Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
123 Funde bei SuperAntiSpyware

123 Funde bei SuperAntiSpyware


Plagegeister aller Art und deren Bekämpfung: 123 Funde bei SuperAntiSpyware

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 21.06.2013, 14:00   #1
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo Ihr,

ich weiß ehrlich gesagt nicht ob ich wirklich ein Problem mit Viren od. ähnl. habe...

Im Januar hatte mein alter lappi den Geist aufgegeben und ich habe dne Neuen
nach einer von euren Anleitungen abgesichert. Seitdem lasse ich regelmäßig kasperski und auch manchmal Malwarebytes durchlaufen - bisher immer ohne irgendwelche Funde.

Einzig der DE-Cleaner hatte vor Kurzem mal yonto - oder so ähnlich gefunden, was ich entfernt habe.

Heute hab ich durch Zufall SUPERAntiSpyware durchlaufen lassen und nun zeigt mir das programm 123 Funde an.
Sind das alles harmlose Sachen? Muss ich irgendwas tun?
Für eure Hilfe wäre ich sehr dankbar.

das ist der log:
Code:
ATTFilter
SUPERAntiSpyware Scan Log
hxxp://www.superantispyware.com

Generated 06/21/2013 at 02:34 PM

Application Version : 5.6.1020

Core Rules Database Version : 10551
Trace Rules Database Version: 8363

Scan type       : Complete Scan
Total Scan Time : 00:42:49

Operating System Information
Windows 7 Home Premium 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned      : 962
Memory threats detected   : 0
Registry items scanned    : 74809
Registry threats detected : 0
File items scanned        : 55077
File threats detected     : 123

Adware.Tracking Cookie
	C:\Users\Fabienne\AppData\Roaming\Microsoft\Windows\Cookies\0ZM09NH7.txt [ /doubleclick.net ]
	C:\Users\Fabienne\AppData\Roaming\Microsoft\Windows\Cookies\1LL4HG77.txt [ /sonyeurope.112.2o7.net ]
	serving-sys.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MACROMEDIA\FLASH PLAYER\#SHAREDOBJECTS\U5Y283CA ]
	.adfarm1.adition.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.fl01.ct2.comclick.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.fl01.ct2.comclick.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.apmebf.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.doubleclick.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.atdmt.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.c1.atdmt.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	stat.vattenfall.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	in.getclicky.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.toplist.cz [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.xiti.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	fr.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	fr.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.cewecolor.112.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	partners.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.histats.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.trafficrank.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	blogcounter.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.pangora.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.pangora.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.pangora.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.pangora.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.pangora.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	track.zalando.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	tracking.fahrrad.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.e-2dj6wjkoepcpaeq.stats.esomniture.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.tradedoubler.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.live.counterstation.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.clickandbuy.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	int.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	int.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.galeriaarteenforja.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	tracking.tchibo.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webstats4u.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.deutschepostag.112.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.nuon.112.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	de.sitestat.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.e-2dj6wjmislazceo.stats.esomniture.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.bachblueten-discount.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	ad.zanox.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	statse.webtrendslive.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.iqelite.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.flagcounter.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.mycounter.counterstation.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	webstats.dellekom.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	tracking.sim-technik.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	apodiscounterde01.webtrekk.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	stat.dealtime.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.imrworldwide.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.statcounter.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.privatesalesgmbh.122.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.2o7.net [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.adfarm1.adition.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.casalemedia.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.googleadservices.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.stylefruits.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	clicks.stylefruits.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	ad.yieldmanager.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.e-2dj6wjl4okcpofq.stats.esomniture.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.etracker.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	www.counter-go.de [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
	.webmasterplan.com [ C:\USERS\FABIENNE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\H8EKDGXZ.DEFAULT\COOKIES.SQLITE ]
LG Fabienne

Alt 21.06.2013, 14:03   #2
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hi,

das sind nur Cookies

Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Scan.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)
__________________

__________________
Alt 21.06.2013, 14:04   #3
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo Fabienne,

das sind alles nur (Tracking-)Cookies

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.
__________________
__________________
Alt 21.06.2013, 19:57   #4
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo Schrauber,

uff, da bin ich aber froh .

Hier sind die logs:

Code:
ATTFilter
# AdwCleaner v2.303 - Datei am 21/06/2013 um 20:37:32 erstellt
# Aktualisiert am 08/06/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Fabienne - FABIENNE-VAIO
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Fabienne\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\searchplugins\11-suche.xml
Datei Gelöscht : C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\searchplugins\delta.xml
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Fabienne\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Fabienne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\5a57888ce53aec17
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\5a57888ce53aec17
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7D86A08B-0A8F-4BE0-B693-F05E6947E780}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16611

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=1afea60f00000000000008edb9b4bd47 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\prefs.js

C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\user.js ... Gelöscht !

Gelöscht : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119776&babsrc=HP_ss&mntr[...]
Gelöscht : user_pref("avg.install.userSPSettings", "Delta Search");
Gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);
Gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119776&babsrc[...]
Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.bbDpng", "13");
Gelöscht : user_pref("extensions.delta.cntry", "DE");
Gelöscht : user_pref("extensions.delta.dfltLng", "en");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.hdrMd5", "3FECE72D6E334DF8209B113762240AF7");
Gelöscht : user_pref("extensions.delta.id", "1afea60f00000000000008edb9b4bd47");
Gelöscht : user_pref("extensions.delta.instlDay", "15749");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.10.019:33:02");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.sg", "czb");
Gelöscht : user_pref("extensions.delta.smplGrp", "none");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.10.0");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.10.019:33:02");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.10.0");
Gelöscht : user_pref("extensions.ffxtlbr@delta.com.install-event-fired", true);

Datei : C:\Users\Surfen\AppData\Roaming\Mozilla\Firefox\Profiles\1e5n8qmp.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v [Version kann nicht ermittelt werden]

Datei : C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

-\\ Opera v12.15.1748.0

Datei : C:\Users\Fabienne\AppData\Roaming\Opera\Opera\operaprefs.ini

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [6592 octets] - [21/06/2013 20:37:32]

