030303030303032346432346330616538&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://home.allgameshome.com.anonymize-me.de/?anonymto=687474703A2F2F686F6D652E616C6C67616D6573686F6D652E636F6D2F726573756C74732E7068703F63617465676F72793D77656226733D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119828&babsrc=SP_ss&mntrId=3E040024D24C0AE8
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www2.inbox.com.anonymize-me.de/?anonymto=687474703A2F2F777777322E696E626F782E636F6D2F7365617263682F646973706174636865722E617370783F74703D627326716B773D7B7365617263685465726D737D26746269643D3830373732266C6E673D6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=53C7A4CF-47CF-4369-AFF7-75B5756F85F6&n=77fce50e&ind=2013062414&p=GRchr999YYde&si=XXXXXXXXXX&searchfor={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=53C7A4CF-47CF-4369-AFF7-75B5756F85F6&n=77fce50e&ind=2013062414&p=GRchr999YYde&si=XXXXXXXXXX&searchfor={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://nortonsafe.search.ask.com.anonymize-me.de/?anonymto=687474703A2F2F6E6F72746F6E736166652E7365617263682E61736B2E636F6D2F7765623F713D7B5345415243485445524D537D266F3D3135353237267072743D3336302663686E3D6F302667656F3D4445267665723D3230266C6F63616C653D64655F4445267470723D313131&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://nortonsafe.search.ask.com.anonymize-me.de/?anonymto=687474703A2F2F6E6F72746F6E736166652E7365617263682E61736B2E636F6D2F7765623F713D7B5345415243485445524D537D266F3D3135353237267072743D3336302663686E3D6F302667656F3D4445267665723D3230266C6F63616C653D64655F4445267470723D313131&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7377656574696D2E636F6D2F7365617263682E6173703F7372633D362673743D313726713D7B7365617263685465726D737D2662617269643D7B34383938394543332D344636352D313145312D413735312D3030314533334146393142377D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7377656574696D2E636F6D2F7365617263682E6173703F7372633D362673743D313726713D7B7365617263685465726D737D2662617269643D7B34383938394543332D344636352D313145312D413735312D3030314533334146393142377D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&tt=010412_crm&babsrc=SP_crm
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&tt=010412_crm&babsrc=SP_crm
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.search.yahoo.com.anonymize-me.de/?anonymto=687474703A2F2F64652E7365617263682E7961686F6F2E636F6D2F7365617263683F66723D6368722D677265656E747265655F69652665693D7574662D3826696C633D313226747970653D36383537343926703D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E67626F786170702E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E67626F786170702E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.fbdownloader.com/search.php?channel=sfde206&q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.fbdownloader.com/search.php?channel=sfde206&q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb187?a=(6OyFdsAYss)&search={searchTerms}&i=26
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb187?a=(6OyFdsAYss)&search={searchTerms}&i=26
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&st=17&q={searchTerms}&barid={48989EC3-4F65-11E1-A751-001E33AF91B7}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com.anonymize-me.de/?anonymto=687474703A2F2F73656172636866756E6D6F6F64732E636F6D2F726573756C74732E7068703F663D3426713D7B7365617263685465726D737D26613D73746F6E696372696F2663686E6C3D73746F6E696372696F2663643D32587A757945744E3259314C31517A75744474447442794530447442794530437444304130457A7A7943744474447A7A744E304430547A753043744174417443744E314C32587A757442744674427446744474467441794579452663723D313531353633313231&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com.anonymize-me.de/?anonymto=687474703A2F2F73656172636866756E6D6F6F64732E636F6D2F726573756C74732E7068703F663D3426713D7B7365617263685465726D737D26613D73746F6E696372696F2663686E6C3D73746F6E696372696F2663643D32587A757945744E3259314C31517A75744474447442794530447442794530437444304130457A7A7943744474447A7A744E304430547A753043744174417443744E314C32587A757442744674427446744474467441794579452663723D313531353633313231&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN14073257252783829&ctid=CT3317892&UM=2
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN14073257252783829&ctid=CT3317892&UM=2
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch

-\\ Opera v26.0.1656.32

[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.softonic.com/MOY00009/tb_v1?q={searchTerms}&SearchSource=49&cc=&mi=3e0460080000000000000024d24c0ae8&toi=16025
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494538535243&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=ds&q={searchTerms}&installDate=13/10/2013
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.zonealarm.com/search?src=sp&tbid=base2013&Lan=de&q={searchTerms}&gu=18f257be14c346b895e9d54119176366&tu=10G90006A1B000c&sku=&tstsId=&ver=&
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com/results.php?f=4&q={searchTerms}&a=stonicrio&chnl=stonicrio&cd=2XzuyEtN2Y1L1QzutDtDtByE0DtByE0CtD0A0EzzyCtDtDzztN0D0Tzu0CtAtAtCtN1L2XzutBtFtBtFtDtFtAyEyE&cr=151563121
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.chatzum.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E636861747A756D2E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.claro-search.com/?q={searchTerms}&affID=114508&tt=4112_8&babsrc=SP_clro&mntrId=3e0460080000000000000024d24c0ae8
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.delta-search.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E64656C74612D7365617263682E636F6D2F3F713D7B7365617263685465726D737D2661666649443D3131363938392674743D3237313231325F79685F353231325F34266261627372633D53505F7373266D6E747249643D3365303436303038303030303030303030303030303032346432346330616538&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.delta-search.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E64656C74612D7365617263682E636F6D2F3F713D7B7365617263685465726D737D2661666649443D3131363938392674743D3237313231325F79685F353231325F34266261627372633D53505F7373266D6E747249643D3365303436303038303030303030303030303030303032346432346330616538&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://home.allgameshome.com.anonymize-me.de/?anonymto=687474703A2F2F686F6D652E616C6C67616D6573686F6D652E636F6D2F726573756C74732E7068703F63617465676F72793D77656226733D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www2.delta-search.com/?q={searchTerms}&affID=119828&babsrc=SP_ss&mntrId=3E040024D24C0AE8
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www2.inbox.com.anonymize-me.de/?anonymto=687474703A2F2F777777322E696E626F782E636F6D2F7365617263682F646973706174636865722E617370783F74703D627326716B773D7B7365617263685465726D737D26746269643D3830373732266C6E673D6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E737461727473656172636865722E636F6D2F3F713D7B7365617263685465726D737D267372633D4945&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=53C7A4CF-47CF-4369-AFF7-75B5756F85F6&n=77fce50e&ind=2013062414&p=GRchr999YYde&si=XXXXXXXXXX&searchfor={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=53C7A4CF-47CF-4369-AFF7-75B5756F85F6&n=77fce50e&ind=2013062414&p=GRchr999YYde&si=XXXXXXXXXX&searchfor={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://nortonsafe.search.ask.com.anonymize-me.de/?anonymto=687474703A2F2F6E6F72746F6E736166652E7365617263682E61736B2E636F6D2F7765623F713D7B5345415243485445524D537D266F3D3135353237267072743D3336302663686E3D6F302667656F3D4445267665723D3230266C6F63616C653D64655F4445267470723D313131&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://nortonsafe.search.ask.com.anonymize-me.de/?anonymto=687474703A2F2F6E6F72746F6E736166652E7365617263682E61736B2E636F6D2F7765623F713D7B5345415243485445524D537D266F3D3135353237267072743D3336302663686E3D6F302667656F3D4445267665723D3230266C6F63616C653D64655F4445267470723D313131&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7377656574696D2E636F6D2F7365617263682E6173703F7372633D362673743D313726713D7B7365617263685465726D737D2662617269643D7B34383938394543332D344636352D313145312D413735312D3030314533334146393142377D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E7377656574696D2E636F6D2F7365617263682E6173703F7372633D362673743D313726713D7B7365617263685465726D737D2662617269643D7B34383938394543332D344636352D313145312D413735312D3030314533334146393142377D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&tt=010412_crm&babsrc=SP_crm
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&tt=010412_crm&babsrc=SP_crm
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.search.yahoo.com.anonymize-me.de/?anonymto=687474703A2F2F64652E7365617263682E7961686F6F2E636F6D2F7365617263683F66723D6368722D677265656E747265655F69652665693D7574662D3826696C633D313226747970653D36383537343926703D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E67626F786170702E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.gboxapp.com.anonymize-me.de/?anonymto=687474703A2F2F7365617263682E67626F786170702E636F6D2F3F713D7B7365617263685465726D737D&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.fbdownloader.com/search.php?channel=sfde206&q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com.anonymize-me.de/?anonymto=687474703A2F2F6D7973746172742E696E63726564696261722E636F6D2F6D623138373F613D28364F794664734159737329267365617263683D7B7365617263685465726D737D26693D3236&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.fbdownloader.com/search.php?channel=sfde206&q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.google.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E676F6F676C652E636F6D2F7365617263683F713D7B7365617263&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb187?a=(6OyFdsAYss)&search={searchTerms}&i=26
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://mystart.incredibar.com/mb187?a=(6OyFdsAYss)&search={searchTerms}&i=26
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&st=17&q={searchTerms}&barid={48989EC3-4F65-11E1-A751-001E33AF91B7}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com.anonymize-me.de/?anonymto=687474703A2F2F73656172636866756E6D6F6F64732E636F6D2F726573756C74732E7068703F663D3426713D7B7365617263685465726D737D26613D73746F6E696372696F2663686E6C3D73746F6E696372696F2663643D32587A757945744E3259314C31517A75744474447442794530447442794530437444304130457A7A7943744474447A7A744E304430547A753043744174417443744E314C32587A757442744674427446744474467441794579452663723D313531353633313231&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://searchfunmoods.com.anonymize-me.de/?anonymto=687474703A2F2F73656172636866756E6D6F6F64732E636F6D2F726573756C74732E7068703F663D3426713D7B7365617263685465726D737D26613D73746F6E696372696F2663686E6C3D73746F6E696372696F2663643D32587A757945744E3259314C31517A75744474447442794530447442794530437444304130457A7A7943744474447A7A744E304430547A753043744174417443744E314C32587A757442744674427446744474467441794579452663723D313531353633313231&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=8aec3c56-eda0-4a6f-a246-e9ea87f284e0&pid=freewarede&mode=bounce&k=0
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://www.startsearcher.com/?q={searchTerms}
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN14073257252783829&ctid=CT3317892&UM=2
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&CUI=UN14073257252783829&ctid=CT3317892&UM=2
[C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Gelöscht [Search Provider] : hxxp://isearch.glarysoft.com/?q={searchTerms}&src=gcsearch
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : aaipilfmheplbcghignccoiiebekkdhe
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : elchiiiejkobdbblfejjkbphbddgmljf
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : ffhfoagmjcnkolneahbpagjcjjaeofbg
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : hjghiofiijcepdnocbgefbdlbckjfheg
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : iklgpchfbohgmghgfagediakopecfmbm
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : kfgaibfbmkjgmimhbbaikfnpkkjkpoan
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : lmnbobhffedhdhfpcjkjphcfpeeiocdn
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : kjpifmjicccpbkfjdkehimhgklfkbanh
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : hoidflomjnnnbiemmkjdjkkialmhbago
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : ekpibplnnkfdcafdpoekhoffegcajene
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : ipljmghelflfikejmgkmlmpjmehfjodc
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : ejddjnilmdncjilbfjgameihlklfpohp
[C:\Users\Bea\AppData\Roaming\Opera Software\Opera Stable\preferences] - Gelöscht [Extension] : eagomcfjiefffhpaejnlpjccikpipdoe

