Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Delta Search Toolbar

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 12.07.2013, 07:56   #1
masterds
 
Delta Search Toolbar - Standard

Delta Search Toolbar



Hallo zusammen!

Die DeltaSearch Toolbar habe ich zwar deinstalliert und größtenteils entfernt, aber leider eben nur "größtenteils" .

Google Chrome startet noch immer auf der Delta-Seite, obwohl in den Einstellungen google.de hinterlegt ist.

Hier die OTL-Files:

Code:
ATTFilter
OTL logfile created on: 12.07.2013 07:26:23 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Dennis\Desktop
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16599)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,95 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,48% Memory free
12,44 Gb Paging File | 7,55 Gb Available in Paging File | 60,69% Paging File free
Paging file location(s): c:\pagefile.sys 4596 4596g:\pagef [Binary data over 200 bytes]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59,28 Gb Total Space | 14,62 Gb Free Space | 24,66% Space Free | Partition Type: NTFS
Drive D: | 70,05 Gb Total Space | 53,85 Gb Free Space | 76,87% Space Free | Partition Type: NTFS
Drive E: | 200,00 Gb Total Space | 15,97 Gb Free Space | 7,98% Space Free | Partition Type: NTFS
Drive F: | 350,51 Gb Total Space | 27,02 Gb Free Space | 7,71% Space Free | Partition Type: NTFS
Drive G: | 381,00 Gb Total Space | 14,16 Gb Free Space | 3,72% Space Free | Partition Type: NTFS
Drive H: | 295,76 Gb Total Space | 41,22 Gb Free Space | 13,94% Space Free | Partition Type: NTFS
Drive I: | 14,89 Gb Total Space | 14,89 Gb Free Space | 100,00% Space Free | Partition Type: FAT32
Drive L: | 99,89 Gb Total Space | 29,33 Gb Free Space | 29,36% Space Free | Partition Type: NTFS
 