########## EOF - C:\AdwCleaner[S1].txt - [6652 octets] ##########


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 02
Ran by Fabienne (administrator) on 21-06-2013 20:46:35
Running from C:\Users\Fabienne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SONYAPO  [1156712 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [1020576 2012-02-23] (Atheros Communications)
HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-03-13] (Synaptics Incorporated)
HKCU\...\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background [307712 2012-11-23] (FileHippo.com)
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation)
HKLM-x32\...\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 [x]
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-04-04] (Kaspersky Lab ZAO)
AppInit_DLLs-x32: c:\progra~3\browse~1\261095~1.52\{c16c1~1\browse~1.dll [97280 2009-07-14] ()
Startup: C:\ProgramData\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKCU - {21D6A1E6-14F9-40C9-B274-8A6DE63AF371} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_81.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_81.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: testpilot - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: toolbar - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\toolbar@gmx.net.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome: 
=======
CHR Extension: (Google Drive) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (SiteAdvisor) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0
CHR Extension: (avast! WebRep) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0
CHR Extension: (Gmail) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-04-04] (Kaspersky Lab ZAO)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-02-23] (Atheros)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-04-26] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-26] (Kaspersky Lab ZAO)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-02-23] (Atheros)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-03-13] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:43 - 2013-06-21 20:43 - 00006711 ____A C:\Users\Fabienne\Desktop\AdwCleaner[S1].txt
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 20:36 - 2013-06-21 20:36 - 00648201 ____A C:\Users\Fabienne\Desktop\adwcleaner.exe
2013-06-21 13:47 - 2013-06-21 13:48 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Downloads\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:36 - 2013-06-17 08:37 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-12 09:32 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 09:32 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 09:32 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 09:32 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 09:32 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 09:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 09:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 09:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 09:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 09:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 09:31 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 09:31 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 09:26 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 09:26 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 09:26 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 09:26 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 09:26 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 09:26 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 09:26 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:02 - 2013-06-11 19:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 13:44 - 2013-06-11 13:45 - 00010023 ____A C:\Users\Fabienne\Desktop\Adware.txt
2013-06-11 12:27 - 2013-06-11 12:27 - 00002074 ____A C:\Users\Fabienne\Desktop\Entfernen des Avira DE-Cleaners.lnk
2013-06-11 12:27 - 2013-06-11 12:27 - 00002003 ____A C:\Users\Fabienne\Desktop\Avira DE-Cleaner.lnk
2013-06-11 12:13 - 2013-06-11 12:14 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:53 - 2013-06-16 14:17 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB
2013-05-30 14:42 - 2013-05-30 14:42 - 00007367 ____A C:\Users\Fabienne\Desktop\Bonusrundenliste.odt

==================== One Month Modified Files and Folders =======

2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:43 - 2013-06-21 20:43 - 00006711 ____A C:\Users\Fabienne\Desktop\AdwCleaner[S1].txt
2013-06-21 20:42 - 2013-04-04 16:59 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-21 20:39 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-21 20:39 - 2009-07-14 06:51 - 00055660 ____A C:\Windows\setupact.log
2013-06-21 20:38 - 2012-08-24 19:32 - 01083136 ____A C:\Windows\WindowsUpdate.log
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 20:36 - 2013-06-21 20:36 - 00648201 ____A C:\Users\Fabienne\Desktop\adwcleaner.exe
2013-06-21 20:29 - 2012-04-23 06:35 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-21 20:28 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-21 20:28 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-21 14:50 - 2012-08-24 20:52 - 00000000 ____D C:\Update
2013-06-21 14:50 - 2012-04-23 05:51 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-06-21 13:48 - 2013-06-21 13:47 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Downloads\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 23:44 - 2012-12-02 22:46 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\SoftGrid Client
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:19 - 2012-11-17 23:40 - 01093032 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-20 09:19 - 2012-04-23 06:14 - 00972712 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-20 09:17 - 2012-11-19 22:54 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-20 09:17 - 2012-04-23 06:14 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-20 09:08 - 2012-08-24 22:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-19 10:01 - 2012-06-08 11:38 - 00054368 ____A (Kaspersky Lab ZAO) C:\Windows\System32\Drivers\kltdi.sys
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Opera
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Local\Opera
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:37 - 2013-06-17 08:36 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-16 14:17 - 2013-06-10 23:53 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB
2013-06-12 19:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 12:29 - 2012-04-23 06:35 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 12:29 - 2012-04-23 06:35 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 09:32 - 2012-08-24 21:22 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:03 - 2013-06-11 19:02 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 13:45 - 2013-06-11 13:44 - 00010023 ____A C:\Users\Fabienne\Desktop\Adware.txt
2013-06-11 12:27 - 2013-06-11 12:27 - 00002074 ____A C:\Users\Fabienne\Desktop\Entfernen des Avira DE-Cleaners.lnk
2013-06-11 12:27 - 2013-06-11 12:27 - 00002003 ____A C:\Users\Fabienne\Desktop\Avira DE-Cleaner.lnk
2013-06-11 12:14 - 2013-06-11 12:13 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:39 - 2012-04-23 06:42 - 00697322 ____A C:\Windows\System32\perfh007.dat
2013-06-10 23:39 - 2012-04-23 06:42 - 00148328 ____A C:\Windows\System32\perfc007.dat
2013-06-10 23:39 - 2009-07-14 07:13 - 01614036 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 23:33 - 2012-12-05 22:14 - 00000000 ____D C:\Users\Fabienne\Desktop\Bilder
2013-06-08 16:08 - 2013-06-12 09:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 09:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 09:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-05-30 14:42 - 2013-05-30 14:42 - 00007367 ____A C:\Users\Fabienne\Desktop\Bonusrundenliste.odt

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 10:33

==================== End Of Log ============================
--- --- ---



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 22-06-2013 02
Ran by Fabienne at 2013-06-21 20:47:26 Run:
Running from C:\Users\Fabienne\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

