Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Trojanermeldung durch Malwarebytes

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 05.04.2013, 10:13   #16
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Da gab es doch einen Hinweis:

Zitat:
Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none).
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 05.04.2013, 13:30   #17
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Hallo, habe diesen Hinweis nicht gefunden, lediglich das Bild wie im Anhang gezeigt. Habe daraufhin den aswMBR nochmal als Admin gestartet und dann einen baluen Bildschirm mit folgendem Text bekaommen:

If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing.
If you need to use safe mode to remove or disable components restart your computer, press F8 to select Advanced Startup options, and then select Safe Mode.

Technical info:
Stop: 0X0000003B (0X0000000080000004, 0XFFFFF960000C4AC5, 0XFFFFF88002ABCF80,
0X00000000000000000)
win32.K.sys - Address FFFFF960000C4AC5 base at FFFFF96000000000, Data Stamp 50e64bda

Habe den Laptop dann ausgeschaltet, da ja nichts anderes mehr ging und wieder hoch gefahren.

Total überfragt grüßt

Peter
Angehängte Grafiken
Dateityp: png snipp.PNG (217,6 KB, 231x aufgerufen)
__________________


Alt 05.04.2013, 14:48   #18
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Wenn du die Anleitungen vollständig liest, siehst du auch die Hinweise

Was ist mit dem anderen Log?

Und abermals die Bitte: Logs bitte in CODE-Tags posten
__________________
__________________

Alt 05.04.2013, 16:30   #19
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Habe die Anleitung dreimal gelesen aber keine Hinweise gefunden.