*************************

AdwCleaner[R0].txt - [91613 octets] - [03/12/2013 14:35:19]
AdwCleaner[R10].txt - [2002 octets] - [02/01/2014 15:52:33]
AdwCleaner[R11].txt - [3487 octets] - [06/01/2014 11:36:49]
AdwCleaner[R12].txt - [5275 octets] - [04/04/2014 18:34:07]
AdwCleaner[R13].txt - [7238 octets] - [19/10/2014 16:03:30]
AdwCleaner[R14].txt - [7299 octets] - [19/10/2014 16:43:34]
AdwCleaner[R15].txt - [7360 octets] - [19/10/2014 16:46:22]
AdwCleaner[R16].txt - [21656 octets] - [16/12/2014 12:03:35]
AdwCleaner[R1].txt - [2876 octets] - [03/12/2013 15:10:58]
AdwCleaner[R2].txt - [2264 octets] - [03/12/2013 15:20:23]
AdwCleaner[R3].txt - [2764 octets] - [07/12/2013 10:46:58]
AdwCleaner[R4].txt - [5402 octets] - [07/12/2013 10:52:24]
AdwCleaner[R5].txt - [2545 octets] - [07/12/2013 11:00:31]
AdwCleaner[R6].txt - [2054 octets] - [21/12/2013 19:04:46]
AdwCleaner[R7].txt - [1636 octets] - [21/12/2013 19:13:26]
AdwCleaner[R8].txt - [2007 octets] - [02/01/2014 09:41:52]
AdwCleaner[R9].txt - [1881 octets] - [02/01/2014 10:03:32]
AdwCleaner[S0].txt - [84689 octets] - [03/12/2013 14:37:50]
AdwCleaner[S10].txt - [5268 octets] - [04/04/2014 18:40:32]
AdwCleaner[S11].txt - [7096 octets] - [19/10/2014 17:56:23]
AdwCleaner[S12].txt - [36585 octets] - [16/12/2014 12:06:25]
AdwCleaner[S1].txt - [2637 octets] - [03/12/2013 15:12:41]
AdwCleaner[S2].txt - [2025 octets] - [03/12/2013 15:39:06]
AdwCleaner[S3].txt - [4062 octets] - [21/12/2013 08:38:57]
AdwCleaner[S4].txt - [0 octets] - [21/12/2013 19:05:39]
AdwCleaner[S5].txt - [1697 octets] - [21/12/2013 19:15:07]
AdwCleaner[S6].txt - [2074 octets] - [02/01/2014 09:59:16]
AdwCleaner[S7].txt - [1942 octets] - [02/01/2014 10:06:11]
AdwCleaner[S8].txt - [2063 octets] - [02/01/2014 16:01:04]
AdwCleaner[S9].txt - [3207 octets] - [06/01/2014 11:40:52]

########## EOF - C:\AdwCleaner\AdwCleaner[S12].txt - [37184 octets] ##########

--- --- ---JRT Logfile:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.4.0 (11.29.2014:1)
OS: Windows 7 Professional x64
Ran by Bea on 16.12.2014 at 12:20:05,97
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Bea\appdata\local\pc_drivers_headquarters"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16.12.2014 at 12:26:08,39
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--- --- ---

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-12-2014 01
Ran by Bea (administrator) on BEA-PC on 16-12-2014 12:39:56
Running from C:\Users\Bea\Desktop
Loaded Profile: Bea (Available profiles: Bea & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE
(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
() C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Farbar) C:\Users\Bea\Desktop\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-25] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520 2014-07-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE [283232 2014-01-16] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3986288 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google+ Auto Backup] => C:\Users\Bea\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3701064 2014-03-11] (Google Inc.)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google Update] => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-10-11] (Google Inc.)
Startup: C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updaterinfo.exe ()
BootExecute: sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2003399624-2568068236-90850429-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2003399624-2568068236-90850429-1001] => localhost:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://google.com/
URLSearchHook: HKLM-x32 - Default Value = {3B81079D-2AC9-425f-A494-A1C7D93AFA3C}
URLSearchHook: HKLM-x32 - (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {18834523-2FB0-49DB-A5F4-BD350E710BC3} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {26D76483-E15E-4132-970B-33C8714389CC} URL = https://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {79B22172-20EE-4ACB-9A89-C6F9E1271063} URL = https://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie11
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\.DEFAULT -> No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
Toolbar: HKU\.DEFAULT -> No Name - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @exent.com/npExentCtl,version=7.0.0.0 -> C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\searchplugins\allgameshome.xml
FF Extension: Adblock Plus - C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-23]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://zattoo.com/#phoenix", "hxxp://google/", "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=hp&installDate=13/10/2013", "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll No File
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
CHR Profile: C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-02]
CHR Extension: (Google Wallet) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
U4 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-19] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-10-25] (Synaptics Incorporated)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 X5XSEx; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 12:39 - 2014-12-16 12:39 - 02119168 _____ (Farbar) C:\Users\Bea\Desktop\FRST64 (1).exe
2014-12-16 12:26 - 2014-12-16 12:26 - 00000710 _____ () C:\Users\Bea\Desktop\JRT.txt
2014-12-16 12:18 - 2014-12-16 12:18 - 01707646 _____ (Thisisu) C:\Users\Bea\Desktop\JRT.exe
2014-12-16 12:09 - 2014-12-16 12:09 - 00000314 _____ () C:\Windows\PFRO.log
2014-12-16 11:51 - 2014-12-16 11:51 - 02166272 _____ () C:\Users\Bea\Desktop\AdwCleaner_4.105.exe
2014-12-16 10:50 - 2014-12-16 12:09 - 00000112 _____ () C:\Windows\setupact.log
2014-12-16 10:50 - 2014-12-16 10:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-15 10:04 - 2014-12-15 10:35 - 00079227 _____ () C:\Users\Bea\Desktop\Addition.txt
2014-12-15 10:02 - 2014-12-16 12:39 - 00019596 _____ () C:\Users\Bea\Desktop\FRST.txt
2014-12-15 09:56 - 2014-12-15 09:56 - 02119168 _____ (Farbar) C:\Users\Bea\Downloads\FRST64 (1).exe
2014-12-12 08:03 - 2014-12-12 08:03 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:26 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:26 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 20:57 - 2014-12-10 20:57 - 03248489 _____ () C:\Users\Bea\Downloads\2147493270.zip
2014-12-10 20:52 - 2014-12-10 20:52 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (2).zip
2014-12-10 20:51 - 2014-12-10 20:51 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (1).zip
2014-12-10 20:50 - 2014-12-10 20:50 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951.zip
2014-12-10 20:50 - 2014-12-10 20:50 - 00000000 ____D () C:\Users\Bea\Downloads\Texturen
2014-12-10 20:24 - 2014-12-10 21:34 - 00000000 ____D () C:\Users\Bea\Desktop\Texturen
2014-12-10 17:42 - 2014-12-10 17:42 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih (1).exe
2014-12-10 17:39 - 2014-12-10 17:39 - 00001148 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00001136 _____ () C:\Users\Public\Desktop\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\Documents\Mixpad Projects
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:38 - 2014-12-10 17:38 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2014-12-10 17:38 - 2014-12-10 17:38 - 00001140 _____ () C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2014-12-10 17:26 - 2014-12-10 17:26 - 00949784 _____ (NCH Software) C:\Users\Bea\Downloads\wpsetup.exe
2014-12-10 16:02 - 2014-12-10 16:02 - 00232145 _____ () C:\Users\Bea\Downloads\1286818485.svg
2014-12-10 15:57 - 2014-12-10 15:57 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (2).svg
2014-12-10 15:52 - 2014-12-10 15:53 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (1).svg
2014-12-10 15:51 - 2014-12-10 15:51 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope.svg
2014-12-10 15:04 - 2014-12-10 15:04 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551 (1).svg
2014-12-10 15:03 - 2014-12-10 15:03 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551.svg
2014-12-10 13:03 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 13:03 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 13:03 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 13:03 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 13:03 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 13:03 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 13:03 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 13:03 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 13:03 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 13:03 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 13:03 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 13:03 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 13:03 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 13:03 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 13:03 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 13:03 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 13:03 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 13:03 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 13:03 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 13:03 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 13:03 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 13:03 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 13:00 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 13:00 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 12:59 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 12:57 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 12:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 12:57 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 12:57 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 12:57 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 12:57 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 11:07 - 2014-12-10 11:07 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih.exe
2014-12-02 20:27 - 2014-12-02 20:50 - 00000000 ____D () C:\Users\Bea\Desktop\WASSER DES LEBENS
2014-12-02 15:12 - 2014-12-02 15:15 - 00000000 ____D () C:\Users\Bea\Desktop\BÄR
2014-11-27 10:57 - 2014-12-16 12:09 - 00003332 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-27 10:57 - 2014-12-16 12:09 - 00003194 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-23 17:39 - 2014-11-23 17:39 - 320911980 _____ () C:\Windows\MEMORY.DMP
2014-11-22 18:01 - 2014-11-22 18:01 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-22 18:01 - 2014-11-22 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-19 13:29 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 13:29 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 22:08 - 2014-11-18 22:12 - 00000000 ____D () C:\Users\Bea\Desktop\wollthread
2014-11-18 13:42 - 2014-11-19 17:34 - 00000000 ____D () C:\Users\Bea\Desktop\JOSIE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 12:40 - 2013-12-13 16:04 - 00000000 ____D () C:\FRST
2014-12-16 12:27 - 2012-02-02 20:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-16 12:23 - 2014-10-11 18:57 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job
2014-12-16 12:18 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-16 12:18 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-16 12:09 - 2012-02-02 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-16 12:09 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-16 12:08 - 2013-04-20 13:10 - 01603698 _____ () C:\Windows\WindowsUpdate.log
2014-12-16 12:07 - 2013-12-03 14:35 - 00000000 ____D () C:\AdwCleaner
2014-12-16 11:58 - 2012-04-16 06:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-15 22:02 - 2014-10-11 18:56 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job
2014-12-15 21:56 - 2014-05-15 20:03 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C682669D-5F76-48D9-BE04-BB579627B5F2}
2014-12-15 21:55 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-12-15 09:39 - 2012-03-01 16:32 - 00000000 ____D () C:\Windows\Minidump
2014-12-13 20:45 - 2012-04-08 16:52 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Skype
2014-12-13 13:53 - 2014-01-14 20:40 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-12 09:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 08:03 - 2014-05-06 23:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 22:39 - 2013-08-10 21:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:28 - 2012-02-05 08:42 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 15:05 - 2013-04-10 22:17 - 00867840 ___SH () C:\Users\Bea\Downloads\Thumbs.db
2014-12-04 08:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-03 16:54 - 2014-11-04 12:01 - 00000000 ____D () C:\Users\Bea\Desktop\Neues Forum
2014-12-03 13:19 - 2014-08-23 17:19 - 00000000 ____D () C:\Users\Bea\Desktop\ROSENGARTEN
2014-12-03 13:07 - 2013-04-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-03 13:06 - 2014-10-27 19:55 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1414436089
2014-11-30 14:51 - 2014-05-06 20:05 - 00000000 ____D () C:\Users\Bea\Desktop\STRÄUßE
2014-11-26 17:48 - 2012-04-16 06:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 17:48 - 2012-04-16 06:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 17:48 - 2012-02-02 20:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 20:17 - 2014-11-04 15:11 - 00000000 ____D () C:\Users\Bea\Desktop\Taschen
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ____D () C:\ProgramData\Skype
2014-11-21 06:28 - 2014-10-29 21:32 - 00000000 ____D () C:\Users\Bea\Desktop\WILDROSEN
2014-11-21 06:21 - 2014-05-04 09:13 - 00000000 ____D () C:\Users\Bea\Desktop\SONNEN
2014-11-19 14:51 - 2014-11-01 22:19 - 00000000 ____D () C:\Users\Bea\Desktop\SNIPPINGTOOL
2014-11-18 19:59 - 2014-10-27 19:55 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 26.lnk
2014-11-17 20:18 - 2014-10-11 18:57 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA
2014-11-17 20:18 - 2014-10-11 18:57 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core

Some content of TEMP:
====================
C:\Users\Bea\AppData\Local\Temp\avgnt.exe
C:\Users\Bea\AppData\Local\Temp\Quarantine.exe
C:\Users\Bea\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-15 11:57

==================== End Of Log ============================

--- --- ---

--- --- ---

Beatrica · 16.12.2014, 12:47

Code:

ATTFilter

 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 14-12-2014 01
Ran by Bea at 2014-12-16 12:45:54
Running from C:\Users\Bea\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adblock Plus für IE (32-Bit- und 64-Bit) (HKLM\...\{123A22CB-6D84-4135-A71F-886C9119E996}) (Version: 99.9 - Eyeo GmbH)
Adobe Flash Player 15 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 15.0.0.189 - Adobe Systems Incorporated)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.239 - Adobe Systems Incorporated)
Adobe Reader X (10.1.12) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.12 - Adobe Systems Incorporated)
Advertising Center (x32 Version: 0.0.0.2 - Nero AG) Hidden
Apple Application Support (HKLM-x32\...\{78002155-F025-4070-85B3-7C0453561701}) (Version: 3.0.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}) (Version: 7.1.2.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo WinOptimizer 2013 v.1.0.0 (HKLM-x32\...\{4209F371-7B85-60AD-E5CE-E4409D39E3DE}_is1) (Version: 1.00.00 - Ashampoo GmbH & Co. KG)
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 10.0 - Atheros)
Avira (HKLM-x32\...\{e7c7c227-b742-4878-9425-f09bbf9951db}) (Version: 1.1.27.25527 - Avira Operations & Co. KG)
Avira (x32 Version: 1.1.27.25527 - Avira Operations & Co. KG) Hidden
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.7.468 - Avira)
Benutzerhandbuch EPSON SX235 Series (HKLM-x32\...\EPSON SX235 Series Useg) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 4.07 - Piriform)
Compatibility Pack für 2007 Office System (HKLM-x32\...\{90120000-0020-0407-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DriverBoost (HKLM-x32\...\{044E78D2-8F54-4F6F-AD2B-A122F8111EDB}) (Version: 8.1 - DriverBoost)
EnvisioKnit Design Studio Demo 1.2.3 (HKLM-x32\...\EnvisioKnit Design Studio Demo) (Version: 1.2.3 - Blue Sheep Software LLC)
Epson Easy Photo Print 2 (HKLM-x32\...\{A02D7029-C4EF-44C1-9FD4-C0D3CA518113}) (Version: 2.2.4.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION)
Epson Event Manager (HKLM-x32\...\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}) (Version: 2.50.0000 - SEIKO EPSON CORPORATION)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
EPSON SX235 Series Printer Uninstall (HKLM\...\EPSON SX235 Series) (Version:  - SEIKO EPSON Corporation)
EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)
Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Gekko Mahjongg (HKLM-x32\...\GEKKO Mahjongg) (Version:  - )
Gekko Mahjongg (Oster-Edition) (HKLM-x32\...\Gekko Mahjongg (Oster-Edition)) (Version:  - )
Gekko Mahjongg (Weihnachts-Edition) (HKLM-x32\...\Gekko Mahjongg (Weihnachts-Edition)) (Version:  - )
GIMP 2.6.12 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.12 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google+ Auto Backup (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Google+ Auto Backup) (Version: 1.0.24.118 - Google, Inc.)
ImagXpress (x32 Version: 7.0.74.0 - Nero AG) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 17 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417017FF}) (Version: 7.0.170 - Oracle)
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217017FF}) (Version: 7.0.670 - Oracle)
Java(TM) SE Development Kit 7 Update 2 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170020}) (Version: 1.7.0.20 - Oracle)
JavaFX 2.0.2 (64-bit) (HKLM\...\{1111706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
JavaFX 2.0.2 SDK (64-bit) (HKLM\...\{2222706F-666A-4037-7777-202648764D10}) (Version: 2.0.2 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Knit Visualizer Demo 2.1 (HKLM-x32\...\Knit Visualizer Demo 2.1) (Version:  - The Knit Foundry)
Malwarebytes Anti-Malware Version 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office XP Professional mit FrontPage (HKLM-x32\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
MixPad Audiodatei-Mixer (HKLM-x32\...\MixPad) (Version: 3.59 - NCH Software)
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 32.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 32.0.3 (x86 de)) (Version: 32.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 32.0.3 - Mozilla)
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 9 Lite (HKLM-x32\...\{8c059ece-05be-48d5-867e-8a9c14aad244}) (Version:  - Nero AG)
Netzwerkhandbuch EPSON SX235 Series (HKLM-x32\...\EPSON SX235 Series Netg) (Version:  - )
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Opera Stable 26.0.1656.32 (HKLM-x32\...\Opera 26.0.1656.32) (Version: 26.0.1656.32 - Opera Software ASA)
Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7083 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Strickmuster 1 (HKLM-x32\...\Strickmuster 1) (Version:  - )
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.18.8 - Synaptics Incorporated)
Updater (HKLM-x32\...\{D54E3D9F-FEB8-4D2D-A138-B69A5C80080B}) (Version: 2.6.49 - Creative Island Media, LLC) <==== ATTENTION
WavePad Audio-Editor (HKLM-x32\...\WavePad) (Version: 5.91 - NCH Software)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Zipeg (HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Zipeg) (Version: 2.9.3.1316 - hxxp://zipeg.com)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{9BD87338-AA34-B27F-A04C-2C1CE92F163F}\InprocServer32 -> C:\Windows\system32\ole32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2003399624-2568068236-90850429-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Bea\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)