?????? Windows Live (Version: 15.4.3502.0922)
??????? ????????? Windows Live Mesh ActiveX ??? ?????????? ?????????? (Version: 15.4.5722.2)
??????? ?????????? Windows Live Mesh ActiveX ??? ????????? ??????????? (Version: 15.4.5722.2)
???????? ?????????? Windows Live (Version: 15.4.3502.0922)
?????????? Windows Live (Version: 15.4.3502.0922)
??????????? ?? Windows Live (Version: 15.4.3502.0922)
???????????? Windows Live (Version: 15.4.3502.0922)
Adobe AIR (Version: 3.8.0.730)
Adobe Flash Player 11 ActiveX (Version: 11.8.800.81)
Adobe Flash Player 11 Plugin (Version: 11.8.800.81)
Adobe Reader XI (11.0.03) (Version: 11.0.03)
Agatha Christie - Death on the Nile (Version: 2.2.0.98)
Aloha TriPeaks (Version: 2.2.0.98)
AMD APP SDK Runtime (Version: 10.0.851.6)
AMD Catalyst Install Manager (Version: 3.0.859.0)
ArcSoft Magic-i Visual Effects 2 (Version: 2.0.1.161)
ArcSoft WebCam Companion 4 (Version: 4.0.21.457)
Atheros Bluetooth Suite (64) (Version: 7.4.0.125)
Bejeweled 3 (Version: 2.2.0.98)
Build-a-lot 2 (Version: 2.2.0.98)
Cake Mania (Version: 2.2.0.98)
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center (Version: 2012.0209.2326.41882)
Catalyst Control Center Graphics Previews Common (Version: 2012.0209.2326.41882)
Catalyst Control Center InstallProxy (Version: 2012.0209.2326.41882)
Catalyst Control Center Localization All (Version: 2012.0209.2326.41882)
CCC Help Chinese Standard (Version: 2012.0209.2325.41882)
CCC Help Chinese Traditional (Version: 2012.0209.2325.41882)
CCC Help Czech (Version: 2012.0209.2325.41882)
CCC Help Danish (Version: 2012.0209.2325.41882)
CCC Help Dutch (Version: 2012.0209.2325.41882)
CCC Help English (Version: 2012.0209.2325.41882)
CCC Help Finnish (Version: 2012.0209.2325.41882)
CCC Help French (Version: 2012.0209.2325.41882)
CCC Help German (Version: 2012.0209.2325.41882)
CCC Help Greek (Version: 2012.0209.2325.41882)
CCC Help Hungarian (Version: 2012.0209.2325.41882)
CCC Help Italian (Version: 2012.0209.2325.41882)
CCC Help Japanese (Version: 2012.0209.2325.41882)
CCC Help Korean (Version: 2012.0209.2325.41882)
CCC Help Norwegian (Version: 2012.0209.2325.41882)
CCC Help Polish (Version: 2012.0209.2325.41882)
CCC Help Portuguese (Version: 2012.0209.2325.41882)
CCC Help Russian (Version: 2012.0209.2325.41882)
CCC Help Spanish (Version: 2012.0209.2325.41882)
CCC Help Swedish (Version: 2012.0209.2325.41882)
CCC Help Thai (Version: 2012.0209.2325.41882)
CCC Help Turkish (Version: 2012.0209.2325.41882)
ccc-utility64 (Version: 2012.0209.2326.41882)
Chuzzle Deluxe (Version: 2.2.0.95)
Control ActiveX Windows Live Mesh pentru conexiuni la distan?a (Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (Version: 15.4.5722.2)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (Version: 15.4.5722.2)
CyberLink PowerDVD (Version: 9.0.5009.52)
D3DX10 (Version: 15.4.2368.0902)
Evernote v. 4.5.2 (Version: 4.5.2.5904)
FDUx86 (Version: 1.0.0)
FileHippo.com Update Checker
Fishdom (TM) 2 (Version: 2.2.0.98)
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsluge polaczen zdalnych (Version: 15.4.5722.2)
Fotogalerija Windows Live (Version: 15.4.3502.0922)
Galeria de Fotografias do Windows Live (Version: 15.4.3502.0922)
Galeria fotografii uslugi Windows Live (Version: 15.4.3502.0922)
Galerie de photos Windows Live (Version: 15.4.3502.0922)
Galerie foto Windows Live (Version: 15.4.3502.0922)
Insaniquarium Deluxe (Version: 2.2.0.97)
Intel(R) Control Center (Version: 1.2.1.1007)
Intel(R) Management Engine Components (Version: 8.0.2.1410)
Intel(R) Rapid Storage Technology (Version: 11.0.0.1032)
Intel(R) USB 3.0 eXtensible Host Controller Driver (Version: 1.0.3.214)
Intel® Trusted Connect Service Client (Version: 1.23.605.1)
Java 7 Update 25 (64-bit) (Version: 7.0.250)
Java 7 Update 25 (Version: 7.0.250)
Jewel Quest Solitaire 2 (Version: 2.2.0.98)
Junk Mail filter update (Version: 15.4.3502.0922)
Kaspersky Internet Security 2013 (Version: 13.0.1.4190)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (Version: 15.4.5722.2)
KUx86 (Version: 1.0.0)
Mahjongg Artifacts (Version: 2.2.0.95)
Media Gallery (Version: 2.1.0.13300)
Media Go (Version: 2.0.317)
Mesh Runtime (Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (Version: 14.0.4763.1000)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000)
Microsoft Office Starter 2010 - Deutsch (Version: 14.0.4763.1000)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (Version: 10.0.30319)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (Version: 22.0)
Mozilla Maintenance Service (Version: 22.0)
MSVCRT (Version: 15.4.2862.0708)
MSVCRT_amd64 (Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (Version: 4.30.2100.0)
Mystery of Mortlake Mansion (Version: 2.2.0.98)
Mystery P.I. - The London Caper (Version: 2.2.0.95)