Anbei die andere Logfile

Code:
ATTFilter
17:19:54.0834 7080  TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
17:19:55.0041 7080  ============================================================
17:19:55.0041 7080  Current date / time: 2013/04/05 17:19:55.0041
17:19:55.0042 7080  SystemInfo:
17:19:55.0042 7080  
17:19:55.0042 7080  OS Version: 6.1.7601 ServicePack: 1.0
17:19:55.0042 7080  Product type: Workstation
17:19:55.0042 7080  ComputerName: PEET17-VAIO
17:19:55.0042 7080  UserName: Peet17
17:19:55.0042 7080  Windows directory: C:\Windows
17:19:55.0042 7080  System windows directory: C:\Windows
17:19:55.0042 7080  Running under WOW64
17:19:55.0042 7080  Processor architecture: Intel x64
17:19:55.0042 7080  Number of processors: 4
17:19:55.0042 7080  Page size: 0x1000
17:19:55.0042 7080  Boot type: Normal boot
17:19:55.0042 7080  ============================================================
17:19:55.0463 7080  Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
17:19:55.0468 7080  ============================================================
17:19:55.0468 7080  \Device\Harddisk0\DR0:
17:19:55.0468 7080  MBR partitions:
17:19:55.0468 7080  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1C06000, BlocksNum 0x32000
17:19:55.0468 7080  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1C38000, BlocksNum 0x19F35000
17:19:55.0468 7080  \Device\Harddisk0\DR0\Partition3: MBR, Type 0x7, StartLBA 0x1BB6D000, BlocksNum 0x2ECEB2AF
17:19:55.0468 7080  ============================================================
17:19:55.0494 7080  C: <-> \Device\Harddisk0\DR0\Partition2
17:19:55.0515 7080  F: <-> \Device\Harddisk0\DR0\Partition3
17:19:55.0515 7080  ============================================================
17:19:55.0515 7080  Initialize success
17:19:55.0515 7080  ============================================================
17:20:43.0585 5100  ============================================================
17:20:43.0586 5100  Scan started
17:20:43.0586 5100  Mode: Manual; SigCheck; TDLFS; 
17:20:43.0586 5100  ============================================================
17:20:44.0057 5100  ================ Scan system memory ========================
17:20:44.0057 5100  System memory - ok
17:20:44.0058 5100  ================ Scan services =============================
17:20:44.0611 5100  [ A87D604AEA360176311474C87A63BB88 ] 1394ohci        C:\Windows\system32\drivers\1394ohci.sys
17:20:44.0761 5100  1394ohci - ok
17:20:44.0900 5100  [ ADC420616C501B45D26C0FD3EF1E54E4 ] ACDaemon        C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
17:20:44.0923 5100  ACDaemon - ok
17:20:44.0984 5100  [ D81D9E70B8A6DD14D42D7B4EFA65D5F2 ] ACPI            C:\Windows\system32\drivers\ACPI.sys
17:20:45.0003 5100  ACPI - ok
17:20:45.0033 5100  [ 99F8E788246D495CE3794D7E7821D2CA ] AcpiPmi         C:\Windows\system32\drivers\acpipmi.sys
17:20:45.0101 5100  AcpiPmi - ok
17:20:45.0196 5100  [ 3927397AC60D943DAF8808AFFED582B7 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
17:20:45.0210 5100  AdobeARMservice - ok
17:20:45.0366 5100  [ EA856F4A46320389D1899B2CAA7BF40F ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
17:20:45.0382 5100  AdobeFlashPlayerUpdateSvc - ok
17:20:45.0451 5100  [ 2F6B34B83843F0C5118B63AC634F5BF4 ] adp94xx         C:\Windows\system32\drivers\adp94xx.sys
17:20:45.0474 5100  adp94xx - ok
17:20:45.0503 5100  [ 597F78224EE9224EA1A13D6350CED962 ] adpahci         C:\Windows\system32\drivers\adpahci.sys
17:20:45.0523 5100  adpahci - ok
17:20:45.0536 5100  [ E109549C90F62FB570B9540C4B148E54 ] adpu320         C:\Windows\system32\drivers\adpu320.sys
17:20:45.0552 5100  adpu320 - ok
17:20:45.0585 5100  [ 4B78B431F225FD8624C5655CB1DE7B61 ] AeLookupSvc     C:\Windows\System32\aelupsvc.dll
17:20:45.0639 5100  AeLookupSvc - ok
17:20:45.0683 5100  [ 1C7857B62DE5994A75B054A9FD4C3825 ] AFD             C:\Windows\system32\drivers\afd.sys
17:20:45.0751 5100  AFD - ok
17:20:45.0790 5100  [ 608C14DBA7299D8CB6ED035A68A15799 ] agp440          C:\Windows\system32\drivers\agp440.sys
17:20:45.0804 5100  agp440 - ok
17:20:45.0840 5100  [ 3290D6946B5E30E70414990574883DDB ] ALG             C:\Windows\System32\alg.exe
17:20:45.0876 5100  ALG - ok
17:20:45.0901 5100  [ 5812713A477A3AD7363C7438CA2EE038 ] aliide          C:\Windows\system32\drivers\aliide.sys
17:20:45.0914 5100  aliide - ok
17:20:45.0944 5100  [ 1FF8B4431C353CE385C875F194924C0C ] amdide          C:\Windows\system32\drivers\amdide.sys
17:20:45.0958 5100  amdide - ok
17:20:46.0000 5100  [ 7024F087CFF1833A806193EF9D22CDA9 ] AmdK8           C:\Windows\system32\drivers\amdk8.sys
17:20:46.0052 5100  AmdK8 - ok
17:20:46.0058 5100  [ 1E56388B3FE0D031C44144EB8C4D6217 ] AmdPPM          C:\Windows\system32\drivers\amdppm.sys
17:20:46.0110 5100  AmdPPM - ok
17:20:46.0150 5100  [ D4121AE6D0C0E7E13AA221AA57EF2D49 ] amdsata         C:\Windows\system32\drivers\amdsata.sys
17:20:46.0165 5100  amdsata - ok
17:20:46.0200 5100  [ F67F933E79241ED32FF46A4F29B5120B ] amdsbs          C:\Windows\system32\drivers\amdsbs.sys
17:20:46.0216 5100  amdsbs - ok
17:20:46.0251 5100  [ 540DAF1CEA6094886D72126FD7C33048 ] amdxata         C:\Windows\system32\drivers\amdxata.sys
17:20:46.0265 5100  amdxata - ok
17:20:46.0323 5100  [ 12BFA9EC4B03CC16BB7D19BAA308AEF2 ] ApfiltrService  C:\Windows\system32\DRIVERS\Apfiltr.sys
17:20:46.0341 5100  ApfiltrService - ok
17:20:46.0379 5100  [ 89A69C3F2F319B43379399547526D952 ] AppID           C:\Windows\system32\drivers\appid.sys
17:20:46.0532 5100  AppID - ok
17:20:46.0571 5100  [ 0BC381A15355A3982216F7172F545DE1 ] AppIDSvc        C:\Windows\System32\appidsvc.dll
17:20:46.0618 5100  AppIDSvc - ok
17:20:46.0644 5100  [ 3977D4A871CA0D4F2ED1E7DB46829731 ] Appinfo         C:\Windows\System32\appinfo.dll
17:20:46.0706 5100  Appinfo - ok
17:20:46.0728 5100  [ C484F8CEB1717C540242531DB7845C4E ] arc             C:\Windows\system32\drivers\arc.sys
17:20:46.0742 5100  arc - ok
17:20:46.0764 5100  [ 019AF6924AEFE7839F61C830227FE79C ] arcsas          C:\Windows\system32\drivers\arcsas.sys
17:20:46.0778 5100  arcsas - ok
17:20:46.0811 5100  [ C130BC4A51B1382B2BE8E44579EC4C0A ] ArcSoftKsUFilter C:\Windows\system32\DRIVERS\ArcSoftKsUFilter.sys
17:20:46.0823 5100  ArcSoftKsUFilter - ok
17:20:46.0909 5100  [ 9217D874131AE6FF8F642F124F00A555 ] aspnet_state    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
17:20:46.0956 5100  aspnet_state - ok
17:20:46.0965 5100  [ 769765CE2CC62867468CEA93969B2242 ] AsyncMac        C:\Windows\system32\DRIVERS\asyncmac.sys
17:20:47.0023 5100  AsyncMac - ok
17:20:47.0067 5100  [ 02062C0B390B7729EDC9E69C680A6F3C ] atapi           C:\Windows\system32\drivers\atapi.sys
17:20:47.0081 5100  atapi - ok
17:20:47.0116 5100  [ 50F257E19554421B6891E3F998EDCA90 ] AthBTPort       C:\Windows\system32\DRIVERS\btath_flt.sys
17:20:47.0156 5100  AthBTPort - ok
17:20:47.0212 5100  [ 650F111D5CDA64C10AE4B9D1BA9D4FFF ] Atheros Bt&Wlan Coex Agent C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
17:20:47.0229 5100  Atheros Bt&Wlan Coex Agent ( UnsignedFile.Multi.Generic ) - warning
17:20:47.0229 5100  Atheros Bt&Wlan Coex Agent - detected UnsignedFile.Multi.Generic (1)
17:20:47.0259 5100  [ EBC3119394C9074A9CD87578A435050D ] AtherosSvc      C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
17:20:47.0266 5100  AtherosSvc ( UnsignedFile.Multi.Generic ) - warning
17:20:47.0266 5100  AtherosSvc - detected UnsignedFile.Multi.Generic (1)
17:20:47.0353 5100  [ A5E770426D18F8EF332A593F3289DA91 ] athr            C:\Windows\system32\DRIVERS\athrx.sys
17:20:47.0444 5100  athr - ok
17:20:47.0494 5100  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
17:20:47.0548 5100  AudioEndpointBuilder - ok
17:20:47.0558 5100  [ F23FEF6D569FCE88671949894A8BECF1 ] AudioSrv        C:\Windows\System32\Audiosrv.dll
17:20:47.0608 5100  AudioSrv - ok
17:20:47.0642 5100  [ A6BF31A71B409DFA8CAC83159E1E2AFF ] AxInstSV        C:\Windows\System32\AxInstSV.dll
17:20:47.0757 5100  AxInstSV - ok
17:20:47.0822 5100  [ 3E5B191307609F7514148C6832BB0842 ] b06bdrv         C:\Windows\system32\drivers\bxvbda.sys
17:20:47.0854 5100  b06bdrv - ok
17:20:47.0884 5100  [ B5ACE6968304A3900EEB1EBFD9622DF2 ] b57nd60a        C:\Windows\system32\DRIVERS\b57nd60a.sys
17:20:47.0926 5100  b57nd60a - ok
17:20:47.0989 5100  [ 01A24B415926BB5F772DBE12459D97DE ] BBSvc           C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE
17:20:48.0005 5100  BBSvc - ok
17:20:48.0026 5100  [ 785DE7ABDA13309D6065305542829E76 ] BBUpdate        C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
17:20:48.0044 5100  BBUpdate - ok
17:20:48.0071 5100  [ FDE360167101B4E45A96F939F388AEB0 ] BDESVC          C:\Windows\System32\bdesvc.dll
17:20:48.0100 5100  BDESVC - ok
17:20:48.0134 5100  [ 16A47CE2DECC9B099349A5F840654746 ] Beep            C:\Windows\system32\drivers\Beep.sys
17:20:48.0188 5100  Beep - ok
17:20:48.0253 5100  [ 82974D6A2FD19445CC5171FC378668A4 ] BFE             C:\Windows\System32\bfe.dll
17:20:48.0314 5100  BFE - ok
17:20:48.0450 5100  [ E92A3DA47BED7CC65D264235617ED46E ] BHDrvx64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130322.001\BHDrvx64.sys
17:20:48.0488 5100  BHDrvx64 - ok
17:20:48.0568 5100  [ 1EA7969E3271CBC59E1730697DC74682 ] BITS            C:\Windows\System32\qmgr.dll
17:20:48.0641 5100  BITS - ok
17:20:48.0675 5100  [ 61583EE3C3A17003C4ACD0475646B4D3 ] blbdrive        C:\Windows\system32\DRIVERS\blbdrive.sys
17:20:48.0709 5100  blbdrive - ok
17:20:48.0731 5100  [ 6C02A83164F5CC0A262F4199F0871CF5 ] bowser          C:\Windows\system32\DRIVERS\bowser.sys
17:20:48.0777 5100  bowser - ok
17:20:48.0803 5100  [ F09EEE9EDC320B5E1501F749FDE686C8 ] BrFiltLo        C:\Windows\system32\drivers\BrFiltLo.sys
17:20:48.0838 5100  BrFiltLo - ok
17:20:48.0868 5100  [ B114D3098E9BDB8BEA8B053685831BE6 ] BrFiltUp        C:\Windows\system32\drivers\BrFiltUp.sys
17:20:48.0887 5100  BrFiltUp - ok
17:20:48.0920 5100  [ 05F5A0D14A2EE1D8255C2AA0E9E8E694 ] Browser         C:\Windows\System32\browser.dll
17:20:48.0937 5100  Browser - ok
17:20:49.0042 5100  [ CA2E0AAA6943618108D786FF31848989 ] BrowserProtect  C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
17:20:49.0091 5100  BrowserProtect - ok
17:20:49.0135 5100  [ 43BEA8D483BF1870F018E2D02E06A5BD ] Brserid         C:\Windows\System32\Drivers\Brserid.sys
17:20:49.0191 5100  Brserid - ok
17:20:49.0213 5100  [ A6ECA2151B08A09CACECA35C07F05B42 ] BrSerWdm        C:\Windows\System32\Drivers\BrSerWdm.sys
17:20:49.0244 5100  BrSerWdm - ok
17:20:49.0290 5100  [ B79968002C277E869CF38BD22CD61524 ] BrUsbMdm        C:\Windows\System32\Drivers\BrUsbMdm.sys
17:20:49.0321 5100  BrUsbMdm - ok
17:20:49.0350 5100  [ A87528880231C54E75EA7A44943B38BF ] BrUsbSer        C:\Windows\System32\Drivers\BrUsbSer.sys
17:20:49.0396 5100  BrUsbSer - ok
17:20:49.0440 5100  [ B3BCD755FA9A359D10208CC9F09847CC ] BTATH_A2DP      C:\Windows\system32\drivers\btath_a2dp.sys
17:20:49.0482 5100  BTATH_A2DP - ok
17:20:49.0493 5100  [ 9BBBA9D6DBDEFC8A6542BC7A6EBAF710 ] btath_avdt      C:\Windows\system32\drivers\btath_avdt.sys
17:20:49.0523 5100  btath_avdt - ok
17:20:49.0555 5100  [ D838DD1BCB328EFCFAD7A52DE9E3CAFD ] BTATH_BUS       C:\Windows\system32\DRIVERS\btath_bus.sys
17:20:49.0603 5100  BTATH_BUS - ok
17:20:49.0639 5100  [ A441B800E04CF8443FAF519207563ABB ] BTATH_HCRP      C:\Windows\system32\DRIVERS\btath_hcrp.sys
17:20:49.0693 5100  BTATH_HCRP - ok
17:20:49.0730 5100  [ B16F8429A35BBA2A8EF9DB2E08675B97 ] BTATH_LWFLT     C:\Windows\system32\DRIVERS\btath_lwflt.sys
17:20:49.0776 5100  BTATH_LWFLT - ok
17:20:49.0828 5100  [ C24231C6BDFE21735930084A22089AAB ] BTATH_RCP       C:\Windows\system32\DRIVERS\btath_rcp.sys
17:20:49.0880 5100  BTATH_RCP - ok
17:20:49.0924 5100  [ 3632FA4C6B3CE9EC827690DEAC266D8C ] BtFilter        C:\Windows\system32\DRIVERS\btfilter.sys
17:20:49.0980 5100  BtFilter - ok
17:20:50.0033 5100  [ CF98190A94F62E405C8CB255018B2315 ] BthEnum         C:\Windows\system32\drivers\BthEnum.sys
17:20:50.0089 5100  BthEnum - ok
17:20:50.0107 5100  [ 9DA669F11D1F894AB4EB69BF546A42E8 ] BTHMODEM        C:\Windows\system32\drivers\bthmodem.sys
17:20:50.0143 5100  BTHMODEM - ok
17:20:50.0174 5100  [ 02DD601B708DD0667E1331FA8518E9FF ] BthPan          C:\Windows\system32\DRIVERS\bthpan.sys
17:20:50.0215 5100  BthPan - ok
17:20:50.0266 5100  [ 738D0E9272F59EB7A1449C3EC118E6C4 ] BTHPORT         C:\Windows\System32\Drivers\BTHport.sys
17:20:50.0323 5100  BTHPORT - ok
17:20:50.0352 5100  [ 95F9C2976059462CBBF227F7AAB10DE9 ] bthserv         C:\Windows\system32\bthserv.dll
17:20:50.0390 5100  bthserv - ok
17:20:50.0394 5100  [ F188B7394D81010767B6DF3178519A37 ] BTHUSB          C:\Windows\System32\Drivers\BTHUSB.sys
17:20:50.0420 5100  BTHUSB - ok
17:20:50.0498 5100  [ 248C952C82DF1E23775432774CBB20F1 ] ccSet_NIS       C:\Windows\system32\drivers\NISx64\1403000.024\ccSetx64.sys
17:20:50.0513 5100  ccSet_NIS - ok
17:20:50.0554 5100  [ B8BD2BB284668C84865658C77574381A ] cdfs            C:\Windows\system32\DRIVERS\cdfs.sys
17:20:50.0610 5100  cdfs - ok
17:20:50.0649 5100  [ F036CE71586E93D94DAB220D7BDF4416 ] cdrom           C:\Windows\system32\DRIVERS\cdrom.sys
17:20:50.0666 5100  cdrom - ok
17:20:50.0702 5100  [ F17D1D393BBC69C5322FBFAFACA28C7F ] CertPropSvc     C:\Windows\System32\certprop.dll
17:20:50.0749 5100  CertPropSvc - ok
17:20:50.0892 5100  [ 213B6EC3DE19E35373A1906397588429 ] CGVPNCliSrvc    C:\Program Files\CyberGhost VPN\CGVPNCliService.exe
17:20:50.0949 5100  CGVPNCliSrvc - ok
17:20:50.0989 5100  [ D7CD5C4E1B71FA62050515314CFB52CF ] circlass        C:\Windows\system32\drivers\circlass.sys
17:20:51.0016 5100  circlass - ok
17:20:51.0062 5100  [ FE1EC06F2253F691FE36217C592A0206 ] CLFS            C:\Windows\system32\CLFS.sys
17:20:51.0082 5100  CLFS - ok
17:20:51.0153 5100  [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
17:20:51.0166 5100  clr_optimization_v2.0.50727_32 - ok
17:20:51.0186 5100  [ D1CEEA2B47CB998321C579651CE3E4F8 ] clr_optimization_v2.0.50727_64 C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe
17:20:51.0198 5100  clr_optimization_v2.0.50727_64 - ok
17:20:51.0255 5100  [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
17:20:51.0332 5100  clr_optimization_v4.0.30319_32 - ok
17:20:51.0361 5100  [ C6F9AF94DCD58122A4D7E89DB6BED29D ] clr_optimization_v4.0.30319_64 C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
17:20:51.0409 5100  clr_optimization_v4.0.30319_64 - ok
17:20:51.0442 5100  [ 0840155D0BDDF1190F84A663C284BD33 ] CmBatt          C:\Windows\system32\DRIVERS\CmBatt.sys
17:20:51.0468 5100  CmBatt - ok
17:20:51.0480 5100  [ E19D3F095812725D88F9001985B94EDD ] cmdide          C:\Windows\system32\drivers\cmdide.sys
17:20:51.0493 5100  cmdide - ok
17:20:51.0538 5100  [ AAFCB52FE0037207FB6FBEA070D25EFE ] CNG             C:\Windows\system32\Drivers\cng.sys
17:20:51.0567 5100  CNG - ok
17:20:51.0640 5100  [ 1F394DF3714ED4280047810790E6DF69 ] CnxtHdAudService C:\Windows\system32\drivers\CHDRT64.sys
17:20:51.0680 5100  CnxtHdAudService - ok
17:20:51.0714 5100  [ 102DE219C3F61415F964C88E9085AD14 ] Compbatt        C:\Windows\system32\DRIVERS\compbatt.sys
17:20:51.0727 5100  Compbatt - ok
17:20:51.0743 5100  [ 03EDB043586CCEBA243D689BDDA370A8 ] CompositeBus    C:\Windows\system32\DRIVERS\CompositeBus.sys
17:20:51.0776 5100  CompositeBus - ok
17:20:51.0787 5100  COMSysApp - ok
17:20:51.0807 5100  [ 1C827878A998C18847245FE1F34EE597 ] crcdisk         C:\Windows\system32\drivers\crcdisk.sys
17:20:51.0820 5100  crcdisk - ok
17:20:51.0858 5100  [ 9C01375BE382E834CC26D1B7EAF2C4FE ] CryptSvc        C:\Windows\system32\cryptsvc.dll
17:20:51.0892 5100  CryptSvc - ok
17:20:51.0935 5100  [ 8C8BB58C3FE79B1AB8C394E8259CAAB1 ] ctfmon64        C:\Windows\system32\objsel64.exe
17:20:51.0962 5100  ctfmon64 ( UnsignedFile.Multi.Generic ) - warning
17:20:51.0962 5100  ctfmon64 - detected UnsignedFile.Multi.Generic (1)
17:20:52.0061 5100  [ 75E3C4BB1ED032310EDCF5691A452B4B ] DCDhcpService   C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe
17:20:52.0097 5100  DCDhcpService ( UnsignedFile.Multi.Generic ) - warning
17:20:52.0097 5100  DCDhcpService - detected UnsignedFile.Multi.Generic (1)
17:20:52.0157 5100  [ 5C627D1B1138676C0A7AB2C2C190D123 ] DcomLaunch      C:\Windows\system32\rpcss.dll
17:20:52.0212 5100  DcomLaunch - ok
17:20:52.0247 5100  [ 3CEC7631A84943677AA8FA8EE5B6B43D ] defragsvc       C:\Windows\System32\defragsvc.dll
17:20:52.0306 5100  defragsvc - ok
17:20:52.0349 5100  [ 9BB2EF44EAA163B29C4A4587887A0FE4 ] DfsC            C:\Windows\system32\Drivers\dfsc.sys
17:20:52.0428 5100  DfsC - ok
17:20:52.0480 5100  [ 43D808F5D9E1A18E5EEB5EBC83969E4E ] Dhcp            C:\Windows\system32\dhcpcore.dll
17:20:52.0519 5100  Dhcp - ok
17:20:52.0541 5100  [ 13096B05847EC78F0977F2C0F79E9AB3 ] discache        C:\Windows\system32\drivers\discache.sys
17:20:52.0600 5100  discache - ok
17:20:52.0646 5100  [ 9819EEE8B5EA3784EC4AF3B137A5244C ] Disk            C:\Windows\system32\drivers\disk.sys
17:20:52.0660 5100  Disk - ok
17:20:52.0705 5100  [ 16835866AAA693C7D7FCEBA8FFF706E4 ] Dnscache        C:\Windows\System32\dnsrslvr.dll
17:20:52.0736 5100  Dnscache - ok
17:20:52.0754 5100  [ B1FB3DDCA0FDF408750D5843591AFBC6 ] dot3svc         C:\Windows\System32\dot3svc.dll
17:20:52.0809 5100  dot3svc - ok
17:20:52.0827 5100  [ B26F4F737E8F9DF4F31AF6CF31D05820 ] DPS             C:\Windows\system32\dps.dll
17:20:52.0884 5100  DPS - ok
17:20:52.0927 5100  [ 9B19F34400D24DF84C858A421C205754 ] drmkaud         C:\Windows\system32\drivers\drmkaud.sys
17:20:52.0959 5100  drmkaud - ok
17:20:52.0988 5100  [ F5BEE30450E18E6B83A5012C100616FD ] DXGKrnl         C:\Windows\System32\drivers\dxgkrnl.sys
17:20:53.0019 5100  DXGKrnl - ok
17:20:53.0059 5100  [ 50AD8FC1DC800FF36087994C8F7FDFF2 ] e1yexpress      C:\Windows\system32\DRIVERS\e1y60x64.sys
17:20:53.0090 5100  e1yexpress - ok
17:20:53.0133 5100  [ E2DDA8726DA9CB5B2C4000C9018A9633 ] EapHost         C:\Windows\System32\eapsvc.dll
17:20:53.0190 5100  EapHost - ok
17:20:53.0274 5100  [ DC5D737F51BE844D8C82C695EB17372F ] ebdrv           C:\Windows\system32\drivers\evbda.sys
17:20:53.0346 5100  ebdrv - ok
17:20:53.0416 5100  [ 4353FF94D47A0A9D52B89ECCF0CDB013 ] eeCtrl          C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
17:20:53.0437 5100  eeCtrl - ok
17:20:53.0479 5100  [ C118A82CD78818C29AB228366EBF81C3 ] EFS             C:\Windows\System32\lsass.exe
17:20:53.0512 5100  EFS - ok
17:20:53.0568 5100  [ C4002B6B41975F057D98C439030CEA07 ] ehRecvr         C:\Windows\ehome\ehRecvr.exe
17:20:53.0607 5100  ehRecvr - ok
17:20:53.0628 5100  [ 4705E8EF9934482C5BB488CE28AFC681 ] ehSched         C:\Windows\ehome\ehsched.exe
17:20:53.0656 5100  ehSched - ok
17:20:53.0696 5100  [ 0E5DA5369A0FCAEA12456DD852545184 ] elxstor         C:\Windows\system32\drivers\elxstor.sys
17:20:53.0720 5100  elxstor - ok
17:20:53.0749 5100  [ 9EAFB3B3B60B8AD958985152A9309ACA ] epmntdrv        C:\Windows\system32\epmntdrv.sys
17:20:53.0768 5100  epmntdrv ( UnsignedFile.Multi.Generic ) - warning
17:20:53.0768 5100  epmntdrv - detected UnsignedFile.Multi.Generic (1)
17:20:53.0829 5100  [ C5BCCB378D0A896304A3E71BE7215983 ] EraserUtilRebootDrv C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
17:20:53.0843 5100  EraserUtilRebootDrv - ok
17:20:53.0861 5100  [ 34A3C54752046E79A126E15C51DB409B ] ErrDev          C:\Windows\system32\drivers\errdev.sys
17:20:53.0887 5100  ErrDev - ok
17:20:53.0928 5100  [ FB949ED2C93C878A189039F3D7730942 ] EuGdiDrv        C:\Windows\system32\EuGdiDrv.sys
17:20:53.0936 5100  EuGdiDrv ( UnsignedFile.Multi.Generic ) - warning
17:20:53.0936 5100  EuGdiDrv - detected UnsignedFile.Multi.Generic (1)
17:20:54.0025 5100  [ 4166F82BE4D24938977DD1746BE9B8A0 ] EventSystem     C:\Windows\system32\es.dll
17:20:54.0082 5100  EventSystem - ok
17:20:54.0118 5100  [ A510C654EC00C1E9BDD91EEB3A59823B ] exfat           C:\Windows\system32\drivers\exfat.sys
17:20:54.0158 5100  exfat - ok
17:20:54.0179 5100  [ 0ADC83218B66A6DB380C330836F3E36D ] fastfat         C:\Windows\system32\drivers\fastfat.sys
17:20:54.0234 5100  fastfat - ok
17:20:54.0288 5100  [ DBEFD454F8318A0EF691FDD2EAAB44EB ] Fax             C:\Windows\system32\fxssvc.exe
17:20:54.0328 5100  Fax - ok
17:20:54.0356 5100  [ D765D19CD8EF61F650C384F62FAC00AB ] fdc             C:\Windows\system32\drivers\fdc.sys
17:20:54.0409 5100  fdc - ok
17:20:54.0428 5100  [ 0438CAB2E03F4FB61455A7956026FE86 ] fdPHost         C:\Windows\system32\fdPHost.dll
17:20:54.0467 5100  fdPHost - ok
17:20:54.0494 5100  [ 802496CB59A30349F9A6DD22D6947644 ] FDResPub        C:\Windows\system32\fdrespub.dll
17:20:54.0548 5100  FDResPub - ok
17:20:54.0573 5100  [ 655661BE46B5F5F3FD454E2C3095B930 ] FileInfo        C:\Windows\system32\drivers\fileinfo.sys
17:20:54.0587 5100  FileInfo - ok
17:20:54.0601 5100  [ 5F671AB5BC87EEA04EC38A6CD5962A47 ] Filetrace       C:\Windows\system32\drivers\filetrace.sys
17:20:54.0658 5100  Filetrace - ok
17:20:54.0692 5100  [ C172A0F53008EAEB8EA33FE10E177AF5 ] flpydisk        C:\Windows\system32\drivers\flpydisk.sys
17:20:54.0708 5100  flpydisk - ok
17:20:54.0713 5100  [ DA6B67270FD9DB3697B20FCE94950741 ] FltMgr          C:\Windows\system32\drivers\fltmgr.sys
17:20:54.0732 5100  FltMgr - ok
17:20:54.0765 5100  [ 5C4CB4086FB83115B153E47ADD961A0C ] FontCache       C:\Windows\system32\FntCache.dll
17:20:54.0813 5100  FontCache - ok
17:20:54.0856 5100  [ A8B7F3818AB65695E3A0BB3279F6DCE6 ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
17:20:54.0869 5100  FontCache3.0.0.0 - ok
17:20:54.0891 5100  [ D43703496149971890703B4B1B723EAC ] FsDepends       C:\Windows\system32\drivers\FsDepends.sys
17:20:54.0905 5100  FsDepends - ok
17:20:54.0931 5100  [ 6BD9295CC032DD3077C671FCCF579A7B ] Fs_Rec          C:\Windows\system32\drivers\Fs_Rec.sys
17:20:54.0945 5100  Fs_Rec - ok
17:20:55.0003 5100  [ 1F7B25B858FA27015169FE95E54108ED ] fvevol          C:\Windows\system32\DRIVERS\fvevol.sys
17:20:55.0023 5100  fvevol - ok
17:20:55.0046 5100  [ 8C778D335C9D272CFD3298AB02ABE3B6 ] gagp30kx        C:\Windows\system32\drivers\gagp30kx.sys
17:20:55.0060 5100  gagp30kx - ok
17:20:55.0106 5100  [ 44E1DA6AAF3A0AB8B69B7EC53B07B836 ] GFilterSvc      C:\Windows\System32\GFilterSvc.exe
17:20:55.0113 5100  GFilterSvc ( UnsignedFile.Multi.Generic ) - warning
17:20:55.0113 5100  GFilterSvc - detected UnsignedFile.Multi.Generic (1)
17:20:55.0143 5100  [ 16C2A6BCDDA8952C2035DEC861492A19 ] ggflt           C:\Windows\system32\DRIVERS\ggflt.sys
17:20:55.0155 5100  ggflt - ok
17:20:55.0180 5100  [ 6B503DF845EABF3457E49FBBDA26C10E ] ggsemc          C:\Windows\system32\DRIVERS\ggsemc.sys
17:20:55.0193 5100  ggsemc - ok
17:20:55.0235 5100  [ 277BBC7E1AA1EE957F573A10ECA7EF3A ] gpsvc           C:\Windows\System32\gpsvc.dll
17:20:55.0279 5100  gpsvc - ok
17:20:55.0302 5100  [ F2523EF6460FC42405B12248338AB2F0 ] hcw85cir        C:\Windows\system32\drivers\hcw85cir.sys
17:20:55.0336 5100  hcw85cir - ok
17:20:55.0368 5100  [ 975761C778E33CD22498059B91E7373A ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
17:20:55.0405 5100  HdAudAddService - ok
17:20:55.0438 5100  [ 97BFED39B6B79EB12CDDBFEED51F56BB ] HDAudBus        C:\Windows\system32\DRIVERS\HDAudBus.sys
17:20:55.0458 5100  HDAudBus - ok
17:20:55.0482 5100  [ 78E86380454A7B10A5EB255DC44A355F ] HidBatt         C:\Windows\system32\drivers\HidBatt.sys
17:20:55.0510 5100  HidBatt - ok
17:20:55.0526 5100  [ 7FD2A313F7AFE5C4DAB14798C48DD104 ] HidBth          C:\Windows\system32\drivers\hidbth.sys
17:20:55.0558 5100  HidBth - ok
17:20:55.0594 5100  [ 0A77D29F311B88CFAE3B13F9C1A73825 ] HidIr           C:\Windows\system32\drivers\hidir.sys
17:20:55.0613 5100  HidIr - ok
17:20:55.0643 5100  [ BD9EB3958F213F96B97B1D897DEE006D ] hidserv         C:\Windows\system32\hidserv.dll
17:20:55.0698 5100  hidserv - ok
17:20:55.0730 5100  [ 9592090A7E2B61CD582B612B6DF70536 ] HidUsb          C:\Windows\system32\DRIVERS\hidusb.sys
17:20:55.0746 5100  HidUsb - ok
17:20:55.0768 5100  [ 387E72E739E15E3D37907A86D9FF98E2 ] hkmsvc          C:\Windows\system32\kmsvc.dll
17:20:55.0821 5100  hkmsvc - ok
17:20:55.0839 5100  [ EFDFB3DD38A4376F93E7985173813ABD ] HomeGroupListener C:\Windows\system32\ListSvc.dll
17:20:55.0868 5100  HomeGroupListener - ok
17:20:55.0902 5100  [ 908ACB1F594274965A53926B10C81E89 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
17:20:55.0937 5100  HomeGroupProvider - ok
17:20:55.0981 5100  [ 39D2ABCD392F3D8A6DCE7B60AE7B8EFC ] HpSAMD          C:\Windows\system32\drivers\HpSAMD.sys
17:20:55.0995 5100  HpSAMD - ok
17:20:56.0022 5100  [ 0EA7DE1ACB728DD5A369FD742D6EEE28 ] HTTP            C:\Windows\system32\drivers\HTTP.sys
17:20:56.0082 5100  HTTP - ok
17:20:56.0102 5100  [ A5462BD6884960C9DC85ED49D34FF392 ] hwpolicy        C:\Windows\system32\drivers\hwpolicy.sys
17:20:56.0115 5100  hwpolicy - ok
17:20:56.0151 5100  [ FA55C73D4AFFA7EE23AC4BE53B4592D3 ] i8042prt        C:\Windows\system32\DRIVERS\i8042prt.sys
17:20:56.0168 5100  i8042prt - ok
17:20:56.0186 5100  [ F7CE9BE72EDAC499B713ECA6DAE5D26F ] iaStor          C:\Windows\system32\drivers\iaStor.sys
17:20:56.0203 5100  iaStor - ok
17:20:56.0255 5100  [ B25F192EA1F84A316EB7C19EFCCCF33D ] IAStorDataMgrSvc C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
17:20:56.0266 5100  IAStorDataMgrSvc - ok
17:20:56.0292 5100  [ AAAF44DB3BD0B9D1FB6969B23ECC8366 ] iaStorV         C:\Windows\system32\drivers\iaStorV.sys
17:20:56.0313 5100  iaStorV - ok
17:20:56.0424 5100  [ 3CC7B3BB1A9EA201A040883EDFAA67A0 ] IconMan_R       C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
17:20:56.0471 5100  IconMan_R - ok
17:20:56.0563 5100  [ 5988FC40F8DB5B0739CD1E3A5D0D78BD ] idsvc           C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe
17:20:56.0591 5100  idsvc - ok
17:20:56.0680 5100  [ A48928D4CCA6F8B731989DB08CF2C0AB ] IDSVia64        C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130404.001\IDSvia64.sys
17:20:56.0698 5100  IDSVia64 - ok
17:20:56.0731 5100  [ 5C18831C61933628F5BB0EA2675B9D21 ] iirsp           C:\Windows\system32\drivers\iirsp.sys
17:20:56.0745 5100  iirsp - ok
17:20:56.0785 5100  [ FCD84C381E0140AF901E58D48882D26B ] IKEEXT          C:\Windows\System32\ikeext.dll