==================== Restore Points  =========================

09-12-2014 22:35:38 Windows Update
10-12-2014 21:24:02 Windows Update
12-12-2014 22:32:31 Windows Update
13-12-2014 22:33:24 Windows Update
14-12-2014 22:31:22 Windows Update
15-12-2014 21:38:53 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {00E48A74-D809-4481-8025-68596CAC1873} - System32\Tasks\{0B0B3EDD-9658-4FFA-B350-DBE0D47C5B6A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0337D85F-FCDF-4E83-8363-396C3876E55A} - System32\Tasks\{FB54E8E6-773D-436D-A6F9-36F7FEDED622} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {038B7533-86FE-4D03-913A-BF0C370596C8} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {05056166-5B27-4E4B-A5A4-53FB6B5344A9} - System32\Tasks\{ED1F04CA-6848-4348-90E8-E87702B726CB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0558CCB1-9E9B-491F-9EE2-D513E3401A14} - System32\Tasks\{FAA1CDEE-9EE9-4EDE-BF12-6A48D6A3A661} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {057EBF7C-6BE8-45DD-BA40-B314FF8F12FF} - System32\Tasks\DriverBoost-RTMScanRunOnce => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {069DCFBB-6AAA-4603-BFF7-672B6C0BC3D1} - System32\Tasks\{35036A0D-FB88-4580-B795-3E9B9BE7098F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {06C35FD8-7941-4F42-A62A-444E57EC6618} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21] (Adobe Systems Incorporated)
Task: {071C249F-DFD1-4C04-8D6A-8B91108F7C93} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {0793F9F5-7E5E-4421-9744-7911D321EC4B} - System32\Tasks\{4E08B5F9-E2FA-4EBC-8C69-E9D1A7E6FB25} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {07F51E0A-57D2-4EDB-B4AF-4EEA86EFFF6B} - System32\Tasks\{C82DED95-CC83-44C4-B62D-88C5613A83A5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {080264BC-0B86-4D70-B6C4-C6045A2B5AD0} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {086985DA-8A79-4454-ADE8-160B8A0B855E} - System32\Tasks\{1934A7B5-4B79-4F84-AADA-5D90BD077B6D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {09D74DB8-1A00-49C5-9F0E-54027BE0F818} - System32\Tasks\{C8B69D9A-3438-4B2F-B2FD-47DF40363618} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0C6CB150-2D46-4EE1-AF39-FB57376BA629} - System32\Tasks\{D41AE0F8-8A87-4915-8584-AC4B0338FFB2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0C7CD12F-6E54-494F-9773-0963309DEC00} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {0C8FA779-D80D-41F9-A8C5-082FBE4987FE} - System32\Tasks\{376D9B18-AD63-4185-ABB8-BEDE89AA029C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0CFED245-555E-49C3-BCAF-E702A50C1E7B} - System32\Tasks\{36F1C0D4-BC3C-45B6-AF92-934633458E3A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0D506EC2-BF14-4A85-A0EE-2308A7C3BD34} - System32\Tasks\{5FA28724-DFD9-4DAD-873C-F3F694422F8D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0DA471FB-C4EC-41FB-9AEB-2EC9E781B503} - System32\Tasks\{A13A76CE-C204-41B5-ADD6-18123F4D973F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0E421171-B18D-4703-8BE5-5FCAC046B842} - System32\Tasks\{3BB30939-C419-4671-898E-252A338C5018} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0FD345A4-F392-411C-9B2C-55CD0BD3A93D} - System32\Tasks\{E6F60CCB-0F87-473C-9E86-24D4786EF14B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {0FF6806A-7BCE-4C38-A8C1-912CA53D65B8} - System32\Tasks\{BE872116-F3F6-4557-B781-E13D153D991C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {12883BE4-2B95-401B-B378-1652A1E16487} - System32\Tasks\{F98A1514-0020-4D56-8F7F-EA0A741FC665} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {12A617A1-3892-4C6C-95F5-33933C9C5BB1} - System32\Tasks\{2E76ED16-BC61-4F30-A211-E409F2E54949} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1349C52D-9434-41C7-9E62-E1F1BEABEBF3} - System32\Tasks\{51111F08-57DA-476E-8E28-307D6FA4D566} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {13849A10-10DA-4671-8557-73629F6088F5} - System32\Tasks\{D04C3F71-6F8A-482A-9ED2-C43AF9D72D20} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {13F1754D-C08C-40C4-95B3-DCF3041D5F39} - System32\Tasks\{57D9E0AC-7898-4AF0-89B6-46BE805096C8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {15C7CA7B-ADB0-47F0-B50E-8CF6CCDB9830} - System32\Tasks\{AC245833-22A1-4851-BD67-3DF2FBAD22E9} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {17D305EF-90C7-4058-A567-649417F59B5E} - System32\Tasks\{D6404B74-AF8F-4232-B24F-973481441C84} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1DDF171D-4129-4761-8853-8B11D1015CAB} - System32\Tasks\{37647C6E-42B3-4C00-8348-CF4B5DC20432} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1E6D2B82-DD49-45A6-B9D2-AF734B0D41B0} - System32\Tasks\{6A801AFB-63AB-4541-B2BA-7FEF8457D1CF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {1F007331-4172-4B36-89B8-5DD19ECB8A17} - System32\Tasks\{76F313BC-21B9-4738-BB68-9E479FF602D0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {208F3A5F-74BF-4B49-98D4-26F2CC6638DD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-26] (Adobe Systems Incorporated)
Task: {221E35EB-8C70-4E6A-8338-F872B813A204} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {2288AF63-464A-4E4E-9324-4458D64AC5BD} - System32\Tasks\Opera scheduled Autoupdate 1414436089 => C:\Program Files (x86)\Opera\launcher.exe [2014-11-25] (Opera Software)
Task: {22DA4053-CC92-44BA-995F-F984B15952C1} - System32\Tasks\{00EB6C71-556D-4678-8BB4-D73B478BC0F6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2521569B-383C-40D4-975F-96765BF9DEB6} - System32\Tasks\{3112554B-503E-4935-B772-832874961800} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {288580E3-1C3E-4342-A918-4CDD8E3C3C5A} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {2A544743-18A2-4D3A-ABE3-6D64386A4CE5} - System32\Tasks\{27215C39-D1EC-42CE-BC17-AE1BC3B69E18} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2A5E603F-D4A5-4C33-8A80-A2A0F84C8EBF} - System32\Tasks\{CC163CC6-8CBD-46C5-AA2A-9ACEE0B5B264} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2B4487B5-5DAD-43DC-8E6F-CB1DD532F85C} - System32\Tasks\{69AB6745-4417-478E-B177-91CD3932C7AA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2ECFF7AC-BF39-425A-AB73-0CCD40C68418} - System32\Tasks\{773E3712-D098-43BA-8F2F-6BCE362BB1E6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2EFAF5BE-1158-4A35-8F0F-3D06D95522A7} - System32\Tasks\{A120C0AC-6BB7-4F88-8ECF-3DB3385D8061} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {2F59B9A2-2D77-4774-8657-1E1AF04C48AF} - System32\Tasks\{068D5C70-BBA0-42C6-8958-B22EE6CE73BF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {31C65C5C-AE01-4112-B74D-E729BCDF617A} - System32\Tasks\{0D94E9D4-1FE0-44F8-B429-08479F1DF603} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {328EBE29-64E8-43CC-AC8D-B89C59CD27DB} - System32\Tasks\{F92FC198-5CD5-4899-81E9-C2C9FC05C9D4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3470B1C9-91A9-4C2C-86E7-D50F1F2F0E1D} - System32\Tasks\{7DE92704-490B-4ACD-B1DB-8C91F62379EB} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {34A3B5E4-D5F2-4500-A635-29968317C5F1} - System32\Tasks\{E48220DF-9723-43A5-AEB9-3F02924BAED2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {36C9E62F-F0CA-4865-A10A-2BE7FB6A268E} - System32\Tasks\NCH Software\WavePadSevenDays => C:\Program Files (x86)\NCH Software\WavePad\WavePad.exe
Task: {39491E61-093B-4989-B5A6-B9C75724B3B7} - System32\Tasks\{07B140C6-6FEB-49C1-A870-23C7C810AC8C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3A523A2D-48B2-4945-91D8-C73487502ACF} - System32\Tasks\{4FE356D1-EF23-460B-A687-2E1D691FB2E4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3BEFA41D-1A63-44C1-B4C6-F62C7013AA25} - System32\Tasks\{674A2C65-C169-4C1C-9DC4-6E76A8509138} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F2EEA56-268A-40E7-B389-AB726CB1A576} - System32\Tasks\{0665AD30-93DF-4E6E-A470-1D8FCE674194} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F509107-E6BA-429D-9458-7C3DD59EC4B1} - System32\Tasks\{A335D717-B87F-406C-A864-4B62FCD0C12C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {3F893DB3-58E3-4370-8166-B948199E653C} - System32\Tasks\{FB74FC4F-9CD1-4876-9A0F-E09103BC725D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4010040E-65F9-432A-903C-8F5B75688C89} - System32\Tasks\{843C6618-74C4-49EE-AA17-BF3320AAC9B0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {410EF2A5-E499-4130-96DA-655C17E589C5} - System32\Tasks\{D21F8E95-D1FD-4A3D-BE9B-DA606F83314F} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {41D1AB1E-576E-4CB9-84BB-0058A2B07884} - System32\Tasks\{095377D2-D1ED-4565-817A-468ADE14335D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {42A2D7E4-2937-4FDF-B4FE-9C72E5684495} - System32\Tasks\{AB00715C-DE00-4D0F-A891-56860A4CF2E2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {47A091E5-B814-46BD-8963-EA36D7AF161C} - System32\Tasks\{FCB42498-EA1E-4D41-ADD4-88ABD220036E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {481BB006-37B1-4164-8311-FB74163DF8CC} - System32\Tasks\{2632AA36-A7BD-4B44-AD4A-C635259DA78F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {487E5800-2619-4DCF-9EC7-C2A9F7B3E749} - System32\Tasks\{EE3BB75E-852B-4B8F-8532-24CC7C41C511} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {488AEE90-951B-43EC-A4CA-2B25572D0EE0} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {4AB94841-C782-44BD-9342-83AC7D5E322C} - System32\Tasks\{379FF990-69F5-493B-BB30-5B970B652ECF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4DA80280-7E6B-49F5-AD17-81C296E7512C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
Task: {4DB650B9-5518-410E-8D26-82089D9371B2} - System32\Tasks\{2CC0DC41-8225-4C48-BF88-5B705F1EFFFF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4DFCA046-A6DA-4069-AF2A-4127DBEA74BA} - System32\Tasks\{FE96BD5F-4EDB-4FA6-84EA-690BF98B8F76} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {4F85CAB3-2016-4D51-9A9A-1B8242AD131F} - System32\Tasks\{D929088F-AB77-48EC-A43A-91D529740D07} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {50221CAD-8353-47DC-9046-AD0DD5AA8E0A} - System32\Tasks\{D260E38C-7BF3-4752-8A50-BB1ED737ADDC} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5030B7ED-28CE-4AED-B936-937C518E172B} - System32\Tasks\{B8978B22-58A0-428D-8192-E631AC815274} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {51F9236A-3C70-4099-B607-1F9A9C1A9FC7} - System32\Tasks\{FD507C23-5395-41EA-96BC-BE46ED3A9CD4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5707BCE3-C815-4DD7-8999-A6A1E7DC3016} - System32\Tasks\{11198214-916D-4DB2-BA28-8083314B9215} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {58DBF6C0-34D2-416F-A3BF-FBA27D2FAFF8} - System32\Tasks\{36EC5BBA-D88A-4CBE-91E2-D9B5951C08E4} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {59E82115-C9A1-429A-882A-E130BDFDE937} - System32\Tasks\{C330B2D8-F91E-4FBC-BD6E-DCD05868D264} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5AD20F76-99E4-4D78-9AEE-561461576167} - System32\Tasks\{60D26756-47DC-41A2-B748-CD3B98568795} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {5F795BFA-6F42-4A64-B6C0-EF62CE3CAFDB} - System32\Tasks\{411CD354-1D1A-4718-9380-6DCD70631067} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {611C06AA-33EE-46C1-80D4-5CE0B1262A55} - System32\Tasks\{0664A21C-DD50-4AD5-A157-74CE7165130B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {61297BEB-B030-478F-B7AE-4A0F7A49B29C} - System32\Tasks\{5DAF37BC-2564-4F5E-AAA2-C366B92B2C14} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {61F08A6B-89FD-429B-99BF-AABEC57C22B9} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2014-06-25] (RealNetworks, Inc.)
Task: {6283F88F-4BE7-439E-A51E-8F8E1C45E432} - System32\Tasks\{CB77CEC1-28D0-4AA4-AB57-5A8725C8110A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {641E8853-522D-48EE-9F47-B97FDBC5E2FA} - System32\Tasks\{839ED26E-3465-4468-9540-088B0F77C452} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {64C22673-45D6-4FB0-81B7-E8C94071B663} - System32\Tasks\{F83B7E33-69D8-4761-BAEE-43FF9C61FB12} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {65A7B469-DC63-4DB6-9400-60CDB14EE2A2} - System32\Tasks\{130FF7A0-DF70-4E81-B938-5B2AF5C9295D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {68A5355C-858E-4896-8724-6BEF7EE45717} - System32\Tasks\{A46C5233-7063-46B8-ACB8-30F8BDF58843} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {69243B6B-9D5F-4DBA-8779-0F922BDB0C82} - System32\Tasks\{2D63CA8E-E47E-44FC-96F7-C50BFAA539C9} => pcalua.exe -a "C:\Program Files (x86)\OXXOGames\UKGplayer\\MyInstall.exe" -c UInstAllGPAndDS
Task: {6AE300C8-A831-406A-BCFB-BCC805893253} - System32\Tasks\{9385EFDF-DCDF-4037-A584-3C1EDCF1A028} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6CADC28E-4072-4448-AF41-8AC5512E2EF8} - System32\Tasks\{9C96AFBE-FBBD-4BD7-9A47-6F2C6288BBFA} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {6DD98664-CDFF-43CE-B5FE-E057B243844A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.)
Task: {6FF33F30-10F0-4BDC-AC21-844695884157} - System32\Tasks\{981E5C0C-5F37-4098-A935-81816D0AB6D3} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {703414C6-E983-450C-A1A5-77684AB5BF70} - System32\Tasks\{3E38D18F-C05C-4B91-9156-CE8780B8B6BA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7122E757-849E-4B4C-A95D-4947316ABC31} - System32\Tasks\{1CC2B3A6-CFC8-4127-BFBE-E94045599F6E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72313D7C-6CE5-46F4-963D-AB89E8A17B16} - System32\Tasks\{D6FD59E4-E7AF-4F0B-8A11-F174F1D340F1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {72CCE807-0040-4479-96D8-E6BB0DD8535F} - System32\Tasks\{DE32BB11-2C64-4336-95AD-B9BD07AB022E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7394D6DD-5231-45AC-82FA-0CD9E12C2629} - System32\Tasks\{0FADA578-A257-4CFC-997A-812F9DFA4098} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {743BFC77-5928-4338-BBEA-76D008FC96C2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {745E4C64-B11C-4C70-BC95-11C7D7A5D137} - System32\Tasks\{A44DE70F-66DA-404C-B311-968B5604A5F2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7486C134-5368-4A1C-B362-54A2CB6A656E} - System32\Tasks\{99B5A430-83C4-4F8B-8746-BC546F8E59EA} => c:\program files (x86)\safari\safari.exe
Task: {76123703-3BB4-47A8-8A0D-CBA7EF02AF8A} - System32\Tasks\{30A71961-6DAA-414A-B7FD-03B441363FE1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {77780FA1-3A20-48D8-9D1C-61B90CF765D4} - System32\Tasks\{5DC901B1-089F-44DD-AB70-5DFA60261341} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7A397562-4F66-4751-80F2-B23A33E8D459} - System32\Tasks\{5004C0D6-7EC6-4C8C-BC29-852EEAC12E1A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CA2304D-7EA8-47FB-B0D1-1A7ACD56CE21} - System32\Tasks\{552566FD-6C06-4B25-8E75-A00BCC5DD3D8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7CF3A444-896C-4E09-BE61-97EBD5EF30EB} - System32\Tasks\{EE3A63F1-AA3A-41AB-A9D3-0FECB9779DB0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7D35C753-EC1C-447C-801E-4D13A9F58458} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2014-07-16] (RealNetworks, Inc.)
Task: {7DD50473-6DBE-403C-9332-E46AE08DFB2C} - System32\Tasks\{FF366040-F1A7-4A0C-AB7D-26A51A861D01} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EA75B00-D228-4D29-A379-33FBD8ED3EDD} - \Plus-HD-3.8-firefoxinstaller No Task File <==== ATTENTION
Task: {7ED8B6A4-AA9A-47A4-9A01-F55C24A8DC96} - System32\Tasks\{8B5BA5E1-F81A-4EFA-B374-42AEB9261E2B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EF08107-10D2-4ABD-9397-16BFA4233278} - System32\Tasks\{B5D9F37D-2BD2-423D-A3AC-0A2E1B09C871} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {7EF1E3DD-3AD8-4983-874D-B9FF143A6850} - System32\Tasks\{1DC08519-AA9B-45CF-9699-15DE435F81D1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {80C12F4B-15C3-4983-93D7-6286CC8EE926} - System32\Tasks\{C414FB38-17CD-41DE-BE63-68DF8DA11AD2} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {81C769CE-91E2-475E-8D37-99019A9C8D3C} - System32\Tasks\{C1E59F7F-E12B-4FDB-86A4-8F519E660C9E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {83F80ADB-A8D1-4AE8-9C2C-16DF64AE7992} - System32\Tasks\{B6B72C70-941A-42F5-B547-F9936A721661} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {880F6DA5-854C-4109-9A6F-BCFCB3AB257E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {88A18359-149F-407F-B067-C3BCB1E5C258} - System32\Tasks\{4F68AFF1-228D-441E-9AFD-AADD4AE64A0C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8994AB55-FE66-4DE3-9F9F-3F7F6AC4DEF6} - System32\Tasks\{41843AA5-531F-4BA5-A129-0A367D977218} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8ABDA275-209B-411E-80F8-B697915A1791} - System32\Tasks\{0467F6AF-AFB8-4B28-8087-B7E591DACA09} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8BE589AA-0827-4DDE-8014-3C71D6D36E7B} - System32\Tasks\{88D49099-83B6-4F94-9CA5-705177505B4E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8C33F88F-14ED-4112-B1F0-69020CD1D99D} - System32\Tasks\NCH Software\MixPadSevenDays => C:\Program Files (x86)\NCH Software\MixPad\MixPad.exe
Task: {8E1DF6B1-20C8-4671-BB21-0D016E4B8F4E} - System32\Tasks\{52A597DD-01E8-47DE-B3A1-393D194C7E9C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {8FD2E5EF-A38B-4650-B2EB-6CEEA6F37DA1} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {9108231B-AE62-4C86-9BE5-020369EF7DA6} - System32\Tasks\{65BD397B-7229-4876-88F4-0C8E09C64FDC} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {93F1E0D9-726F-40EC-A0B9-13779B51C81E} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25] (Oracle Corporation)
Task: {9676441E-216E-4B27-9547-1E1394599BFD} - System32\Tasks\{7698AF58-3053-4836-87DF-F3E298AEADFB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {96D63560-618E-446A-8FDF-3B90EAA33A0C} - System32\Tasks\{F33854A9-015D-4CA3-8F8F-D00DFCAC94DE} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {97143293-E5AA-4920-B67B-453257DE8878} - System32\Tasks\{8D658C7C-2C78-46B6-8413-75C76CFAC385} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {980DC558-8B48-4BED-91A7-AC088BAEC0BC} - System32\Tasks\{8F9B489D-D9B1-4A59-B03A-DEC1B8B2B769} => pcalua.exe -a "C:\Remote Programs\Treasures of Montezuma\GPlrLanc.exe" -c -LOpCode 2 /RemoveContent cid=466550;name=The Treasures of Montezuma;dir=C:\Remote Programs\Treasures of Montezuma\;prvid=143;cmdid=1;prvdir=Default
Task: {99AF3794-9409-4A9B-8DC2-6607E8EE540C} - System32\Tasks\{FD07A979-CAB9-4939-A649-9596B701AF82} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {99DE50F5-6551-4FF0-8EC4-5684E0ECF749} - System32\Tasks\{B041002A-7966-4835-B102-0608A25B3FFD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9A201188-6137-42B3-9D53-13F78CAAF841} - System32\Tasks\{98392CCB-998A-4835-9FAB-EA02E49C5D49} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9BB87BC1-F687-4D45-BFC4-89C2DE74158A} - System32\Tasks\{77E01EEE-7419-442B-ACF0-01CE190104ED} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9D211C67-8DF0-4A55-A669-846967D9CC0D} - \Plus-HD-3.8-chromeinstaller No Task File <==== ATTENTION
Task: {9EBB31DB-2CB8-45D2-B250-B4A31C8A12BA} - System32\Tasks\{48039137-58F0-46E0-A594-0BA0FD03FEA1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {9FC81B17-83B0-451E-9DD4-0A2F5873D10B} - System32\Tasks\{32557FB8-3CE1-438B-84C8-71088AB0FB3E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A0E0027E-FFD8-4549-80F9-83E70390F0D2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-11] (Google Inc.)
Task: {A1B6F098-F7DF-4734-A8BE-D18A5006C221} - System32\Tasks\{B4E1800A-BC4F-47AF-8AE0-80FAA09D2ADD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A1CC1C1D-8357-4769-A232-F38C97D5A5FA} - System32\Tasks\{A263E82E-6F3D-4F25-BE62-E10980C8E5A0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A38CF3B6-7B19-47D3-88D8-8367BC3F8D04} - System32\Tasks\{7E9C4FDE-7B86-4126-9B95-959445739834} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A5EF7ECF-B068-4083-BA42-3ACAD1BBD9F3} - System32\Tasks\{01A34135-B51E-454C-8555-69BF5A4F0343} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A647A251-EB0B-49B3-A4BB-A80A573BC972} - System32\Tasks\{64C1EBA1-DEEA-4E10-8660-853C6B0D48C6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A6B5F256-D83E-4B33-99E1-CA930E1D581C} - System32\Tasks\{BABAC766-CE18-42A6-9F1C-4A336777FB33} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {A98250E7-73D1-457B-8544-B1767EFFB84E} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {AA018863-B3E5-42F2-AC83-E7D31261ACBF} - System32\Tasks\{D2DB943F-0B98-4858-9A0A-F99C11849200} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AAF593F3-57F6-4DCE-AA46-58DC15E15CD6} - System32\Tasks\{0A7BB5F8-EABA-46E2-A971-6D1620A6C5C8} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ABEF17D1-0E31-472F-A730-18C9C617ECCD} - System32\Tasks\{125A74E5-6E8E-4120-946F-003ED4134863} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ACA3CA40-E209-4D96-A67F-0DBBA76EBCAE} - System32\Tasks\{0D8DF657-1531-4E5E-B8F6-E66745CF2A35} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {ACF5DA3E-1B1A-41BD-B036-98B811D92620} - System32\Tasks\{F206FB20-0BEE-4F2C-A445-0A762F9154DF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AD093C38-6E8F-493A-8C92-32265E0FF6DA} - System32\Tasks\{A3B34E44-577B-43BD-97D0-DFB0922A727C} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AD89C23C-6A8D-48DA-8798-C7449075AABA} - System32\Tasks\{80121625-6DBB-4857-99DF-4D0B5A7C2706} => C:\Program Files\CCleaner\CCleaner64.exe [2013-10-22] (Piriform Ltd)
Task: {AE7749D3-523A-4CA1-B978-A21EE3EFAFF4} - System32\Tasks\{89DE21C3-6C9B-4358-82E8-DD237784CE53} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {AF585E13-72EC-402B-A930-AE9E025BCEEC} - System32\Tasks\{59BF2BCE-42F6-48AB-8484-BD212BE03385} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B02349C9-FB23-4460-BFBF-B427D073546E} - System32\Tasks\{5C9320D6-6857-4EC1-A227-6E693A074FAB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B154686A-6E80-45E1-867A-11CB299EBC6A} - System32\Tasks\{57CFD7D3-C78C-4B3A-8118-6E4ED36123E7} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B1DE3F0A-90F3-41E7-83A3-51950EAE2535} - System32\Tasks\{47182963-F0A3-445C-9914-2C7453BBD0EB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {B7B820A3-9947-4AB2-9168-6C6BF3E5DF33} - System32\Tasks\DriverBoost-RTMScan => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {BBA1CE1F-60C0-410D-BF74-4805225A0AA2} - System32\Tasks\{414D4777-A752-421D-B61F-645325EB0F8B} => c:\program files (x86)\safari\safari.exe
Task: {BD3EA370-2BE6-4589-97D0-8EA11228EE01} - System32\Tasks\{D9272F83-3446-4E69-A852-446839DBBB34} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BDC64789-955B-412B-AD0F-99EE69309400} - System32\Tasks\{BC499BDE-48D4-4029-91DA-00E4659978B0} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {BF89F7D2-3C73-45B2-8CCD-75FE4B111B42} - System32\Tasks\{75E06E16-E411-4D72-9C65-758C485ABC00} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C009CE10-4EC1-4110-AEA2-F6A6F4B07BA2} - System32\Tasks\{6833CD72-C7FC-4777-B901-172FEEE7EF59} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C0ACC909-BAE7-40D6-A56E-9BE7042A3070} - System32\Tasks\{449BBEC9-28AF-41F8-BA48-2635EB2E4991} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C1520CF9-02D2-49AF-B9DD-95DD21E7AD50} - System32\Tasks\{77FD761C-5550-4839-888F-4897496C97B1} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C1E3BED5-5487-4EF9-B23C-E7C197049DEC} - System32\Tasks\{0583033E-3DFF-4C91-AD68-CFB0C2B27CCD} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C22D7E55-CB2A-41A2-B9DB-5D88416D89BB} - System32\Tasks\{5CB83CBF-B9E8-435E-967A-2D271E8EB5E5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C5F63F5B-D72D-417B-A2D6-E60EB71D35BB} - System32\Tasks\{C05AC38A-2C94-4831-810D-188A5B0B2066} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {C824CA6F-7A19-4150-A034-C680F23EADF3} - System32\Tasks\{232FBD6C-6F2B-4B1F-A6EA-5B108011083A} => c:\program files (x86)\safari\safari.exe
Task: {CA05749E-0FE8-47E5-8A21-4C7584528BBA} - System32\Tasks\{1565FF7E-97EF-479C-A05D-11082443CC3F} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CAE8B42D-25C6-411E-9073-445695D9B37B} - System32\Tasks\{99262E8A-611E-453C-BF8D-C0B8E9A99002} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CBEA48BC-85C5-43FE-9C3D-01B7FF90E3D3} - System32\Tasks\DriverBoost-RTMRules => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {CC70AAB9-AC72-4C85-94BE-31835FB1A627} - System32\Tasks\{C533EFD3-A88A-484E-9DC8-82BEF0090E19} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CD4A6A8D-7302-4D78-92CD-FB97E48A8EFA} - System32\Tasks\{73EFDD38-0D6A-4ECA-821A-7F8155A05632} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {CED8CC34-2F7D-4B64-BA96-E6DC297D5DE4} - System32\Tasks\{D014E918-3C20-4CC6-A8F2-73207B64447D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D1855E84-1625-4FA5-82B5-E0F13A0BD3A4} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
Task: {D226A7EE-F274-4505-9942-D920DE18702B} - System32\Tasks\{87391B9C-F87B-4BD9-9DBB-F0C655B507F6} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D3618EDB-8057-4A42-B3BD-C17B8821C235} - System32\Tasks\{C1AD9A0B-B469-4F0C-8C78-B4EF55F679DA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D38ECAF7-78FB-4928-BD15-19AE125AC2D2} - System32\Tasks\{050D4E08-07C4-4E5D-B6F3-923C90922E0B} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D40500B9-4980-4D4C-8AB4-98409115CF59} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {D63E8610-0A2C-4A34-BDAF-8630862656FC} - System32\Tasks\{AA95DFF2-4B48-4B99-BEDA-9BF408BCBD90} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D65733E0-0443-42A4-A3D6-E147501C0A4E} - System32\Tasks\{A5B25836-EFE6-4B45-B2DF-74F0420BA7FE} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D6A40F1E-96F3-4B81-B5F7-558E0AE71DFB} - System32\Tasks\{27877D47-FD6F-450A-A6BD-28F9A2C2D066} => Iexplore.exe hxxp://ui.skype.com/ui/0/6.6.0.106/de/abandoninstall?page=tsMain
Task: {D7532BE0-4CDA-413B-8F19-F4B02CFA12D1} - System32\Tasks\{50D471B7-9780-46E0-8CA8-1B9460E57527} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {D7E7CAAA-B4AA-4926-92BE-9D259FA44FA3} - System32\Tasks\{D8733CFA-D44D-4CD9-9F49-E2BFF57F7F34} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {DCAC8567-405E-4B6B-9452-B61E4DC8F429} - System32\Tasks\DriverBoost-RTMUpdater => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [2013-09-19] (PC Drivers Headquarters)
Task: {DFA31178-B004-48FE-95AD-7F7C00B494D9} - System32\Tasks\{D5E6F391-39BD-4B64-8856-F82B8E70F685} => Iexplore.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E1362F3A-EE8B-4972-9857-3EB6991260E3} - System32\Tasks\{583E0534-C834-4838-92A0-912F668F46EF} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E340B54D-9B92-45D3-9CBE-05151E3CC1BD} - System32\Tasks\{BE11B904-8855-4174-9935-CB52241EC8A3} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E45D7107-F65F-4679-8E3E-4BB47199828B} - System32\Tasks\{8958FADC-3BF3-454D-A01E-B8E3A510D8FB} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E534794A-71A9-4A48-9843-D02AF47FFAF0} - System32\Tasks\{5CCF6BD9-6DFD-4615-8B50-33EA08799F0D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {E8B6073A-2A1E-4550-BBBA-536BC7BB6D88} - System32\Tasks\{ADB62009-EA52-4D38-A399-AF85D60BC69A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EB4E001B-AF80-4BB1-BBBA-9C2FC434107E} - System32\Tasks\{E6F8B192-69A5-4DF9-82C0-807663C4252A} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EDC2FD63-7761-423B-8CDC-EE7F12EFCA6D} - System32\Tasks\{683CEF6B-00C9-4265-884E-BF6948AB6084} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EE6CE28C-93C4-495D-8A05-678FA0CBA6CC} - System32\Tasks\{1BC9D0FC-5B87-4D10-87D5-2097EFE89838} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EE9679C8-16C0-43F9-B5E2-C7C71CA1D5C3} - System32\Tasks\{CD4F3AC0-6489-4A0F-BC4D-E2899BC6F26E} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {EECA02EC-5293-4696-89C7-3956F1E2CEB9} - System32\Tasks\{5D23B130-AC64-410A-B1FD-B30DA6DA57DE} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F0C6C882-41B6-400B-83A3-6432AF1DD90C} - System32\Tasks\{D2E50FF1-52A5-4950-A4EC-692640EDEDD5} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F2DC4186-F6FA-4F6C-AF35-0EC34A44DA4B} - System32\Tasks\{1FF40C7A-CED3-44FD-904A-5E6875844C00} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F3A16C7F-49B8-4CDE-A372-77F68E4D01AC} - System32\Tasks\{F8717B3E-B886-497F-B55F-E80515610532} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F5235FFA-0221-4457-BC05-D5AE081B0658} - System32\Tasks\SuperEasyDriverUpdaterRunAtStartup => C:\Program Files (x86)\SuperEasy Software\Driver Updater\supereasydu.exe
Task: {F58C7E37-B885-4A33-B7A1-70ED1A1853EF} - System32\Tasks\{B72079E5-98D7-428C-9822-7F16BE60EE64} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F75EA8A8-12BC-4A85-928A-5BEC9C3DDC6B} - System32\Tasks\{BC4F59E5-EC5F-49F4-AA41-5951BAD0B276} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F871A8BB-7AB8-4D1D-BD09-BA7CA86093A7} - System32\Tasks\{01B4DBBA-2081-42D3-A455-0C8DBB44FEDA} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: {F9F1047F-A3A7-44EF-957D-ABA1EE49E92A} - System32\Tasks\{892DF552-B4C0-40C5-87C8-BA0853C0EC50} => c:\program files (x86)\safari\safari.exe
Task: {FC1581AD-7DD3-430E-B83F-85C4C1C198FB} - System32\Tasks\{8C4BBAEF-5649-4E4B-8202-D3F6B4A4327E} => pcalua.exe -a "C:\Remote Programs\Jewel Quest 3\GPlrLanc.exe" -c -LOpCode 2 /RemoveContent cid=642550;name=Jewel Quest 3;dir=C:\Remote Programs\Jewel Quest 3\;prvid=143;cmdid=1;prvdir=Default
Task: {FF82F985-621B-4B3E-9C64-3D6FB83AFF3E} - System32\Tasks\{3A5F338E-E1CA-4F29-B906-BED9C9C4743D} => Chrome.exe hxxp://ui.skype.com/ui/0/5.10.0.116/de/go/help.faq.installer?LastError=1603
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-05-06 10:39 - 2011-10-04 21:43 - 00087552 _____ () C:\Windows\System32\custmon64i.dll
2013-09-19 08:55 - 2013-09-19 08:55 - 00703880 _____ () C:\Program Files (x86)\DriverBoost\DriverBoost\ThemePack.DriverBoost.dll
2013-09-19 08:31 - 2013-09-19 08:31 - 00412064 _____ () C:\Program Files (x86)\DriverBoost\DriverBoost\Agent.Communication.XmlSerializers.dll
2014-12-03 13:06 - 2014-12-03 12:59 - 00535160 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
2012-07-04 15:54 - 2010-10-28 18:04 - 06619256 _____ () C:\Program Files\ipswitch\WS_FTP 12\res0407.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-07-31 11:16 - 2014-07-31 11:16 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-12-03 13:04 - 2014-12-03 12:57 - 01358456 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libglesv2.dll
2014-12-03 13:04 - 2014-12-03 12:57 - 00219256 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\libegl.dll
2014-12-03 13:06 - 2014-12-03 12:59 - 09312888 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\pdf.dll
2014-12-03 13:01 - 2014-12-03 12:57 - 00991352 _____ () C:\Program Files (x86)\Opera\26.0.1656.32\ffmpegsumo.dll
2012-07-04 15:54 - 2010-10-28 17:52 - 00948496 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\LIBEAY32.dll
2012-07-04 15:54 - 2010-10-28 17:52 - 00153360 _____ () C:\Program Files (x86)\Ipswitch\WS_FTP 12\SSLEAY32.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:07BF512B
AlternateDataStreams: C:\ProgramData\TEMP:18C53152
AlternateDataStreams: C:\ProgramData\TEMP:29CD416B
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\ProgramData\TEMP:616D21DE
AlternateDataStreams: C:\ProgramData\TEMP:AD022376
AlternateDataStreams: C:\ProgramData\TEMP:B96C57D4