Opera 12.15 (Version: 12.15.1748)
Opera next 15.0.1147.18 (Version: 15.0.1147.18)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená pripojení (Version: 15.4.5722.2)
Ovládací prvok ActiveX programu Windows Live Mesh pre vzdialené pripojenia (Version: 15.4.5722.2)
Panda USB Vaccine 1.0.1.4
Plants vs. Zombies - Game of the Year (Version: 2.2.0.98)
PlayMemories Home (Version: 6.1.01.14210)
PlayStation(R)Network Downloader (Version: 2.07.00849)
PlayStation(R)Store (Version: 4.5.15.13232)
Poczta uslugi Windows Live (Version: 15.4.3502.0922)
Podstawowe programy Windows Live (Version: 15.4.3502.0922)
Polar Bowler (Version: 2.2.0.97)
Pošta Windows Live (Version: 15.4.3502.0922)
PYV_x86 (Version: 1.0.0)
Qualcomm Atheros Direct Connect (Version: 3.1)
Qualcomm Atheros WiFi Driver Installation (Version: 3.0)
Raccolta foto di Windows Live (Version: 15.4.3502.0922)
Realtek High Definition Audio Driver (Version: 6.0.1.6564)
Realtek PCIE Card Reader (Version: 6.1.7601.91)
Remote Keyboard (Version: 1.2.0.09270)
Remote Play with PlayStation(R)3 (Version: 1.1.0.21090)
S?????? f?t???af??? t?? Windows Live (Version: 15.4.3502.0922)
Secunia PSI (3.0.0.4001) (Version: 3.0.0.4001)
Skype™ 5.10 (Version: 5.10.116)
SSLx64 (Version: 1.0.0)
SSLx86 (Version: 1.0.0)
St???e?? e?????? ActiveX t?? Windows Live Mesh ??a ap?µa???sµ??e? s??d?se?? (Version: 15.4.5722.2)
Synaptics Pointing Device Driver (Version: 16.0.1.0)
The Hidden Object Game Show (Version: 2.2.0.97)
TrackID(TM) with BRAVIA (Version: 1.2.0.09270)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update Installer for WildTangent Games App
Uzak Baglantilar Için Windows Live Mesh ActiveX Denetimi (Version: 15.4.5722.2)
VAIO - Microsoft Visual C++ 2010 SP1 Runtime 10.0.40219.325 (Version: 1.0.00.01300)
VAIO - PlayMemories Home Plug-in (Version: 2.0.00.14200)
VAIO - Remote Play mit PlayStation®3 (Version: 1.1.0.21090)
VAIO - Remote-Tastatur (Version: 1.2.0.09270)
VAIO - Remote-Tastatur mit PlayStation®3 (Version: 1.2.0.09210)
VAIO - TrackID™ mit BRAVIA (Version: 1.2.0.09270)
VAIO Care (Version: 7.3.1.05290)
VAIO Control Center (Version: 5.2.1.15070)
VAIO Data Restore Tool (Version: 1.9.0.13190)
VAIO Easy Connect (Version: 1.1.2.01120)
VAIO Gate (Version: 2.4.1.09230)
VAIO Gate Default (Version: 2.5.2.02090)
VAIO Gesture Control (Version: 1.0.0.12300)
VAIO Improvement (Version: 1.3.0.12280)
VAIO Improvement Validation (Version: 1.0.4.01190)
VAIO Sample Contents (Version: 1.4.2.09010)
VAIO Smart Network (Version: 3.11.1.15220)
VAIO Transfer Support (Version: 1.7.1.06040)
VAIO Update (Version: 6.2.1.03260)
VAIO*CPU-Lüfterdiagnose (Version: 1.1.0.09200)
VAIO-Handbuch (Version: 2.3.0.12300)
VCCx64 (Version: 1.0.0)
VCCx86 (Version: 1.0.0)
VHD (Version: 1.0.0)
Virtual Villagers 4 - The Tree of Life (Version: 2.2.0.98)
Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
VIx64 (Version: 1.0.0)
VIx86 (Version: 1.0.0)
VMLx86 (Version: 1.0.0)
VPMx64 (Version: 1.0.0)
VSNx64 (Version: 1.0.0)
VSNx86 (Version: 1.0.0)
VSSTx64 (Version: 1.0.0)
VSSTx86 (Version: 1.0.0)
VU5x64 (Version: 1.1.0)
VU5x86 (Version: 1.0.0)
VU5x86 (Version: 1.1.0)
VWSTx86 (Version: 1.0.0)
WildTangent Games App (Version: 4.0.10.2)
WildTangent-Spiele (Version: 1.0.2.5)
Windows Live Communications Platform (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3502.0922)
Windows Live Essentials (Version: 15.4.3538.0513)
Windows Live Fotogaléria (Version: 15.4.3502.0922)
Windows Live Fotogalerie (Version: 15.4.3502.0922)
Windows Live Fotogalleri (Version: 15.4.3502.0922)
Windows Live Fotograf Galerisi (Version: 15.4.3502.0922)
Windows Live Fotótár (Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (Version: 15.4.5722.2)
Windows Live Mesh (Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (Version: 15.4.5722.2)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlo távoli kapcsolatokhoz (Version: 15.4.5722.2)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (Version: 15.4.5722.2)
Windows Live Messenger (Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (Version: 15.4.3502.0922)
Windows Live Photo Common (Version: 15.4.3502.0922)
Windows Live Photo Gallery (Version: 15.4.3502.0922)
Windows Live PIMT Platform (Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (Version: 15.4.3502.0922)
Windows Live SOXE Definitions (Version: 15.4.3502.0922)
Windows Live Temel Parçalar (Version: 15.4.3502.0922)
Windows Live UX Platform (Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109)
Windows Live Writer (Version: 15.4.3502.0922)
Windows Live Writer Resources (Version: 15.4.3502.0922)
Windows Liven asennustyökalu (Version: 15.4.3502.0922)
Windows Liven sähköposti (Version: 15.4.3502.0922)
Windows Liven valokuvavalikoima (Version: 15.4.3502.0922)