17:20:56.0849 5100  IKEEXT - ok
17:20:56.0869 5100  [ F00F20E70C6EC3AA366910083A0518AA ] intelide        C:\Windows\system32\drivers\intelide.sys
17:20:56.0882 5100  intelide - ok
17:20:56.0921 5100  [ ADA036632C664CAA754079041CF1F8C1 ] intelppm        C:\Windows\system32\DRIVERS\intelppm.sys
17:20:56.0951 5100  intelppm - ok
17:20:56.0978 5100  [ 098A91C54546A3B878DAD6A7E90A455B ] IPBusEnum       C:\Windows\system32\ipbusenum.dll
17:20:57.0029 5100  IPBusEnum - ok
17:20:57.0047 5100  [ C9F0E1BD74365A8771590E9008D22AB6 ] IpFilterDriver  C:\Windows\system32\DRIVERS\ipfltdrv.sys
17:20:57.0084 5100  IpFilterDriver - ok
17:20:57.0139 5100  [ 08C2957BB30058E663720C5606885653 ] iphlpsvc        C:\Windows\System32\iphlpsvc.dll
17:20:57.0194 5100  iphlpsvc - ok
17:20:57.0218 5100  [ 0FC1AEA580957AA8817B8F305D18CA3A ] IPMIDRV         C:\Windows\system32\drivers\IPMIDrv.sys
17:20:57.0251 5100  IPMIDRV - ok
17:20:57.0274 5100  [ AF9B39A7E7B6CAA203B3862582E9F2D0 ] IPNAT           C:\Windows\system32\drivers\ipnat.sys
17:20:57.0332 5100  IPNAT - ok
17:20:57.0354 5100  [ 3ABF5E7213EB28966D55D58B515D5CE9 ] IRENUM          C:\Windows\system32\drivers\irenum.sys
17:20:57.0392 5100  IRENUM - ok
17:20:57.0424 5100  [ 2F7B28DC3E1183E5EB418DF55C204F38 ] isapnp          C:\Windows\system32\drivers\isapnp.sys
17:20:57.0437 5100  isapnp - ok
17:20:57.0460 5100  [ D931D7309DEB2317035B07C9F9E6B0BD ] iScsiPrt        C:\Windows\system32\drivers\msiscsi.sys
17:20:57.0478 5100  iScsiPrt - ok
17:20:57.0501 5100  [ F415A88162D23977B5EDAE4F0410E903 ] IviRegMgr       C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
17:20:57.0514 5100  IviRegMgr - ok
17:20:57.0540 5100  [ BC02336F1CBA7DCC7D1213BB588A68A5 ] kbdclass        C:\Windows\system32\DRIVERS\kbdclass.sys
17:20:57.0554 5100  kbdclass - ok
17:20:57.0580 5100  [ 0705EFF5B42A9DB58548EEC3B26BB484 ] kbdhid          C:\Windows\system32\drivers\kbdhid.sys
17:20:57.0613 5100  kbdhid - ok
17:20:57.0635 5100  [ C118A82CD78818C29AB228366EBF81C3 ] KeyIso          C:\Windows\system32\lsass.exe
17:20:57.0650 5100  KeyIso - ok
17:20:57.0673 5100  [ 97A7070AEA4C058B6418519E869A63B4 ] KSecDD          C:\Windows\system32\Drivers\ksecdd.sys
17:20:57.0688 5100  KSecDD - ok
17:20:57.0709 5100  [ 7EFB9333E4ECCE6AE4AE9D777D9E553E ] KSecPkg         C:\Windows\system32\Drivers\ksecpkg.sys
17:20:57.0725 5100  KSecPkg - ok
17:20:57.0762 5100  [ 6869281E78CB31A43E969F06B57347C4 ] ksthunk         C:\Windows\system32\drivers\ksthunk.sys
17:20:57.0815 5100  ksthunk - ok
17:20:57.0842 5100  [ 6AB66E16AA859232F64DEB66887A8C9C ] KtmRm           C:\Windows\system32\msdtckrm.dll
17:20:57.0886 5100  KtmRm - ok
17:20:57.0931 5100  [ D9F42719019740BAA6D1C6D536CBDAA6 ] LanmanServer    C:\Windows\system32\srvsvc.dll
17:20:57.0987 5100  LanmanServer - ok
17:20:58.0022 5100  [ 851A1382EED3E3A7476DB004F4EE3E1A ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
17:20:58.0077 5100  LanmanWorkstation - ok
17:20:58.0140 5100  [ 101CFC3764C27259847188581B185EA6 ] LiveTunerPM     C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor64.sys
17:20:58.0151 5100  LiveTunerPM - ok
17:20:58.0196 5100  [ 1538831CF8AD2979A04C423779465827 ] lltdio          C:\Windows\system32\DRIVERS\lltdio.sys
17:20:58.0248 5100  lltdio - ok
17:20:58.0270 5100  [ C1185803384AB3FEED115F79F109427F ] lltdsvc         C:\Windows\System32\lltdsvc.dll
17:20:58.0331 5100  lltdsvc - ok
17:20:58.0368 5100  [ F993A32249B66C9D622EA5592A8B76B8 ] lmhosts         C:\Windows\System32\lmhsvc.dll
17:20:58.0420 5100  lmhosts - ok
17:20:58.0475 5100  [ 98B16E756243BEA9410E32025B19C06F ] LMS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
17:20:58.0492 5100  LMS - ok
17:20:58.0523 5100  [ 1A93E54EB0ECE102495A51266DCDB6A6 ] LSI_FC          C:\Windows\system32\drivers\lsi_fc.sys
17:20:58.0539 5100  LSI_FC - ok
17:20:58.0555 5100  [ 1047184A9FDC8BDBFF857175875EE810 ] LSI_SAS         C:\Windows\system32\drivers\lsi_sas.sys
17:20:58.0570 5100  LSI_SAS - ok
17:20:58.0574 5100  [ 30F5C0DE1EE8B5BC9306C1F0E4A75F93 ] LSI_SAS2        C:\Windows\system32\drivers\lsi_sas2.sys
17:20:58.0589 5100  LSI_SAS2 - ok
17:20:58.0593 5100  [ 0504EACAFF0D3C8AED161C4B0D369D4A ] LSI_SCSI        C:\Windows\system32\drivers\lsi_scsi.sys
17:20:58.0608 5100  LSI_SCSI - ok
17:20:58.0633 5100  [ 43D0F98E1D56CCDDB0D5254CFF7B356E ] luafv           C:\Windows\system32\drivers\luafv.sys
17:20:58.0685 5100  luafv - ok
17:20:58.0733 5100  [ 92EB844D90615CB266F84C3202B8786E ] MBAMProtector   C:\Windows\system32\drivers\mbam.sys
17:20:58.0744 5100  MBAMProtector - ok
17:20:58.0819 5100  [ 1ACAA67676E9E7BDA5E0C41B6E0DECAF ] MBAMScheduler   C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
17:20:58.0834 5100  MBAMScheduler - ok
17:20:58.0858 5100  [ 916B8954AC3E06DC9E898AFFB41F3FB6 ] MBAMService     C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
17:20:58.0878 5100  MBAMService - ok
17:20:58.0902 5100  [ 0BE09CD858ABF9DF6ED259D57A1A1663 ] Mcx2Svc         C:\Windows\system32\Mcx2Svc.dll
17:20:58.0932 5100  Mcx2Svc - ok
17:20:58.0954 5100  [ A55805F747C6EDB6A9080D7C633BD0F4 ] megasas         C:\Windows\system32\drivers\megasas.sys
17:20:58.0967 5100  megasas - ok
17:20:58.0996 5100  [ BAF74CE0072480C3B6B7C13B2A94D6B3 ] MegaSR          C:\Windows\system32\drivers\MegaSR.sys
17:20:59.0014 5100  MegaSR - ok
17:20:59.0050 5100  [ A6518DCC42F7A6E999BB3BEA8FD87567 ] MEIx64          C:\Windows\system32\DRIVERS\HECIx64.sys
17:20:59.0062 5100  MEIx64 - ok
17:20:59.0093 5100  [ E40E80D0304A73E8D269F7141D77250B ] MMCSS           C:\Windows\system32\mmcss.dll
17:20:59.0131 5100  MMCSS - ok
17:20:59.0149 5100  [ 800BA92F7010378B09F9ED9270F07137 ] Modem           C:\Windows\system32\drivers\modem.sys
17:20:59.0196 5100  Modem - ok
17:20:59.0235 5100  [ B03D591DC7DA45ECE20B3B467E6AADAA ] monitor         C:\Windows\system32\DRIVERS\monitor.sys
17:20:59.0265 5100  monitor - ok
17:20:59.0290 5100  [ 7D27EA49F3C1F687D357E77A470AEA99 ] mouclass        C:\Windows\system32\DRIVERS\mouclass.sys
17:20:59.0305 5100  mouclass - ok
17:20:59.0326 5100  [ D3BF052C40B0C4166D9FD86A4288C1E6 ] mouhid          C:\Windows\system32\DRIVERS\mouhid.sys
17:20:59.0356 5100  mouhid - ok
17:20:59.0390 5100  [ 32E7A3D591D671A6DF2DB515A5CBE0FA ] mountmgr        C:\Windows\system32\drivers\mountmgr.sys
17:20:59.0405 5100  mountmgr - ok
17:20:59.0457 5100  [ DCE0561BED0433643A49966277D6D502 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
17:20:59.0471 5100  MozillaMaintenance - ok
17:20:59.0489 5100  [ A44B420D30BD56E145D6A2BC8768EC58 ] mpio            C:\Windows\system32\drivers\mpio.sys
17:20:59.0505 5100  mpio - ok
17:20:59.0535 5100  [ 6C38C9E45AE0EA2FA5E551F2ED5E978F ] mpsdrv          C:\Windows\system32\drivers\mpsdrv.sys
17:20:59.0574 5100  mpsdrv - ok
17:20:59.0610 5100  [ 54FFC9C8898113ACE189D4AA7199D2C1 ] MpsSvc          C:\Windows\system32\mpssvc.dll
17:20:59.0657 5100  MpsSvc - ok
17:20:59.0678 5100  [ DC722758B8261E1ABAFD31A3C0A66380 ] MRxDAV          C:\Windows\system32\drivers\mrxdav.sys
17:20:59.0713 5100  MRxDAV - ok
17:20:59.0749 5100  [ A5D9106A73DC88564C825D317CAC68AC ] mrxsmb          C:\Windows\system32\DRIVERS\mrxsmb.sys
17:20:59.0797 5100  mrxsmb - ok
17:20:59.0816 5100  [ D711B3C1D5F42C0C2415687BE09FC163 ] mrxsmb10        C:\Windows\system32\DRIVERS\mrxsmb10.sys
17:20:59.0835 5100  mrxsmb10 - ok
17:20:59.0839 5100  [ 9423E9D355C8D303E76B8CFBD8A5C30C ] mrxsmb20        C:\Windows\system32\DRIVERS\mrxsmb20.sys
17:20:59.0856 5100  mrxsmb20 - ok
17:20:59.0886 5100  [ C25F0BAFA182CBCA2DD3C851C2E75796 ] msahci          C:\Windows\system32\drivers\msahci.sys
17:20:59.0900 5100  msahci - ok
17:20:59.0912 5100  [ DB801A638D011B9633829EB6F663C900 ] msdsm           C:\Windows\system32\drivers\msdsm.sys
17:20:59.0927 5100  msdsm - ok
17:20:59.0949 5100  [ DE0ECE52236CFA3ED2DBFC03F28253A8 ] MSDTC           C:\Windows\System32\msdtc.exe
17:21:00.0024 5100  MSDTC - ok
17:21:00.0061 5100  [ AA3FB40E17CE1388FA1BEDAB50EA8F96 ] Msfs            C:\Windows\system32\drivers\Msfs.sys
17:21:00.0108 5100  Msfs - ok
17:21:00.0153 5100  [ F9D215A46A8B9753F61767FA72A20326 ] mshidkmdf       C:\Windows\System32\drivers\mshidkmdf.sys
17:21:00.0204 5100  mshidkmdf - ok
17:21:00.0207 5100  [ D916874BBD4F8B07BFB7FA9B3CCAE29D ] msisadrv        C:\Windows\system32\drivers\msisadrv.sys
17:21:00.0220 5100  msisadrv - ok
17:21:00.0262 5100  [ 808E98FF49B155C522E6400953177B08 ] MSiSCSI         C:\Windows\system32\iscsiexe.dll
17:21:00.0317 5100  MSiSCSI - ok
17:21:00.0320 5100  msiserver - ok
17:21:00.0342 5100  [ 49CCF2C4FEA34FFAD8B1B59D49439366 ] MSKSSRV         C:\Windows\system32\drivers\MSKSSRV.sys
17:21:00.0399 5100  MSKSSRV - ok
17:21:00.0428 5100  [ BDD71ACE35A232104DDD349EE70E1AB3 ] MSPCLOCK        C:\Windows\system32\drivers\MSPCLOCK.sys
17:21:00.0480 5100  MSPCLOCK - ok
17:21:00.0502 5100  [ 4ED981241DB27C3383D72092B618A1D0 ] MSPQM           C:\Windows\system32\drivers\MSPQM.sys
17:21:00.0556 5100  MSPQM - ok
17:21:00.0580 5100  [ 759A9EEB0FA9ED79DA1FB7D4EF78866D ] MsRPC           C:\Windows\system32\drivers\MsRPC.sys
17:21:00.0600 5100  MsRPC - ok
17:21:00.0620 5100  [ 0EED230E37515A0EAEE3C2E1BC97B288 ] mssmbios        C:\Windows\system32\DRIVERS\mssmbios.sys
17:21:00.0634 5100  mssmbios - ok
17:21:00.0675 5100  [ 2E66F9ECB30B4221A318C92AC2250779 ] MSTEE           C:\Windows\system32\drivers\MSTEE.sys
17:21:00.0728 5100  MSTEE - ok
17:21:00.0742 5100  [ 7EA404308934E675BFFDE8EDF0757BCD ] MTConfig        C:\Windows\system32\drivers\MTConfig.sys
17:21:00.0771 5100  MTConfig - ok
17:21:00.0794 5100  [ F9A18612FD3526FE473C1BDA678D61C8 ] Mup             C:\Windows\system32\Drivers\mup.sys
17:21:00.0808 5100  Mup - ok
17:21:00.0844 5100  [ 582AC6D9873E31DFA28A4547270862DD ] napagent        C:\Windows\system32\qagentRT.dll
17:21:00.0905 5100  napagent - ok
17:21:00.0958 5100  [ 1EA3749C4114DB3E3161156FFFFA6B33 ] NativeWifiP     C:\Windows\system32\DRIVERS\nwifi.sys
17:21:00.0998 5100  NativeWifiP - ok
17:21:01.0131 5100  [ E0E4A1F81A7D69C595A8A9DDAD084C19 ] NAUpdate        C:\Program Files (x86)\Nero\Update\NASvc.exe
17:21:01.0153 5100  NAUpdate - ok
17:21:01.0229 5100  [ 88A2F45CE66B904285978D6BB13AFEB2 ] NAVENG          C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130402.025\ENG64.SYS
17:21:01.0244 5100  NAVENG - ok
17:21:01.0313 5100  [ D2A545DA3A90BBFA40E020C23F1B7A48 ] NAVEX15         C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130402.025\EX64.SYS
17:21:01.0364 5100  NAVEX15 - ok
17:21:01.0405 5100  [ 760E38053BF56E501D562B70AD796B88 ] NDIS            C:\Windows\system32\drivers\ndis.sys
17:21:01.0435 5100  NDIS - ok
17:21:01.0464 5100  [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap         C:\Windows\system32\DRIVERS\ndiscap.sys
17:21:01.0520 5100  NdisCap - ok
17:21:01.0559 5100  [ 30639C932D9FEF22B31268FE25A1B6E5 ] NdisTapi        C:\Windows\system32\DRIVERS\ndistapi.sys
17:21:01.0596 5100  NdisTapi - ok
17:21:01.0608 5100  [ 136185F9FB2CC61E573E676AA5402356 ] Ndisuio         C:\Windows\system32\DRIVERS\ndisuio.sys
17:21:01.0664 5100  Ndisuio - ok
17:21:01.0668 5100  [ 53F7305169863F0A2BDDC49E116C2E11 ] NdisWan         C:\Windows\system32\DRIVERS\ndiswan.sys
17:21:01.0719 5100  NdisWan - ok
17:21:01.0740 5100  [ 015C0D8E0E0421B4CFD48CFFE2825879 ] NDProxy         C:\Windows\system32\drivers\NDProxy.sys
17:21:01.0787 5100  NDProxy - ok
17:21:01.0830 5100  [ 86743D9F5D2B1048062B14B1D84501C4 ] NetBIOS         C:\Windows\system32\DRIVERS\netbios.sys
17:21:01.0879 5100  NetBIOS - ok
17:21:01.0899 5100  [ 09594D1089C523423B32A4229263F068 ] NetBT           C:\Windows\system32\DRIVERS\netbt.sys
17:21:01.0938 5100  NetBT - ok
17:21:01.0969 5100  [ C118A82CD78818C29AB228366EBF81C3 ] Netlogon        C:\Windows\system32\lsass.exe
17:21:01.0983 5100  Netlogon - ok
17:21:02.0016 5100  [ 847D3AE376C0817161A14A82C8922A9E ] Netman          C:\Windows\System32\netman.dll
17:21:02.0072 5100  Netman - ok
17:21:02.0114 5100  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:21:02.0128 5100  NetMsmqActivator - ok
17:21:02.0132 5100  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:21:02.0145 5100  NetPipeActivator - ok
17:21:02.0153 5100  [ 5F28111C648F1E24F7DBC87CDEB091B8 ] netprofm        C:\Windows\System32\netprofm.dll
17:21:02.0206 5100  netprofm - ok
17:21:02.0213 5100  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:21:02.0226 5100  NetTcpActivator - ok
17:21:02.0229 5100  [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
17:21:02.0242 5100  NetTcpPortSharing - ok
17:21:02.0280 5100  [ 77889813BE4D166CDAB78DDBA990DA92 ] nfrd960         C:\Windows\system32\drivers\nfrd960.sys
17:21:02.0294 5100  nfrd960 - ok
17:21:02.0358 5100  [ 241BD3019FB31E812A51B31B06906335 ] NIS             C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe
17:21:02.0372 5100  NIS - ok
17:21:02.0412 5100  [ 8AD77806D336673F270DB31645267293 ] NlaSvc          C:\Windows\System32\nlasvc.dll
17:21:02.0430 5100  NlaSvc - ok
17:21:02.0474 5100  [ 4903177FC90E77ABEB19021451E9475E ] nmwcd           C:\Windows\system32\drivers\ccdcmbx64.sys
17:21:02.0517 5100  nmwcd - ok
17:21:02.0550 5100  [ E6844A4C97E5409BBE24BB4ED000320D ] nmwcdc          C:\Windows\system32\drivers\ccdcmbox64.sys
17:21:02.0592 5100  nmwcdc - ok
17:21:02.0646 5100  [ C31FA031335EFF434B2D94278E74BCCE ] npf             C:\Windows\system32\drivers\npf.sys
17:21:02.0657 5100  npf - ok
17:21:02.0687 5100  [ 1E4C4AB5C9B8DD13179BBDC75A2A01F7 ] Npfs            C:\Windows\system32\drivers\Npfs.sys
17:21:02.0725 5100  Npfs - ok
17:21:02.0750 5100  [ D54BFDF3E0C953F823B3D0BFE4732528 ] nsi             C:\Windows\system32\nsisvc.dll
17:21:02.0787 5100  nsi - ok
17:21:02.0798 5100  [ E7F5AE18AF4168178A642A9247C63001 ] nsiproxy        C:\Windows\system32\drivers\nsiproxy.sys
17:21:02.0856 5100  nsiproxy - ok
17:21:02.0936 5100  [ E453ACF4E7D44E5530B5D5F2B9CA8563 ] Ntfs            C:\Windows\system32\drivers\Ntfs.sys
17:21:02.0994 5100  Ntfs - ok
17:21:03.0025 5100  [ 9899284589F75FA8724FF3D16AED75C1 ] Null            C:\Windows\system32\drivers\Null.sys
17:21:03.0081 5100  Null - ok
17:21:03.0122 5100  [ 1F07B814C0BB5AABA703ABFF1F31F2E8 ] NVHDA           C:\Windows\system32\drivers\nvhda64v.sys
17:21:03.0137 5100  NVHDA - ok
17:21:03.0350 5100  [ 26AA3C7E6E1DB7107BF93503F6F57E88 ] nvlddmkm        C:\Windows\system32\DRIVERS\nvlddmkm.sys
17:21:03.0673 5100  nvlddmkm - ok
17:21:03.0699 5100  [ 0A92CB65770442ED0DC44834632F66AD ] nvraid          C:\Windows\system32\drivers\nvraid.sys
17:21:03.0714 5100  nvraid - ok
17:21:03.0732 5100  [ DAB0E87525C10052BF65F06152F37E4A ] nvstor          C:\Windows\system32\drivers\nvstor.sys
17:21:03.0749 5100  nvstor - ok
17:21:03.0801 5100  [ A83AC04D672567CAF8BE7A4D73C0B850 ] NVSvc           C:\Windows\system32\nvvsvc.exe
17:21:03.0826 5100  NVSvc - ok
17:21:03.0909 5100  [ FB660F80BDC4F13D594996976AFAECD9 ] nvUpdatusService C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
17:21:03.0941 5100  nvUpdatusService - ok
17:21:03.0982 5100  [ 270D7CD42D6E3979F6DD0146650F0E05 ] nv_agp          C:\Windows\system32\drivers\nv_agp.sys
17:21:03.0998 5100  nv_agp - ok
17:21:04.0033 5100  [ 3589478E4B22CE21B41FA1BFC0B8B8A0 ] ohci1394        C:\Windows\system32\drivers\ohci1394.sys
17:21:04.0065 5100  ohci1394 - ok
17:21:04.0115 5100  [ 9D10F99A6712E28F8ACD5641E3A7EA6B ] ose             C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
17:21:04.0128 5100  ose - ok
17:21:04.0241 5100  [ 61BFFB5F57AD12F83AB64B7181829B34 ] osppsvc         C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
17:21:04.0391 5100  osppsvc - ok
17:21:04.0433 5100  [ 3EAC4455472CC2C97107B5291E0DCAFE ] p2pimsvc        C:\Windows\system32\pnrpsvc.dll
17:21:04.0469 5100  p2pimsvc - ok
17:21:04.0487 5100  [ 927463ECB02179F88E4B9A17568C63C3 ] p2psvc          C:\Windows\system32\p2psvc.dll
17:21:04.0506 5100  p2psvc - ok
17:21:04.0527 5100  [ 0086431C29C35BE1DBC43F52CC273887 ] Parport         C:\Windows\system32\drivers\parport.sys
17:21:04.0558 5100  Parport - ok
17:21:04.0584 5100  [ E9766131EEADE40A27DC27D2D68FBA9C ] partmgr         C:\Windows\system32\drivers\partmgr.sys
17:21:04.0599 5100  partmgr - ok
17:21:04.0633 5100  [ 3AEAA8B561E63452C655DC0584922257 ] PcaSvc          C:\Windows\System32\pcasvc.dll
17:21:04.0672 5100  PcaSvc - ok
17:21:04.0715 5100  [ 3FDE033DFB0D07F8B7D5C9A3044AA121 ] pccsmcfd        C:\Windows\system32\DRIVERS\pccsmcfdx64.sys
17:21:04.0744 5100  pccsmcfd - ok
17:21:04.0775 5100  [ 94575C0571D1462A0F70BDE6BD6EE6B3 ] pci             C:\Windows\system32\drivers\pci.sys
17:21:04.0792 5100  pci - ok
17:21:04.0801 5100  [ B5B8B5EF2E5CB34DF8DCF8831E3534FA ] pciide          C:\Windows\system32\drivers\pciide.sys
17:21:04.0814 5100  pciide - ok
17:21:04.0826 5100  [ B2E81D4E87CE48589F98CB8C05B01F2F ] pcmcia          C:\Windows\system32\drivers\pcmcia.sys
17:21:04.0843 5100  pcmcia - ok
17:21:04.0848 5100  [ D6B9C2E1A11A3A4B26A182FFEF18F603 ] pcw             C:\Windows\system32\drivers\pcw.sys
17:21:04.0862 5100  pcw - ok
17:21:04.0888 5100  [ 68769C3356B3BE5D1C732C97B9A80D6E ] PEAUTH          C:\Windows\system32\drivers\peauth.sys
17:21:04.0945 5100  PEAUTH - ok
17:21:05.0030 5100  [ E495E408C93141E8FC72DC0C6046DDFA ] PerfHost        C:\Windows\SysWow64\perfhost.exe
17:21:05.0065 5100  PerfHost - ok
17:21:05.0126 5100  [ C7CF6A6E137463219E1259E3F0F0DD6C ] pla             C:\Windows\system32\pla.dll
17:21:05.0200 5100  pla - ok
17:21:05.0264 5100  [ 25FBDEF06C4D92815B353F6E792C8129 ] PlugPlay        C:\Windows\system32\umpnpmgr.dll
17:21:05.0304 5100  PlugPlay - ok
17:21:05.0404 5100  [ 63694C307273062A2167AE4CE80730EF ] PMBDeviceInfoProvider c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe
17:21:05.0424 5100  PMBDeviceInfoProvider - ok
17:21:05.0440 5100  [ 7195581CEC9BB7D12ABE54036ACC2E38 ] PNRPAutoReg     C:\Windows\system32\pnrpauto.dll
17:21:05.0469 5100  PNRPAutoReg - ok
17:21:05.0488 5100  [ 3EAC4455472CC2C97107B5291E0DCAFE ] PNRPsvc         C:\Windows\system32\pnrpsvc.dll
17:21:05.0506 5100  PNRPsvc - ok
17:21:05.0554 5100  [ 4F15D75ADF6156BF56ECED6D4A55C389 ] PolicyAgent     C:\Windows\System32\ipsecsvc.dll
17:21:05.0610 5100  PolicyAgent - ok
17:21:05.0644 5100  [ 6BA9D927DDED70BD1A9CADED45F8B184 ] Power           C:\Windows\system32\umpo.dll
17:21:05.0697 5100  Power - ok
17:21:05.0741 5100  [ F92A2C41117A11A00BE01CA01A7FCDE9 ] PptpMiniport    C:\Windows\system32\DRIVERS\raspptp.sys
17:21:05.0791 5100  PptpMiniport - ok
17:21:05.0813 5100  [ 0D922E23C041EFB1C3FAC2A6F943C9BF ] Processor       C:\Windows\system32\drivers\processr.sys
17:21:05.0843 5100  Processor - ok
17:21:05.0878 5100  [ 53E83F1F6CF9D62F32801CF66D8352A8 ] ProfSvc         C:\Windows\system32\profsvc.dll
17:21:05.0911 5100  ProfSvc - ok
17:21:05.0926 5100  [ C118A82CD78818C29AB228366EBF81C3 ] ProtectedStorage C:\Windows\system32\lsass.exe
17:21:05.0940 5100  ProtectedStorage - ok
17:21:05.0964 5100  [ 0557CF5A2556BD58E26384169D72438D ] Psched          C:\Windows\system32\DRIVERS\pacer.sys
17:21:06.0011 5100  Psched - ok
17:21:06.0063 5100  [ FB46E9A827A8799EBD7BFA9128C91F37 ] PSI             C:\Windows\system32\DRIVERS\psi_mf.sys
17:21:06.0075 5100  PSI - ok
17:21:06.0116 5100  [ F036CFB275D0C55F4E45FBBF5F98B3C8 ] PSI_SVC_2       C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
17:21:06.0131 5100  PSI_SVC_2 - ok
17:21:06.0179 5100  [ A53A15A11EBFD21077463EE2C7AFEEF0 ] ql2300          C:\Windows\system32\drivers\ql2300.sys
17:21:06.0221 5100  ql2300 - ok
17:21:06.0235 5100  [ 4F6D12B51DE1AAEFF7DC58C4D75423C8 ] ql40xx          C:\Windows\system32\drivers\ql40xx.sys
17:21:06.0250 5100  ql40xx - ok
17:21:06.0288 5100  [ 906191634E99AEA92C4816150BDA3732 ] QWAVE           C:\Windows\system32\qwave.dll
17:21:06.0312 5100  QWAVE - ok
17:21:06.0322 5100  [ 76707BB36430888D9CE9D705398ADB6C ] QWAVEdrv        C:\Windows\system32\drivers\qwavedrv.sys
17:21:06.0359 5100  QWAVEdrv - ok
17:21:06.0387 5100  [ 5A0DA8AD5762FA2D91678A8A01311704 ] RasAcd          C:\Windows\system32\DRIVERS\rasacd.sys
17:21:06.0441 5100  RasAcd - ok
17:21:06.0479 5100  [ 7ECFF9B22276B73F43A99A15A6094E90 ] RasAgileVpn     C:\Windows\system32\DRIVERS\AgileVpn.sys
17:21:06.0517 5100  RasAgileVpn - ok
17:21:06.0533 5100  [ 8F26510C5383B8DBE976DE1CD00FC8C7 ] RasAuto         C:\Windows\System32\rasauto.dll
17:21:06.0589 5100  RasAuto - ok
17:21:06.0594 5100  [ 471815800AE33E6F1C32FB1B97C490CA ] Rasl2tp         C:\Windows\system32\DRIVERS\rasl2tp.sys
17:21:06.0643 5100  Rasl2tp - ok
17:21:06.0672 5100  [ EE867A0870FC9E4972BA9EAAD35651E2 ] RasMan          C:\Windows\System32\rasmans.dll
17:21:06.0714 5100  RasMan - ok
17:21:06.0735 5100  [ 855C9B1CD4756C5E9A2AA58A15F58C25 ] RasPppoe        C:\Windows\system32\DRIVERS\raspppoe.sys
17:21:06.0789 5100  RasPppoe - ok
17:21:06.0820 5100  [ E8B1E447B008D07FF47D016C2B0EEECB ] RasSstp         C:\Windows\system32\DRIVERS\rassstp.sys
17:21:06.0871 5100  RasSstp - ok
17:21:06.0888 5100  [ 77F665941019A1594D887A74F301FA2F ] rdbss           C:\Windows\system32\DRIVERS\rdbss.sys
17:21:06.0942 5100  rdbss - ok
17:21:06.0958 5100  [ 302DA2A0539F2CF54D7C6CC30C1F2D8D ] rdpbus          C:\Windows\system32\drivers\rdpbus.sys
17:21:06.0993 5100  rdpbus - ok
17:21:07.0017 5100  [ CEA6CC257FC9B7715F1C2B4849286D24 ] RDPCDD          C:\Windows\system32\DRIVERS\RDPCDD.sys
17:21:07.0054 5100  RDPCDD - ok
17:21:07.0059 5100  [ BB5971A4F00659529A5C44831AF22365 ] RDPENCDD        C:\Windows\system32\drivers\rdpencdd.sys
17:21:07.0109 5100  RDPENCDD - ok
17:21:07.0113 5100  [ 216F3FA57533D98E1F74DED70113177A ] RDPREFMP        C:\Windows\system32\drivers\rdprefmp.sys
17:21:07.0154 5100  RDPREFMP - ok
17:21:07.0206 5100  [ 313F68E1A3E6345A4F47A36B07062F34 ] RdpVideoMiniport C:\Windows\system32\drivers\rdpvideominiport.sys
17:21:07.0237 5100  RdpVideoMiniport - ok
17:21:07.0266 5100  [ E61608AA35E98999AF9AAEEEA6114B0A ] RDPWD           C:\Windows\system32\drivers\RDPWD.sys
17:21:07.0295 5100  RDPWD - ok
17:21:07.0348 5100  [ 34ED295FA0121C241BFEF24764FC4520 ] rdyboost        C:\Windows\system32\drivers\rdyboost.sys
17:21:07.0365 5100  rdyboost - ok
17:21:07.0388 5100  [ 4D9AFDDDA0EFE97CDBFD3B5FA48B05F6 ] regi            C:\Windows\system32\drivers\regi.sys
17:21:07.0400 5100  regi - ok
17:21:07.0426 5100  [ 254FB7A22D74E5511C73A3F6D802F192 ] RemoteAccess    C:\Windows\System32\mprdim.dll
17:21:07.0475 5100  RemoteAccess - ok
17:21:07.0508 5100  [ E4D94F24081440B5FC5AA556C7C62702 ] RemoteRegistry  C:\Windows\system32\regsvc.dll
17:21:07.0562 5100  RemoteRegistry - ok
17:21:07.0607 5100  [ 3DD798846E2C28102B922C56E71B7932 ] RFCOMM          C:\Windows\system32\DRIVERS\rfcomm.sys
17:21:07.0646 5100  RFCOMM - ok
17:21:07.0676 5100  [ E4DC58CF7B3EA515AE917FF0D402A7BB ] RpcEptMapper    C:\Windows\System32\RpcEpMap.dll
17:21:07.0740 5100  RpcEptMapper - ok
17:21:07.0775 5100  [ D5BA242D4CF8E384DB90E6A8ED850B8C ] RpcLocator      C:\Windows\system32\locator.exe
17:21:07.0803 5100  RpcLocator - ok
17:21:07.0826 5100  [ 5C627D1B1138676C0A7AB2C2C190D123 ] RpcSs           C:\Windows\system32\rpcss.dll
17:21:07.0867 5100  RpcSs - ok
17:21:07.0904 5100  [ EBBFA2B4E317AF86E93FEC4C04D7A9B3 ] RSPCIESTOR      C:\Windows\system32\DRIVERS\RtsPStor.sys
17:21:07.0924 5100  RSPCIESTOR - ok
17:21:07.0950 5100  [ DDC86E4F8E7456261E637E3552E804FF ] rspndr          C:\Windows\system32\DRIVERS\rspndr.sys
17:21:07.0992 5100  rspndr - ok
17:21:08.0049 5100  [ EA5532868BA76923D75BCB2A1448D810 ] RTL8167         C:\Windows\system32\DRIVERS\Rt64win7.sys
17:21:08.0068 5100  RTL8167 - ok
17:21:08.0115 5100  [ C118A82CD78818C29AB228366EBF81C3 ] SamSs           C:\Windows\system32\lsass.exe
17:21:08.0130 5100  SamSs - ok
17:21:08.0156 5100  [ AC03AF3329579FFFB455AA2DAABBE22B ] sbp2port        C:\Windows\system32\drivers\sbp2port.sys
17:21:08.0171 5100  sbp2port - ok
17:21:08.0215 5100  [ 9B7395789E3791A3B6D000FE6F8B131E ] SCardSvr        C:\Windows\System32\SCardSvr.dll
17:21:08.0256 5100  SCardSvr - ok
17:21:08.0274 5100  [ 253F38D0D7074C02FF8DEB9836C97D2B ] scfilter        C:\Windows\system32\DRIVERS\scfilter.sys
17:21:08.0322 5100  scfilter - ok
17:21:08.0361 5100  [ 262F6592C3299C005FD6BEC90FC4463A ] Schedule        C:\Windows\system32\schedsvc.dll
17:21:08.0422 5100  Schedule - ok
17:21:08.0448 5100  [ F17D1D393BBC69C5322FBFAFACA28C7F ] SCPolicySvc     C:\Windows\System32\certprop.dll
17:21:08.0485 5100  SCPolicySvc - ok
17:21:08.0521 5100  [ 111E0EBC0AD79CB0FA014B907B231CF0 ] sdbus           C:\Windows\system32\DRIVERS\sdbus.sys
17:21:08.0556 5100  sdbus - ok
17:21:08.0584 5100  [ 6EA4234DC55346E0709560FE7C2C1972 ] SDRSVC          C:\Windows\System32\SDRSVC.dll
17:21:08.0615 5100  SDRSVC - ok
17:21:08.0672 5100  [ 0F4A80438E7286A0E623582F5F2395BD ] SearchAnonymizer C:\Users\Peet17\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe
17:21:08.0694 5100  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - warning
17:21:08.0694 5100  SearchAnonymizer - detected UnsignedFile.Multi.Generic (1)
17:21:08.0726 5100  [ 3EA8A16169C26AFBEB544E0E48421186 ] secdrv          C:\Windows\system32\drivers\secdrv.sys
17:21:08.0778 5100  secdrv - ok
17:21:08.0810 5100  [ BC617A4E1B4FA8DF523A061739A0BD87 ] seclogon        C:\Windows\system32\seclogon.dll
17:21:08.0847 5100  seclogon - ok
17:21:08.0928 5100  [ 9044795E9D1A912D5F1B8DF6211850FD ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe
17:21:08.0960 5100  Secunia PSI Agent - ok
17:21:08.0987 5100  [ C32AB8FA018EF34C0F113BD501436D21 ] SENS            C:\Windows\System32\sens.dll
17:21:09.0037 5100  SENS - ok
17:21:09.0069 5100  [ 0336CFFAFAAB87A11541F1CF1594B2B2 ] SensrSvc        C:\Windows\system32\sensrsvc.dll
17:21:09.0095 5100  SensrSvc - ok
17:21:09.0110 5100  [ CB624C0035412AF0DEBEC78C41F5CA1B ] Serenum         C:\Windows\system32\drivers\serenum.sys
17:21:09.0139 5100  Serenum - ok
17:21:09.0179 5100  [ C1D8E28B2C2ADFAEC4BA89E9FDA69BD6 ] Serial          C:\Windows\system32\drivers\serial.sys
17:21:09.0213 5100  Serial - ok
17:21:09.0248 5100  [ 1C545A7D0691CC4A027396535691C3E3 ] sermouse        C:\Windows\system32\drivers\sermouse.sys