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: ARP64 => 2
MSCONFIG\Services: EpsonBidirectionalService => 2
MSCONFIG\Services: GFilterSvc => 2
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: IBUpdaterService => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: TuneUp.UtilitiesSvc => 2
MSCONFIG\Services: Video Performer Manager => 2
MSCONFIG\Services: WajamUpdater => 2
MSCONFIG\Services: Web Assistant Updater => 2
MSCONFIG\Services: WebOptimizer => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: ApnUpdater => "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: Bonus.SSR.FR11 => "C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe" /autorun
MSCONFIG\startupreg: Browser companion helper => C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=ibgfbdggapddbjjbopabhlhianklajie
MSCONFIG\startupreg: DataMgr => "C:\Users\Bea\AppData\Roaming\DataMgr\DataMgr.exe"
MSCONFIG\startupreg: Driver Pro => C:\Program Files (x86)\Driver Pro\DPLauncher.exe
MSCONFIG\startupreg: DriverBoost => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe /applicationMode:systemTray /showWelcome:false
MSCONFIG\startupreg: EEventManager => "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"
MSCONFIG\startupreg: Epson Stylus SX235(Netzwerk) => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Bea\AppData\Local\Temp\E_S695.tmp" /EF "HKCU"
MSCONFIG\startupreg: EPSON SX235 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Bea\AppData\Local\Temp\E_S5DA.tmp" /EF "HKCU"
MSCONFIG\startupreg: Exetender => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" /runonstartup
MSCONFIG\startupreg: GoogleChromeAutoLaunch_140299A73DDFBEE682C1057A74DE4DC2 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: HF_G_Jul => "C:\Program Files (x86)\AVG Secure Search\HF_G_Jul.exe"  /DoAction
MSCONFIG\startupreg: Iminent => C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
MSCONFIG\startupreg: IminentMessenger => C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
MSCONFIG\startupreg: Intermediate => "C:\Users\Bea\AppData\Roaming\Intermediate\Intermediate.exe"
MSCONFIG\startupreg: Ocs_SM => C:\Users\Bea\AppData\Roaming\OCS\SM\SearchAnonymizer.exe
MSCONFIG\startupreg: ooVoo.exe => C:\Program Files (x86)\ooVoo\oovoo.exe /minimized
MSCONFIG\startupreg: ROC_roc_dec12 => "C:\Program Files (x86)\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
MSCONFIG\startupreg: ROC_ROC_JULY_P1 => "C:\Program Files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
MSCONFIG\startupreg: SCheck => "C:\Users\Bea\AppData\Roaming\SCheck\SCheck.exe" check 
MSCONFIG\startupreg: SDP => C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto 
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spybot-S&D Cleaning => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe" /autoclean
MSCONFIG\startupreg: SSync => "C:\Users\Bea\AppData\Roaming\SSync\SSync.exe"
MSCONFIG\startupreg: Sweetpacks Communicator => C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe

========================= Accounts: ==========================

Administrator (S-1-5-21-2003399624-2568068236-90850429-500 - Administrator - Disabled)
Bea (S-1-5-21-2003399624-2568068236-90850429-1001 - Administrator - Enabled) => C:\Users\Bea
Gast (S-1-5-21-2003399624-2568068236-90850429-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2003399624-2568068236-90850429-1002 - Limited - Enabled)

==================== Faulty Device Manager Devices =============

Name: X5XSEx
Description: X5XSEx
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: X5XSEx
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-10-18 12:35:59.554
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-10-18 12:35:59.460
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-18 16:06:03.018
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-18 12:54:48.486
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-18 01:11:18.486
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-18 00:53:59.446
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-18 00:36:56.682
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-18 00:31:08.194
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-17 23:54:55.663
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-01-17 20:26:30.670
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Processor: Pentium(R) Dual-Core CPU T4200 @ 2.00GHz
Percentage of memory in use: 61%
Total physical RAM: 1916 MB
Available physical RAM: 732.71 MB
Total Pagefile: 3831.99 MB
Available Pagefile: 2150.51 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:149.05 GB) (Free:89.18 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149.1 GB) (Disk ID: 61A1DBB7)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

==================== End Of Log ============================

cosinus · 16.12.2014, 13:10

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

Startup: C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\updaterinfo.exe ()
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
ProxyServer: [S-1-5-21-2003399624-2568068236-90850429-1001] => localhost:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
Toolbar: HKU\.DEFAULT -> No Name - {A1E75A0E-4397-4BA8-BB50-E19FB66890F4} -  No File
Toolbar: HKU\.DEFAULT -> No Name - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {78E516EF-11DE-47A1-8364-A99B917EC5EE} -  No File
Toolbar: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
URLSearchHook: HKLM-x32 - Default Value = {3B81079D-2AC9-425f-A494-A1C7D93AFA3C}
URLSearchHook: HKLM-x32 - (No Name) - {78e516ef-11de-47a1-8364-a99b917ec5ee} - No File
Task: {0C7CD12F-6E54-494F-9773-0963309DEC00} - \Plus-HD-3.8-updater No Task File <==== ATTENTION
Task: {7EA75B00-D228-4D29-A379-33FBD8ED3EDD} - \Plus-HD-3.8-firefoxinstaller No Task File <==== ATTENTION
Task: {8FD2E5EF-A38B-4650-B2EB-6CEEA6F37DA1} - \Plus-HD-3.8-codedownloader No Task File <==== ATTENTION
Task: {9D211C67-8DF0-4A55-A669-846967D9CC0D} - \Plus-HD-3.8-chromeinstaller No Task File <==== ATTENTION
Task: {D1855E84-1625-4FA5-82B5-E0F13A0BD3A4} - \Plus-HD-3.8-enabler No Task File <==== ATTENTION
EmptyTemp:
Hosts:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Beatrica · 16.12.2014, 19:35

Code:

ATTFilter

 01
Ran by Bea (administrator) on BEA-PC on 16-12-2014 14:01:38
Running from C:\Users\Bea\Desktop
Loaded Profile: Bea (Available profiles: Bea & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE
(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
() C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-25] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520 2014-07-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE [283232 2014-01-16] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3986288 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google+ Auto Backup] => C:\Users\Bea\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3701064 2014-03-11] (Google Inc.)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google Update] => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-10-11] (Google Inc.)
BootExecute: sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://google.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {18834523-2FB0-49DB-A5F4-BD350E710BC3} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {26D76483-E15E-4132-970B-33C8714389CC} URL = https://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {79B22172-20EE-4ACB-9A89-C6F9E1271063} URL = https://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie11
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @exent.com/npExentCtl,version=7.0.0.0 -> C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\searchplugins\allgameshome.xml
FF Extension: Adblock Plus - C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-23]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://zattoo.com/#phoenix", "hxxp://google/", "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=hp&installDate=13/10/2013", "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll No File
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
CHR Profile: C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-02]
CHR Extension: (Google Wallet) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
U4 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-19] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-10-25] (Synaptics Incorporated)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 X5XSEx; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 14:00 - 2014-12-16 14:00 - 02119168 _____ (Farbar) C:\Users\Bea\Desktop\FRST64.exe
2014-12-16 13:59 - 2014-12-16 13:59 - 00006775 _____ () C:\Users\Bea\Desktop\fixlist.txt
2014-12-16 13:56 - 2014-12-16 13:56 - 00006775 _____ () C:\Users\Bea\Desktop\.txt
2014-12-16 13:40 - 2014-12-16 13:40 - 00000000 ____D () C:\Users\Bea\AppData\Local\PC_Drivers_Headquarters
2014-12-16 12:26 - 2014-12-16 12:26 - 00000710 _____ () C:\Users\Bea\Desktop\JRT.txt
2014-12-16 12:18 - 2014-12-16 12:18 - 01707646 _____ (Thisisu) C:\Users\Bea\Desktop\JRT.exe
2014-12-16 12:09 - 2014-12-16 13:38 - 00001180 _____ () C:\Windows\PFRO.log
2014-12-16 11:51 - 2014-12-16 11:51 - 02166272 _____ () C:\Users\Bea\Desktop\AdwCleaner_4.105.exe
2014-12-16 10:50 - 2014-12-16 13:38 - 00000168 _____ () C:\Windows\setupact.log
2014-12-16 10:50 - 2014-12-16 10:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-15 10:04 - 2014-12-16 12:46 - 00063897 _____ () C:\Users\Bea\Desktop\Addition.txt
2014-12-15 10:02 - 2014-12-16 14:01 - 00018188 _____ () C:\Users\Bea\Desktop\FRST.txt
2014-12-15 09:56 - 2014-12-15 09:56 - 02119168 _____ (Farbar) C:\Users\Bea\Downloads\FRST64 (1).exe
2014-12-12 08:03 - 2014-12-12 08:03 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:26 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:26 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 20:57 - 2014-12-10 20:57 - 03248489 _____ () C:\Users\Bea\Downloads\2147493270.zip
2014-12-10 20:52 - 2014-12-10 20:52 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (2).zip
2014-12-10 20:51 - 2014-12-10 20:51 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (1).zip
2014-12-10 20:50 - 2014-12-10 20:50 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951.zip
2014-12-10 20:50 - 2014-12-10 20:50 - 00000000 ____D () C:\Users\Bea\Downloads\Texturen
2014-12-10 20:24 - 2014-12-10 21:34 - 00000000 ____D () C:\Users\Bea\Desktop\Texturen
2014-12-10 17:42 - 2014-12-10 17:42 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih (1).exe
2014-12-10 17:39 - 2014-12-10 17:39 - 00001148 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00001136 _____ () C:\Users\Public\Desktop\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\Documents\Mixpad Projects
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:38 - 2014-12-10 17:38 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2014-12-10 17:38 - 2014-12-10 17:38 - 00001140 _____ () C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2014-12-10 17:26 - 2014-12-10 17:26 - 00949784 _____ (NCH Software) C:\Users\Bea\Downloads\wpsetup.exe
2014-12-10 16:02 - 2014-12-10 16:02 - 00232145 _____ () C:\Users\Bea\Downloads\1286818485.svg
2014-12-10 15:57 - 2014-12-10 15:57 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (2).svg
2014-12-10 15:52 - 2014-12-10 15:53 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (1).svg
2014-12-10 15:51 - 2014-12-10 15:51 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope.svg
2014-12-10 15:04 - 2014-12-10 15:04 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551 (1).svg
2014-12-10 15:03 - 2014-12-10 15:03 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551.svg
2014-12-10 13:03 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 13:03 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 13:03 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 13:03 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 13:03 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 13:03 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 13:03 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 13:03 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 13:03 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 13:03 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 13:03 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 13:03 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 13:03 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 13:03 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 13:03 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 13:03 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 13:03 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 13:03 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 13:03 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 13:03 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 13:03 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 13:03 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 13:00 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 13:00 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 12:59 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 12:57 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 12:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 12:57 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 12:57 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 12:57 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 12:57 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 11:07 - 2014-12-10 11:07 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih.exe
2014-12-02 20:27 - 2014-12-02 20:50 - 00000000 ____D () C:\Users\Bea\Desktop\WASSER DES LEBENS
2014-12-02 15:12 - 2014-12-02 15:15 - 00000000 ____D () C:\Users\Bea\Desktop\BÄR
2014-11-27 10:57 - 2014-12-16 13:39 - 00003332 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-27 10:57 - 2014-12-16 13:39 - 00003194 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-23 17:39 - 2014-11-23 17:39 - 320911980 _____ () C:\Windows\MEMORY.DMP
2014-11-22 18:01 - 2014-11-22 18:01 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-22 18:01 - 2014-11-22 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-19 13:29 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 13:29 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 22:08 - 2014-11-18 22:12 - 00000000 ____D () C:\Users\Bea\Desktop\wollthread
2014-11-18 13:42 - 2014-11-19 17:34 - 00000000 ____D () C:\Users\Bea\Desktop\JOSIE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-16 14:01 - 2013-12-13 16:04 - 00000000 ____D () C:\FRST
2014-12-16 13:58 - 2012-04-16 06:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-16 13:52 - 2014-11-01 22:19 - 00000000 ____D () C:\Users\Bea\Desktop\SNIPPINGTOOL
2014-12-16 13:46 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-16 13:46 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-16 13:38 - 2012-02-02 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-16 13:38 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-16 13:37 - 2013-04-20 13:10 - 01612150 _____ () C:\Windows\WindowsUpdate.log
2014-12-16 13:27 - 2012-02-02 20:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-16 13:23 - 2014-10-11 18:57 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job
2014-12-16 12:07 - 2013-12-03 14:35 - 00000000 ____D () C:\AdwCleaner
2014-12-15 22:02 - 2014-10-11 18:56 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job
2014-12-15 21:56 - 2014-05-15 20:03 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C682669D-5F76-48D9-BE04-BB579627B5F2}
2014-12-15 21:55 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-12-15 09:39 - 2012-03-01 16:32 - 00000000 ____D () C:\Windows\Minidump
2014-12-13 20:45 - 2012-04-08 16:52 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Skype
2014-12-13 13:53 - 2014-01-14 20:40 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-12 09:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 08:03 - 2014-05-06 23:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 22:39 - 2013-08-10 21:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:28 - 2012-02-05 08:42 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-10 15:05 - 2013-04-10 22:17 - 00867840 ___SH () C:\Users\Bea\Downloads\Thumbs.db
2014-12-04 08:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-03 16:54 - 2014-11-04 12:01 - 00000000 ____D () C:\Users\Bea\Desktop\Neues Forum
2014-12-03 13:19 - 2014-08-23 17:19 - 00000000 ____D () C:\Users\Bea\Desktop\ROSENGARTEN
2014-12-03 13:07 - 2013-04-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-03 13:06 - 2014-10-27 19:55 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1414436089
2014-11-30 14:51 - 2014-05-06 20:05 - 00000000 ____D () C:\Users\Bea\Desktop\STRÄUßE
2014-11-26 17:48 - 2012-04-16 06:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 17:48 - 2012-04-16 06:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 17:48 - 2012-02-02 20:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 20:17 - 2014-11-04 15:11 - 00000000 ____D () C:\Users\Bea\Desktop\Taschen
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ____D () C:\ProgramData\Skype
2014-11-21 06:28 - 2014-10-29 21:32 - 00000000 ____D () C:\Users\Bea\Desktop\WILDROSEN
2014-11-21 06:21 - 2014-05-04 09:13 - 00000000 ____D () C:\Users\Bea\Desktop\SONNEN
2014-11-18 19:59 - 2014-10-27 19:55 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 26.lnk
2014-11-17 20:18 - 2014-10-11 18:57 - 00004078 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA
2014-11-17 20:18 - 2014-10-11 18:57 - 00003682 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core

Some content of TEMP:
====================
C:\Users\Bea\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-15 11:57

==================== End Of Log ===============

Wenn ich den Fix button betätige bekomme ich eine Warnung . Wie soll ich weiter vorgehen?

cosinus · 17.12.2014, 00:14

Wie soll ich diese Frage beantworten, wenn ich den Wortlaut der Warnung nicht kenne?