==================== Restore Points  =========================

31-05-2013 08:27:33 Windows Update
04-06-2013 08:26:00 Windows Update
11-06-2013 08:20:42 Windows Update
11-06-2013 11:43:06 Avira DE-Cleaner - 11.06.2013 13:43
12-06-2013 07:29:27 Windows Update
15-06-2013 07:43:04 Windows Update
21-06-2013 18:21:31 Installiert VAIO Update

==================== Scheduled Tasks (whitelisted) =============

Task: {0168EB42-78BA-4261-ADBF-0C534A04E37F} - System32\Tasks\VHDInformationCheck => %ProgramFiles(x86)%\Sony\VAIO Recovery\plugins\InformationCheck.exe No File
Task: {09FCDCC6-F755-4D37-822F-1C149AE90EA8} - System32\Tasks\Sony Corporation\VAIO Care\VAU => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {0D28956A-6DB9-49B2-93C2-27F097587E25} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2013-03-26] (Sony Corporation)
Task: {0E1C2318-B4C4-41A4-A1ED-C4B7EE0F208B} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [2011-12-27] (Sony Corporation)
Task: {22CD5152-AD2C-416F-B360-3C90EA238C80} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {30B64737-8DF4-45DC-93CD-22A743AC04D7} - System32\Tasks\Sony Corporation\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2011-09-23] (Sony Corporation)
Task: {4134B0AC-5DD2-4FF3-8EC6-0BE5618BC0BD} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorSystem => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {450A2176-A799-43C0-AAB9-EAA6DE78B2C7} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {47529513-BFE5-4FD5-AFEF-F316BFA7DDE9} - System32\Tasks\Sony Corporation\VAIO Improvement Validation\VAIO Improvement Validation => C:\Program Files\Sony\VAIO Improvement Validation\viv.exe [2011-01-20] (Sony Corporation)
Task: {487BAB36-449E-4757-8D63-B1EF2C1F1903} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2013-03-26] (Sony Corporation)
Task: {5ED1F88B-0E4A-4200-9C73-53607DC42D4C} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [2012-03-07] (Sony Corporation)
Task: {64AA05F3-04FD-496B-8F80-53A98F4C71A0} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementMonitorUser => C:\Program Files\Sony\VAIO Improvement\vim.exe [2011-12-27] (Sony Corporation)
Task: {694A259B-F5F6-466E-A960-EDB1715F8316} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {793D894D-3E84-44FE-ADDE-A55BBDF97760} - System32\Tasks\Sony Corporation\VAIO Care\AutoCheckMessage => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {7D1E6402-3137-4992-9E79-3DE54D780687} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {7E3130B3-80E4-406D-A696-29D48721AF97} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2011-09-23] (Sony Corporation)
Task: {8806B4BD-D965-43EA-B2B0-A76B09517852} - System32\Tasks\Sony Corporation\VAIO Care\CRMReminder => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {B4A71C93-B822-4514-820C-B3E10DE0555A} - System32\Tasks\Sony Corporation\VAIO Improvement\VAIOImprovementUploader => C:\Program Files\Sony\VAIO Improvement\viuploader.exe [2011-12-27] (Sony Corporation)
Task: {CDE3C8C1-5D13-4D1B-9EBF-944F79D1991C} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {D22DB6CB-4CB3-4782-9052-3A9DD3DE2D0C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12] (Adobe Systems Incorporated)
Task: {D427E3F7-7264-4385-9F6C-A857652DE0FF} - System32\Tasks\Sony Corporation\VAIO Update\VUSU Trigger Task => C:\Program Files\Sony\VAIO Update\VUSUTrigger.exe [2013-03-26] (Sony Corporation)
Task: {D9A999F9-FA5B-4F59-AD4F-FEEF2B9C174D} - System32\Tasks\Sony Corporation\VAIO Smart Network\VSN Logon Start => C:\Windows\System32\net No File
Task: {DBC7A99A-21A1-47F0-A28F-9A2A22C19032} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {E4D6B94F-FFD5-4742-A02D-07D11433D14A} - System32\Tasks\Sony Corporation\VAIO Care\VCMetrics => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)
Task: {F28165CB-75F1-4E94-B9C7-AAF613C83F42} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {F9539A67-D897-40B6-9E87-73CEB660FCE8} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [2012-05-29] (Sony Corporation)

==================== Faulty Device Manager Devices =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/21/2013 08:40:41 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2013 08:26:56 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (06/21/2013 08:18:30 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2013 07:34:09 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/20/2013 09:10:41 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/19/2013 07:55:47 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/19/2013 09:46:59 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/18/2013 07:53:07 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2013 07:17:06 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2013 08:33:45 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (06/21/2013 08:26:23 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (06/21/2013 08:22:01 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/20/2013 09:13:55 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/19/2013 07:55:40 PM) (Source: WMPNetworkSvc) (User: )
Description: WMPNetworkSvc0x80004005

Error: (06/19/2013 09:49:40 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/18/2013 08:00:18 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Definition Update for Windows Defender - KB915597 (Definition 1.153.22.0)

Error: (06/18/2013 07:56:33 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/17/2013 07:20:10 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/17/2013 08:37:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/16/2013 09:14:04 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================
Error: (06/21/2013 08:40:41 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2013 08:26:56 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Zurzeit sind keine aktiven Netzwerkverbindungen verfügbar. Der Vorgang wird von BITS wiederholt, sobald der Adapter über eine Verbindung verfügt.

Error: (06/21/2013 08:18:30 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/21/2013 07:34:09 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/20/2013 09:10:41 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/19/2013 07:55:47 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/19/2013 09:46:59 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/18/2013 07:53:07 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2013 07:17:06 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (06/17/2013 08:33:45 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-06-21 10:36:42.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 10:36:42.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 10:36:42.499
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 10:36:42.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 10:36:42.479
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 10:36:42.469
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 08:24:27.698
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 08:24:27.698
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 08:24:27.683
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-06-21 08:24:27.667
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 6114.36 MB
Available physical RAM: 3958.05 MB
Total Pagefile: 12226.9 MB
Available Pagefile: 9476.96 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:681.64 GB) (Free:620.01 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 699 GB) (Disk ID: BA624956)
Partition 1: (Not Active) - (Size=17 GB) - (Type=27)
Partition 2: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=682 GB) - (Type=07 NTFS)

==================== End Of Log ============================

@Cosinus: alles klar! Danke dir - das werde ich machen.


Ich hab auch noch das Problem, dass sich zum Beispiel die BingBar immerzu wieder von selbst installiert - ich muss die dauernd wieder deinstallieren. Kann ich das damit auch unterbinden?


LG Fabienne

Alt 21.06.2013, 20:08   #5
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Schauen wir mal

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und poste bitte nochmal ein frisches FRST Log.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 22.06.2013, 08:21   #6
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Guten Morgen!

hier sind die logs:

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by Fabienne on 22.06.2013 at  9:10:12,28
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Fabienne\AppData\Roaming\mozilla\firefox\profiles\h8ekdgxz.default\invalidprefs.js
Emptied folder: C:\Users\Fabienne\AppData\Roaming\mozilla\firefox\profiles\h8ekdgxz.default\minidumps [218 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.06.2013 at  9:14:47,17
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


und die frst.txt.


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 02
Ran by Fabienne (administrator) on 22-06-2013 09:15:58
Running from C:\Users\Fabienne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SONYAPO  [1156712 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [1020576 2012-02-23] (Atheros Communications)
HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-03-13] (Synaptics Incorporated)
HKCU\...\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background [307712 2012-11-23] (FileHippo.com)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation)
HKLM-x32\...\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 [x]
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-04-04] (Kaspersky Lab ZAO)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
SearchScopes: HKCU - {21D6A1E6-14F9-40C9-B274-8A6DE63AF371} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_81.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_81.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: testpilot - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: toolbar - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\toolbar@gmx.net.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome: 
=======
CHR Extension: (Google Drive) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (SiteAdvisor) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0
CHR Extension: (avast! WebRep) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0
CHR Extension: (Gmail) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-04-04] (Kaspersky Lab ZAO)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-02-23] (Atheros)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-04-26] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-26] (Kaspersky Lab ZAO)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-02-23] (Atheros)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-03-13] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-22 09:14 - 2013-06-22 09:14 - 00001015 ____A C:\Users\Fabienne\Desktop\JRT.txt
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\JRT
2013-06-22 09:08 - 2013-06-22 09:08 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Fabienne\Desktop\JRT.exe
2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 13:47 - 2013-06-21 13:48 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Downloads\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:36 - 2013-06-17 08:37 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-12 09:32 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 09:32 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 09:32 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 09:32 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 09:32 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 09:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 09:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 09:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 09:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 09:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 09:31 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 09:31 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 09:26 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 09:26 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 09:26 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 09:26 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 09:26 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 09:26 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 09:26 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:02 - 2013-06-11 19:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 12:13 - 2013-06-11 12:14 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:53 - 2013-06-16 14:17 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB

==================== One Month Modified Files and Folders =======

2013-06-22 09:14 - 2013-06-22 09:14 - 00001015 ____A C:\Users\Fabienne\Desktop\JRT.txt
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\JRT
2013-06-22 09:10 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-22 09:10 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-22 09:09 - 2012-08-24 19:32 - 01158080 ____A C:\Windows\WindowsUpdate.log
2013-06-22 09:08 - 2013-06-22 09:08 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Fabienne\Desktop\JRT.exe
2013-06-22 09:04 - 2013-04-04 16:59 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-22 09:02 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-22 09:02 - 2009-07-14 06:51 - 00055716 ____A C:\Windows\setupact.log
2013-06-21 23:29 - 2012-04-23 06:35 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 14:50 - 2012-08-24 20:52 - 00000000 ____D C:\Update
2013-06-21 14:50 - 2012-04-23 05:51 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-06-21 13:48 - 2013-06-21 13:47 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Downloads\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 23:44 - 2012-12-02 22:46 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\SoftGrid Client
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:19 - 2012-11-17 23:40 - 01093032 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-20 09:19 - 2012-04-23 06:14 - 00972712 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-20 09:17 - 2012-11-19 22:54 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-20 09:17 - 2012-04-23 06:14 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-20 09:08 - 2012-08-24 22:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-19 10:01 - 2012-06-08 11:38 - 00054368 ____A (Kaspersky Lab ZAO) C:\Windows\System32\Drivers\kltdi.sys
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Opera
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Local\Opera
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:37 - 2013-06-17 08:36 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-16 14:17 - 2013-06-10 23:53 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB
2013-06-12 19:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 12:29 - 2012-04-23 06:35 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 12:29 - 2012-04-23 06:35 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 09:32 - 2012-08-24 21:22 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:03 - 2013-06-11 19:02 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 12:14 - 2013-06-11 12:13 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:39 - 2012-04-23 06:42 - 00697322 ____A C:\Windows\System32\perfh007.dat
2013-06-10 23:39 - 2012-04-23 06:42 - 00148328 ____A C:\Windows\System32\perfc007.dat
2013-06-10 23:39 - 2009-07-14 07:13 - 01614036 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 23:33 - 2012-12-05 22:14 - 00000000 ____D C:\Users\Fabienne\Desktop\Bilder
2013-06-08 16:08 - 2013-06-12 09:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 09:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 09:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 10:33

==================== End Of Log ============================
--- --- ---


LG Fabienne

Alt 22.06.2013, 13:11   #7
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware



ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST Log, dann sind wir durch
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 23.06.2013, 10:39   #8
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo,

hab alles durchlaufen lassen.

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=51db99f81c7b25419be38b8674579bcd
# engine=14135
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-06-23 09:26:04
# local_time=2013-06-23 11:26:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1023 16777215 0 0 0 0 0 0
# compatibility_mode=1286 16777213 100 99 6106 26749486 0 0
# compatibility_mode=5893 16776573 100 94 94229 123609414 0 0
# scanned=146219
# found=1
# cleaned=0
# scan_time=5304
sh=C4EC6C1860F3DAD5C70254E2B5EADCC393495C9F ft=1 fh=7bbbbe3afa059adb vn="Win32/Adware.1ClickDownload.W application" ac=I fn="C:\Users\Fabienne\Downloads\hdplugin_firefox.exe"