17:21:09.0280 5100  sermouse - ok
17:21:09.0341 5100  [ 289E853881E688286AD24299FCC485D8 ] ServiceLayer    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
17:21:09.0363 5100  ServiceLayer - ok
17:21:09.0396 5100  [ 0B6231BF38174A1628C4AC812CC75804 ] SessionEnv      C:\Windows\system32\sessenv.dll
17:21:09.0447 5100  SessionEnv - ok
17:21:09.0485 5100  [ 286D3889E6AB5589646FF8A63CB928AE ] SFEP            C:\Windows\system32\DRIVERS\SFEP.sys
17:21:09.0533 5100  SFEP - ok
17:21:09.0554 5100  [ A554811BCD09279536440C964AE35BBF ] sffdisk         C:\Windows\system32\drivers\sffdisk.sys
17:21:09.0583 5100  sffdisk - ok
17:21:09.0604 5100  [ FF414F0BAEFEBA59BC6C04B3DB0B87BF ] sffp_mmc        C:\Windows\system32\drivers\sffp_mmc.sys
17:21:09.0632 5100  sffp_mmc - ok
17:21:09.0651 5100  [ DD85B78243A19B59F0637DCF284DA63C ] sffp_sd         C:\Windows\system32\drivers\sffp_sd.sys
17:21:09.0678 5100  sffp_sd - ok
17:21:09.0700 5100  [ A9D601643A1647211A1EE2EC4E433FF4 ] sfloppy         C:\Windows\system32\drivers\sfloppy.sys
17:21:09.0733 5100  sfloppy - ok
17:21:09.0780 5100  [ B95F6501A2F8B2E78C697FEC401970CE ] SharedAccess    C:\Windows\System32\ipnathlp.dll
17:21:09.0841 5100  SharedAccess - ok
17:21:09.0877 5100  [ AAF932B4011D14052955D4B212A4DA8D ] ShellHWDetection C:\Windows\System32\shsvcs.dll
17:21:09.0927 5100  ShellHWDetection - ok
17:21:09.0964 5100  [ 843CAF1E5FDE1FFD5FF768F23A51E2E1 ] SiSRaid2        C:\Windows\system32\drivers\SiSRaid2.sys
17:21:09.0978 5100  SiSRaid2 - ok
17:21:09.0982 5100  [ 6A6C106D42E9FFFF8B9FCB4F754F6DA4 ] SiSRaid4        C:\Windows\system32\drivers\sisraid4.sys
17:21:09.0997 5100  SiSRaid4 - ok
17:21:10.0047 5100  [ 548260A7B8654E024DC30BF8A7C5BAA4 ] Smb             C:\Windows\system32\DRIVERS\smb.sys
17:21:10.0109 5100  Smb - ok
17:21:10.0179 5100  [ 6313F223E817CC09AA41811DAA7F541D ] SNMPTRAP        C:\Windows\System32\snmptrap.exe
17:21:10.0196 5100  SNMPTRAP - ok
17:21:10.0244 5100  [ DDF2EC98AF6FC70608A4F9CE4DB52758 ] SOHCImp         C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
17:21:10.0257 5100  SOHCImp - ok
17:21:10.0283 5100  [ 5FA03F5EA6EFEF6D17B4A1A48C40A23C ] SOHDs           C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
17:21:10.0295 5100  SOHDs - ok
17:21:10.0388 5100  [ 3A4F2C0BB87A0895ABEBA341AA1E341B ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
17:21:10.0401 5100  Sony PC Companion - ok
17:21:10.0472 5100  [ 65E5659E9C2A0762D05657C0E22A7CA2 ] SpfService      C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe
17:21:10.0488 5100  SpfService - ok
17:21:10.0503 5100  [ B9E31E5CACDFE584F34F730A677803F9 ] spldr           C:\Windows\system32\drivers\spldr.sys
17:21:10.0517 5100  spldr - ok
17:21:10.0554 5100  [ 85DAA09A98C9286D4EA2BA8D0E644377 ] Spooler         C:\Windows\System32\spoolsv.exe
17:21:10.0576 5100  Spooler - ok
17:21:10.0659 5100  [ E17E0188BB90FAE42D83E98707EFA59C ] sppsvc          C:\Windows\system32\sppsvc.exe
17:21:10.0760 5100  sppsvc - ok
17:21:10.0776 5100  [ 93D7D61317F3D4BC4F4E9F8A96A7DE45 ] sppuinotify     C:\Windows\system32\sppuinotify.dll
17:21:10.0817 5100  sppuinotify - ok
17:21:10.0855 5100  [ 34F974F8B3C86DE03A30DCBE79091C97 ] sptd            C:\Windows\System32\Drivers\sptd.sys
17:21:10.0876 5100  sptd - ok
17:21:10.0944 5100  [ 378A0748DE5ADF90BF9DB897DA8564E6 ] SRTSP           C:\Windows\System32\Drivers\NISx64\1403000.024\SRTSP64.SYS
17:21:10.0972 5100  SRTSP - ok
17:21:10.0986 5100  [ 0E76CEF892C45734F7AED09FDDF35D4D ] SRTSPX          C:\Windows\system32\drivers\NISx64\1403000.024\SRTSPX64.SYS
17:21:10.0998 5100  SRTSPX - ok
17:21:11.0028 5100  [ 441FBA48BFF01FDB9D5969EBC1838F0B ] srv             C:\Windows\system32\DRIVERS\srv.sys
17:21:11.0073 5100  srv - ok
17:21:11.0089 5100  [ B4ADEBBF5E3677CCE9651E0F01F7CC28 ] srv2            C:\Windows\system32\DRIVERS\srv2.sys
17:21:11.0123 5100  srv2 - ok
17:21:11.0128 5100  [ 27E461F0BE5BFF5FC737328F749538C3 ] srvnet          C:\Windows\system32\DRIVERS\srvnet.sys
17:21:11.0145 5100  srvnet - ok
17:21:11.0176 5100  [ 51B52FBD583CDE8AA9BA62B8B4298F33 ] SSDPSRV         C:\Windows\System32\ssdpsrv.dll
17:21:11.0215 5100  SSDPSRV - ok
17:21:11.0230 5100  [ AB7AEBF58DAD8DAAB7A6C45E6A8885CB ] SstpSvc         C:\Windows\system32\sstpsvc.dll
17:21:11.0269 5100  SstpSvc - ok
17:21:11.0328 5100  [ E5C796B621F6FBA8616511063D7F0FFE ] StarWindServiceAE C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
17:21:11.0356 5100  StarWindServiceAE ( UnsignedFile.Multi.Generic ) - warning
17:21:11.0356 5100  StarWindServiceAE - detected UnsignedFile.Multi.Generic (1)
17:21:11.0411 5100  [ 00FCEC4DA4198F5F2B9BBD9225842568 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
17:21:11.0428 5100  Stereo Service - ok
17:21:11.0458 5100  [ F3817967ED533D08327DC73BC4D5542A ] stexstor        C:\Windows\system32\drivers\stexstor.sys
17:21:11.0473 5100  stexstor - ok
17:21:11.0515 5100  [ 8DD52E8E6128F4B2DA92CE27402871C1 ] stisvc          C:\Windows\System32\wiaservc.dll
17:21:11.0557 5100  stisvc - ok
17:21:11.0576 5100  [ D01EC09B6711A5F8E7E6564A4D0FBC90 ] swenum          C:\Windows\system32\DRIVERS\swenum.sys
17:21:11.0590 5100  swenum - ok
17:21:11.0687 5100  [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard     C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
17:21:11.0714 5100  SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
17:21:11.0714 5100  SwitchBoard - detected UnsignedFile.Multi.Generic (1)
17:21:11.0746 5100  [ E08E46FDD841B7184194011CA1955A0B ] swprv           C:\Windows\System32\swprv.dll
17:21:11.0809 5100  swprv - ok
17:21:11.0859 5100  [ E174C8BC572E93AEEE1036DEDAC5F225 ] SymDS           C:\Windows\system32\drivers\NISx64\1403000.024\SYMDS64.SYS
17:21:11.0880 5100  SymDS - ok
17:21:11.0962 5100  [ 599872BAD7CFB45C7CE47CDED4B726D8 ] SymEFA          C:\Windows\system32\drivers\NISx64\1403000.024\SYMEFA64.SYS
17:21:11.0995 5100  SymEFA - ok
17:21:12.0033 5100  [ F5D6D3B7468C46EA2DDC1D19D2A6DA0F ] SymEvent        C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
17:21:12.0048 5100  SymEvent - ok
17:21:12.0100 5100  [ ADF37F1A715D6C56C8E065FD8569A9A4 ] SymIRON         C:\Windows\system32\drivers\NISx64\1403000.024\Ironx64.SYS
17:21:12.0116 5100  SymIRON - ok
17:21:12.0153 5100  [ 1605EBD8CB86AFC4430116065995279A ] SymNetS         C:\Windows\System32\Drivers\NISx64\1403000.024\SYMNETS.SYS
17:21:12.0172 5100  SymNetS - ok
17:21:12.0222 5100  [ BF9CCC0BF39B418C8D0AE8B05CF95B7D ] SysMain         C:\Windows\system32\sysmain.dll
17:21:12.0281 5100  SysMain - ok
17:21:12.0298 5100  [ E3C61FD7B7C2557E1F1B0B4CEC713585 ] TabletInputService C:\Windows\System32\TabSvc.dll
17:21:12.0332 5100  TabletInputService - ok
17:21:12.0365 5100  [ F9BE29D5E097F03F81D3CD12B794CB66 ] tap0901         C:\Windows\system32\DRIVERS\tap0901.sys
17:21:12.0408 5100  tap0901 - ok
17:21:12.0441 5100  [ 40F0849F65D13EE87B9A9AE3C1DD6823 ] TapiSrv         C:\Windows\System32\tapisrv.dll
17:21:12.0482 5100  TapiSrv - ok
17:21:12.0500 5100  [ 1BE03AC720F4D302EA01D40F588162F6 ] TBS             C:\Windows\System32\tbssvc.dll
17:21:12.0539 5100  TBS - ok
17:21:12.0598 5100  [ B62A953F2BF3922C8764A29C34A22899 ] Tcpip           C:\Windows\system32\drivers\tcpip.sys
17:21:12.0651 5100  Tcpip - ok
17:21:12.0682 5100  [ B62A953F2BF3922C8764A29C34A22899 ] TCPIP6          C:\Windows\system32\DRIVERS\tcpip.sys
17:21:12.0723 5100  TCPIP6 - ok
17:21:12.0751 5100  [ 1B16D0BD9841794A6E0CDE0CEF744ABC ] tcpipreg        C:\Windows\system32\drivers\tcpipreg.sys
17:21:12.0766 5100  tcpipreg - ok
17:21:12.0782 5100  [ 3371D21011695B16333A3934340C4E7C ] TDPIPE          C:\Windows\system32\drivers\tdpipe.sys
17:21:12.0810 5100  TDPIPE - ok
17:21:12.0841 5100  [ 51C5ECEB1CDEE2468A1748BE550CFBC8 ] TDTCP           C:\Windows\system32\drivers\tdtcp.sys
17:21:12.0856 5100  TDTCP - ok
17:21:12.0886 5100  [ DDAD5A7AB24D8B65F8D724F5C20FD806 ] tdx             C:\Windows\system32\DRIVERS\tdx.sys
17:21:12.0934 5100  tdx - ok
17:21:12.0963 5100  [ 561E7E1F06895D78DE991E01DD0FB6E5 ] TermDD          C:\Windows\system32\DRIVERS\termdd.sys
17:21:12.0978 5100  TermDD - ok
17:21:13.0008 5100  [ 2E648163254233755035B46DD7B89123 ] TermService     C:\Windows\System32\termsrv.dll
17:21:13.0055 5100  TermService - ok
17:21:13.0063 5100  [ F0344071948D1A1FA732231785A0664C ] Themes          C:\Windows\system32\themeservice.dll
17:21:13.0083 5100  Themes - ok
17:21:13.0106 5100  [ E40E80D0304A73E8D269F7141D77250B ] THREADORDER     C:\Windows\system32\mmcss.dll
17:21:13.0144 5100  THREADORDER - ok
17:21:13.0175 5100  [ 7E7AFD841694F6AC397E99D75CEAD49D ] TrkWks          C:\Windows\System32\trkwks.dll
17:21:13.0232 5100  TrkWks - ok
17:21:13.0292 5100  [ 773212B2AAA24C1E31F10246B15B276C ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
17:21:13.0330 5100  TrustedInstaller - ok
17:21:13.0348 5100  [ CE18B2CDFC837C99E5FAE9CA6CBA5D30 ] tssecsrv        C:\Windows\system32\DRIVERS\tssecsrv.sys
17:21:13.0402 5100  tssecsrv - ok
17:21:13.0437 5100  [ 17C6B51CBCCDED95B3CC14E22791F85E ] TsUsbFlt        C:\Windows\system32\drivers\tsusbflt.sys
17:21:13.0462 5100  TsUsbFlt - ok
17:21:13.0481 5100  [ AD64450A4ABE076F5CB34CC08EEACB07 ] TsUsbGD         C:\Windows\system32\drivers\TsUsbGD.sys
17:21:13.0513 5100  TsUsbGD - ok
17:21:13.0619 5100  [ 811A229718C85356BC81EB20F35EB7F6 ] TuneUp.UtilitiesSvc C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe
17:21:13.0667 5100  TuneUp.UtilitiesSvc - ok
17:21:13.0720 5100  [ DCC94C51D27C7EC0DADECA8F64C94FCF ] TuneUpUtilitiesDrv C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys
17:21:13.0732 5100  TuneUpUtilitiesDrv - ok
17:21:13.0772 5100  [ 3566A8DAAFA27AF944F5D705EAA64894 ] tunnel          C:\Windows\system32\DRIVERS\tunnel.sys
17:21:13.0827 5100  tunnel - ok
17:21:13.0844 5100  [ B4DD609BD7E282BFC683CEC7EAAAAD67 ] uagp35          C:\Windows\system32\drivers\uagp35.sys
17:21:13.0859 5100  uagp35 - ok
17:21:13.0895 5100  [ 1FE69F3C1CA1CF4B7EC7E2E9090FFFDC ] uCamMonitor     C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
17:21:13.0909 5100  uCamMonitor - ok
17:21:13.0927 5100  [ FF4232A1A64012BAA1FD97C7B67DF593 ] udfs            C:\Windows\system32\DRIVERS\udfs.sys
17:21:13.0979 5100  udfs - ok
17:21:14.0016 5100  [ 3CBDEC8D06B9968ABA702EBA076364A1 ] UI0Detect       C:\Windows\system32\UI0Detect.exe
17:21:14.0044 5100  UI0Detect - ok
17:21:14.0085 5100  [ 5357F9507B59C831C5CD79F1F6374A5E ] UimBus          C:\Windows\system32\DRIVERS\uimx64.sys
17:21:14.0098 5100  UimBus - ok
17:21:14.0114 5100  [ 001402EA0FB543F77F91090130FD029D ] Uim_IM          C:\Windows\system32\Drivers\Uim_IMx64.sys
17:21:14.0134 5100  Uim_IM - ok
17:21:14.0150 5100  [ E75B35EEBC923B6DB2DBEA52E71A7892 ] Uim_VIM         C:\Windows\system32\Drivers\uim_vimx64.sys
17:21:14.0167 5100  Uim_VIM - ok
17:21:14.0199 5100  [ 4BFE1BC28391222894CBF1E7D0E42320 ] uliagpkx        C:\Windows\system32\drivers\uliagpkx.sys
17:21:14.0213 5100  uliagpkx - ok
17:21:14.0235 5100  [ DC54A574663A895C8763AF0FA1FF7561 ] umbus           C:\Windows\system32\DRIVERS\umbus.sys
17:21:14.0269 5100  umbus - ok
17:21:14.0292 5100  [ B2E8E8CB557B156DA5493BBDDCC1474D ] UmPass          C:\Windows\system32\drivers\umpass.sys
17:21:14.0322 5100  UmPass - ok
17:21:14.0434 5100  [ 7A78ED1088890114DFDE2C4AB038D6B6 ] UNS             C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
17:21:14.0494 5100  UNS - ok
17:21:14.0523 5100  [ D47EC6A8E81633DD18D2436B19BAF6DE ] upnphost        C:\Windows\System32\upnphost.dll
17:21:14.0581 5100  upnphost - ok
17:21:14.0617 5100  [ 907F50B8695DAA65A9445D27AD306E65 ] upperdev        C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys
17:21:14.0643 5100  upperdev - ok
17:21:14.0662 5100  [ 6F1A3157A1C89435352CEB543CDB359C ] usbccgp         C:\Windows\system32\DRIVERS\usbccgp.sys
17:21:14.0688 5100  usbccgp - ok
17:21:14.0705 5100  [ AF0892A803FDDA7492F595368E3B68E7 ] usbcir          C:\Windows\system32\drivers\usbcir.sys
17:21:14.0723 5100  usbcir - ok
17:21:14.0739 5100  [ C025055FE7B87701EB042095DF1A2D7B ] usbehci         C:\Windows\system32\DRIVERS\usbehci.sys
17:21:14.0766 5100  usbehci - ok
17:21:14.0820 5100  [ 287C6C9410B111B68B52CA298F7B8C24 ] usbhub          C:\Windows\system32\DRIVERS\usbhub.sys
17:21:14.0849 5100  usbhub - ok
17:21:14.0871 5100  [ 9840FC418B4CBD632D3D0A667A725C31 ] usbohci         C:\Windows\system32\drivers\usbohci.sys
17:21:14.0898 5100  usbohci - ok
17:21:14.0929 5100  [ 73188F58FB384E75C4063D29413CEE3D ] usbprint        C:\Windows\system32\DRIVERS\usbprint.sys
17:21:14.0958 5100  usbprint - ok
17:21:15.0009 5100  [ 4ACEE387FA8FD39F83564FCD2FC234F2 ] usbser          C:\Windows\system32\drivers\usbser.sys
17:21:15.0025 5100  usbser - ok
17:21:15.0065 5100  [ 3F7498527B48657091C355F683BEB0DD ] UsbserFilt      C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys
17:21:15.0107 5100  UsbserFilt - ok
17:21:15.0137 5100  [ FED648B01349A3C8395A5169DB5FB7D6 ] USBSTOR         C:\Windows\system32\DRIVERS\USBSTOR.SYS
17:21:15.0167 5100  USBSTOR - ok
17:21:15.0193 5100  [ 62069A34518BCF9C1FD9E74B3F6DB7CD ] usbuhci         C:\Windows\system32\drivers\usbuhci.sys
17:21:15.0224 5100  usbuhci - ok
17:21:15.0249 5100  [ 454800C2BC7F3927CE030141EE4F4C50 ] usbvideo        C:\Windows\system32\Drivers\usbvideo.sys
17:21:15.0284 5100  usbvideo - ok
17:21:15.0314 5100  [ EDBB23CBCF2CDF727D64FF9B51A6070E ] UxSms           C:\Windows\System32\uxsms.dll
17:21:15.0371 5100  UxSms - ok
17:21:15.0421 5100  [ 5BF180F7F7C2F68ED6D5777840270BCE ] UxTuneUp        C:\Windows\System32\uxtuneup.dll
17:21:15.0433 5100  UxTuneUp - ok
17:21:15.0490 5100  [ DCB1F83AD167D16D263CE57C94E9EEDF ] VAIO Event Service C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
17:21:15.0504 5100  VAIO Event Service - ok
17:21:15.0526 5100  [ C118A82CD78818C29AB228366EBF81C3 ] VaultSvc        C:\Windows\system32\lsass.exe
17:21:15.0540 5100  VaultSvc - ok
17:21:15.0605 5100  [ D00058C1FFF3F3DE990444A5734E9639 ] VCFw            C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
17:21:15.0632 5100  VCFw - ok
17:21:15.0688 5100  [ F19275655B42086C884ABCDAE2C659AE ] VcmIAlzMgr      C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
17:21:15.0716 5100  VcmIAlzMgr - ok
17:21:15.0755 5100  [ 2F06D134554BA84FE253DBC481DCFE6D ] VcmINSMgr       C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
17:21:15.0777 5100  VcmINSMgr - ok
17:21:15.0797 5100  [ 32A3735F6874B7783C6209ED5CA36D9D ] VcmXmlIfHelper  C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
17:21:15.0810 5100  VcmXmlIfHelper - ok
17:21:15.0852 5100  [ D347D3ABE070AA09C22FC37121555D52 ] VCService       C:\Program Files\Sony\VAIO Care\VCService.exe
17:21:15.0863 5100  VCService - ok
17:21:15.0903 5100  [ C5C876CCFC083FF3B128F933823E87BD ] vdrvroot        C:\Windows\system32\drivers\vdrvroot.sys
17:21:15.0917 5100  vdrvroot - ok
17:21:15.0951 5100  [ 8D6B481601D01A456E75C3210F1830BE ] vds             C:\Windows\System32\vds.exe
17:21:16.0011 5100  vds - ok
17:21:16.0028 5100  [ DA4DA3F5E02943C2DC8C6ED875DE68DD ] vga             C:\Windows\system32\DRIVERS\vgapnp.sys
17:21:16.0046 5100  vga - ok
17:21:16.0060 5100  [ 53E92A310193CB3C03BEA963DE7D9CFC ] VgaSave         C:\Windows\System32\drivers\vga.sys
17:21:16.0109 5100  VgaSave - ok
17:21:16.0114 5100  [ 2CE2DF28C83AEAF30084E1B1EB253CBB ] vhdmp           C:\Windows\system32\drivers\vhdmp.sys
17:21:16.0131 5100  vhdmp - ok
17:21:16.0143 5100  [ E5689D93FFE4E5D66C0178761240DD54 ] viaide          C:\Windows\system32\drivers\viaide.sys
17:21:16.0157 5100  viaide - ok
17:21:16.0171 5100  [ D2AAFD421940F640B407AEFAAEBD91B0 ] volmgr          C:\Windows\system32\drivers\volmgr.sys
17:21:16.0185 5100  volmgr - ok
17:21:16.0192 5100  [ A255814907C89BE58B79EF2F189B843B ] volmgrx         C:\Windows\system32\drivers\volmgrx.sys
17:21:16.0211 5100  volmgrx - ok
17:21:16.0218 5100  [ 0D08D2F3B3FF84E433346669B5E0F639 ] volsnap         C:\Windows\system32\drivers\volsnap.sys
17:21:16.0237 5100  volsnap - ok
17:21:16.0258 5100  [ 5E2016EA6EBACA03C04FEAC5F330D997 ] vsmraid         C:\Windows\system32\drivers\vsmraid.sys
17:21:16.0274 5100  vsmraid - ok
17:21:16.0329 5100  [ 03F6F618367CB16A2176B8DB4215D1F9 ] VSNService      C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
17:21:16.0364 5100  VSNService - ok
17:21:16.0411 5100  [ B60BA0BC31B0CB414593E169F6F21CC2 ] VSS             C:\Windows\system32\vssvc.exe
17:21:16.0484 5100  VSS - ok
17:21:16.0581 5100  [ D2D646D4D686C6996BA1FF96E11BE570 ] VUAgent         C:\Program Files\Sony\VAIO Update\VUAgent.exe
17:21:16.0611 5100  VUAgent - ok
17:21:16.0631 5100  [ 36D4720B72B5C5D9CB2B9C29E9DF67A1 ] vwifibus        C:\Windows\system32\DRIVERS\vwifibus.sys
17:21:16.0668 5100  vwifibus - ok
17:21:16.0698 5100  [ 6A3D66263414FF0D6FA754C646612F3F ] vwififlt        C:\Windows\system32\DRIVERS\vwififlt.sys
17:21:16.0734 5100  vwififlt - ok
17:21:16.0759 5100  [ 6A638FC4BFDDC4D9B186C28C91BD1A01 ] vwifimp         C:\Windows\system32\DRIVERS\vwifimp.sys
17:21:16.0788 5100  vwifimp - ok
17:21:16.0821 5100  [ 1C9D80CC3849B3788048078C26486E1A ] W32Time         C:\Windows\system32\w32time.dll
17:21:16.0864 5100  W32Time - ok
17:21:16.0881 5100  [ 4E9440F4F152A7B944CB1663D3935A3E ] WacomPen        C:\Windows\system32\drivers\wacompen.sys
17:21:16.0907 5100  WacomPen - ok
17:21:16.0954 5100  [ 356AFD78A6ED4457169241AC3965230C ] WANARP          C:\Windows\system32\DRIVERS\wanarp.sys
17:21:17.0011 5100  WANARP - ok
17:21:17.0015 5100  [ 356AFD78A6ED4457169241AC3965230C ] Wanarpv6        C:\Windows\system32\DRIVERS\wanarp.sys
17:21:17.0051 5100  Wanarpv6 - ok
17:21:17.0119 5100  [ 3CEC96DE223E49EAAE3651FCF8FAEA6C ] WatAdminSvc     C:\Windows\system32\Wat\WatAdminSvc.exe
17:21:17.0156 5100  WatAdminSvc - ok
17:21:17.0203 5100  [ 78F4E7F5C56CB9716238EB57DA4B6A75 ] wbengine        C:\Windows\system32\wbengine.exe
17:21:17.0248 5100  wbengine - ok
17:21:17.0268 5100  [ 3AA101E8EDAB2DB4131333F4325C76A3 ] WbioSrvc        C:\Windows\System32\wbiosrvc.dll
17:21:17.0291 5100  WbioSrvc - ok
17:21:17.0308 5100  [ 7368A2AFD46E5A4481D1DE9D14848EDD ] wcncsvc         C:\Windows\System32\wcncsvc.dll
17:21:17.0344 5100  wcncsvc - ok
17:21:17.0367 5100  [ 20F7441334B18CEE52027661DF4A6129 ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
17:21:17.0400 5100  WcsPlugInService - ok
17:21:17.0435 5100  [ 72889E16FF12BA0F235467D6091B17DC ] Wd              C:\Windows\system32\drivers\wd.sys
17:21:17.0448 5100  Wd - ok
17:21:17.0480 5100  [ 442783E2CB0DA19873B7A63833FF4CB4 ] Wdf01000        C:\Windows\system32\drivers\Wdf01000.sys
17:21:17.0509 5100  Wdf01000 - ok
17:21:17.0533 5100  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiServiceHost  C:\Windows\system32\wdi.dll
17:21:17.0572 5100  WdiServiceHost - ok
17:21:17.0575 5100  [ BF1FC3F79B863C914687A737C2F3D681 ] WdiSystemHost   C:\Windows\system32\wdi.dll
17:21:17.0597 5100  WdiSystemHost - ok
17:21:17.0632 5100  [ 3DB6D04E1C64272F8B14EB8BC4616280 ] WebClient       C:\Windows\System32\webclnt.dll
17:21:17.0673 5100  WebClient - ok
17:21:17.0694 5100  [ C749025A679C5103E575E3B48E092C43 ] Wecsvc          C:\Windows\system32\wecsvc.dll
17:21:17.0754 5100  Wecsvc - ok
17:21:17.0773 5100  [ 7E591867422DC788B9E5BD337A669A08 ] wercplsupport   C:\Windows\System32\wercplsupport.dll
17:21:17.0815 5100  wercplsupport - ok
17:21:17.0861 5100  [ 6D137963730144698CBD10F202E9F251 ] WerSvc          C:\Windows\System32\WerSvc.dll
17:21:17.0901 5100  WerSvc - ok
17:21:17.0929 5100  [ 611B23304BF067451A9FDEE01FBDD725 ] WfpLwf          C:\Windows\system32\DRIVERS\wfplwf.sys
17:21:17.0967 5100  WfpLwf - ok
17:21:17.0982 5100  [ 05ECAEC3E4529A7153B3136CEB49F0EC ] WIMMount        C:\Windows\system32\drivers\wimmount.sys
17:21:17.0995 5100  WIMMount - ok
17:21:18.0008 5100  WinDefend - ok
17:21:18.0014 5100  WinHttpAutoProxySvc - ok
17:21:18.0064 5100  [ 19B07E7E8915D701225DA41CB3877306 ] Winmgmt         C:\Windows\system32\wbem\WMIsvc.dll
17:21:18.0103 5100  Winmgmt - ok
17:21:18.0159 5100  [ BCB1310604AA415C4508708975B3931E ] WinRM           C:\Windows\system32\WsmSvc.dll
17:21:18.0225 5100  WinRM - ok
17:21:18.0255 5100  [ FE88B288356E7B47B74B13372ADD906D ] WinUsb          C:\Windows\system32\DRIVERS\WinUsb.sys
17:21:18.0283 5100  WinUsb - ok
17:21:18.0323 5100  [ 4FADA86E62F18A1B2F42BA18AE24E6AA ] Wlansvc         C:\Windows\System32\wlansvc.dll
17:21:18.0370 5100  Wlansvc - ok
17:21:18.0413 5100  [ 06C8FA1CF39DE6A735B54D906BA791C6 ] wlcrasvc        C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
17:21:18.0426 5100  wlcrasvc - ok
17:21:18.0491 5100  [ 2BACD71123F42CEA603F4E205E1AE337 ] wlidsvc         C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
17:21:18.0542 5100  wlidsvc - ok
17:21:18.0560 5100  [ F6FF8944478594D0E414D3F048F0D778 ] WmiAcpi         C:\Windows\system32\drivers\wmiacpi.sys
17:21:18.0585 5100  WmiAcpi - ok
17:21:18.0616 5100  [ 38B84C94C5A8AF291ADFEA478AE54F93 ] wmiApSrv        C:\Windows\system32\wbem\WmiApSrv.exe
17:21:18.0648 5100  wmiApSrv - ok
17:21:18.0691 5100  WMPNetworkSvc - ok
17:21:18.0767 5100  [ F78AD1A8DCC639945076B9704753A1F4 ] WO_LiveService  C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe
17:21:18.0792 5100  WO_LiveService - ok
17:21:18.0819 5100  [ 96C6E7100D724C69FCF9E7BF590D1DCA ] WPCSvc          C:\Windows\System32\wpcsvc.dll
17:21:18.0835 5100  WPCSvc - ok
17:21:18.0850 5100  [ 93221146D4EBBF314C29B23CD6CC391D ] WPDBusEnum      C:\Windows\system32\wpdbusenum.dll
17:21:18.0869 5100  WPDBusEnum - ok
17:21:18.0904 5100  [ 6BCC1D7D2FD2453957C5479A32364E52 ] ws2ifsl         C:\Windows\system32\drivers\ws2ifsl.sys
17:21:18.0942 5100  ws2ifsl - ok
17:21:18.0951 5100  [ E8B1FE6669397D1772D8196DF0E57A9E ] wscsvc          C:\Windows\System32\wscsvc.dll
17:21:18.0990 5100  wscsvc - ok
17:21:18.0994 5100  WSearch - ok
17:21:19.0067 5100  [ D9EF901DCA379CFE914E9FA13B73B4C4 ] wuauserv        C:\Windows\system32\wuaueng.dll
17:21:19.0122 5100  wuauserv - ok
17:21:19.0152 5100  [ AB886378EEB55C6C75B4F2D14B6C869F ] WudfPf          C:\Windows\system32\drivers\WudfPf.sys
17:21:19.0180 5100  WudfPf - ok
17:21:19.0204 5100  [ DDA4CAF29D8C0A297F886BFE561E6659 ] WUDFRd          C:\Windows\system32\DRIVERS\WUDFRd.sys
17:21:19.0238 5100  WUDFRd - ok
17:21:19.0256 5100  [ B20F051B03A966392364C83F009F7D17 ] wudfsvc         C:\Windows\System32\WUDFSvc.dll
17:21:19.0283 5100  wudfsvc - ok
17:21:19.0317 5100  [ 9A3452B3C2A46C073166C5CF49FAD1AE ] WwanSvc         C:\Windows\System32\wwansvc.dll
17:21:19.0354 5100  WwanSvc - ok
17:21:19.0401 5100  [ 24FB8DB6D1D55E2C5D0A53DFE48E6AF8 ] Yontoo Desktop Updater C:\Program Files (x86)\Yontoo\Y2Desktop.Updater.exe
17:21:19.0421 5100  Yontoo Desktop Updater ( UnsignedFile.Multi.Generic ) - warning
17:21:19.0421 5100  Yontoo Desktop Updater - detected UnsignedFile.Multi.Generic (1)
17:21:19.0475 5100  ================ Scan global ===============================
17:21:19.0504 5100  [ BA0CD8C393E8C9F83354106093832C7B ] C:\Windows\system32\basesrv.dll
17:21:19.0527 5100  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
17:21:19.0535 5100  [ 0C27239FEA4DB8A2AAC9E502186B7264 ] C:\Windows\system32\winsrv.dll
17:21:19.0565 5100  [ D6160F9D869BA3AF0B787F971DB56368 ] C:\Windows\system32\sxssrv.dll
17:21:19.0594 5100  [ 24ACB7E5BE595468E3B9AA488B9B4FCB ] C:\Windows\system32\services.exe
17:21:19.0598 5100  [Global] - ok
17:21:19.0600 5100  ================ Scan MBR ==================================
17:21:19.0618 5100  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
17:21:19.0854 5100  \Device\Harddisk0\DR0 - ok
17:21:19.0854 5100  ================ Scan VBR ==================================
17:21:19.0856 5100  [ 6BA0874213C35ACAFC1C448824AE5F6D ] \Device\Harddisk0\DR0\Partition1
17:21:19.0858 5100  \Device\Harddisk0\DR0\Partition1 - ok
17:21:19.0873 5100  [ 3F956044C145082AAE7EB204F5EFE88B ] \Device\Harddisk0\DR0\Partition2
17:21:19.0874 5100  \Device\Harddisk0\DR0\Partition2 - ok
17:21:19.0895 5100  [ 882CEE53C099CE78C21448B5EB4F2F75 ] \Device\Harddisk0\DR0\Partition3
17:21:19.0897 5100  \Device\Harddisk0\DR0\Partition3 - ok
17:21:19.0897 5100  ============================================================
17:21:19.0897 5100  Scan finished
17:21:19.0897 5100  ============================================================
17:21:19.0910 3600  Detected object count: 11
17:21:19.0910 3600  Actual detected object count: 11
17:23:29.0735 3600  Atheros Bt&Wlan Coex Agent ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0735 3600  Atheros Bt&Wlan Coex Agent ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0736 3600  AtherosSvc ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0736 3600  AtherosSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0737 3600  ctfmon64 ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0738 3600  ctfmon64 ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0739 3600  DCDhcpService ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0739 3600  DCDhcpService ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0740 3600  epmntdrv ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0740 3600  epmntdrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0744 3600  EuGdiDrv ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0744 3600  EuGdiDrv ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0745 3600  GFilterSvc ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0746 3600  GFilterSvc ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0747 3600  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0747 3600  SearchAnonymizer ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0748 3600  StarWindServiceAE ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0749 3600  StarWindServiceAE ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0750 3600  SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0750 3600  SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip 
17:23:29.0751 3600  Yontoo Desktop Updater ( UnsignedFile.Multi.Generic ) - skipped by user
17:23:29.0751 3600  Yontoo Desktop Updater ( UnsignedFile.Multi.Generic ) - User select action: Skip
         