Beatrica · 18.12.2014, 08:59

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 17-12-2014
Ran by Bea (administrator) on BEA-PC on 18-12-2014 08:44:37
Running from C:\Users\Bea\Desktop
Loaded Profile: Bea (Available profiles: Bea & Gast)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
() C:\Program Files (x86)\Opera\26.0.1656.32\opera_crashreporter.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Ipswitch) C:\Program Files (x86)\Ipswitch\WS_FTP 12\WsftpCOMHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\26.0.1656.32\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\launcher.exe
(PC Drivers Headquarters) C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe
() C:\Program Files (x86)\Opera\26.0.1656.32\opera_autoupdate.exe
(Farbar) C:\Users\Bea\Desktop\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-10-24] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2804976 2013-10-25] (Synaptics Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [702768 2014-12-09] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [296520 2014-07-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [126200 2014-11-20] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE [283232 2014-01-16] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [DriverBoost] => C:\Program Files (x86)\DriverBoost\DriverBoost\DriverBoost.exe [3986288 2013-09-19] (PC Drivers Headquarters)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google+ Auto Backup] => C:\Users\Bea\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3746120 2014-08-12] (Google Inc.)
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\...\Run: [Google Update] => C:\Users\Bea\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-10-11] (Google Inc.)
BootExecute: sdnclean64.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2003399624-2568068236-90850429-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://google.com/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {18834523-2FB0-49DB-A5F4-BD350E710BC3} URL = https://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {26D76483-E15E-4132-970B-33C8714389CC} URL = https://www.flickr.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2003399624-2568068236-90850429-1001 -> {79B22172-20EE-4ACB-9A89-C6F9E1271063} URL = https://de.search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=chr-yie11
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll (Adblock Plus)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll (Adblock Plus)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455} 
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default
FF NewTab: about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @exent.com/npExentCtl,version=7.0.0.0 -> C:\Program Files (x86)\Free Ride Games\npExentCtl.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-2003399624-2568068236-90850429-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Bea\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\searchplugins\allgameshome.xml
FF Extension: Adblock Plus - C:\Users\Bea\AppData\Roaming\Mozilla\Firefox\Profiles\4o8zv4y5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-07]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-23]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://zattoo.com/#phoenix", "hxxp://google/", "hxxp://de.msn.com/?pc=UP97&ocid=UP97DHP", "hxxp://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=DE&userid=c720b53a-1c53-205d-49db-0f515baa9620&searchtype=hp&installDate=13/10/2013", "hxxp://www.google.com"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\37.0.2062.124\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll No File
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll No File
CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll No File
CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll No File
CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll No File
CHR Profile: C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-10-02]
CHR Extension: (Google Wallet) - C:\Users\Bea\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-01]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [431920 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [993584 2014-12-09] (Avira Operations GmbH & Co. KG)
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [166192 2014-11-20] (Avira Operations GmbH & Co. KG)
S3 DfSdkS; C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 2013\DfsdkS64.exe [544768 2009-08-24] (mst software GmbH, Germany) [File not signed]
S4 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [36096 2013-05-21] (Advanced Micro Devices, Inc.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [119272 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131608 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-10-10] (Avira Operations GmbH & Co. KG)
U4 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [43064 2014-10-07] (Avira Operations GmbH & Co. KG)
R1 HBtnKey; C:\Windows\System32\DRIVERS\wstbtndb.sys [9856 2007-09-14] (Lenovo)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-19] (Malwarebytes Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-10-25] (Synaptics Incorporated)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 X5XSEx; \??\C:\Program Files (x86)\Free Ride Games\X5XSEx.Sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-18 08:29 - 2014-12-18 08:32 - 02121216 _____ (Farbar) C:\Users\Bea\Desktop\FRST64 (1).exe
2014-12-16 21:49 - 2014-12-16 21:49 - 00001137 _____ () C:\Users\Public\Desktop\Avira.lnk
2014-12-16 21:49 - 2014-12-16 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-12-16 21:47 - 2014-12-16 21:47 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Bea\Downloads\avira_de_av_5718787733__ws (1).exe
2014-12-16 21:46 - 2014-12-16 21:46 - 04549888 _____ (Avira Operations & Co. KG) C:\Users\Bea\Downloads\avira_de_av_5718787733__ws.exe
2014-12-16 13:59 - 2014-12-16 13:59 - 00006775 _____ () C:\Users\Bea\Desktop\fixlist.txt
2014-12-16 13:56 - 2014-12-16 13:56 - 00006775 _____ () C:\Users\Bea\Desktop\.txt
2014-12-16 13:40 - 2014-12-16 13:40 - 00000000 ____D () C:\Users\Bea\AppData\Local\PC_Drivers_Headquarters
2014-12-16 12:26 - 2014-12-16 12:26 - 00000710 _____ () C:\Users\Bea\Desktop\JRT.txt
2014-12-16 12:18 - 2014-12-16 12:18 - 01707646 _____ (Thisisu) C:\Users\Bea\Desktop\JRT.exe
2014-12-16 12:09 - 2014-12-17 18:25 - 00001836 _____ () C:\Windows\PFRO.log
2014-12-16 11:51 - 2014-12-16 11:51 - 02166272 _____ () C:\Users\Bea\Desktop\AdwCleaner_4.105.exe
2014-12-16 10:50 - 2014-12-18 08:23 - 00000280 _____ () C:\Windows\setupact.log
2014-12-16 10:50 - 2014-12-16 10:50 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-15 10:04 - 2014-12-16 12:46 - 00063897 _____ () C:\Users\Bea\Desktop\Addition.txt
2014-12-15 10:02 - 2014-12-18 08:44 - 00018561 _____ () C:\Users\Bea\Desktop\FRST.txt
2014-12-15 09:56 - 2014-12-15 09:56 - 02119168 _____ (Farbar) C:\Users\Bea\Downloads\FRST64 (1).exe
2014-12-12 08:03 - 2014-12-12 08:03 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 22:26 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 22:26 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 20:57 - 2014-12-10 20:57 - 03248489 _____ () C:\Users\Bea\Downloads\2147493270.zip
2014-12-10 20:52 - 2014-12-10 20:52 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (2).zip
2014-12-10 20:51 - 2014-12-10 20:51 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951 (1).zip
2014-12-10 20:50 - 2014-12-10 20:50 - 04443854 _____ () C:\Users\Bea\Downloads\2147494951.zip
2014-12-10 20:50 - 2014-12-10 20:50 - 00000000 ____D () C:\Users\Bea\Downloads\Texturen
2014-12-10 20:24 - 2014-12-10 21:34 - 00000000 ____D () C:\Users\Bea\Desktop\Texturen
2014-12-10 17:42 - 2014-12-10 17:42 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih (1).exe
2014-12-10 17:39 - 2014-12-10 17:39 - 00001148 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00001136 _____ () C:\Users\Public\Desktop\MixPad Audiodatei-Mixer.lnk
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\Documents\Mixpad Projects
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Produktpalette
2014-12-10 17:39 - 2014-12-10 17:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audioverwandte Programme
2014-12-10 17:38 - 2014-12-10 17:38 - 00001152 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WavePad Audio-Editor.lnk
2014-12-10 17:38 - 2014-12-10 17:38 - 00001140 _____ () C:\Users\Public\Desktop\WavePad Audio-Editor.lnk
2014-12-10 17:26 - 2014-12-10 17:26 - 00949784 _____ (NCH Software) C:\Users\Bea\Downloads\wpsetup.exe
2014-12-10 16:02 - 2014-12-10 16:02 - 00232145 _____ () C:\Users\Bea\Downloads\1286818485.svg
2014-12-10 15:57 - 2014-12-10 15:57 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (2).svg
2014-12-10 15:52 - 2014-12-10 15:53 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope (1).svg
2014-12-10 15:51 - 2014-12-10 15:51 - 00010442 _____ () C:\Users\Bea\Downloads\baroquon_Envelope.svg
2014-12-10 15:04 - 2014-12-10 15:04 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551 (1).svg
2014-12-10 15:03 - 2014-12-10 15:03 - 00001186 _____ () C:\Users\Bea\Downloads\envelope-460551.svg
2014-12-10 13:03 - 2014-11-27 02:43 - 00389296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-12-10 13:03 - 2014-11-27 02:10 - 00342200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-12-10 13:03 - 2014-11-22 04:13 - 25059840 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 13:03 - 2014-11-22 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 04:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 13:03 - 2014-11-22 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-12-10 13:03 - 2014-11-22 03:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 13:03 - 2014-11-22 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-12-10 13:03 - 2014-11-22 03:34 - 06039552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-12-10 13:03 - 2014-11-22 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 13:03 - 2014-11-22 03:22 - 19749376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 13:03 - 2014-11-22 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 03:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 13:03 - 2014-11-22 03:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 03:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-12-10 13:03 - 2014-11-22 03:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 13:03 - 2014-11-22 03:07 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-12-10 13:03 - 2014-11-22 03:06 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 03:05 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-12-10 13:03 - 2014-11-22 03:01 - 02277888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 13:03 - 2014-11-22 02:59 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 13:03 - 2014-11-22 02:58 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-12-10 13:03 - 2014-11-22 02:56 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 13:03 - 2014-11-22 02:55 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 13:03 - 2014-11-22 02:54 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-12-10 13:03 - 2014-11-22 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:46 - 02125312 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:45 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 13:03 - 2014-11-22 02:43 - 14412800 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:40 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-12-10 13:03 - 2014-11-22 02:36 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-12-10 13:03 - 2014-11-22 02:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 13:03 - 2014-11-22 02:33 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 13:03 - 2014-11-22 02:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-12-10 13:03 - 2014-11-22 02:28 - 02358272 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 13:03 - 2014-11-22 02:23 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 13:03 - 2014-11-22 02:22 - 02052096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 13:03 - 2014-11-22 02:21 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-12-10 13:03 - 2014-11-22 02:15 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 13:03 - 2014-11-22 02:13 - 12836864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 13:03 - 2014-11-22 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-12-10 13:03 - 2014-11-22 02:00 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 13:03 - 2014-11-22 01:56 - 01307136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 13:03 - 2014-11-22 01:54 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 13:00 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 13:00 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 13:00 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 12:59 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 12:59 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 12:57 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 12:57 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 12:57 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 12:57 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 12:57 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 12:57 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 12:57 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 12:57 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-10 11:07 - 2014-12-10 11:07 - 01054912 _____ (Adobe) C:\Users\Bea\Downloads\install_flashplayer16x32au_chrd_dn_aaa_aih.exe
2014-12-02 20:27 - 2014-12-02 20:50 - 00000000 ____D () C:\Users\Bea\Desktop\WASSER DES LEBENS
2014-12-02 15:12 - 2014-12-02 15:15 - 00000000 ____D () C:\Users\Bea\Desktop\BÄR
2014-11-27 10:57 - 2014-12-18 08:23 - 00003332 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-27 10:57 - 2014-12-18 08:23 - 00003194 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2003399624-2568068236-90850429-1001
2014-11-23 17:39 - 2014-11-23 17:39 - 320911980 _____ () C:\Windows\MEMORY.DMP
2014-11-22 18:01 - 2014-11-22 18:01 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-11-22 18:01 - 2014-11-22 18:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-11-19 13:29 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 13:29 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 13:29 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 22:08 - 2014-11-18 22:12 - 00000000 ____D () C:\Users\Bea\Desktop\wollthread
2014-11-18 13:42 - 2014-11-19 17:34 - 00000000 ____D () C:\Users\Bea\Desktop\JOSIE

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-18 08:44 - 2013-12-13 16:04 - 00000000 ____D () C:\FRST
2014-12-18 08:31 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-18 08:31 - 2009-07-14 05:45 - 00029856 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-18 08:27 - 2014-05-15 20:03 - 00003914 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{C682669D-5F76-48D9-BE04-BB579627B5F2}
2014-12-18 08:27 - 2012-02-02 20:57 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-18 08:23 - 2012-02-02 20:57 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-18 08:23 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-17 18:59 - 2013-04-20 13:10 - 01685512 _____ () C:\Windows\WindowsUpdate.log
2014-12-17 18:59 - 2012-04-16 06:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-16 23:23 - 2014-10-11 18:57 - 00001112 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001UA.job
2014-12-16 22:44 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-12-16 21:47 - 2013-04-10 22:17 - 00867840 ___SH () C:\Users\Bea\Downloads\Thumbs.db
2014-12-16 20:23 - 2014-10-11 18:56 - 00001060 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2003399624-2568068236-90850429-1001Core.job
2014-12-16 13:52 - 2014-11-01 22:19 - 00000000 ____D () C:\Users\Bea\Desktop\SNIPPINGTOOL
2014-12-16 12:07 - 2013-12-03 14:35 - 00000000 ____D () C:\AdwCleaner
2014-12-15 09:39 - 2012-03-01 16:32 - 00000000 ____D () C:\Windows\Minidump
2014-12-13 20:45 - 2012-04-08 16:52 - 00000000 ____D () C:\Users\Bea\AppData\Roaming\Skype
2014-12-13 13:53 - 2014-01-14 20:40 - 00000000 ____D () C:\ProgramData\Package Cache
2014-12-12 09:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 08:03 - 2014-05-06 23:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-12-12 08:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 22:39 - 2013-08-10 21:53 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 22:28 - 2012-02-05 08:42 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-04 08:58 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-03 16:54 - 2014-11-04 12:01 - 00000000 ____D () C:\Users\Bea\Desktop\Neues Forum
2014-12-03 13:19 - 2014-08-23 17:19 - 00000000 ____D () C:\Users\Bea\Desktop\ROSENGARTEN
2014-12-03 13:07 - 2013-04-20 14:11 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-12-03 13:06 - 2014-10-27 19:55 - 00003848 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1414436089
2014-11-30 14:51 - 2014-05-06 20:05 - 00000000 ____D () C:\Users\Bea\Desktop\STRÄUßE
2014-11-26 17:48 - 2012-04-16 06:49 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-26 17:48 - 2012-04-16 06:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-26 17:48 - 2012-02-02 20:58 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-22 20:17 - 2014-11-04 15:11 - 00000000 ____D () C:\Users\Bea\Desktop\Taschen
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-22 18:01 - 2012-04-08 16:52 - 00000000 ____D () C:\ProgramData\Skype
2014-11-21 06:28 - 2014-10-29 21:32 - 00000000 ____D () C:\Users\Bea\Desktop\WILDROSEN
2014-11-21 06:21 - 2014-05-04 09:13 - 00000000 ____D () C:\Users\Bea\Desktop\SONNEN
2014-11-18 19:59 - 2014-10-27 19:55 - 00000964 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera 26.lnk

Some content of TEMP:
====================
C:\Users\Bea\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-15 11:57

==================== End Of Log ============================

--- --- ---

--- --- ---

Das wurde angezeigt :

Waring:
Looks you don`t know what to do.To prevent damage to the systeme the tool will exit

cosinus · 18.12.2014, 10:04

Vermutlich hast du den Dateinamen für die Fixlist falsch geschrieben...

Beatrica · 20.12.2014, 18:56

Ich bin nun 10 Tage nicht zu Hause .Leider kann ich erst am Dienstag in einer Woche weiter machen . Ich hoffe ,du nimmst das nicht übel?

cosinus · 22.12.2014, 00:30

Mal überlegen...hab ich Probleme mitm Rechner oder du...ach du warst das! Nein gönn dir ruhig ne Auszeit solange du willst

15.12.2014, 11:37	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet Was ist mit meiner Frage nach bisherigen Virenfunden? __________________ Logfiles bitte immer in CODE-Tags posten

17.12.2014, 00:14	#11
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet Wie soll ich diese Frage beantworten, wenn ich den Wortlaut der Warnung nicht kenne? __________________ Logfiles bitte immer in CODE-Tags posten

18.12.2014, 10:04	#13
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet Vermutlich hast du den Dateinamen für die Fixlist falsch geschrieben... __________________ Logfiles bitte immer in CODE-Tags posten

22.12.2014, 00:30	#15
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet Mal überlegen...hab ich Probleme mitm Rechner oder du...ach du warst das! Nein gönn dir ruhig ne Auszeit solange du willst __________________ Logfiles bitte immer in CODE-Tags posten

Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet

Plagegeister aller Art und deren Bekämpfung: Windows7 / Seiten hängen/ Dialoge im TV doppelt /Reklame doppelt gesendet