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.64  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Kaspersky Internet Security   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Secunia PSI (3.0.0.4001)   
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Flash Player 11.8.800.81  
 Adobe Reader XI  
 Mozilla Firefox (22.0) 
````````Process Check: objlist.exe by Laurent````````  
 Kaspersky Lab Kaspersky Internet Security 2013 avp.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````



LG Fabienne

Alt 23.06.2013, 16:02   #9
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Den einen Download bitte löschen, java updaten. Das frische FRST Log? Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 23.06.2013, 17:05   #10
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo,

welchen von den downloads meinst du, den ich löschen soll?

Ich habe java bei den plugins schon lange deaktiviert - habe es gerade mal aktiviert und
suchen lassen obs aktuell ist und die Anzeige sagte, dass java toolkit und das andere java aktuell wären. Danach habe ich es wieder deaktiviert.
Reicht das oder muss ich irgendwas Anderes noch runterladen?
Aus google wurde ich nicht richtig schlau

huch, den frst.txt. hatte ich vergessen.


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2013 02
Ran by Fabienne (administrator) on 23-06-2013 17:54:59
Running from C:\Users\Fabienne\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Intel(R) Corporation) c:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Sony Corporation) c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\PSIA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
(Sony Corporation) C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAdmin.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /SONYAPO  [1156712 2012-03-13] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe" [1020576 2012-02-23] (Atheros Communications)
HKLM\...\Run: [AthBtTray] "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe" [800416 2012-02-23] (Atheros Commnucations)
HKLM\...\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [2885904 2012-03-13] (Synaptics Incorporated)
HKCU\...\Run: [FileHippo.com] "C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe" /background [307712 2012-11-23] (FileHippo.com)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [343168 2012-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [291608 2012-02-22] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe" [60552 2011-09-20] (Sony Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] c:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe [693608 2012-02-21] (Sony Corporation)
HKLM-x32\...\Run: [ROC_roc_ssl_v12] "C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 [x]
HKLM-x32\...\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [356376 2013-04-04] (Kaspersky Lab ZAO)
Startup: C:\ProgramData\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKCU SearchScopes: DefaultScope {21D6A1E6-14F9-40C9-B274-8A6DE63AF371} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
SearchScopes: HKCU - {21D6A1E6-14F9-40C9-B274-8A6DE63AF371} URL = hxxp://rover.ebay.com/rover/1/707-37276-16609-27/4?mpre=hxxp://shop.ebay.de/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default
FF NewTab: chrome://unitedtb/content/newtab/newtab-page.xhtml
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_81.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_81.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: WOT - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: testpilot - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\testpilot@labs.mozilla.com.xpi
FF Extension: toolbar - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\toolbar@gmx.net.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{99B98C2C-7274-45a3-A640-D9DF1A1C8460}.xpi
FF Extension: No Name - C:\Users\Fabienne\AppData\Roaming\Mozilla\Firefox\Profiles\h8ekdgxz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome: 
=======
CHR Extension: (Google Drive) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (SiteAdvisor) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.50.146.2_0
CHR Extension: (avast! WebRep) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0
CHR Extension: (Gmail) - C:\Users\Fabienne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356376 2013-04-04] (Kaspersky Lab ZAO)
S3 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-13] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-03-13] (Intel Corporation)
R2 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1359408 2013-03-26] (Sony Corporation)
R2 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [158880 2012-02-23] (Atheros)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S3 BTATH_VDP; C:\Windows\System32\drivers\btath_vdp.sys [421664 2012-02-23] (Atheros)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-04-26] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-10-25] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-10-25] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-04-26] (Kaspersky Lab ZAO)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36128 2012-02-23] (Atheros)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-03-13] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-06-23 09:55 - 2013-06-23 09:55 - 02347384 ____A (ESET) C:\Users\Fabienne\Downloads\esetsmartinstaller_enu.exe
2013-06-23 09:55 - 2013-06-23 09:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\JRT
2013-06-22 09:08 - 2013-06-22 09:08 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Fabienne\Desktop\JRT.exe
2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 13:47 - 2013-06-21 13:48 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Desktop\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:36 - 2013-06-17 08:37 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-12 09:32 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-06-12 09:32 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-06-12 09:32 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
2013-06-12 09:32 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll
2013-06-12 09:32 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll
2013-06-12 09:32 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
2013-06-12 09:32 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-12 09:31 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-12 09:31 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-12 09:31 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-12 09:31 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-12 09:31 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 09:31 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-12 09:31 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-12 09:31 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-06-12 09:31 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2013-06-12 09:31 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 09:26 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 09:26 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-12 09:26 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-06-12 09:26 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll
2013-06-12 09:26 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 09:26 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2013-06-12 09:26 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll
2013-06-12 09:26 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-06-12 09:26 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2013-06-12 09:26 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2013-06-12 09:26 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:02 - 2013-06-11 19:03 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 12:13 - 2013-06-11 12:14 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:53 - 2013-06-16 14:17 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB

==================== One Month Modified Files and Folders =======

2013-06-23 17:52 - 2013-04-04 16:59 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-06-23 17:34 - 2012-04-23 06:35 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-23 11:33 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-06-23 11:33 - 2009-07-14 06:45 - 00020720 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-06-23 09:55 - 2013-06-23 09:55 - 02347384 ____A (ESET) C:\Users\Fabienne\Downloads\esetsmartinstaller_enu.exe
2013-06-23 09:55 - 2013-06-23 09:55 - 00000000 ____D C:\Program Files (x86)\ESET
2013-06-23 09:44 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT
2013-06-23 09:44 - 2009-07-14 06:51 - 00055828 ____A C:\Windows\setupact.log