Alt 06.04.2013, 02:25   #20
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Dann bitte jetzt Combofix ausführen:

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


__________________
Logfiles bitte immer in CODE-Tags posten

Alt 06.04.2013, 16:25   #21
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Hallo, hier das Ergebnis von combofix:

Code:
ATTFilter
ComboFix 13-04-06.01 - Peet17 06.04.2013  16:22:05.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4078.2014 [GMT 2:00]
ausgeführt von:: c:\users\Peet17\Desktop\ComboFix.exe
AV: Norton Internet Security CBE *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security CBE *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security CBE *Disabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\Amazon.ico
c:\programdata\MercadoLivre.ico
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\SET7272.tmp
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2013-03-06 bis 2013-04-06  ))))))))))))))))))))))))))))))
.
.
2013-04-06 14:35 . 2013-04-06 14:35	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2013-04-06 14:35 . 2013-04-06 14:35	--------	d-----w-	c:\users\Default\AppData\Local\temp
2013-04-03 16:36 . 2013-04-03 16:36	--------	d-----w-	c:\program files (x86)\7-Zip
2013-04-01 09:00 . 2013-04-01 09:00	--------	d-----w-	c:\users\Peet17\AppData\Roaming\Malwarebytes
2013-04-01 09:00 . 2013-04-01 09:00	--------	d-----w-	c:\programdata\Malwarebytes
2013-04-01 09:00 . 2013-04-01 09:00	--------	d-----w-	c:\program files (x86)\Malwarebytes' Anti-Malware
2013-04-01 09:00 . 2012-12-14 14:49	24176	----a-w-	c:\windows\system32\drivers\mbam.sys
2013-03-26 14:41 . 2013-03-26 15:00	--------	d-----w-	c:\users\Peet17\AppData\Local\Smartbar
2013-03-26 14:41 . 2013-03-26 14:41	--------	d-----w-	c:\users\Peet17\AppData\Roaming\VDownloader
2013-03-26 14:40 . 2013-03-26 14:40	--------	d-----w-	c:\program files\WinPcap
2013-03-26 14:40 . 2013-03-26 14:50	--------	d-----w-	c:\users\Peet17\AppData\Local\VDownloader
2013-03-26 14:40 . 2010-01-26 09:11	444283	----a-w-	c:\program files\Common Files\WinPcapNmap.exe
2013-03-26 14:40 . 2013-04-02 16:37	--------	d-----w-	c:\program files\VDownloader
2013-03-26 14:39 . 2013-03-26 14:39	69632	----a-r-	c:\users\Peet17\AppData\Roaming\Microsoft\Installer\{58C91689-85E3-4B25-ADEC-2697986DF817}\ARPPRODUCTICON.exe
2013-03-26 14:39 . 2013-03-26 14:39	49152	----a-r-	c:\users\Peet17\AppData\Roaming\Microsoft\Installer\{58C91689-85E3-4B25-ADEC-2697986DF817}\UNINST_Uninstall_Q_336D8C9DB2424DE5BC518E574B25652F.exe
2013-03-26 14:19 . 2013-03-26 14:19	--------	d-----w-	c:\program files (x86)\Adobe Download Assistant
2013-03-26 14:17 . 2013-02-12 04:12	19968	----a-w-	c:\windows\system32\drivers\usb8023.sys
2013-03-22 18:19 . 2013-03-22 18:19	69632	----a-r-	c:\users\Peet17\AppData\Roaming\Microsoft\Installer\{A3E9BA4F-2C4C-41F7-B7E0-6F47137688A2}\ARPPRODUCTICON.exe
2013-03-22 18:19 . 2013-03-22 18:19	49152	----a-r-	c:\users\Peet17\AppData\Roaming\Microsoft\Installer\{A3E9BA4F-2C4C-41F7-B7E0-6F47137688A2}\UNINST_Uninstall_Q_336D8C9DB2424DE5BC518E574B25652F.exe
2013-03-22 18:19 . 2013-03-22 18:19	--------	d-----w-	c:\users\Peet17\Qtrax
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\programdata\BrowserProtect
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\users\Peet17\AppData\Roaming\BabSolution
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\program files (x86)\Delta
2013-03-22 18:18 . 2013-04-05 18:56	--------	d-----w-	c:\users\Peet17\AppData\Roaming\Yontoo
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\program files (x86)\Yontoo
2013-03-22 18:18 . 2013-03-22 18:21	--------	d-----w-	c:\program files (x86)\PC Speed Maximizer
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\programdata\Tarma Installer
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\users\Peet17\AppData\Roaming\Babylon
2013-03-22 18:18 . 2013-03-22 18:18	--------	d-----w-	c:\programdata\Babylon
2013-03-14 15:50 . 2013-04-05 12:58	--------	d-----w-	c:\users\Peet17\AppData\Roaming\MyPhoneExplorer
2013-03-14 15:49 . 2013-03-14 15:50	--------	d-----w-	c:\program files (x86)\MyPhoneExplorer
2013-03-14 14:56 . 2013-03-14 14:56	--------	d-----w-	c:\program files\Microsoft Silverlight
2013-03-14 14:56 . 2013-03-14 14:56	--------	d-----w-	c:\program files (x86)\Microsoft Silverlight
2013-03-13 17:41 . 2013-03-13 17:41	16486616	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2013-03-11 16:32 . 2013-03-11 21:07	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2013-03-09 20:04 . 2013-03-09 20:04	--------	d-----w-	c:\programdata\Uniblue
2013-03-08 12:32 . 2013-03-08 12:32	--------	d-----w-	c:\program files (x86)\Common Files\Nokia
2013-03-08 12:31 . 2012-10-17 12:53	26112	----a-w-	c:\windows\system32\drivers\pccsmcfdx64.sys
2013-03-08 12:31 . 2013-03-08 12:31	--------	d-----w-	c:\program files (x86)\PC Connectivity Solution
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-03-14 14:59 . 2012-03-01 15:55	72013344	----a-w-	c:\windows\system32\MRT.exe
2013-03-13 17:41 . 2012-04-08 22:01	73432	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-03-13 17:41 . 2012-04-08 22:01	693976	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-23 16:52 . 2013-02-23 16:52	121856	----a-w-	c:\windows\system32\GFilterSvc.exe
2013-02-23 16:52 . 2013-02-23 16:52	114176	----a-w-	c:\windows\system32\objsel64.exe
2013-02-21 09:18 . 2013-02-21 09:18	95648	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-02-21 09:18 . 2012-07-16 15:35	861088	----a-w-	c:\windows\SysWow64\npDeployJava1.dll
2013-02-21 09:18 . 2012-03-01 12:37	782240	----a-w-	c:\windows\SysWow64\deployJava1.dll
2013-02-13 12:37 . 2013-02-13 12:37	177312	----a-w-	c:\windows\system32\drivers\SYMEVENT64x86.SYS
2013-02-12 05:45 . 2013-03-13 09:13	135168	----a-w-	c:\windows\apppatch\AppPatch64\AcXtrnal.dll
2013-02-12 05:45 . 2013-03-13 09:13	350208	----a-w-	c:\windows\apppatch\AppPatch64\AcLayers.dll
2013-02-12 05:45 . 2013-03-13 09:13	308736	----a-w-	c:\windows\apppatch\AppPatch64\AcGenral.dll
2013-02-12 05:45 . 2013-03-13 09:13	111104	----a-w-	c:\windows\apppatch\AppPatch64\acspecfc.dll
2013-02-12 04:48 . 2013-03-13 09:13	474112	----a-w-	c:\windows\apppatch\AcSpecfc.dll
2013-02-12 04:48 . 2013-03-13 09:13	2176512	----a-w-	c:\windows\apppatch\AcGenral.dll
2013-01-31 03:18 . 2013-02-27 09:57	432800	----a-w-	c:\windows\system32\drivers\NISx64\1403000.024\symnets.sys
2013-01-31 03:18 . 2013-02-27 09:57	1139800	----a-w-	c:\windows\system32\drivers\NISx64\1403000.024\symefa64.sys
2013-01-29 01:45 . 2013-02-27 09:57	796248	----a-w-	c:\windows\system32\drivers\NISx64\1403000.024\srtsp64.sys
2013-01-29 01:45 . 2013-02-27 09:57	36952	----a-w-	c:\windows\system32\drivers\NISx64\1403000.024\srtspx64.sys
2013-01-22 02:15 . 2013-02-27 09:57	493656	----a-w-	c:\windows\system32\drivers\NISx64\1403000.024\symds64.sys
2013-01-17 00:28 . 2010-11-21 03:27	273840	------w-	c:\windows\system32\MpSigStub.exe
2013-01-08 05:32 . 2013-02-12 12:24	9161176	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{23E66AFD-6590-4634-8FF9-832E37E9032D}\mpengine.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}"= "c:\program files (x86)\DVDVideoSoftTB_DE\prxtbDVDV.dll" [2011-05-09 176936]
.
[HKEY_CLASSES_ROOT\clsid\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}]
2011-05-09 09:49	176936	----a-w-	c:\program files (x86)\DVDVideoSoftTB_DE\prxtbDVDV.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}]
2010-11-21 03:24	297808	----a-w-	c:\windows\System32\mscoree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]
2013-01-23 12:24	247704	----a-w-	c:\program files (x86)\Delta\delta\1.8.10.0\bh\delta.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
2013-03-13 21:26	197920	----a-w-	c:\program files (x86)\Yontoo\YontooIEClient.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}"= "c:\program files (x86)\DVDVideoSoftTB_DE\prxtbDVDV.dll" [2011-05-09 176936]
"{82E1477C-B154-48D3-9891-33D83C26BCD3}"= "c:\program files (x86)\Delta\delta\1.8.10.0\deltaTlbr.dll" [2013-01-23 321944]
.
[HKEY_CLASSES_ROOT\clsid\{0027da2d-c9f2-4b0b-ae05-e2cd1bdb6cff}]
.
[HKEY_CLASSES_ROOT\clsid\{82e1477c-b154-48d3-9891-33d83c26bcd3}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
[HKEY_CLASSES_ROOT\delta.deltadskBnd]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-21 1475584]
"NokiaSuite.exe"="c:\program files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" [2012-12-21 1090040]
"Yontoo Desktop"="c:\users\Peet17\AppData\Roaming\Yontoo\YontooDesktop.exe" [2013-03-13 42784]
"Browser Infrastructure Helper"="c:\users\Peet17\AppData\Local\Smartbar\Application\QuickShare.exe" [2013-01-09 13824]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-09-13 283160]
"PMBVolumeWatcher"="c:\program files (x86)\Sony\PMB\PMBVolumeWatcher.exe" [2010-11-26 648032]
"DivXMediaServer"="c:\program files (x86)\DivX\DivX Media Server\DivXMediaServer.exe" [2013-01-30 450560]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
TraXEx PC-Putzer.lnk - c:\program files (x86)\TraXEx\TraXEx.exe [2012-6-7 3933304]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll c:\progra~3\browse~1\261125~1.80\{c16c1~1\browserprotect.dll
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"mixer1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"ISBMgr.exe"="c:\program files (x86)\Sony\ISB Utility\ISBMgr.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
"DivXUpdate"="c:\program files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 CGVPNCliSrvc;CyberGhost VPN Client;c:\program files\CyberGhost VPN\CGVPNCliService.exe [2012-04-26 2438696]
R3 DCDhcpService;DCDhcpService;c:\program files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [2011-07-19 104096]
R3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088]
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2011-07-29 16776]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2011-07-29 9096]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [2012-07-17 14448]
R3 PSI;PSI;c:\windows\system32\DRIVERS\psi_mf.sys [2010-09-01 17976]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
R3 SOHCImp;VAIO Content Importer;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe [2011-02-21 113824]
R3 SOHDs;VAIO Device Searcher;c:\program files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe [2011-02-21 67232]
R3 Sony PC Companion;Sony PC Companion;c:\program files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
R3 SpfService;VAIO Entertainment Common Service;c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe [2011-01-20 286936]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2012-08-23 30208]
R3 VCFw;VAIO Content Folder Watcher;c:\program files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [2011-01-20 887000]
R3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2011-05-19 549616]
R3 VcmINSMgr;VAIO Content Metadata Intelligent Network Service Manager;c:\program files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe [2011-02-18 385336]
R3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe [2011-02-18 99104]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2012-04-04 1255736]
R4 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]
R4 PMBDeviceInfoProvider;PMBDeviceInfoProvider;c:\program files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe [2010-11-26 398176]
R4 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2012-03-02 503352]
R4 uCamMonitor;CamMonitor;c:\program files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [2011-02-23 105024]
R4 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1403000.024\SYMDS64.SYS [2013-01-22 493656]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1403000.024\SYMEFA64.SYS [2013-01-31 1139800]
S1 BHDrvx64;BHDrvx64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130322.001\BHDrvx64.sys [2013-03-22 1387608]
S1 ccSet_NIS;Norton Internet Security CBE Settings Manager;c:\windows\system32\drivers\NISx64\1403000.024\ccSetx64.sys [2012-11-16 168096]
S1 IDSVia64;IDSVia64;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130404.001\IDSvia64.sys [2013-02-12 513184]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1403000.024\Ironx64.SYS [2012-11-16 224416]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1403000.024\SYMNETS.SYS [2013-01-31 432800]
S1 Uim_VIM;UIM Virtual Image Plugin;c:\windows\system32\Drivers\uim_vimx64.sys [2012-06-09 389968]
S2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent;c:\program files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-04-29 146592]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-04-29 91296]
S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
S2 BrowserProtect;BrowserProtect;c:\programdata\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [2013-03-06 2569168]
S2 ctfmon64;Uli sptd Desktop;c:\windows\system32\objsel64.exe [2013-02-23 114176]
S2 GFilterSvc;G-Filter Service;c:\windows\System32\GFilterSvc.exe [2013-02-23 121856]
S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2012-03-12 2429544]
S2 LiveTunerPM;Ashampoo LiveTuner ProcessMonitor Driver;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor64.sys [2011-03-08 12824]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2012-07-13 769432]
S2 NIS;Norton Internet Security CBE;c:\program files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe [2012-12-24 144520]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-04-17 14112]
S2 SampleCollector;VAIO Care Performance Service;c:\program files\Sony\VAIO Care\VCPerfService.exe [2011-01-29 259192]
S2 SearchAnonymizer;SearchAnonymizer;c:\users\Peet17\AppData\Roaming\OCS\SM\SearchAnonymizerHelper.exe [2013-02-23 40960]
S2 Secunia PSI Agent;Secunia PSI Agent;c:\program files (x86)\Secunia\PSI\PSIA.exe [2012-07-25 1326176]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2012-12-29 383416]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe [2012-05-29 2143072]
S2 VSNService;VSNService;c:\program files\Sony\VAIO Smart Network\VSNService.exe [2011-08-12 971704]
S2 WO_LiveService;Ashampoo LiveTuner Service;c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe [2012-01-09 884120]
S2 Yontoo Desktop Updater;Yontoo Desktop Updater;c:\program files (x86)\Yontoo\Y2Desktop.Updater.exe [2013-03-13 23552]
S3 ArcSoftKsUFilter;ArcSoft Magic-I Visual Effect;c:\windows\system32\DRIVERS\ArcSoftKsUFilter.sys [2009-05-26 19968]
S3 AthBTPort;Atheros Virtual Bluetooth Class;c:\windows\system32\DRIVERS\btath_flt.sys [2011-04-29 36000]
S3 BTATH_A2DP;Bluetooth A2DP Audio Driver;c:\windows\system32\drivers\btath_a2dp.sys [2011-04-29 259232]
S3 btath_avdt;Atheros Bluetooth AVDT Service;c:\windows\system32\drivers\btath_avdt.sys [2011-04-29 109216]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-04-29 29344]
S3 BTATH_HCRP;Bluetooth HCRP Server driver;c:\windows\system32\DRIVERS\btath_hcrp.sys [2011-04-29 166048]
S3 BTATH_LWFLT;Bluetooth LWFLT Device;c:\windows\system32\DRIVERS\btath_lwflt.sys [2011-04-29 59040]
S3 BTATH_RCP;Bluetooth AVRCP Device;c:\windows\system32\DRIVERS\btath_rcp.sys [2011-04-29 283296]
S3 BtFilter;BtFilter;c:\windows\system32\DRIVERS\btfilter.sys [2011-04-29 288416]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-18 138912]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver;c:\windows\system32\DRIVERS\RtsPStor.sys [2012-03-12 340072]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2011-03-29 425064]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [2010-04-26 12032]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys [2012-02-09 11856]
S3 VCService;VCService;c:\program files\Sony\VAIO Care\VCService.exe [2011-02-14 44736]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update\VUAgent.exe [2012-10-26 1286784]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
Inhalt des "geplante Tasks" Ordners
.
2013-04-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-08 17:41]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"cAudioFilterAgent"="c:\program files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe" [2011-03-29 518784]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-04-29 790688]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-04-29 657568]
"Ashampoo WinOptimizer Live-Tuner"="c:\program files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe" [2012-01-09 2655640]
"Ocs_SM"="c:\users\Peet17\AppData\Roaming\OCS\SM\SearchAnonymizer.exe" [2013-02-23 106496]
"VDownloader"="c:\program files\VDownloader\VDownloader.exe" [2012-12-20 879104]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId=78E700FF9EB74DB6
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = <local>
IE: An OneNote s&enden - c:\progra~2\MICROS~4\Office14\ONBttnIE.dll/105
IE: Free YouTube Download - c:\users\Peet17\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~4\Office14\EXCEL.EXE/3000
IE: {{6C7C0C9A-B51D-4ADB-A74D-C4E33744F866} - c:\program files (x86)\TraXEx\Integration\TraXEx Internet Explorer.lnk
IE: {{8DA7743F-9274-4BE8-899E-C0FF6ED61B00} - c:\program files (x86)\TraXEx\Integration\TraXEx Löschautomat.lnk
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:\users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\
FF - prefs.js: browser.search.selectedEngine - Delta Search
FF - prefs.js: browser.startup.homepage - hxxp://www.t-online.de/
FF - ExtSQL: 2013-02-13 13:38; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn
FF - ExtSQL: 2013-02-13 13:38; {BBDA0591-3099-440a-AA10-41764D9DB4DB}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn
FF - ExtSQL: 2013-02-15 15:23; {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}; c:\users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
FF - user.js: extentions.y2layers.installId - cc1b078f-9cb7-4a7b-b2d7-6a575e596dff
FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,buzzdock,YontooNewOffers
FF - user.js: extensions.delta.tlbrSrchUrl - 
FF - user.js: extensions.delta.id - 78e7b38700000000000000ff9eb74db6
FF - user.js: extensions.delta.appId - {C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
FF - user.js: extensions.delta.instlDay - 15786
FF - user.js: extensions.delta.vrsn - 1.8.10.0
FF - user.js: extensions.delta.vrsni - 1.8.10.0
FF - user.js: extensions.delta.vrsnTs - 1.8.10.019:18
FF - user.js: extensions.delta.prtnrId - delta
FF - user.js: extensions.delta.prdct - delta
FF - user.js: extensions.delta.aflt - babsst
FF - user.js: extensions.delta.smplGrp - none
FF - user.js: extensions.delta.tlbrId - base
FF - user.js: extensions.delta.instlRef - sst
FF - user.js: extensions.delta.dfltLng - en
FF - user.js: extensions.delta.excTlbr - false
FF - user.js: extensions.delta.admin - false
FF - user.js: extensions.delta.autoRvrt - false
FF - user.js: extensions.delta.rvrt - false
FF - user.js: extensions.delta.newTab - false
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{5786d022-540e-4699-b350-b4be0ae94b79} - (no file)
WebBrowser-{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF} - (no file)
WebBrowser-{5786D022-540E-4699-B350-B4BE0AE94B79} - (no file)
HKLM-Run-Apoint - c:\program files (x86)\Apoint\Apoint.exe
.
.
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\diMaster.dll\" /prefetch:1"
--
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\services\SampleCollector]
"ImagePath"="\"c:\program files\Sony\VAIO Care\VCPerfService.exe\" \"/service\" \"/sstates\" \"/sampleinterval=5000\" \"/procinterval=5\" \"/dllinterval=120\" \"/counter=\Processor(_Total)\% Processor Time:1/counter=\PhysicalDisk(_Total)\Disk Bytes/sec:1\" \"/counter=\Network Interface(*)\Bytes Total/sec:1\" \"/expandcounter=\Processor Information(*)\Processor Frequency:1\" \"/expandcounter=\Processor(*)\% Idle Time:1\" \"/expandcounter=\Processor(*)\% C1 Time:1\" \"/expandcounter=\Processor(*)\% C2 Time:1\" \"/expandcounter=\Processor(*)\% C3 Time:1\" \"/expandcounter=\Processor(*)\% Processor Time:1\" \"/directory=c:\programdata\Sony Corporation\VAIO Care\inteldata\""
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_6_602_180_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_6_602_180.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\software\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\windows\SysWOW64\schtasks.exe
c:\program files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\windows\SysWOW64\DllHost.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files\Sony\VAIO Care\listener.exe
c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2013-04-06  16:57:03 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2013-04-06 14:56
.
Vor Suchlauf: 15 Verzeichnis(se), 115.548.418.048 Bytes frei
Nach Suchlauf: 21 Verzeichnis(se), 114.827.931.648 Bytes frei
.
- - End Of File - - 53BC954DAA2E7A07604814A6EE3E98F3
         
Das Programm sagt das ich folgende Dateien löschen soll:

C:\ProgramData\Amazon.ico
C:\ProgramData\MercadoLivre.ico
C:\Windows\SysWow64\Packet.dll
C:\Windows\SysWow64\pthreadVC.dll
C:\Windows\SysWow64\set7272.tmp
C:\Windows\SysWow64\wpcap.dll

ist das o.k.?

Schönes Wochenende

Peter

Alt 06.04.2013, 17:09   #22
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




Im Anschluss:

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Danach eine Kontrolle mit OTL bitte:
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Setze oben mittig den Haken bei Scanne alle Benutzer
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in CODE-Tags hier in den Thread.
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.04.2013, 09:33   #23
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Hier die Logs

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.3 (04.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Peet17 on 07.04.2013 at 23:48:49,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] browserprotect 
Successfully deleted: [Service] browserprotect 
Failed to stop: [Service] yontoo desktop updater 



~~~ Registry Values

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\windows\currentversion\run\\browser infrastructure helper
Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\windows\currentversion\run\\yontoo desktop
Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\windows nt\currentversion\windows\\AppInit_DLLs
Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\bprotector start page 
Failed to delete: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\\bprotectordefaultscope 
Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{82e1477c-b154-48d3-9891-33d83c26bcd3} 
Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} 
Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\S-1-5-21-4075830544-3649874069-869990161-1000\software\microsoft\internet explorer\main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_classes_root\escort.escortiepane
Successfully deleted: [Registry Key] hkey_classes_root\escort.escortiepane.1
Successfully deleted: [Registry Key] hkey_local_machine\software\babylon
Successfully deleted: [Registry Key] hkey_current_user\software\babylontoolbar
Successfully deleted: [Registry Key] hkey_local_machine\software\conduit
Failed to delete: [Registry Key] hkey_local_machine\software\datamngr
Successfully deleted: [Registry Key] hkey_current_user\software\smartbarbackup
Successfully deleted: [Registry Key] hkey_current_user\software\softonic
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduit
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduitsearchscopes
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\pricegong
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\smartbar
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\toolbar
Failed to delete: [Registry Key] hkey_current_user\software\microsoft\windows\currentversion\ext\bprotectsettings
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escort.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortapp.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escorteng.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortlbr.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\esrv.exe
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\yontooieclient.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\delta.deltaappcore
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\delta.deltaappcore.1
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\esrv.deltaesrvc
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\esrv.deltaesrvc.1
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\prod.cap
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\yontooieclient.api
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\yontooieclient.api.1
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\quickshare_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\quickshare_rasmancs
Failed to delete: [Registry Key] hkey_local_machine\software\wow6432node\datamngr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\software\classes\Toolbar.CT2625848
Failed to delete: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{31ad400d-1b06-4e33-a59a-90c2c140cba0}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{82e1477c-b154-48d3-9891-33d83c26bcd3}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{ae07101b-46d4-4a98-af68-0333ea26e113}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{c1af5fa5-852c-4c90-812e-a7f75e011d87}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{c1af5fa5-852c-4c90-812e-a7f75e011d87}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{fd72061e-9fde-484d-a58a-0bab4151cad8}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{fd72061e-9fde-484d-a58a-0bab4151cad8}
Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{afbcb7e0-f91a-4951-9f31-58fee57a25c4} 



~~~ Files

Successfully deleted: [File] "C:\end"
Successfully deleted: [File] C:\Windows\syswow64\sho1075.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Failed to delete: [Folder] "C:\ProgramData\browserprotect"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\babsolution"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\yontoo"
Failed to delete: [Folder] "C:\Users\Peet17\appdata\local\conduit"
Failed to delete: [Folder] "C:\Users\Peet17\appdata\local\smartbar"
Successfully deleted: [Folder] "C:\Users\Peet17\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Peet17\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\delta"
Successfully deleted: [Folder] "C:\Program Files (x86)\pc speed maximizer"
Successfully deleted: [Folder] "C:\Program Files (x86)\yontoo"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\microsoft\windows\start menu\programs\browserprotect"
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{02A37FF5-3726-4314-9A95-AE39828969B8}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{07065E78-AD44-4306-9187-1B1741F2809E}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{0B002994-DCBF-4680-B655-7243ED8A6363}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{3137F3D7-E379-4517-85A7-FA9CDFFF1E64}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{357B26E3-2124-46CC-861F-716CD7D36E60}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{3F43ED0F-AF45-4FAD-9B3C-6DF5E71ED46A}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{5ACF6A4D-36F7-4A25-94B5-ED3E84BBED7C}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{68FEB6C4-D36B-40F4-9355-CB80B8D3389D}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{9B06CBD8-27D7-482B-AFD5-285725590058}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{A3043ED3-A37E-464A-BB81-01AC0999A003}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{A3376A99-8351-4BFD-BEAC-38BE5C6AC705}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{B1377A48-761C-424D-B23F-A769A60D9EF3}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{BC04362E-CBC9-43E1-8C6D-84EE265A9300}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{BEF9172A-BD98-4B76-8C23-691463926A2A}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{C61C3ACC-3EC7-462E-93B2-F62E9B72A8F7}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{CDC2767B-C26A-474E-9905-D82053AE2AF1}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{CE2D8CE2-E411-4FE9-994A-2262AD4D912F}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{D4F38EB3-1188-4273-A607-114FEBB0AB83}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{D941E37C-32F0-4EA0-983F-3EFF994F86AB}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{DC0516FE-05BF-4B6E-8A8E-7F3712177344}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{EB411C4B-1839-4974-B704-543C9BE90381}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{EF1658D5-54FE-4590-ADF1-D349ADE50419}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{F797EEF2-BD41-46D0-8D25-5A84C6C1C67C}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{FDAC9EF9-BAC6-4AB5-95AC-93F8753B9589}
Successfully deleted: [Folder] "C:\ProgramData\ask" 



~~~ FireFox

Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\user.js
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\bprotector_extensions.sqlite
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\bprotector_prefs.js
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\askcom.xml
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\delta.xml
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\smartbar
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\ffxtlbr@delta.com
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\helperbar@helperbar.com
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\plugin@yontoo.com
Successfully deleted the following from C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\prefs.js

user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=78E700FF9EB74DB6");
user_pref("browser.search.defaultengine", "Ask.com");
user_pref("browser.search.defaultenginename", "Ask.com");
user_pref("browser.search.order.1", "Delta Search");
user_pref("browser.search.selectedEngine", "Delta Search");
user_pref("CT2481020.1000082.isDisplayHidden", "true");
user_pref("CT2481020.1000082.isPlayDisplay", "true");
user_pref("CT2481020.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
user_pref("CT2481020.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2481020.autoDisableScopes", -1);
user_pref("CT2481020.browser.search.defaultthis.engineName", true);
user_pref("CT2481020.cbcountry_001.enc", "REU=");
user_pref("CT2481020.cbfirsttime.enc", "VHVlIEphbiAyMiAyMDEzIDE4OjA5OjQwIEdNVCswMTAw");
user_pref("CT2481020.CBOpenMAMSettings.enc", "MA==");
user_pref("CT2481020.defaultSearch", "true");
user_pref("CT2481020.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.enableAlerts", "false");
user_pref("CT2481020.enableFix404ByUser", "TRUE");
user_pref("CT2481020.enableSearchFromAddressBar", "true");
user_pref("CT2481020.FirstTime", "true");
user_pref("CT2481020.firstTimeDialogOpened", "true");
user_pref("CT2481020.FirstTimeFF3", "true");
user_pref("CT2481020.fixPageNotFoundError", "true");
user_pref("CT2481020.fixPageNotFoundErrorByUser", "true");
user_pref("CT2481020.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2481020.fixUrls", true);
user_pref("CT2481020.homepageuserchanged", true);
user_pref("CT2481020.installDate", "22/1/2013 18:09:19");
user_pref("CT2481020.installId", "conduitnsisintegration");
user_pref("CT2481020.installType", "conduitnsisintegration");
user_pref("CT2481020.isCheckedStartAsHidden", true);
user_pref("CT2481020.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.isFirstTimeToolbarLoading", "false");
user_pref("CT2481020.isNewTabEnabled", true);
user_pref("CT2481020.isPerformedSmartBarTransition", "true");
user_pref("CT2481020.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2481020.keyword", true);
user_pref("CT2481020.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"\"}");
user_pref("CT2481020.lastVersion", "10.14.40.128");
user_pref("CT2481020.LoginRevertSettingsEnabled", true);
user_pref("CT2481020.migrateAppsAndComponents", true);
user_pref("CT2481020.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_SEARCH_TERM\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://AshampooDE.Ou
user_pref("CT2481020.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2481020.openThankYouPage", "false");
user_pref("CT2481020.openUninstallPage", "false");
user_pref("CT2481020.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT2481020.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\\"01\\\\/22\\\\/2013 20\\\"}\"}");
user_pref("CT2481020.revertSettingsEnabled", "TRUE");
user_pref("CT2481020.search.searchAppId", "129058856464656507");
user_pref("CT2481020.search.searchCount", "0");
user_pref("CT2481020.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CUI=SB_CUI&q=");
user_pref("CT2481020.searchInNewTabEnabledByUser", "false");
user_pref("CT2481020.searchInNewTabEnabledInHidden", "true");
user_pref("CT2481020.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2481020\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://AshampooDE.OurToolbar.com//xpi\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Ashampoo DE\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_services_appsMetadata_lastUpdate", "1358874571356");
user_pref("CT2481020.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1358874571684");
user_pref("CT2481020.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1358874573862");
user_pref("CT2481020.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358874573905");
user_pref("CT2481020.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359547474463");
user_pref("CT2481020.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1358874573540");
user_pref("CT2481020.serviceLayer_services_searchAPI_lastUpdate", "1358874570207");
user_pref("CT2481020.serviceLayer_services_serviceMap_lastUpdate", "1359547474197");
user_pref("CT2481020.serviceLayer_services_toolbarContextMenu_lastUpdate", "1358874573705");
user_pref("CT2481020.serviceLayer_services_toolbarSettings_lastUpdate", "1359547474370");
user_pref("CT2481020.serviceLayer_services_translation_lastUpdate", "1359547474240");
user_pref("CT2481020.serviceLayer_services_userApps_lastUpdate", "1358932638988");
user_pref("CT2481020.settingsINI", true);
user_pref("CT2481020.shouldFirstTimeDialog", "false");
user_pref("CT2481020.smartbar.CTID", "CT2481020");
user_pref("CT2481020.smartbar.homepage", true);
user_pref("CT2481020.smartbar.isHidden", true);
user_pref("CT2481020.smartbar.toolbarName", "Ashampoo DE ");
user_pref("CT2481020.smartbar.Uninstall", "0");
user_pref("CT2481020.toolbarBornServerTime", "22-1-2013");
user_pref("CT2481020.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2481020.UserID", "UN23186023487927065");
user_pref("CT2481020_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352651,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2625848.1000082.isDisplayHidden", "true");
user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
user_pref("CT2625848.2625848a129894023611240511000000paramsGK1", "eyJ1cGRhdGVSZXFUaW1lIjoxMzUxMDgxOTIzMzQyLCJ1cGRhdGVSZXNwVGltZSI6MTM1MTA4MTkyMzU5NSwiZGF0YSI6eyJzZXR0aW5ncyI6e
user_pref("CT2625848.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2625848.autoDisableScopes", -1);
user_pref("CT2625848.browser.search.defaultthis.engineName", true);
user_pref("CT2625848.defaultSearch", "true");
user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.enableAlerts", "false");
user_pref("CT2625848.enableFix404ByUser", "TRUE");
user_pref("CT2625848.enableSearchFromAddressBar", "true");
user_pref("CT2625848.FirstTime", "true");
user_pref("CT2625848.firstTimeDialogOpened", "true");
user_pref("CT2625848.FirstTimeFF3", "true");
user_pref("CT2625848.fixPageNotFoundError", "true");
user_pref("CT2625848.fixPageNotFoundErrorByUser", "true");
user_pref("CT2625848.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2625848.fixUrls", true);
user_pref("CT2625848.homepageuserchanged", true);
user_pref("CT2625848.installId", "conduitnsisintegration");
user_pref("CT2625848.installType", "conduitnsisintegration");
user_pref("CT2625848.isCheckedStartAsHidden", true);
user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.isFirstTimeToolbarLoading", "false");
user_pref("CT2625848.isNewTabEnabled", false);
user_pref("CT2625848.isPerformedSmartBarTransition", "true");
user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2625848.keyword", true);
user_pref("CT2625848.lastVersion", "10.14.40.128");
user_pref("CT2625848.LoginRevertSettingsEnabled", true);
user_pref("CT2625848.migrateAppsAndComponents", true);
user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://DVDVideoSoftT
user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2625848.openThankYouPage", "false");
user_pref("CT2625848.openUninstallPage", "true");
user_pref("CT2625848.RevertSettingsEnabled", true);
user_pref("CT2625848.search.searchAppId", "129181467799155027");
user_pref("CT2625848.search.searchCount", "0");
user_pref("CT2625848.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
user_pref("CT2625848.searchInNewTabEnabled", "false");
user_pref("CT2625848.searchInNewTabEnabledByUser", "false");
user_pref("CT2625848.searchInNewTabEnabledInHidden", "true");
user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2625848\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTBDE.OurToolbar.com//xpi\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB DE\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_services_appsMetadata_lastUpdate", "1351078317430");
user_pref("CT2625848.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1351078318251");
user_pref("CT2625848.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1351078319416");
user_pref("CT2625848.serviceLayer_services_login_10.13.1.89_lastUpdate", "1353527173594");
user_pref("CT2625848.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358770860446");
user_pref("CT2625848.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359547474035");
user_pref("CT2625848.serviceLayer_services_optimizer_lastUpdate", "1351078318978");
user_pref("CT2625848.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1351078319293");
user_pref("CT2625848.serviceLayer_services_searchAPI_lastUpdate", "1351078315898");
user_pref("CT2625848.serviceLayer_services_serviceMap_lastUpdate", "1359547473683");
user_pref("CT2625848.serviceLayer_services_toolbarContextMenu_lastUpdate", "1351078319378");
user_pref("CT2625848.serviceLayer_services_toolbarSettings_lastUpdate", "1359547473861");
user_pref("CT2625848.serviceLayer_services_translation_lastUpdate", "1359547473963");
user_pref("CT2625848.settingsINI", true);
user_pref("CT2625848.shouldFirstTimeDialog", "false");
user_pref("CT2625848.smartbar.CTID", "CT2625848");
user_pref("CT2625848.smartbar.homepage", true);
user_pref("CT2625848.smartbar.isHidden", true);
user_pref("CT2625848.smartbar.toolbarName", "DVDVideoSoftTB DE ");
user_pref("CT2625848.smartbar.Uninstall", "0");
user_pref("CT2625848.startPage", "userChanged");
user_pref("CT2625848.toolbarBornServerTime", "24-10-2012");
user_pref("CT2625848.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2625848.UserID", "UN28335890038927336");
user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352571,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2883880.1000082.isDisplayHidden", "true");
user_pref("CT2883880.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio Ein...\",\"description\":\"Radio Eins (RBB)\",\"url\":\"mms://stream2.rbb-online.de/wmtencoder/ra
user_pref("CT2883880.1000234.TWC_location", "Berlin, Deutschland");
user_pref("CT2883880.1000234.TWC_locId", "GMXX0007");
user_pref("CT2883880.1000234.TWC_region", "DE");
user_pref("CT2883880.1000234.TWC_temp_dis", "c");
user_pref("CT2883880.1000234.TWC_TMP_city", "BERLIN");
user_pref("CT2883880.1000234.TWC_TMP_country", "DE");
user_pref("CT2883880.1000234.TWC_wind_dis", "kmh");
user_pref("CT2883880.1000234.weatherData", "{\"icon\":\"11.png\",\"temperature\":\"4°C\",\"temperatureClear\":\"4°C\",\"highTemperature\":\"3°C\",\"lowTemperature\":\"-2°C
user_pref("CT2883880.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2883880.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.enableAlerts", "never");
user_pref("CT2883880.enableFix404ByUser", "FALSE");
user_pref("CT2883880.FirstTime", "true");
user_pref("CT2883880.firstTimeDialogOpened", "true");
user_pref("CT2883880.FirstTimeFF3", "true");
user_pref("CT2883880.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2883880.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2883880.fixUrls", true);
user_pref("CT2883880.homepageuserchanged", true);
user_pref("CT2883880.installType", "DirectDownload");
user_pref("CT2883880.isCheckedStartAsHidden", true);
user_pref("CT2883880.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.isFirstTimeToolbarLoading", "false");
user_pref("CT2883880.isNewTabEnabled", false);
user_pref("CT2883880.isPerformedSmartBarTransition", "true");
user_pref("CT2883880.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2883880.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.keyword", true);
user_pref("CT2883880.lastVersion", "10.14.40.128");
user_pref("CT2883880.LoginRevertSettingsEnabled", true);
user_pref("CT2883880.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT2883880.migrateAppsAndComponents", true);
user_pref("CT2883880.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://Abacho.OurToo
user_pref("CT2883880.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.RevertSettingsEnabled", true);
user_pref("CT2883880.search.searchAppId", "129375914645931457");
user_pref("CT2883880.search.searchCount", "0");
user_pref("CT2883880.searchInNewTabEnabled", "false");
user_pref("CT2883880.searchInNewTabEnabledByUser", "false");
user_pref("CT2883880.searchInNewTabEnabledInHidden", "true");
user_pref("CT2883880.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2883880\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Abacho.OurToolbar.com//xpi\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Abacho\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_services_appsMetadata_lastUpdate", "1357821388163");
user_pref("CT2883880.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357121874010");
user_pref("CT2883880.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1357733568320");
user_pref("CT2883880.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359547474280");
user_pref("CT2883880.serviceLayer_services_login_10.13.511.2_lastUpdate", "1358770860732");
user_pref("CT2883880.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359392136267");
user_pref("CT2883880.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1357733568358");
user_pref("CT2883880.serviceLayer_services_searchAPI_lastUpdate", "1357821388391");
user_pref("CT2883880.serviceLayer_services_serviceMap_lastUpdate", "1359547473899");
user_pref("CT2883880.serviceLayer_services_toolbarContextMenu_lastUpdate", "1357733568279");
user_pref("CT2883880.serviceLayer_services_toolbarSettings_lastUpdate", "1359547473989");
user_pref("CT2883880.serviceLayer_services_translation_lastUpdate", "1359547474190");
user_pref("CT2883880.settingsINI", true);
user_pref("CT2883880.smartbar.CTID", "CT2883880");
user_pref("CT2883880.smartbar.isHidden", true);
user_pref("CT2883880.smartbar.toolbarName", "Abacho ");
user_pref("CT2883880.smartbar.Uninstall", "0");
user_pref("CT2883880.toolbarBornServerTime", "4-12-2012");
user_pref("CT2883880.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2883880.UserID", "UN13759407183627304");
user_pref("CT2883880_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352606,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.id", "78e7b38700000000000000ff9eb74db6");
user_pref("extensions.delta.instlDay", "15786");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.10.0");
user_pref("extensions.delta.vrsni", "1.8.10.0");
user_pref("extensions.delta.vrsnTs", "1.8.10.019:18:28");
user_pref("extensions.toolbar@ask.com.install-event-fired", true);
user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
user_pref("extentions.y2layers.installId", "cc1b078f-9cb7-4a7b-b2d7-6a575e596dff");
user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13&CUI=SB_CUI");
user_pref("Smartbar.ConduitHomepagesList", "");
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT
user_pref("Smartbar.ConduitSearchEngineList", "Ashampoo DE Customized Web Search");
user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CUI=SB_CUI&q=");
user_pref("Smartbar.keywordURLSelectedCTID", "CT2481020");
user_pref("smartbar.machineId", "OUSCDK0I1YDYA+YDCTADY/FVE2EDEPI6DPOI9I8OW8TOZ4ZHCYHWATUTHLIRF10W0IIZDN7EO6S8BZSPHJELZQ");
user_pref("smartbar.originalHomepage", "hxxp://www.kadaza.de/");
user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
user_pref("smartbar.originalSearchEngine", "Google");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2013 at  0:11:10,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Code:
ATTFilter
# AdwCleaner v2.200 - Datei am 08/04/2013 um 10:07:48 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Peet17 - PEET17-VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Peet17\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : GFilterSvc
Gestoppt & Gelöscht : SearchAnonymizer
Gestoppt & Gelöscht : Yontoo Desktop Updater

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\searchplugins\11-suche.xml
Gelöscht mit Neustart : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\Program Files (x86)\DVDVideoSoftTB_DE
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Smartbar
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Peet17\AppData\LocalLow\DVDVideoSoftTB_DE
Ordner Gelöscht : C:\Users\Peet17\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Peet17\AppData\Roaming\OCS

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{206a7328-437f-4bd9-b53e-12bfee24d588}
Schlüssel Gelöscht : HKCU\Software\SmartbarLog
Schlüssel Gelöscht : HKCU\Software\5ce8bdee63fe446
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5ce8bdee63fe446
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{394DB777-5962-4D9E-A822-5C3A3F7F3AE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{573327B3-4EA2-4297-B460-137D71486340}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB_DE Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchAnonymizer
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v19.0.2 (de)

Datei : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\prefs.js

Gelöscht : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=78E70[...]
Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("CT2481020.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Gelöscht : user_pref("CT2481020.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2481020.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2481020.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"\"}");
Gelöscht : user_pref("CT2481020.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Gelöscht : user_pref("CT2481020.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Gelöscht : user_pref("CT2481020.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2481020_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Gelöscht : user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Gelöscht : user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Gelöscht : user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Gelöscht : user_pref("CT2883880.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio Ein...\",\"description[...]
Gelöscht : user_pref("CT2883880.1000234.weatherData", "{\"icon\":\"11.png\",\"temperature\":\"4°C\",\"temperatu[...]
Gelöscht : user_pref("CT2883880.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2883880.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2883880.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Gelöscht : user_pref("CT2883880.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2883880_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]

*************************

AdwCleaner[S1].txt - [338 octets] - [08/04/2013 10:07:19]
AdwCleaner[S2].txt - [15000 octets] - [08/04/2013 10:07:48]

########## EOF - C:\AdwCleaner[S2].txt - [15061 octets] ##########
         
Code:
ATTFilter
OTL logfile created on: 08.04.2013 10:18:11 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Peet17\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,98 Gb Total Physical Memory | 2,14 Gb Available Physical Memory | 53,78% Memory free
7,96 Gb Paging File | 5,89 Gb Available in Paging File | 73,99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 207,60 Gb Total Space | 106,72 Gb Free Space | 51,40% Space Free | Partition Type: NTFS
Drive F: | 374,46 Gb Total Space | 369,18 Gb Free Space | 98,59% Space Free | Partition Type: NTFS
 
Computer Name: PEET17-VAIO | User Name: Peet17 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Peet17\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe (Nokia)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\TraXEx\TraXEx.exe (Alexander Miehlke Softwareentwicklung)
PRC - C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe ()
PRC - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG)
PRC - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
PRC - C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)
PRC - C:\Programme\Sony\VAIO Care\listener.exe (Sony of America Corporation)
PRC - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\mediaservice\dsengine.dll ()
MOD - C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.3.0.36\wincfi39.dll ()
MOD - C:\Program Files (x86)\TraXEx\sqlite3.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (ctfmon64) -- C:\Windows\SysNative\objsel64.exe ()
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:64bit: - (SampleCollector) -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Sony PC Companion) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe (Symantec Corporation)
SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (VUAgent) -- C:\Programme\Sony\VAIO Update\VUAgent.exe (Sony Corporation)
SRV - (Secunia PSI Agent) -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (CGVPNCliSrvc) -- C:\Programme\CyberGhost VPN\CGVPNCliService.exe (mobile concepts GmbH)
SRV - (IconMan_R) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (WO_LiveService) -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe ()
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (VSNService) -- C:\Programme\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation)
SRV - (DCDhcpService) -- C:\Programme\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe (Atheros Communication Inc.)
SRV - (VcmIAlzMgr) -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation)
SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations)
SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (VAIO Event Service) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (uCamMonitor) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)
SRV - (SOHCImp) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation)
SRV - (SOHDs) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation)
SRV - (VcmXmlIfHelper) -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe (Sony Corporation)
SRV - (VcmINSMgr) -- C:\Programme\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation)
SRV - (VCService) -- C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (SpfService) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation)
SRV - (VCFw) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation)
SRV - (PMBDeviceInfoProvider) -- c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (wlcrasvc) -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (IviRegMgr) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (PSI_SVC_2) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (osppsvc) -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (StarWindServiceAE) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symnets.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symds64.sys (Symantec Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\ironx64.sys (Symantec Corporation)
DRV:64bit: - (ccSet_NIS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\ccsetx64.sys (Symantec Corporation)
DRV:64bit: - (nmwcdc) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys (Nokia)
DRV:64bit: - (nmwcd) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys (Nokia)
DRV:64bit: - (UsbserFilt) -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys (Nokia)
DRV:64bit: - (upperdev) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys (Nokia)
DRV:64bit: - (pccsmcfd) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (ggsemc) -- C:\Windows\SysNative\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (ggflt) -- C:\Windows\SysNative\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (UimBus) -- C:\Windows\SysNative\drivers\uimx64.sys (Windows (R) 2000 DDK provider)
DRV:64bit: - (Uim_IM) -- C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (Uim_VIM) -- C:\Windows\SysNative\drivers\uim_vimx64.sys (Paragon)
DRV:64bit: - (RSPCIESTOR) -- C:\Windows\SysNative\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (epmntdrv) -- C:\Windows\SysNative\epmntdrv.sys ()
DRV:64bit: - (EuGdiDrv) -- C:\Windows\SysNative\EuGdiDrv.sys ()
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (btath_avdt) -- C:\Windows\SysNative\drivers\btath_avdt.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (PSI) -- C:\Windows\SysNative\drivers\psi_mf.sys (Secunia)
DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (e1yexpress) -- C:\Windows\SysNative\drivers\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (ArcSoftKsUFilter) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys (ArcSoft, Inc.)
DRV:64bit: - (regi) -- C:\Windows\SysNative\drivers\regi.sys (InterVideo)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130406.008\ex64.sys (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130406.008\eng64.sys (Symantec Corporation)
DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130322.001\BHDrvx64.sys (Symantec Corporation)
DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130405.001\IDSviA64.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (epmntdrv) -- C:\Windows\SysWOW64\epmntdrv.sys ()
DRV - (EuGdiDrv) -- C:\Windows\SysWOW64\EuGdiDrv.sys ()
DRV - (LiveTunerPM) -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor64.sys ()
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com [binary data]
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{130E203B-3D36-4F8F-9EC2-5697EB54FAE9}: "URL" = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{280EAC15-DCD4-4C07-95BE-76F5F54C63E3}: "URL" = hxxp://services.zinio.com.anonymize-me.de/?anonymto=687474703A2F2F73657276696365732E7A696E696F2E636F6D2F7365617263683F733D7B7365617263685465726D737D2672663D736F6E79736C69636573&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{973D2D8B-CF98-4F45-86F0-BFBE74F662E3}: "URL" = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{97C35CBC-59A3-4DCB-8C59-3754579DEBF9}: "URL" = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{AE61EDF4-E707-4245-BFD6-83DDED57A69F}: "URL" = hxxp://rover.ebay.com.anonymize-me.de/?anonymto=687474703A2F2F726F7665722E656261792E636F6D2F726F7665722F312F3730372D33373237362D31363630392D32372F343F6D7072653D687474703A2F2F73686F702E656261792E64652F3F6F656D496E4C6E3D6965537263682D51333131265F6E6B773D7B7365617263685465726D737D&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{CD23E5DE-3EB3-442D-9727-670560155406}: "URL" = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{EBE3F4F2-B8A1-45EF-A666-F3DC5D7ABAEF}: "URL" = [String data over 1000 bytes]
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{FC1FE748-6B47-4970-BB46-4C5F7DE20236}: "URL" = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1005\..\SearchScopes,DefaultScope = 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.t-online.de/"
FF - prefs.js..extensions.enabledAddons: maps%40ovi.com:5.9.2.0
FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2
FF - prefs.js..extensions.enabledAddons: %7Bd49175b3-3fd8-43b8-b28e-da5d47f3c398%7D:1.0.47
FF - prefs.js..extensions.enabledAddons: toolbar%40web.de:2.5
FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.5.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\ [2013.02.13 14:38:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\ [2013.04.08 10:13:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox [2013.03.26 16:40:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.03.22 20:26:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.03.11 18:32:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.03.11 18:32:52 | 000,000,000 | ---D | M]
 
[2012.03.01 16:17:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\Extensions
[2013.04.08 00:09:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\Firefox\Profiles\n53j8j13.default\extensions
[2012.05.08 17:59:27 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Peet17\AppData\Roaming\mozilla\Firefox\Profiles\n53j8j13.default\extensions\maps@ovi.com
[2012.12.11 17:51:30 | 000,615,655 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\testpilot@labs.mozilla.com.xpi
[2013.03.22 14:35:39 | 000,549,639 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\toolbar@web.de.xpi
[2013.04.02 19:23:44 | 000,349,773 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
[2012.12.11 19:38:59 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013.02.14 16:36:28 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.02.21 16:10:59 | 000,395,933 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
[2012.03.05 16:40:50 | 000,000,003 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\maps@ovi.com\plugins\package.XPI
[2013.02.23 18:52:33 | 000,001,248 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\ashampoo-de-customized-web-search.xml
[2013.03.22 14:35:42 | 000,002,418 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\englische-ergebnisse.xml
[2013.03.22 14:35:42 | 000,010,701 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\gmx-suche.xml
[2013.03.22 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\lastminute.xml
[2013.03.22 14:35:42 | 000,005,682 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\webde-suche.xml
[2013.02.23 18:52:33 | 000,001,870 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{2ACCC7CF-D613-4458-8718-52934267CF46}.xml
[2013.02.23 18:52:33 | 000,002,188 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{35C64247-C242-4EF2-864E-08D0A36789AF}.xml
[2013.02.23 18:52:33 | 000,002,077 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{E5C408BC-DAD8-4C09-BBD4-917EFE4AAA24}.xml
[2013.03.22 20:26:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013.03.07 16:30:04 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2013.03.07 17:45:15 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.03.07 17:45:15 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2013.03.07 17:45:15 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2013.03.07 17:45:15 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.03.07 17:45:15 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.03.07 17:45:15 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2013.04.06 16:38:40 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Programme\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [Ocs_SM] C:\Users\Peet17\AppData\Roaming\OCS\SM\SearchAnonymizer.exe File not found
O4:64bit: - HKLM..\Run: [VDownloader] C:\Program Files\VDownloader\VDownloader.exe (Vitzo)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe (Expert System S.p.A.)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Peet17\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\Peet17\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: IE-Spuren löschen - {6C7C0C9A-B51D-4ADB-A74D-C4E33744F866} - C:\Program Files (x86)\TraXEx\Integration\TraXEx Internet Explorer.lnk ()
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: Löschautomat - {8DA7743F-9274-4BE8-899E-C0FF6ED61B00} - C:\Program Files (x86)\TraXEx\Integration\TraXEx Löschautomat.lnk ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.15.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AB0966E0-9BB8-42D7-8397-765D99DE8B84}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll) -  File not found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.08 10:11:38 | 000,000,000 | R--D | C] -- C:\Users\Peet17\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2013.04.07 23:48:45 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013.04.07 23:48:01 | 000,000,000 | ---D | C] -- C:\JRT
[2013.04.07 23:45:32 | 000,551,587 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Peet17\Desktop\JRT.exe
[2013.04.06 16:57:23 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013.04.06 16:20:08 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013.04.06 16:20:08 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013.04.06 16:20:08 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013.04.06 16:19:29 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.04.06 16:19:00 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013.04.06 16:14:50 | 005,047,402 | R--- | C] (Swearware) -- C:\Users\Peet17\Desktop\ComboFix.exe
[2013.04.05 17:52:33 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Users\Peet17\Desktop\aswMBR.exe
[2013.04.05 17:17:08 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Peet17\Desktop\tdsskiller.exe
[2013.04.05 13:42:25 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013.04.03 19:27:23 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022
[2013.04.03 18:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.04.03 18:36:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2013.04.01 11:00:48 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\Malwarebytes
[2013.04.01 11:00:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.04.01 11:00:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.04.01 11:00:39 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.04.01 11:00:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.03.26 16:41:02 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\VDownloader
[2013.03.26 16:40:37 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2013.03.26 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Local\VDownloader
[2013.03.26 16:40:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VDownloader
[2013.03.26 16:40:31 | 000,000,000 | ---D | C] -- C:\Program Files\VDownloader
[2013.03.26 16:19:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Download Assistant
[2013.03.26 16:17:57 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[2013.03.22 20:26:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.03.22 20:19:20 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Qtrax
[2013.03.22 20:18:32 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
[2013.03.22 00:17:42 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Desktop\mbar
[2013.03.19 18:11:44 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Documents\Outlook-Dateien
[2013.03.14 17:50:13 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\MyPhoneExplorer
[2013.03.14 17:50:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
[2013.03.14 17:49:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPhoneExplorer
[2013.03.14 16:57:19 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.03.14 16:57:19 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.03.14 16:57:18 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.03.14 16:57:18 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.03.14 16:57:18 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.03.14 16:57:18 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.03.14 16:57:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.03.14 16:57:17 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.03.14 16:57:17 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.03.14 16:57:17 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.03.14 16:57:16 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.03.14 16:57:15 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.03.14 16:57:14 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.03.14 16:57:14 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.03.14 16:57:14 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.03.14 16:57:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013.03.14 16:56:01 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013.03.14 16:56:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2013.03.13 19:41:11 | 016,486,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2013.03.11 18:32:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2013.03.09 22:04:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.03.09 17:56:59 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Skat-Online
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp files -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.04.08 10:17:42 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.08 10:17:42 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.08 10:14:37 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.04.08 10:14:37 | 000,696,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.04.08 10:14:37 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.04.08 10:14:37 | 000,148,134 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.04.08 10:14:37 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.04.08 10:10:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.08 10:10:00 | 3206,959,104 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.08 10:08:02 | 000,000,097 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.04.08 10:06:23 | 000,613,083 | ---- | M] () -- C:\Users\Peet17\Desktop\adwcleaner.exe
[2013.04.08 10:05:18 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.07 23:45:35 | 000,551,587 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Peet17\Desktop\JRT.exe
[2013.04.06 16:38:40 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013.04.06 16:15:11 | 005,047,402 | R--- | M] (Swearware) -- C:\Users\Peet17\Desktop\ComboFix.exe
[2013.04.05 17:54:02 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Users\Peet17\Desktop\aswMBR.exe
[2013.04.05 17:17:08 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Peet17\Desktop\tdsskiller.exe
[2013.04.05 14:14:47 | 000,001,422 | ---- | M] () -- C:\Users\Peet17\Desktop\OTL - Verknüpfung.lnk
[2013.04.05 14:04:57 | 409,139,317 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.04.05 11:02:24 | 000,222,832 | ---- | M] () -- C:\Users\Peet17\Desktop\snipp.PNG
[2013.04.04 16:58:23 | 000,007,892 | ---- | M] () -- C:\Users\Peet17\Desktop\GMER.zip
[2013.04.04 16:53:52 | 000,004,577 | ---- | M] () -- C:\Users\Peet17\Desktop\GMER.7z
[2013.04.04 14:43:20 | 000,377,856 | ---- | M] () -- C:\Users\Peet17\Desktop\onl49zno.exe
[2013.04.04 14:37:46 | 000,001,101 | ---- | M] () -- C:\Users\Peet17\Dokumente - Verknüpfung.lnk
[2013.04.04 09:51:19 | 000,000,017 | ---- | M] () -- C:\Users\Peet17\AppData\Local\resmon.resmoncfg
[2013.04.03 19:25:17 | 012,894,739 | ---- | M] () -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022.zip
[2013.04.02 16:38:45 | 000,000,020 | ---- | M] () -- C:\Users\Peet17\defogger_reenable
[2013.04.01 11:00:40 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.03.30 17:57:32 | 000,002,760 | ---- | M] () -- C:\{D2A06217-CFE2-41D6-90CC-8B100CB8EF0A}
[2013.03.27 21:00:56 | 000,013,003 | ---- | M] () -- C:\test.xml
[2013.03.27 12:19:10 | 001,680,165 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1403000.024\Cat.DB
[2013.03.26 16:40:35 | 000,001,726 | ---- | M] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2013.03.22 20:33:53 | 000,000,306 | ---- | M] () -- C:\Users\Peet17\Documents\cc_20130322_193349.reg
[2013.03.22 18:01:14 | 001,771,921 | ---- | M] () -- C:\Users\Peet17\Desktop\036-044_HGT201201_Tischgrills.pdf
[2013.03.22 15:22:08 | 000,000,124 | ---- | M] () -- C:\Users\Peet17\Documents\ax_files.xml
[2013.03.22 14:17:43 | 005,123,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.03.19 20:40:35 | 000,002,173 | ---- | M] () -- C:\Users\Peet17\Desktop\Skat-Online V9.lnk
[2013.03.19 18:07:18 | 000,002,545 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security CBE.lnk
[2013.03.19 18:06:20 | 000,014,818 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1403000.024\VT20130115.021
[2013.03.15 21:33:12 | 000,002,160 | ---- | M] () -- C:\{24C94FC6-ECE7-4EC0-AEA7-0D52FA1B10CA}
[2013.03.14 18:10:36 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2013.03.14 17:50:11 | 000,002,057 | ---- | M] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2013.03.13 19:41:17 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.03.13 19:41:17 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013.03.13 19:41:11 | 016,486,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2013.03.11 15:01:49 | 000,053,030 | ---- | M] () -- C:\Users\Peet17\Desktop\Computerfreeks.jpg
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.04.08 10:07:54 | 000,000,097 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.04.08 10:06:20 | 000,613,083 | ---- | C] () -- C:\Users\Peet17\Desktop\adwcleaner.exe
[2013.04.06 16:20:08 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013.04.06 16:20:08 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013.04.06 16:20:08 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013.04.06 16:20:08 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013.04.06 16:20:08 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013.04.05 13:42:03 | 409,139,317 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.04.05 11:02:24 | 000,222,832 | ---- | C] () -- C:\Users\Peet17\Desktop\snipp.PNG
[2013.04.04 16:58:23 | 000,007,892 | ---- | C] () -- C:\Users\Peet17\Desktop\GMER.zip
[2013.04.04 16:53:52 | 000,004,577 | ---- | C] () -- C:\Users\Peet17\Desktop\GMER.7z
[2013.04.04 14:43:20 | 000,377,856 | ---- | C] () -- C:\Users\Peet17\Desktop\onl49zno.exe
[2013.04.04 14:37:46 | 000,001,101 | ---- | C] () -- C:\Users\Peet17\Dokumente - Verknüpfung.lnk
[2013.04.04 09:51:19 | 000,000,017 | ---- | C] () -- C:\Users\Peet17\AppData\Local\resmon.resmoncfg
[2013.04.03 19:25:16 | 012,894,739 | ---- | C] () -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022.zip
[2013.04.02 16:38:45 | 000,000,020 | ---- | C] () -- C:\Users\Peet17\defogger_reenable
[2013.04.01 11:00:40 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.03.30 17:57:32 | 000,002,760 | ---- | C] () -- C:\{D2A06217-CFE2-41D6-90CC-8B100CB8EF0A}
[2013.03.28 18:22:11 | 000,001,422 | ---- | C] () -- C:\Users\Peet17\Desktop\OTL - Verknüpfung.lnk
[2013.03.26 16:40:35 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2013.03.26 16:40:35 | 000,001,726 | ---- | C] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2013.03.22 20:33:51 | 000,000,306 | ---- | C] () -- C:\Users\Peet17\Documents\cc_20130322_193349.reg
[2013.03.22 20:26:47 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.03.22 18:01:14 | 001,771,921 | ---- | C] () -- C:\Users\Peet17\Desktop\036-044_HGT201201_Tischgrills.pdf
[2013.03.22 14:17:11 | 005,123,776 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.03.19 18:07:18 | 000,002,545 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security CBE.lnk
[2013.03.15 21:33:10 | 000,002,160 | ---- | C] () -- C:\{24C94FC6-ECE7-4EC0-AEA7-0D52FA1B10CA}
[2013.03.14 18:10:36 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2013.03.14 17:50:11 | 000,002,057 | ---- | C] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2013.03.11 15:01:49 | 000,053,030 | ---- | C] () -- C:\Users\Peet17\Desktop\Computerfreeks.jpg
[2013.02.23 18:52:26 | 000,338,432 | ---- | C] () -- C:\Windows\SysWow64\sqlite36_engine.dll
[2013.02.12 22:03:01 | 000,091,136 | ---- | C] () -- C:\Windows\SendToClip.exe
[2013.01.30 21:13:53 | 000,001,521 | ---- | C] () -- C:\Users\Peet17\AppData\Local\recently-used.xbel
[2012.11.08 18:16:37 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012.11.08 18:16:37 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012.11.08 18:16:37 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012.11.08 18:16:35 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012.11.02 18:07:16 | 000,058,617 | ---- | C] () -- C:\Users\Peet17\final_bstSnapshot_18759.jpg
[2012.10.23 21:47:11 | 121,932,055 | ---- | C] () -- C:\Users\Peet17\Urlaub in Obergurgel 2012.wmv
[2012.09.14 14:37:30 | 000,009,216 | ---- | C] () -- C:\Users\Peet17\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.08.29 15:55:21 | 000,000,045 | ---- | C] () -- C:\ProgramData\.SimImages
[2012.06.19 15:01:50 | 009,314,047 | ---- | C] () -- C:\Users\Peet17\Meine Diashow.wmv
[2012.06.01 00:44:23 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2012.04.02 20:25:01 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
[2012.04.02 20:25:01 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
[2012.04.02 20:25:01 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
[2012.04.02 20:25:01 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
[2012.04.02 20:25:01 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
[2012.04.02 20:21:02 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012.03.16 21:02:23 | 000,017,408 | ---- | C] () -- C:\Users\Peet17\AppData\Local\WebpageIcons.db
[2012.03.15 09:47:06 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2012.03.06 11:35:42 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2012.03.05 14:30:32 | 000,056,320 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:AA10CDD2

< End of report >
         

Alt 08.04.2013, 09:35   #24
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Hier die Logs

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.8.3 (04.05.2013:1)
OS: Windows 7 Home Premium x64
Ran by Peet17 on 07.04.2013 at 23:48:49,11
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] browserprotect 
Successfully deleted: [Service] browserprotect 
Failed to stop: [Service] yontoo desktop updater 