2013-06-23 02:55 - 2012-08-24 19:32 - 01410205 ____A C:\Windows\WindowsUpdate.log
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\Windows\ERUNT
2013-06-22 09:10 - 2013-06-22 09:10 - 00000000 ____D C:\JRT
2013-06-22 09:08 - 2013-06-22 09:08 - 00545954 ____A (Oleg N. Scherbakov) C:\Users\Fabienne\Desktop\JRT.exe
2013-06-21 20:46 - 2013-06-21 20:46 - 00000000 ____D C:\FRST
2013-06-21 20:45 - 2013-06-21 20:45 - 01930924 ____A (Farbar) C:\Users\Fabienne\Desktop\FRST64.exe
2013-06-21 20:37 - 2013-06-21 20:37 - 00006711 ____A C:\AdwCleaner[S1].txt
2013-06-21 14:50 - 2012-08-24 20:52 - 00000000 ____D C:\Update
2013-06-21 14:50 - 2012-04-23 05:51 - 00000000 ____D C:\ProgramData\Sony Corporation
2013-06-21 13:48 - 2013-06-21 13:47 - 25689696 ____A (SUPERAntiSpyware.com) C:\Users\Fabienne\Desktop\SUPERAntiSpyware.exe
2013-06-21 12:48 - 2013-06-21 12:48 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300(1).exe
2013-06-20 23:44 - 2012-12-02 22:46 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\SoftGrid Client
2013-06-20 09:19 - 2013-06-20 09:19 - 00312232 ____A (Oracle Corporation) C:\Windows\System32\javaws.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00189352 ____A (Oracle Corporation) C:\Windows\System32\javaw.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00188840 ____A (Oracle Corporation) C:\Windows\System32\java.exe
2013-06-20 09:19 - 2013-06-20 09:19 - 00108968 ____A (Oracle Corporation) C:\Windows\System32\WindowsAccessBridge-64.dll
2013-06-20 09:19 - 2013-06-20 09:19 - 00000000 ____D C:\Program Files\Java
2013-06-20 09:19 - 2012-11-17 23:40 - 01093032 ____A (Oracle Corporation) C:\Windows\System32\npDeployJava1.dll
2013-06-20 09:19 - 2012-04-23 06:14 - 00972712 ____A (Oracle Corporation) C:\Windows\System32\deployJava1.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00263592 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00175016 ____A (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2013-06-20 09:17 - 2013-06-20 09:17 - 00096168 ____A (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-20 09:17 - 2013-06-20 09:17 - 00000000 ____D C:\Program Files (x86)\Java
2013-06-20 09:17 - 2012-11-19 22:54 - 00867240 ____A (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2013-06-20 09:17 - 2012-04-23 06:14 - 00789416 ____A (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2013-06-20 09:08 - 2012-08-24 22:04 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-06-19 10:20 - 2013-06-19 10:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-19 10:01 - 2012-06-08 11:38 - 00054368 ____A (Kaspersky Lab ZAO) C:\Windows\System32\Drivers\kltdi.sys
2013-06-17 08:39 - 2013-06-17 08:39 - 00001168 ____A C:\Users\Public\Desktop\Opera next.lnk
2013-06-17 08:39 - 2013-06-17 08:39 - 00000000 ____D C:\Program Files (x86)\Opera Next
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Opera
2013-06-17 08:39 - 2012-08-24 22:07 - 00000000 ____D C:\Users\Fabienne\AppData\Local\Opera
2013-06-17 08:38 - 2013-06-17 08:38 - 25505112 ____A (Opera Software ASA) C:\Users\Fabienne\Downloads\Opera_Next_15.0.1147.18_Setup.exe
2013-06-17 08:37 - 2013-06-17 08:36 - 18064528 ____A (Adobe Systems Inc.) C:\Users\Fabienne\Downloads\air3-8_win.exe
2013-06-16 14:17 - 2013-06-10 23:53 - 00000000 ____D C:\Users\Fabienne\Desktop\Rechnungen PB
2013-06-12 19:07 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-06-12 12:29 - 2012-04-23 06:35 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-12 12:29 - 2012-04-23 06:35 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-12 09:32 - 2012-08-24 21:22 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\Users\Fabienne\AppData\Roaming\Malwarebytes
2013-06-11 19:04 - 2013-06-11 19:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-06-11 19:03 - 2013-06-11 19:02 - 10285040 ____A (Malwarebytes Corporation                                    ) C:\Users\Fabienne\Downloads\mbam-setup-1.75.0.1300.exe
2013-06-11 12:14 - 2013-06-11 12:13 - 00883840 ____A C:\Users\Fabienne\Downloads\Avira-DE100-Cleaner.exe
2013-06-10 23:39 - 2012-04-23 06:42 - 00697322 ____A C:\Windows\System32\perfh007.dat
2013-06-10 23:39 - 2012-04-23 06:42 - 00148328 ____A C:\Windows\System32\perfc007.dat
2013-06-10 23:39 - 2009-07-14 07:13 - 01614036 ____A C:\Windows\System32\PerfStringBackup.INI
2013-06-10 23:33 - 2012-12-05 22:14 - 00000000 ____D C:\Users\Fabienne\Desktop\Bilder
2013-06-08 16:08 - 2013-06-12 09:31 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2013-06-08 16:07 - 2013-06-12 09:31 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2013-06-08 16:06 - 2013-06-12 09:31 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2013-06-08 14:28 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2013-06-08 13:42 - 2013-06-12 09:31 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-08 13:40 - 2013-06-12 09:31 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-06-08 13:13 - 2013-06-12 09:31 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

Files to move or delete:
====================
C:\ProgramData\ntuser.dat

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-06-13 10:33

==================== End Of Log ============================
--- --- ---


Ich hatte auch gerade gesehen, dass sich dieses BingBar schonwieder selbst installiert hatte - war aber anscheinend schon Samstag - habe es wieder runtergeschmissen.

LG Fabienne

Alt 23.06.2013, 20:32   #11
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Nee passt. Den einen download den ESET im Log anmeckert.

Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 23.06.2013, 23:32   #12
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Aah, alles klar. Hab ich entfernt

Nee, ich glaube es ist alles ok - kein Problem weit und breit.

Danke dir für deine umfangreiche Hilfe!

Kann ich die restlichen downloads (eset, frst usw.) einfach deinstallieren?

LG Fabienne

Alt 24.06.2013, 07:40   #13
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Machen wir jetzt

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 24.06.2013, 21:49   #14
Fabienne
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Hallo nochmal,

habe alles erledigt

Viele der Absicherungsmaßnahmen hatte ich schon ,aber ein paar neue Sachen waren noch dabei.

Ein ganz großes für deine Hilfe!!!

LG fabienne

Alt 25.06.2013, 07:57   #15
schrauber
/// the machine
/// TB-Ausbilder
 
123 Funde bei SuperAntiSpyware - Standard

123 Funde bei SuperAntiSpyware


Gern Geschehen
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu 123 Funde bei SuperAntiSpyware
appdata, aufgegeben, code, detected, euren, firefox, flash player, gen, home, log, macromedia, malwarebytes, microsoft, mozilla, neue, player, problem, programm, roaming, scan, service, superantispyware, system, version, viren


« Bitdefender Internet Security 2013 schützt nicht! warum? | Gesellschaft zur Verfügung von Urheberrechtsverletzungen, Bundesamt für Scherkeit in der Informationstechnik »


Ähnliche Themen: 123 Funde bei SuperAntiSpyware


  1. Windows 7: AVAST 3 Funde, Malwarebytes 8 Funde
    Log-Analyse und Auswertung - 16.12.2014 (13)
  2. Windows 7: 30 Funde mbam, 2 Funde avira
    Log-Analyse und Auswertung - 30.08.2014 (12)
  3. Win7: Avira Fund: Java/Dldr.Obfshlp.JC, Malwarbytes Funde: Hijack.SearchPage in Quarantäne - 35 Funde insgesamt
    Log-Analyse und Auswertung - 06.10.2013 (5)
  4. Windows 7: Avira hat 172 Viren gefunden, davor mehrer Funde einzel Funde bei Malwarebytes bzw. Avira
    Log-Analyse und Auswertung - 15.09.2013 (13)
  5. GUV Virus weiterhin auf dem Rechner? Malewarebytes = keine Funde/ Antivir = 2 Funde
    Plagegeister aller Art und deren Bekämpfung - 24.09.2012 (3)
  6. SuperAntiSpyware Log Auswertung
    Log-Analyse und Auswertung - 07.12.2011 (17)
  7. Superantispyware schlägt auf die MBR.exe an
    Antiviren-, Firewall- und andere Schutzprogramme - 30.04.2009 (4)
  8. SUPERAntiSpyware Bericht
    Mülltonne - 23.11.2008 (0)
  9. SUPERAntiSpyware FreeEdition
    Mülltonne - 18.11.2008 (0)
  10. SuperAntiSpyware
    Antiviren-, Firewall- und andere Schutzprogramme - 18.10.2008 (7)
  11. SUPERAntiSpyware
    Plagegeister aller Art und deren Bekämpfung - 08.09.2008 (6)
  12. Superantispyware Log
    Plagegeister aller Art und deren Bekämpfung - 20.03.2008 (0)
  13. SUPERAntiSpyWare
    Antiviren-, Firewall- und andere Schutzprogramme - 05.03.2008 (36)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema 123 Funde bei SuperAntiSpyware - Hallo Ihr, ich weiß ehrlich gesagt nicht ob ich wirklich ein Problem mit Viren od. ähnl. habe... Im Januar hatte mein alter lappi den Geist aufgegeben und ich habe dne - 123 Funde bei SuperAntiSpyware...
Archiv
Du betrachtest: 123 Funde bei SuperAntiSpyware auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54