~~~ Registry Values

Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\windows\currentversion\run\\browser infrastructure helper
Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\windows\currentversion\run\\yontoo desktop
Successfully repaired: [Registry Value] hkey_local_machine\software\microsoft\windows nt\currentversion\windows\\AppInit_DLLs
Successfully deleted: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\bprotector start page 
Failed to delete: [Registry Value] hkey_current_user\software\microsoft\internet explorer\searchscopes\\bprotectordefaultscope 
Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{82e1477c-b154-48d3-9891-33d83c26bcd3} 
Successfully deleted: [Registry Value] hkey_local_machine\software\microsoft\internet explorer\toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} 
Successfully repaired: [Registry Value] hkey_current_user\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\.default\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-18\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-19\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\s-1-5-20\software\microsoft\internet explorer\main\\Start Page
Successfully repaired: [Registry Value] hkey_users\S-1-5-21-4075830544-3649874069-869990161-1000\software\microsoft\internet explorer\main\\Start Page



~~~ Registry Keys

Successfully deleted: [Registry Key] hkey_classes_root\escort.escortiepane
Successfully deleted: [Registry Key] hkey_classes_root\escort.escortiepane.1
Successfully deleted: [Registry Key] hkey_local_machine\software\babylon
Successfully deleted: [Registry Key] hkey_current_user\software\babylontoolbar
Successfully deleted: [Registry Key] hkey_local_machine\software\conduit
Failed to delete: [Registry Key] hkey_local_machine\software\datamngr
Successfully deleted: [Registry Key] hkey_current_user\software\smartbarbackup
Successfully deleted: [Registry Key] hkey_current_user\software\softonic
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduit
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\conduitsearchscopes
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\pricegong
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\software\smartbar
Successfully deleted: [Registry Key] hkey_current_user\software\appdatalow\toolbar
Failed to delete: [Registry Key] hkey_current_user\software\microsoft\windows\currentversion\ext\bprotectsettings
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escort.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortapp.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escorteng.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\escortlbr.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\esrv.exe
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\appid\yontooieclient.dll
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\delta.deltaappcore
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\delta.deltaappcore.1
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\esrv.deltaesrvc
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\esrv.deltaesrvc.1
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\prod.cap
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\yontooieclient.api
Successfully deleted: [Registry Key] hkey_local_machine\software\classes\yontooieclient.api.1
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\quickshare_rasapi32
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\tracing\quickshare_rasmancs
Failed to delete: [Registry Key] hkey_local_machine\software\wow6432node\datamngr
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\software\classes\Toolbar.CT2625848
Failed to delete: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{0ecdf796-c2dc-4d79-a620-cce0c0a66cc9}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{31ad400d-1b06-4e33-a59a-90c2c140cba0}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{3c471948-f874-49f5-b338-4f214a2ee0b1}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{82e1477c-b154-48d3-9891-33d83c26bcd3}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{ae07101b-46d4-4a98-af68-0333ea26e113}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{c1af5fa5-852c-4c90-812e-a7f75e011d87}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{c1af5fa5-852c-4c90-812e-a7f75e011d87}
Successfully deleted: [Registry Key] hkey_classes_root\clsid\{fd72061e-9fde-484d-a58a-0bab4151cad8}
Successfully deleted: [Registry Key] hkey_local_machine\software\microsoft\windows\currentversion\explorer\browser helper objects\{fd72061e-9fde-484d-a58a-0bab4151cad8}
Successfully deleted: [Registry Key] hkey_current_user\software\microsoft\internet explorer\searchscopes\{afbcb7e0-f91a-4951-9f31-58fee57a25c4} 



~~~ Files

Successfully deleted: [File] "C:\end"
Successfully deleted: [File] C:\Windows\syswow64\sho1075.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Failed to delete: [Folder] "C:\ProgramData\browserprotect"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\babsolution"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\yontoo"
Failed to delete: [Folder] "C:\Users\Peet17\appdata\local\conduit"
Failed to delete: [Folder] "C:\Users\Peet17\appdata\local\smartbar"
Successfully deleted: [Folder] "C:\Users\Peet17\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Peet17\appdata\locallow\pricegong"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\delta"
Successfully deleted: [Folder] "C:\Program Files (x86)\pc speed maximizer"
Successfully deleted: [Folder] "C:\Program Files (x86)\yontoo"
Successfully deleted: [Folder] "C:\Users\Peet17\AppData\Roaming\microsoft\windows\start menu\programs\browserprotect"
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{02A37FF5-3726-4314-9A95-AE39828969B8}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{07065E78-AD44-4306-9187-1B1741F2809E}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{0B002994-DCBF-4680-B655-7243ED8A6363}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{3137F3D7-E379-4517-85A7-FA9CDFFF1E64}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{357B26E3-2124-46CC-861F-716CD7D36E60}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{3F43ED0F-AF45-4FAD-9B3C-6DF5E71ED46A}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{5ACF6A4D-36F7-4A25-94B5-ED3E84BBED7C}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{68FEB6C4-D36B-40F4-9355-CB80B8D3389D}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{9B06CBD8-27D7-482B-AFD5-285725590058}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{A3043ED3-A37E-464A-BB81-01AC0999A003}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{A3376A99-8351-4BFD-BEAC-38BE5C6AC705}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{B1377A48-761C-424D-B23F-A769A60D9EF3}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{BC04362E-CBC9-43E1-8C6D-84EE265A9300}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{BEF9172A-BD98-4B76-8C23-691463926A2A}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{C61C3ACC-3EC7-462E-93B2-F62E9B72A8F7}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{CDC2767B-C26A-474E-9905-D82053AE2AF1}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{CE2D8CE2-E411-4FE9-994A-2262AD4D912F}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{D4F38EB3-1188-4273-A607-114FEBB0AB83}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{D941E37C-32F0-4EA0-983F-3EFF994F86AB}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{DC0516FE-05BF-4B6E-8A8E-7F3712177344}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{EB411C4B-1839-4974-B704-543C9BE90381}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{EF1658D5-54FE-4590-ADF1-D349ADE50419}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{F797EEF2-BD41-46D0-8D25-5A84C6C1C67C}
Successfully deleted: [Empty Folder] C:\Users\Peet17\appdata\local\{FDAC9EF9-BAC6-4AB5-95AC-93F8753B9589}
Successfully deleted: [Folder] "C:\ProgramData\ask" 



~~~ FireFox

Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\user.js
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\bprotector_extensions.sqlite
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\bprotector_prefs.js
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\askcom.xml
Successfully deleted: [File] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\delta.xml
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\smartbar
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\ffxtlbr@delta.com
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\helperbar@helperbar.com
Successfully deleted: [Folder] C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\plugin@yontoo.com
Successfully deleted the following from C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\prefs.js

user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=78E700FF9EB74DB6");
user_pref("browser.search.defaultengine", "Ask.com");
user_pref("browser.search.defaultenginename", "Ask.com");
user_pref("browser.search.order.1", "Delta Search");
user_pref("browser.search.selectedEngine", "Delta Search");
user_pref("CT2481020.1000082.isDisplayHidden", "true");
user_pref("CT2481020.1000082.isPlayDisplay", "true");
user_pref("CT2481020.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
user_pref("CT2481020.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2481020.autoDisableScopes", -1);
user_pref("CT2481020.browser.search.defaultthis.engineName", true);
user_pref("CT2481020.cbcountry_001.enc", "REU=");
user_pref("CT2481020.cbfirsttime.enc", "VHVlIEphbiAyMiAyMDEzIDE4OjA5OjQwIEdNVCswMTAw");
user_pref("CT2481020.CBOpenMAMSettings.enc", "MA==");
user_pref("CT2481020.defaultSearch", "true");
user_pref("CT2481020.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.enableAlerts", "false");
user_pref("CT2481020.enableFix404ByUser", "TRUE");
user_pref("CT2481020.enableSearchFromAddressBar", "true");
user_pref("CT2481020.FirstTime", "true");
user_pref("CT2481020.firstTimeDialogOpened", "true");
user_pref("CT2481020.FirstTimeFF3", "true");
user_pref("CT2481020.fixPageNotFoundError", "true");
user_pref("CT2481020.fixPageNotFoundErrorByUser", "true");
user_pref("CT2481020.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2481020.fixUrls", true);
user_pref("CT2481020.homepageuserchanged", true);
user_pref("CT2481020.installDate", "22/1/2013 18:09:19");
user_pref("CT2481020.installId", "conduitnsisintegration");
user_pref("CT2481020.installType", "conduitnsisintegration");
user_pref("CT2481020.isCheckedStartAsHidden", true);
user_pref("CT2481020.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.isFirstTimeToolbarLoading", "false");
user_pref("CT2481020.isNewTabEnabled", true);
user_pref("CT2481020.isPerformedSmartBarTransition", "true");
user_pref("CT2481020.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2481020.keyword", true);
user_pref("CT2481020.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"\"}");
user_pref("CT2481020.lastVersion", "10.14.40.128");
user_pref("CT2481020.LoginRevertSettingsEnabled", true);
user_pref("CT2481020.migrateAppsAndComponents", true);
user_pref("CT2481020.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_SEARCH_TERM\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://AshampooDE.Ou
user_pref("CT2481020.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2481020.openThankYouPage", "false");
user_pref("CT2481020.openUninstallPage", "false");
user_pref("CT2481020.PG_ENABLE", "dHJ1ZQ==");
user_pref("CT2481020.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\\"01\\\\/22\\\\/2013 20\\\"}\"}");
user_pref("CT2481020.revertSettingsEnabled", "TRUE");
user_pref("CT2481020.search.searchAppId", "129058856464656507");
user_pref("CT2481020.search.searchCount", "0");
user_pref("CT2481020.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CUI=SB_CUI&q=");
user_pref("CT2481020.searchInNewTabEnabledByUser", "false");
user_pref("CT2481020.searchInNewTabEnabledInHidden", "true");
user_pref("CT2481020.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2481020\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://AshampooDE.OurToolbar.com//xpi\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Ashampoo DE\"}");
user_pref("CT2481020.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2481020.serviceLayer_services_appsMetadata_lastUpdate", "1358874571356");
user_pref("CT2481020.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1358874571684");
user_pref("CT2481020.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1358874573862");
user_pref("CT2481020.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358874573905");
user_pref("CT2481020.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359547474463");
user_pref("CT2481020.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1358874573540");
user_pref("CT2481020.serviceLayer_services_searchAPI_lastUpdate", "1358874570207");
user_pref("CT2481020.serviceLayer_services_serviceMap_lastUpdate", "1359547474197");
user_pref("CT2481020.serviceLayer_services_toolbarContextMenu_lastUpdate", "1358874573705");
user_pref("CT2481020.serviceLayer_services_toolbarSettings_lastUpdate", "1359547474370");
user_pref("CT2481020.serviceLayer_services_translation_lastUpdate", "1359547474240");
user_pref("CT2481020.serviceLayer_services_userApps_lastUpdate", "1358932638988");
user_pref("CT2481020.settingsINI", true);
user_pref("CT2481020.shouldFirstTimeDialog", "false");
user_pref("CT2481020.smartbar.CTID", "CT2481020");
user_pref("CT2481020.smartbar.homepage", true);
user_pref("CT2481020.smartbar.isHidden", true);
user_pref("CT2481020.smartbar.toolbarName", "Ashampoo DE ");
user_pref("CT2481020.smartbar.Uninstall", "0");
user_pref("CT2481020.toolbarBornServerTime", "22-1-2013");
user_pref("CT2481020.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2481020.UserID", "UN23186023487927065");
user_pref("CT2481020_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352651,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2625848.1000082.isDisplayHidden", "true");
user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description\":\"California Rock\",\"url\":\"hxxp://feedlive.net/california.asx\"}");
user_pref("CT2625848.2625848a129894023611240511000000paramsGK1", "eyJ1cGRhdGVSZXFUaW1lIjoxMzUxMDgxOTIzMzQyLCJ1cGRhdGVSZXNwVGltZSI6MTM1MTA4MTkyMzU5NSwiZGF0YSI6eyJzZXR0aW5ncyI6e
user_pref("CT2625848.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2625848.autoDisableScopes", -1);
user_pref("CT2625848.browser.search.defaultthis.engineName", true);
user_pref("CT2625848.defaultSearch", "true");
user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.enableAlerts", "false");
user_pref("CT2625848.enableFix404ByUser", "TRUE");
user_pref("CT2625848.enableSearchFromAddressBar", "true");
user_pref("CT2625848.FirstTime", "true");
user_pref("CT2625848.firstTimeDialogOpened", "true");
user_pref("CT2625848.FirstTimeFF3", "true");
user_pref("CT2625848.fixPageNotFoundError", "true");
user_pref("CT2625848.fixPageNotFoundErrorByUser", "true");
user_pref("CT2625848.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2625848.fixUrls", true);
user_pref("CT2625848.homepageuserchanged", true);
user_pref("CT2625848.installId", "conduitnsisintegration");
user_pref("CT2625848.installType", "conduitnsisintegration");
user_pref("CT2625848.isCheckedStartAsHidden", true);
user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.isFirstTimeToolbarLoading", "false");
user_pref("CT2625848.isNewTabEnabled", false);
user_pref("CT2625848.isPerformedSmartBarTransition", "true");
user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2625848.keyword", true);
user_pref("CT2625848.lastVersion", "10.14.40.128");
user_pref("CT2625848.LoginRevertSettingsEnabled", true);
user_pref("CT2625848.migrateAppsAndComponents", true);
user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://DVDVideoSoftT
user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2625848.openThankYouPage", "false");
user_pref("CT2625848.openUninstallPage", "true");
user_pref("CT2625848.RevertSettingsEnabled", true);
user_pref("CT2625848.search.searchAppId", "129181467799155027");
user_pref("CT2625848.search.searchCount", "0");
user_pref("CT2625848.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
user_pref("CT2625848.searchInNewTabEnabled", "false");
user_pref("CT2625848.searchInNewTabEnabledByUser", "false");
user_pref("CT2625848.searchInNewTabEnabledInHidden", "true");
user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2625848\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTBDE.OurToolbar.com//xpi\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB DE\"}");
user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2625848.serviceLayer_services_appsMetadata_lastUpdate", "1351078317430");
user_pref("CT2625848.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1351078318251");
user_pref("CT2625848.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1351078319416");
user_pref("CT2625848.serviceLayer_services_login_10.13.1.89_lastUpdate", "1353527173594");
user_pref("CT2625848.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358770860446");
user_pref("CT2625848.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359547474035");
user_pref("CT2625848.serviceLayer_services_optimizer_lastUpdate", "1351078318978");
user_pref("CT2625848.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1351078319293");
user_pref("CT2625848.serviceLayer_services_searchAPI_lastUpdate", "1351078315898");
user_pref("CT2625848.serviceLayer_services_serviceMap_lastUpdate", "1359547473683");
user_pref("CT2625848.serviceLayer_services_toolbarContextMenu_lastUpdate", "1351078319378");
user_pref("CT2625848.serviceLayer_services_toolbarSettings_lastUpdate", "1359547473861");
user_pref("CT2625848.serviceLayer_services_translation_lastUpdate", "1359547473963");
user_pref("CT2625848.settingsINI", true);
user_pref("CT2625848.shouldFirstTimeDialog", "false");
user_pref("CT2625848.smartbar.CTID", "CT2625848");
user_pref("CT2625848.smartbar.homepage", true);
user_pref("CT2625848.smartbar.isHidden", true);
user_pref("CT2625848.smartbar.toolbarName", "DVDVideoSoftTB DE ");
user_pref("CT2625848.smartbar.Uninstall", "0");
user_pref("CT2625848.startPage", "userChanged");
user_pref("CT2625848.toolbarBornServerTime", "24-10-2012");
user_pref("CT2625848.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2625848.UserID", "UN28335890038927336");
user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352571,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2883880.1000082.isDisplayHidden", "true");
user_pref("CT2883880.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio Ein...\",\"description\":\"Radio Eins (RBB)\",\"url\":\"mms://stream2.rbb-online.de/wmtencoder/ra
user_pref("CT2883880.1000234.TWC_location", "Berlin, Deutschland");
user_pref("CT2883880.1000234.TWC_locId", "GMXX0007");
user_pref("CT2883880.1000234.TWC_region", "DE");
user_pref("CT2883880.1000234.TWC_temp_dis", "c");
user_pref("CT2883880.1000234.TWC_TMP_city", "BERLIN");
user_pref("CT2883880.1000234.TWC_TMP_country", "DE");
user_pref("CT2883880.1000234.TWC_wind_dis", "kmh");
user_pref("CT2883880.1000234.weatherData", "{\"icon\":\"11.png\",\"temperature\":\"4°C\",\"temperatureClear\":\"4°C\",\"highTemperature\":\"3°C\",\"lowTemperature\":\"-2°C
user_pref("CT2883880.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2883880.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.enableAlerts", "never");
user_pref("CT2883880.enableFix404ByUser", "FALSE");
user_pref("CT2883880.FirstTime", "true");
user_pref("CT2883880.firstTimeDialogOpened", "true");
user_pref("CT2883880.FirstTimeFF3", "true");
user_pref("CT2883880.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2883880.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2883880.fixUrls", true);
user_pref("CT2883880.homepageuserchanged", true);
user_pref("CT2883880.installType", "DirectDownload");
user_pref("CT2883880.isCheckedStartAsHidden", true);
user_pref("CT2883880.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.isFirstTimeToolbarLoading", "false");
user_pref("CT2883880.isNewTabEnabled", false);
user_pref("CT2883880.isPerformedSmartBarTransition", "true");
user_pref("CT2883880.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2883880.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.keyword", true);
user_pref("CT2883880.lastVersion", "10.14.40.128");
user_pref("CT2883880.LoginRevertSettingsEnabled", true);
user_pref("CT2883880.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT2883880.migrateAppsAndComponents", true);
user_pref("CT2883880.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"\",\"EB_TOOLBAR_SUB_DOMAIN\":\"hxxp://Abacho.OurToo
user_pref("CT2883880.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.RevertSettingsEnabled", true);
user_pref("CT2883880.search.searchAppId", "129375914645931457");
user_pref("CT2883880.search.searchCount", "0");
user_pref("CT2883880.searchInNewTabEnabled", "false");
user_pref("CT2883880.searchInNewTabEnabledByUser", "false");
user_pref("CT2883880.searchInNewTabEnabledInHidden", "true");
user_pref("CT2883880.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2883880\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://Abacho.OurToolbar.com//xpi\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"Abacho\"}");
user_pref("CT2883880.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2883880.serviceLayer_services_appsMetadata_lastUpdate", "1357821388163");
user_pref("CT2883880.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1357121874010");
user_pref("CT2883880.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1357733568320");
user_pref("CT2883880.serviceLayer_services_login_10.13.40.15_lastUpdate", "1359547474280");
user_pref("CT2883880.serviceLayer_services_login_10.13.511.2_lastUpdate", "1358770860732");
user_pref("CT2883880.serviceLayer_services_login_10.14.40.128_lastUpdate", "1359392136267");
user_pref("CT2883880.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1357733568358");
user_pref("CT2883880.serviceLayer_services_searchAPI_lastUpdate", "1357821388391");
user_pref("CT2883880.serviceLayer_services_serviceMap_lastUpdate", "1359547473899");
user_pref("CT2883880.serviceLayer_services_toolbarContextMenu_lastUpdate", "1357733568279");
user_pref("CT2883880.serviceLayer_services_toolbarSettings_lastUpdate", "1359547473989");
user_pref("CT2883880.serviceLayer_services_translation_lastUpdate", "1359547474190");
user_pref("CT2883880.settingsINI", true);
user_pref("CT2883880.smartbar.CTID", "CT2883880");
user_pref("CT2883880.smartbar.isHidden", true);
user_pref("CT2883880.smartbar.toolbarName", "Abacho ");
user_pref("CT2883880.smartbar.Uninstall", "0");
user_pref("CT2883880.toolbarBornServerTime", "4-12-2012");
user_pref("CT2883880.toolbarCurrentServerTime", "30-1-2013");
user_pref("CT2883880.UserID", "UN13759407183627304");
user_pref("CT2883880_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1359547352606,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.dfltLng", "en");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.id", "78e7b38700000000000000ff9eb74db6");
user_pref("extensions.delta.instlDay", "15786");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.10.0");
user_pref("extensions.delta.vrsni", "1.8.10.0");
user_pref("extensions.delta.vrsnTs", "1.8.10.019:18:28");
user_pref("extensions.toolbar@ask.com.install-event-fired", true);
user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
user_pref("extentions.y2layers.installId", "cc1b078f-9cb7-4a7b-b2d7-6a575e596dff");
user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT2481020&SearchSource=13&CUI=SB_CUI");
user_pref("Smartbar.ConduitHomepagesList", "");
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT
user_pref("Smartbar.ConduitSearchEngineList", "Ashampoo DE Customized Web Search");
user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2481020&SearchSource=2&CUI=SB_CUI&q=");
user_pref("Smartbar.keywordURLSelectedCTID", "CT2481020");
user_pref("smartbar.machineId", "OUSCDK0I1YDYA+YDCTADY/FVE2EDEPI6DPOI9I8OW8TOZ4ZHCYHWATUTHLIRF10W0IIZDN7EO6S8BZSPHJELZQ");
user_pref("smartbar.originalHomepage", "hxxp://www.kadaza.de/");
user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2625848&SearchSource=2&q=");
user_pref("smartbar.originalSearchEngine", "Google");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.04.2013 at  0:11:10,36
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Code:
ATTFilter
# AdwCleaner v2.200 - Datei am 08/04/2013 um 10:07:48 erstellt
# Aktualisiert am 02/04/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Peet17 - PEET17-VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Peet17\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : GFilterSvc
Gestoppt & Gelöscht : SearchAnonymizer
Gestoppt & Gelöscht : Yontoo Desktop Updater

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\searchplugins\11-suche.xml
Gelöscht mit Neustart : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\Program Files (x86)\DVDVideoSoftTB_DE
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Conduit
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Smartbar
Ordner Gelöscht : C:\Users\Peet17\AppData\Local\Temp\Smartbar
Ordner Gelöscht : C:\Users\Peet17\AppData\LocalLow\DVDVideoSoftTB_DE
Ordner Gelöscht : C:\Users\Peet17\AppData\Roaming\DesktopIconForAmazon
Ordner Gelöscht : C:\Users\Peet17\AppData\Roaming\OCS

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{206a7328-437f-4bd9-b53e-12bfee24d588}
Schlüssel Gelöscht : HKCU\Software\SmartbarLog
Schlüssel Gelöscht : HKCU\Software\5ce8bdee63fe446
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BandObjectAttribute
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.DockingPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.IESmartBarBandObject
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarDisplayState
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\IESmartBar.SmartbarMenuForm
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\DVDVideoSoftTB_DE
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5ce8bdee63fe446
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{457EF9F0-0A7C-4302-B47B-C207A8DE8598}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{394DB777-5962-4D9E-A822-5C3A3F7F3AE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{573327B3-4EA2-4297-B460-137D71486340}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB_DE Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DesktopIconAmazon
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchAnonymizer
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{0027DA2D-C9F2-4B0B-AE05-E2CD1BDB6CFF}]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16470

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v19.0.2 (de)

Datei : C:\Users\Peet17\AppData\Roaming\Mozilla\Firefox\Profiles\n53j8j13.default\prefs.js

Gelöscht : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=78E70[...]
Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("CT2481020.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Gelöscht : user_pref("CT2481020.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2481020.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2481020.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"\"}");
Gelöscht : user_pref("CT2481020.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Gelöscht : user_pref("CT2481020.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.price-gong.bornDate", "{\"dataType\":\"string\",\"data\":\"{\\\"Response\\\":\\[...]
Gelöscht : user_pref("CT2481020.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2481020.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2481020.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2481020_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Gelöscht : user_pref("CT2625848.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
Gelöscht : user_pref("CT2625848.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2625848.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2625848.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Gelöscht : user_pref("CT2625848.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2625848.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2625848.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2625848_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Gelöscht : user_pref("CT2883880.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio Ein...\",\"description[...]
Gelöscht : user_pref("CT2883880.1000234.weatherData", "{\"icon\":\"11.png\",\"temperature\":\"4°C\",\"temperatu[...]
Gelöscht : user_pref("CT2883880.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Gelöscht : user_pref("CT2883880.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Gelöscht : user_pref("CT2883880.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"\",\"[...]
Gelöscht : user_pref("CT2883880.newSettings", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.searchProtector.notifyChanges", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Gelöscht : user_pref("CT2883880.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Gelöscht : user_pref("CT2883880.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Gelöscht : user_pref("CT2883880_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]

*************************

AdwCleaner[S1].txt - [338 octets] - [08/04/2013 10:07:19]
AdwCleaner[S2].txt - [15000 octets] - [08/04/2013 10:07:48]

########## EOF - C:\AdwCleaner[S2].txt - [15061 octets] ##########
         
Code:
ATTFilter
OTL logfile created on: 08.04.2013 10:18:11 - Run 3
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Peet17\Downloads
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,98 Gb Total Physical Memory | 2,14 Gb Available Physical Memory | 53,78% Memory free
7,96 Gb Paging File | 5,89 Gb Available in Paging File | 73,99% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 207,60 Gb Total Space | 106,72 Gb Free Space | 51,40% Space Free | Partition Type: NTFS
Drive F: | 374,46 Gb Total Space | 369,18 Gb Free Space | 98,59% Space Free | Partition Type: NTFS
 
Computer Name: PEET17-VAIO | User Name: Peet17 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Peet17\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe (Symantec Corporation)
PRC - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
PRC - C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe (Nokia)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\TraXEx\TraXEx.exe (Alexander Miehlke Softwareentwicklung)
PRC - C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe ()
PRC - C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG)
PRC - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
PRC - C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)
PRC - C:\Programme\Sony\VAIO Care\listener.exe (Sony of America Corporation)
PRC - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\phonon4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\qjson.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtXmlPatterns4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtXml4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtWebKit4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtSql4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtScript4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtNetwork4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtOpenGL4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtGui4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtMultimediaKit1.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtDeclarative4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\QtCore4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\sqldrivers\qsqlite4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qjpeg4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qico4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\imageformats\qgif4.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\NService.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\CommonUpdateChecker.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\ssoengine.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\securestorage.dll ()
MOD - C:\Program Files (x86)\Nokia\Nokia Suite\mediaservice\dsengine.dll ()
MOD - C:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY CBE\ENGINE\20.3.0.36\wincfi39.dll ()
MOD - C:\Program Files (x86)\TraXEx\sqlite3.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (ctfmon64) -- C:\Windows\SysNative\objsel64.exe ()
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV:64bit: - (SampleCollector) -- C:\Program Files\Sony\VAIO Care\VCPerfService.exe (Sony Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (Sony PC Companion) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\ccSvcHst.exe (Symantec Corporation)
SRV - (ServiceLayer) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (VUAgent) -- C:\Programme\Sony\VAIO Update\VUAgent.exe (Sony Corporation)
SRV - (Secunia PSI Agent) -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (CGVPNCliSrvc) -- C:\Programme\CyberGhost VPN\CGVPNCliService.exe (mobile concepts GmbH)
SRV - (IconMan_R) -- C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realsil Microelectronics Inc.)
SRV - (WO_LiveService) -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerService.exe ()
SRV - (BBSvc) -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (BBUpdate) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (VSNService) -- C:\Programme\Sony\VAIO Smart Network\VSNService.exe (Sony Corporation)
SRV - (DCDhcpService) -- C:\Programme\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe (Atheros Communication Inc.)
SRV - (VcmIAlzMgr) -- C:\Programme\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe (Sony Corporation)
SRV - (Atheros Bt&Wlan Coex Agent) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Atheros)
SRV - (AtherosSvc) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Atheros Commnucations)
SRV - (wlidsvc) -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (VAIO Event Service) -- C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (uCamMonitor) -- C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe (ArcSoft, Inc.)
SRV - (SOHCImp) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe (Sony Corporation)
SRV - (SOHDs) -- C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe (Sony Corporation)
SRV - (VcmXmlIfHelper) -- C:\Programme\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe (Sony Corporation)
SRV - (VcmINSMgr) -- C:\Programme\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe (Sony Corporation)
SRV - (VCService) -- C:\Programme\Sony\VAIO Care\VCService.exe (Sony Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (SpfService) -- C:\Programme\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exe (Sony Corporation)
SRV - (VCFw) -- C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe (Sony Corporation)
SRV - (PMBDeviceInfoProvider) -- c:\Program Files (x86)\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)
SRV - (wlcrasvc) -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (IviRegMgr) -- C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe (InterVideo)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (PSI_SVC_2) -- C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Protexis Inc.)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (osppsvc) -- C:\Programme\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (StarWindServiceAE) -- C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (StarWind Software)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation)
DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symnets.sys (Symantec Corporation)
DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symefa64.sys (Symantec Corporation)
DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\srtsp64.sys (Symantec Corporation)
DRV:64bit: - (SRTSPX) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\srtspx64.sys (Symantec Corporation)
DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\symds64.sys (Symantec Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\ironx64.sys (Symantec Corporation)
DRV:64bit: - (ccSet_NIS) -- C:\Windows\SysNative\drivers\NISx64\1403000.024\ccsetx64.sys (Symantec Corporation)
DRV:64bit: - (nmwcdc) -- C:\Windows\SysNative\drivers\ccdcmbox64.sys (Nokia)
DRV:64bit: - (nmwcd) -- C:\Windows\SysNative\drivers\ccdcmbx64.sys (Nokia)
DRV:64bit: - (UsbserFilt) -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys (Nokia)
DRV:64bit: - (upperdev) -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys (Nokia)
DRV:64bit: - (pccsmcfd) -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys (Nokia)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (ggsemc) -- C:\Windows\SysNative\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (ggflt) -- C:\Windows\SysNative\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (UimBus) -- C:\Windows\SysNative\drivers\uimx64.sys (Windows (R) 2000 DDK provider)
DRV:64bit: - (Uim_IM) -- C:\Windows\SysNative\drivers\Uim_IMx64.sys (Paragon)
DRV:64bit: - (Uim_VIM) -- C:\Windows\SysNative\drivers\uim_vimx64.sys (Paragon)
DRV:64bit: - (RSPCIESTOR) -- C:\Windows\SysNative\drivers\RtsPStor.sys (Realtek Semiconductor Corp.)
DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys (Duplex Secure Ltd.)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (ApfiltrService) -- C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (epmntdrv) -- C:\Windows\SysNative\epmntdrv.sys ()
DRV:64bit: - (EuGdiDrv) -- C:\Windows\SysNative\EuGdiDrv.sys ()
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (BtFilter) -- C:\Windows\SysNative\drivers\btfilter.sys (Atheros)
DRV:64bit: - (BTATH_RCP) -- C:\Windows\SysNative\drivers\btath_rcp.sys (Atheros)
DRV:64bit: - (BTATH_HCRP) -- C:\Windows\SysNative\drivers\btath_hcrp.sys (Atheros)
DRV:64bit: - (btath_avdt) -- C:\Windows\SysNative\drivers\btath_avdt.sys (Atheros)
DRV:64bit: - (BTATH_LWFLT) -- C:\Windows\SysNative\drivers\btath_lwflt.sys (Atheros)
DRV:64bit: - (AthBTPort) -- C:\Windows\SysNative\drivers\btath_flt.sys (Atheros)
DRV:64bit: - (BTATH_BUS) -- C:\Windows\SysNative\drivers\btath_bus.sys (Atheros)
DRV:64bit: - (BTATH_A2DP) -- C:\Windows\SysNative\drivers\btath_a2dp.sys (Atheros)
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek                                            )
DRV:64bit: - (CnxtHdAudService) -- C:\Windows\SysNative\drivers\CHDRT64.sys (Conexant Systems Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (PSI) -- C:\Windows\SysNative\drivers\psi_mf.sys (Secunia)
DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (e1yexpress) -- C:\Windows\SysNative\drivers\e1y60x64.sys (Intel Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (ArcSoftKsUFilter) -- C:\Windows\SysNative\drivers\ArcSoftKsUFilter.sys (ArcSoft, Inc.)
DRV:64bit: - (regi) -- C:\Windows\SysNative\drivers\regi.sys (InterVideo)
DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130406.008\ex64.sys (Symantec Corporation)
DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\VirusDefs\20130406.008\eng64.sys (Symantec Corporation)
DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\BASHDefs\20130322.001\BHDrvx64.sys (Symantec Corporation)
DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\Definitions\IPSDefs\20130405.001\IDSviA64.sys (Symantec Corporation)
DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2012\TuneUpUtilitiesDriver64.sys (TuneUp Software)
DRV - (epmntdrv) -- C:\Windows\SysWOW64\epmntdrv.sys ()
DRV - (EuGdiDrv) -- C:\Windows\SysWOW64\EuGdiDrv.sys ()
DRV - (LiveTunerPM) -- C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTunerProcessMonitor64.sys ()
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SNYEDF&pc=MASE&src=IE-SearchBox
 
 
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://sony.msn.com [binary data]
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{130E203B-3D36-4F8F-9EC2-5697EB54FAE9}: "URL" = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{280EAC15-DCD4-4C07-95BE-76F5F54C63E3}: "URL" = hxxp://services.zinio.com.anonymize-me.de/?anonymto=687474703A2F2F73657276696365732E7A696E696F2E636F6D2F7365617263683F733D7B7365617263685465726D737D2672663D736F6E79736C69636573&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{973D2D8B-CF98-4F45-86F0-BFBE74F662E3}: "URL" = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{97C35CBC-59A3-4DCB-8C59-3754579DEBF9}: "URL" = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{AE61EDF4-E707-4245-BFD6-83DDED57A69F}: "URL" = hxxp://rover.ebay.com.anonymize-me.de/?anonymto=687474703A2F2F726F7665722E656261792E636F6D2F726F7665722F312F3730372D33373237362D31363630392D32372F343F6D7072653D687474703A2F2F73686F702E656261792E64652F3F6F656D496E4C6E3D6965537263682D51333131265F6E6B773D7B7365617263685465726D737D&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{CD23E5DE-3EB3-442D-9727-670560155406}: "URL" = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{EBE3F4F2-B8A1-45EF-A666-F3DC5D7ABAEF}: "URL" = [String data over 1000 bytes]
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\SearchScopes\{FC1FE748-6B47-4970-BB46-4C5F7DE20236}: "URL" = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=9224394e-b344-407a-9bf0-551ce14eb59a&pid=freewarede&mode=bounce&k=0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
IE - HKU\S-1-5-21-4075830544-3649874069-869990161-1005\..\SearchScopes,DefaultScope = 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.t-online.de/"
FF - prefs.js..extensions.enabledAddons: maps%40ovi.com:5.9.2.0
FF - prefs.js..extensions.enabledAddons: testpilot%40labs.mozilla.com:1.2.2
FF - prefs.js..extensions.enabledAddons: %7Bd49175b3-3fd8-43b8-b28e-da5d47f3c398%7D:1.0.47
FF - prefs.js..extensions.enabledAddons: toolbar%40web.de:2.5
FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.5.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:19.0.2
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_6_602_180.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.15.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.15.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nokia.com/EnablerPlugin: C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\vitzo.com/VDownloader: C:\Program Files\VDownloader\Addons\npVDownloader.dll (Vitzo)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\IPSFFPlgn\ [2013.02.13 14:38:22 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.1.2\coFFPlgn\ [2013.04.08 10:13:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\support@vdownloader.com: C:\Program Files\VDownloader\Addons\FireFox [2013.03.26 16:40:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 19.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.03.22 20:26:45 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.03.11 18:32:52 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Thunderbird 17.0.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2013.03.11 18:32:52 | 000,000,000 | ---D | M]
 
[2012.03.01 16:17:09 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\Extensions
[2013.04.08 00:09:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\Firefox\Profiles\n53j8j13.default\extensions
[2012.05.08 17:59:27 | 000,000,000 | ---D | M] (Nokia Maps 3D browser plugin) -- C:\Users\Peet17\AppData\Roaming\mozilla\Firefox\Profiles\n53j8j13.default\extensions\maps@ovi.com
[2012.12.11 17:51:30 | 000,615,655 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\testpilot@labs.mozilla.com.xpi
[2013.03.22 14:35:39 | 000,549,639 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\toolbar@web.de.xpi
[2013.04.02 19:23:44 | 000,349,773 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
[2012.12.11 19:38:59 | 000,036,098 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
[2013.02.14 16:36:28 | 000,817,280 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.02.21 16:10:59 | 000,395,933 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\{d49175b3-3fd8-43b8-b28e-da5d47f3c398}.xpi
[2012.03.05 16:40:50 | 000,000,003 | ---- | M] () (No name found) -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\extensions\maps@ovi.com\plugins\package.XPI
[2013.02.23 18:52:33 | 000,001,248 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\ashampoo-de-customized-web-search.xml
[2013.03.22 14:35:42 | 000,002,418 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\englische-ergebnisse.xml
[2013.03.22 14:35:42 | 000,010,701 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\gmx-suche.xml
[2013.03.22 14:35:42 | 000,002,432 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\lastminute.xml
[2013.03.22 14:35:42 | 000,005,682 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\webde-suche.xml
[2013.02.23 18:52:33 | 000,001,870 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{2ACCC7CF-D613-4458-8718-52934267CF46}.xml
[2013.02.23 18:52:33 | 000,002,188 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{35C64247-C242-4EF2-864E-08D0A36789AF}.xml
[2013.02.23 18:52:33 | 000,002,077 | ---- | M] () -- C:\Users\Peet17\AppData\Roaming\mozilla\firefox\profiles\n53j8j13.default\searchplugins\{E5C408BC-DAD8-4C09-BBD4-917EFE4AAA24}.xml
[2013.03.22 20:26:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2013.03.07 16:30:04 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2013.03.07 17:45:15 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2013.03.07 17:45:15 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2013.03.07 17:45:15 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2013.03.07 17:45:15 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2013.03.07 17:45:15 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2013.03.07 17:45:15 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2013.04.06 16:38:40 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\IPS\IPSBHO.DLL (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security CBE\Engine\20.3.0.36\coIEPlg.dll (Symantec Corporation)
O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\Apoint\Apoint.exe (Alps Electric Co., Ltd.)
O4:64bit: - HKLM..\Run: [Ashampoo WinOptimizer Live-Tuner] C:\Program Files (x86)\Ashampoo\Ashampoo WinOptimizer 8\LiveTuner.exe (Ashampoo Development GmbH & Co. KG)
O4:64bit: - HKLM..\Run: [AthBtTray] C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Atheros Commnucations)
O4:64bit: - HKLM..\Run: [AtherosBtStack] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Communications)
O4:64bit: - HKLM..\Run: [cAudioFilterAgent] C:\Programme\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe (Conexant Systems, Inc.)
O4:64bit: - HKLM..\Run: [Ocs_SM] C:\Users\Peet17\AppData\Roaming\OCS\SM\SearchAnonymizer.exe File not found
O4:64bit: - HKLM..\Run: [VDownloader] C:\Program Files\VDownloader\VDownloader.exe (Vitzo)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\Run: [Duden Korrektor SysTray] C:\Program Files (x86)\Duden\Duden Korrektor\DKTray.exe (Expert System S.p.A.)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-4075830544-3649874069-869990161-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Peet17\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\Peet17\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: IE-Spuren löschen - {6C7C0C9A-B51D-4ADB-A74D-C4E33744F866} - C:\Program Files (x86)\TraXEx\Integration\TraXEx Internet Explorer.lnk ()
O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
O9 - Extra Button: Löschautomat - {8DA7743F-9274-4BE8-899E-C0FF6ED61B00} - C:\Program Files (x86)\TraXEx\Integration\TraXEx Löschautomat.lnk ()
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.15.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AB0966E0-9BB8-42D7-8397-765D99DE8B84}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~3\browse~1\261125~1.80\{c16c1~1\browse~1.dll) -  File not found
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = ComFile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.04.08 10:11:38 | 000,000,000 | R--D | C] -- C:\Users\Peet17\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
[2013.04.07 23:48:45 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013.04.07 23:48:01 | 000,000,000 | ---D | C] -- C:\JRT
[2013.04.07 23:45:32 | 000,551,587 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\Peet17\Desktop\JRT.exe
[2013.04.06 16:57:23 | 000,000,000 | ---D | C] -- C:\Windows\temp
[2013.04.06 16:20:08 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2013.04.06 16:20:08 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2013.04.06 16:20:08 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2013.04.06 16:19:29 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.04.06 16:19:00 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2013.04.06 16:14:50 | 005,047,402 | R--- | C] (Swearware) -- C:\Users\Peet17\Desktop\ComboFix.exe
[2013.04.05 17:52:33 | 004,745,728 | ---- | C] (AVAST Software) -- C:\Users\Peet17\Desktop\aswMBR.exe
[2013.04.05 17:17:08 | 002,237,968 | ---- | C] (Kaspersky Lab ZAO) -- C:\Users\Peet17\Desktop\tdsskiller.exe
[2013.04.05 13:42:25 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2013.04.03 19:27:23 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022
[2013.04.03 18:36:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
[2013.04.03 18:36:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
[2013.04.01 11:00:48 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\Malwarebytes
[2013.04.01 11:00:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.04.01 11:00:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.04.01 11:00:39 | 000,024,176 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013.04.01 11:00:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2013.03.26 16:41:02 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\VDownloader
[2013.03.26 16:40:37 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2013.03.26 16:40:36 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Local\VDownloader
[2013.03.26 16:40:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VDownloader
[2013.03.26 16:40:31 | 000,000,000 | ---D | C] -- C:\Program Files\VDownloader
[2013.03.26 16:19:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe Download Assistant
[2013.03.26 16:17:57 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usb8023.sys
[2013.03.22 20:26:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.03.22 20:19:20 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Qtrax
[2013.03.22 20:18:32 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
[2013.03.22 00:17:42 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Desktop\mbar
[2013.03.19 18:11:44 | 000,000,000 | ---D | C] -- C:\Users\Peet17\Documents\Outlook-Dateien
[2013.03.14 17:50:13 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\MyPhoneExplorer
[2013.03.14 17:50:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
[2013.03.14 17:49:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MyPhoneExplorer
[2013.03.14 16:57:19 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2013.03.14 16:57:19 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2013.03.14 16:57:18 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013.03.14 16:57:18 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2013.03.14 16:57:18 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013.03.14 16:57:18 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2013.03.14 16:57:18 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2013.03.14 16:57:17 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2013.03.14 16:57:17 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2013.03.14 16:57:17 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2013.03.14 16:57:16 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.03.14 16:57:15 | 000,729,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.03.14 16:57:14 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.03.14 16:57:14 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.03.14 16:57:14 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2013.03.14 16:57:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
[2013.03.14 16:56:01 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight
[2013.03.14 16:56:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2013.03.13 19:41:11 | 016,486,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2013.03.11 18:32:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird
[2013.03.09 22:04:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Uniblue
[2013.03.09 17:56:59 | 000,000,000 | ---D | C] -- C:\Users\Peet17\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Skat-Online
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp files -> C:\ProgramData\Microsoft\Windows\Start Menu\Programs\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.04.08 10:17:42 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.04.08 10:17:42 | 000,021,200 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.04.08 10:14:37 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.04.08 10:14:37 | 000,696,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.04.08 10:14:37 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.04.08 10:14:37 | 000,148,134 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.04.08 10:14:37 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.04.08 10:10:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.04.08 10:10:00 | 3206,959,104 | -HS- | M] () -- C:\hiberfil.sys
[2013.04.08 10:08:02 | 000,000,097 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.04.08 10:06:23 | 000,613,083 | ---- | M] () -- C:\Users\Peet17\Desktop\adwcleaner.exe
[2013.04.08 10:05:18 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.04.07 23:45:35 | 000,551,587 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\Peet17\Desktop\JRT.exe
[2013.04.06 16:38:40 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts
[2013.04.06 16:15:11 | 005,047,402 | R--- | M] (Swearware) -- C:\Users\Peet17\Desktop\ComboFix.exe
[2013.04.05 17:54:02 | 004,745,728 | ---- | M] (AVAST Software) -- C:\Users\Peet17\Desktop\aswMBR.exe
[2013.04.05 17:17:08 | 002,237,968 | ---- | M] (Kaspersky Lab ZAO) -- C:\Users\Peet17\Desktop\tdsskiller.exe
[2013.04.05 14:14:47 | 000,001,422 | ---- | M] () -- C:\Users\Peet17\Desktop\OTL - Verknüpfung.lnk
[2013.04.05 14:04:57 | 409,139,317 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.04.05 11:02:24 | 000,222,832 | ---- | M] () -- C:\Users\Peet17\Desktop\snipp.PNG
[2013.04.04 16:58:23 | 000,007,892 | ---- | M] () -- C:\Users\Peet17\Desktop\GMER.zip
[2013.04.04 16:53:52 | 000,004,577 | ---- | M] () -- C:\Users\Peet17\Desktop\GMER.7z
[2013.04.04 14:43:20 | 000,377,856 | ---- | M] () -- C:\Users\Peet17\Desktop\onl49zno.exe
[2013.04.04 14:37:46 | 000,001,101 | ---- | M] () -- C:\Users\Peet17\Dokumente - Verknüpfung.lnk
[2013.04.04 09:51:19 | 000,000,017 | ---- | M] () -- C:\Users\Peet17\AppData\Local\resmon.resmoncfg
[2013.04.03 19:25:17 | 012,894,739 | ---- | M] () -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022.zip
[2013.04.02 16:38:45 | 000,000,020 | ---- | M] () -- C:\Users\Peet17\defogger_reenable
[2013.04.01 11:00:40 | 000,001,109 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.03.30 17:57:32 | 000,002,760 | ---- | M] () -- C:\{D2A06217-CFE2-41D6-90CC-8B100CB8EF0A}
[2013.03.27 21:00:56 | 000,013,003 | ---- | M] () -- C:\test.xml
[2013.03.27 12:19:10 | 001,680,165 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1403000.024\Cat.DB
[2013.03.26 16:40:35 | 000,001,726 | ---- | M] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2013.03.22 20:33:53 | 000,000,306 | ---- | M] () -- C:\Users\Peet17\Documents\cc_20130322_193349.reg
[2013.03.22 18:01:14 | 001,771,921 | ---- | M] () -- C:\Users\Peet17\Desktop\036-044_HGT201201_Tischgrills.pdf
[2013.03.22 15:22:08 | 000,000,124 | ---- | M] () -- C:\Users\Peet17\Documents\ax_files.xml
[2013.03.22 14:17:43 | 005,123,776 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.03.19 20:40:35 | 000,002,173 | ---- | M] () -- C:\Users\Peet17\Desktop\Skat-Online V9.lnk
[2013.03.19 18:07:18 | 000,002,545 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security CBE.lnk
[2013.03.19 18:06:20 | 000,014,818 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1403000.024\VT20130115.021
[2013.03.15 21:33:12 | 000,002,160 | ---- | M] () -- C:\{24C94FC6-ECE7-4EC0-AEA7-0D52FA1B10CA}
[2013.03.14 18:10:36 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2013.03.14 17:50:11 | 000,002,057 | ---- | M] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2013.03.13 19:41:17 | 000,693,976 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013.03.13 19:41:17 | 000,073,432 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013.03.13 19:41:11 | 016,486,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2013.03.11 15:01:49 | 000,053,030 | ---- | M] () -- C:\Users\Peet17\Desktop\Computerfreeks.jpg
[4 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Windows\SysNative\drivers\*.tmp files -> C:\Windows\SysNative\drivers\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.04.08 10:07:54 | 000,000,097 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.04.08 10:06:20 | 000,613,083 | ---- | C] () -- C:\Users\Peet17\Desktop\adwcleaner.exe
[2013.04.06 16:20:08 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013.04.06 16:20:08 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013.04.06 16:20:08 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013.04.06 16:20:08 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013.04.06 16:20:08 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2013.04.05 13:42:03 | 409,139,317 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.04.05 11:02:24 | 000,222,832 | ---- | C] () -- C:\Users\Peet17\Desktop\snipp.PNG
[2013.04.04 16:58:23 | 000,007,892 | ---- | C] () -- C:\Users\Peet17\Desktop\GMER.zip
[2013.04.04 16:53:52 | 000,004,577 | ---- | C] () -- C:\Users\Peet17\Desktop\GMER.7z
[2013.04.04 14:43:20 | 000,377,856 | ---- | C] () -- C:\Users\Peet17\Desktop\onl49zno.exe
[2013.04.04 14:37:46 | 000,001,101 | ---- | C] () -- C:\Users\Peet17\Dokumente - Verknüpfung.lnk
[2013.04.04 09:51:19 | 000,000,017 | ---- | C] () -- C:\Users\Peet17\AppData\Local\resmon.resmoncfg
[2013.04.03 19:25:16 | 012,894,739 | ---- | C] () -- C:\Users\Peet17\Desktop\mbar-1.01.0.1022.zip
[2013.04.02 16:38:45 | 000,000,020 | ---- | C] () -- C:\Users\Peet17\defogger_reenable
[2013.04.01 11:00:40 | 000,001,109 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.03.30 17:57:32 | 000,002,760 | ---- | C] () -- C:\{D2A06217-CFE2-41D6-90CC-8B100CB8EF0A}
[2013.03.28 18:22:11 | 000,001,422 | ---- | C] () -- C:\Users\Peet17\Desktop\OTL - Verknüpfung.lnk
[2013.03.26 16:40:35 | 000,444,283 | ---- | C] () -- C:\Program Files\Common Files\WinPcapNmap.exe
[2013.03.26 16:40:35 | 000,001,726 | ---- | C] () -- C:\Users\Public\Desktop\VDownloader.lnk
[2013.03.22 20:33:51 | 000,000,306 | ---- | C] () -- C:\Users\Peet17\Documents\cc_20130322_193349.reg
[2013.03.22 20:26:47 | 000,001,159 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.03.22 18:01:14 | 001,771,921 | ---- | C] () -- C:\Users\Peet17\Desktop\036-044_HGT201201_Tischgrills.pdf
[2013.03.22 14:17:11 | 005,123,776 | ---- | C] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013.03.19 18:07:18 | 000,002,545 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security CBE.lnk
[2013.03.15 21:33:10 | 000,002,160 | ---- | C] () -- C:\{24C94FC6-ECE7-4EC0-AEA7-0D52FA1B10CA}
[2013.03.14 18:10:36 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf
[2013.03.14 17:50:11 | 000,002,057 | ---- | C] () -- C:\Users\Public\Desktop\MyPhoneExplorer.lnk
[2013.03.11 15:01:49 | 000,053,030 | ---- | C] () -- C:\Users\Peet17\Desktop\Computerfreeks.jpg
[2013.02.23 18:52:26 | 000,338,432 | ---- | C] () -- C:\Windows\SysWow64\sqlite36_engine.dll
[2013.02.12 22:03:01 | 000,091,136 | ---- | C] () -- C:\Windows\SendToClip.exe
[2013.01.30 21:13:53 | 000,001,521 | ---- | C] () -- C:\Users\Peet17\AppData\Local\recently-used.xbel
[2012.11.08 18:16:37 | 000,650,752 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2012.11.08 18:16:37 | 000,243,200 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll
[2012.11.08 18:16:37 | 000,216,064 | ---- | C] ( ) -- C:\Windows\SysWow64\lagarith.dll
[2012.11.08 18:16:35 | 000,112,640 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2012.11.02 18:07:16 | 000,058,617 | ---- | C] () -- C:\Users\Peet17\final_bstSnapshot_18759.jpg
[2012.10.23 21:47:11 | 121,932,055 | ---- | C] () -- C:\Users\Peet17\Urlaub in Obergurgel 2012.wmv
[2012.09.14 14:37:30 | 000,009,216 | ---- | C] () -- C:\Users\Peet17\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.08.29 15:55:21 | 000,000,045 | ---- | C] () -- C:\ProgramData\.SimImages
[2012.06.19 15:01:50 | 009,314,047 | ---- | C] () -- C:\Users\Peet17\Meine Diashow.wmv
[2012.06.01 00:44:23 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2012.04.02 20:25:01 | 002,469,760 | ---- | C] () -- C:\Windows\SysWow64\BootMan.exe
[2012.04.02 20:25:01 | 000,086,408 | ---- | C] () -- C:\Windows\SysWow64\setupempdrv03.exe
[2012.04.02 20:25:01 | 000,019,840 | ---- | C] () -- C:\Windows\SysWow64\EuEpmGdi.dll
[2012.04.02 20:25:01 | 000,014,216 | ---- | C] () -- C:\Windows\SysWow64\epmntdrv.sys
[2012.04.02 20:25:01 | 000,008,456 | ---- | C] () -- C:\Windows\SysWow64\EuGdiDrv.sys
[2012.04.02 20:21:02 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
[2012.03.16 21:02:23 | 000,017,408 | ---- | C] () -- C:\Users\Peet17\AppData\Local\WebpageIcons.db
[2012.03.15 09:47:06 | 000,000,952 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2012.03.06 11:35:42 | 000,000,017 | ---- | C] () -- C:\Windows\SysWow64\shortcut_ex.dat
[2012.03.05 14:30:32 | 000,056,320 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 07:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 120 bytes -> C:\ProgramData\TEMP:AA10CDD2

< End of report >
         

Alt 08.04.2013, 11:21   #25
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes - denk bitte vorher daran, Malwarebytes über den Updatebutton zu aktualisieren

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.04.2013, 16:04   #26
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Hallo, anbei die ESET log

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=dfa52cf692702148852d30e49aa31a15
# engine=13573
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-04-08 02:52:47
# local_time=2013-04-08 04:52:47 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3591 16777213 83 91 360743 128029352 0 0
# compatibility_mode=5893 16776574 100 94 4742523 117062617 0 0
# scanned=196801
# found=0
# cleaned=0
# scan_time=12535
         
Beim öffnen von neuen Tabs ist die Seite Delta nun verschwunden. Malewarebytes meldet aber trotzdem noch eine gefährliche .exe. Habe noch keine Antwort ob ich die Programme welchew combofix zu löschen benannt hat tatsächlich löschen soll. Mache das nur wenn es o.k. und notwendig ist. Bis dann erstmal

Peter

Alt 08.04.2013, 16:08   #27
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Wo ist das Log dazu? Ohne Log ist das =>
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 08.04.2013, 16:48   #28
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Habe doch alle Logs gepostet. Wenn du die Meldung von Malewarebytes meinst dann ist es lediglich ein Fenster welches sich im Icon von Malewarebytes öffnet und dann wieder verschwindet.

Alt 08.04.2013, 21:08   #29
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Warum postest du nicht gleich welche Datei genau, warum muss man hier rumraten?

Meinst du immer noch diese hier?

Zitat:
Port 55624 Prozess: gfiltersvc.exe
__________________
Logfiles bitte immer in CODE-Tags posten

Alt 09.04.2013, 09:18   #30
Peet65
 
Trojanermeldung durch Malwarebytes - Standard

Trojanermeldung durch Malwarebytes



Nein, jetzt ist es Port 52064 Prozess objsel64.exe. Entschuldigung

Antwort

Themen zu Trojanermeldung durch Malwarebytes
dankbar, erfolgreich, erschein, erscheint, gefährliche, gefährlichen, gestoppt, laptop, laufe, laufend, malwarebytes, meldung, neue, neuen, nicht mehr, plötzlich, prozess, sauber, scan, troja, trojanermeldung, vertraut, webseite, zugang, öffnen



Ähnliche Themen: Trojanermeldung durch Malwarebytes


  1. Trojaner durch Malwarebytes gefunden auf win7
    Log-Analyse und Auswertung - 15.03.2015 (9)
  2. Funde durch Malwarebytes
    Log-Analyse und Auswertung - 25.02.2015 (13)
  3. AVG & Malwarebytes durch Gruppenrichtlinie gesperrt
    Plagegeister aller Art und deren Bekämpfung - 15.11.2014 (15)
  4. Windows 7: Malwarefund durch Malwarebytes
    Log-Analyse und Auswertung - 29.10.2014 (12)
  5. TR.Agent durch Malwarebytes erkannt
    Log-Analyse und Auswertung - 18.01.2014 (1)
  6. Gefunden durch MalwareBytes: Rogue.Link. Win 7
    Plagegeister aller Art und deren Bekämpfung - 06.01.2014 (5)
  7. Zbot durch Malwarebytes gefunden
    Plagegeister aller Art und deren Bekämpfung - 03.10.2013 (13)
  8. 53 Funde durch malwarebytes
    Plagegeister aller Art und deren Bekämpfung - 31.08.2013 (9)
  9. GfilterSvc.exe wird durch Malwarebytes geblockt
    Log-Analyse und Auswertung - 19.07.2013 (19)
  10. Mehrere Funde durch Malwarebytes
    Log-Analyse und Auswertung - 13.06.2013 (13)
  11. Skype / Avast IP Block durch Malwarebytes
    Log-Analyse und Auswertung - 15.03.2013 (3)
  12. pup.mywebsearch durch Malwarebytes entdeckt- was tun?
    Log-Analyse und Auswertung - 16.11.2012 (13)
  13. Mehrere Trojaner durch Malwarebytes Anti Malware gefunden und ein Virus durch Avira gefunden (TR/Gendal.81920.6)
    Log-Analyse und Auswertung - 10.11.2012 (1)
  14. Trojan.Spatet durch Malwarebytes gefunden
    Plagegeister aller Art und deren Bekämpfung - 27.09.2012 (15)
  15. TR/Spy.Banker.Gen5 durch Malwarebytes entdeckt
    Plagegeister aller Art und deren Bekämpfung - 14.08.2012 (3)
  16. 50 EUR Virus - Malwarebytes und OTL durch, und jetzt...
    Log-Analyse und Auswertung - 12.01.2012 (2)
  17. Malwarebytes und Antivir laufen nicht durch
    Log-Analyse und Auswertung - 23.07.2010 (11)

Zum Thema Trojanermeldung durch Malwarebytes - Da gab es doch einen Hinweis: Zitat: Sollte der Scan abbrechen und das Programm abstürzen, dann teile mir das mit und wähle unter AV Scan die Einstellung (none). - Trojanermeldung durch Malwarebytes...
Archiv
Du betrachtest: Trojanermeldung durch Malwarebytes auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.