Computer Name: DENNIS-PC | User Name: Dennis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Dennis\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
PRC - D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
PRC - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
PRC - C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe ()
PRC - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe (Acronis)
PRC - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.)
PRC - C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis)
PRC - C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation)
PRC - C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (ASUSTeK Computer Inc.)
PRC - C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - C:\Users\Dennis\Desktop\EraserPortable\EraserPortable.exe (PortableApps.com)
PRC - C:\Users\Dennis\Desktop\EraserPortable\App\Eraser\Eraser.exe (The Eraser Project)
PRC - C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe (Logitech Inc.)
PRC - C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\PepperFlash\11.8.800.97\pepflashplayer.dll ()
MOD - C:\Users\Dennis\AppData\Local\Temp\nseF350.tmp\System.dll ()
MOD - C:\Users\Dennis\AppData\Local\Temp\nseF350.tmp\newadvsplash.dll ()
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\libglesv2.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\libegl.dll ()
MOD - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ffmpegsumo.dll ()
MOD - C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\PepperFlash\11.7.700.225\pepflashplayer.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
MOD - C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMLib.dll ()
MOD - D:\Programme\FileZilla FTP Client\fzshellext.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - D:\Programme\Acronis\TrueImage2013\TrueImageHome\ti_managers.dll ()
MOD - C:\Program Files (x86)\Common Files\Acronis\Home\icudt38.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\func.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\Network iControl.dll ()
MOD - C:\Program Files (x86)\Common Files\Acronis\TibMounter\icudt38.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\pngio.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll ()
MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\pngio.dll ()
MOD - C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
SRV:64bit: - (AllUserInstallAgent) -- C:\Windows\SysNative\AUInstallAgent.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (VIAKaraokeService) -- C:\Windows\SysNative\ViakaraokeSrv.exe (VIA Technologies, Inc.)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (TomTomHOMEService) -- D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (afcdpsrv) -- C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Acronis)
SRV - (AsusFanControlService) -- C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe (ASUSTeK Computer Inc.)
SRV - (asHmComSvc) -- C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc.)
SRV - (asComSvc) -- C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe ()
SRV - (AsSysCtrlService) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.)
SRV - (TeamViewer8) -- C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (PrintNotify) -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (cphs) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation)
SRV - (AdobeActiveFileMonitor11.0) -- C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (AcrSch2Svc) -- C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (syncagentsrv) -- C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis)
SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)
SRV - (UNS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (jhi_service) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation)
SRV - (Intel(R) -- C:\Programme\Intel\iCLS Client\HeciServer.exe (Intel(R) Corporation)
SRV - (SQLWriter) -- C:\Programme\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
SRV - (AdobeActiveFileMonitor10.0) -- C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (LVPrcS64) -- C:\Programme\Common Files\logishrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (spaceport) -- C:\Windows\SysNative\Drivers\spaceport.sys (Microsoft Corporation)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\Drivers\avipbb.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\Drivers\avgntflt.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\Drivers\avkmgr.sys (Avira Operations GmbH & Co. KG)
DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\Drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (storahci) -- C:\Windows\SysNative\Drivers\storahci.sys (Microsoft Corporation)
DRV:64bit: - (TPM) -- C:\Windows\SysNative\Drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\Drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (pdc) -- C:\Windows\SysNative\Drivers\pdc.sys (Microsoft Corporation)
DRV:64bit: - (afcdp) -- C:\Windows\SysNative\Drivers\afcdp.sys (Acronis)
DRV:64bit: - (tdrpman) -- C:\Windows\SysNative\Drivers\tdrpman.sys (Acronis)
DRV:64bit: - (tib_mounter) -- C:\Windows\SysNative\Drivers\tib_mounter.sys (Acronis)
DRV:64bit: - (snapman) -- C:\Windows\SysNative\Drivers\snapman.sys (Acronis)
DRV:64bit: - (fltsrv) -- C:\Windows\SysNative\Drivers\fltsrv.sys (Acronis)
DRV:64bit: - (AF15BDA) -- C:\Windows\SysNative\Drivers\AF15BDA.sys (AfaTech                  )
DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\Drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\Drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\Drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\Drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\Drivers\WdBoot.sys (Microsoft Corporation)
DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\Drivers\WdFilter.sys (Microsoft Corporation)
DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\Drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (AtiHDAudioService) -- C:\Windows\SysNative\Drivers\AtihdW86.sys (Advanced Micro Devices)
DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\Drivers\atikmdag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\Drivers\atikmpag.sys (Advanced Micro Devices, Inc.)
DRV:64bit: - (ndisrd) -- C:\Windows\SysNative\Drivers\ndisrd.sys (NT Kernel Resources)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\Drivers\BthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\Drivers\hidi2c.sys (Microsoft Corporation)
DRV:64bit: - (FxPPM) -- C:\Windows\SysNative\Drivers\fxppm.sys (Microsoft Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\Drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\Drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) -- C:\Windows\SysNative\Drivers\sdstor.sys (Microsoft Corporation)
DRV:64bit: - (dam) -- C:\Windows\SysNative\Drivers\dam.sys (Microsoft Corporation)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\Drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (UCX01000) -- C:\Windows\SysNative\Drivers\UCX01000.SYS (Microsoft Corporation)
DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\Drivers\msgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\Drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\Drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\Drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (asmtxhci) -- C:\Windows\SysNative\Drivers\asmtxhci.sys (ASMedia Technology Inc)
DRV:64bit: - (asmthub3) -- C:\Windows\SysNative\Drivers\asmthub3.sys (ASMedia Technology Inc)
DRV:64bit: - (AF9035BDA) -- C:\Windows\SysNative\Drivers\AF9035BDA.sys (AfaTech                  )
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\Drivers\PxHlpa64.sys (Corel Corporation)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (condrv) -- C:\Windows\SysNative\Drivers\condrv.sys (Microsoft Corporation)
DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\Drivers\VSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\Drivers\VerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\Drivers\uaspstor.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) -- C:\Windows\SysNative\Drivers\acpiex.sys (Microsoft Corporation)
DRV:64bit: - (mvumis) -- C:\Windows\SysNative\Drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\Drivers\stexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\Drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\Drivers\lsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\Drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\Drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\Drivers\EhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\Drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (3ware) -- C:\Windows\SysNative\Drivers\3ware.sys (LSI)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\Drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\Drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (CLFS) -- C:\Windows\SysNative\Drivers\clfs.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\Drivers\wfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (vpci) -- C:\Windows\SysNative\Drivers\vpci.sys (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\Drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\Drivers\mshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\Drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\Drivers\HyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\Drivers\BasicRender.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) -- C:\Windows\SysNative\Drivers\vmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) -- C:\Windows\SysNative\Drivers\kdnic.sys (Microsoft Corporation)
DRV:64bit: - (acpitime) -- C:\Windows\SysNative\Drivers\acpitime.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\Drivers\npsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\Drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\Drivers\acpipagr.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\Drivers\hyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) -- C:\Windows\SysNative\Drivers\SerCx.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\Drivers\SpbCx.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\Drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\Drivers\bthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\Drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\Drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (Vid) -- C:\Windows\SysNative\Drivers\Vid.sys (Microsoft Corporation)
DRV:64bit: - (storvsp) -- C:\Windows\SysNative\Drivers\storvsp.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\Drivers\wpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (vmbusr) -- C:\Windows\SysNative\Drivers\vmbusr.sys (Microsoft Corporation)
DRV:64bit: - (vpcivsp) -- C:\Windows\SysNative\Drivers\vpcivsp.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\Drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\Drivers\mslldp.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) -- C:\Windows\SysNative\Drivers\Ndu.sys (Microsoft Corporation)
DRV:64bit: - (MEIx64) -- C:\Windows\SysNative\Drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (RTL8168) -- C:\Windows\SysNative\Drivers\Rt630x64.sys (Realtek                                            )
DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\Drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV:64bit: - (Netaapl) -- C:\Windows\SysNative\Drivers\netaapl64.sys (Apple Inc.)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\Drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (LVUVC64) -- C:\Windows\SysNative\Drivers\lvuvc64.sys (Logitech Inc.)
DRV:64bit: - (LVRS64) -- C:\Windows\SysNative\Drivers\lvrs64.sys (Logitech Inc.)
DRV:64bit: - (LVPr2Mon) -- C:\Windows\SysNative\Drivers\LVPr2M64.sys ()
DRV:64bit: - (LVPr2M64) -- C:\Windows\SysNative\Drivers\LVPr2M64.sys ()
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
 
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = 
 
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 76 26 25 B3 42 25 CE 01  [binary data]
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\..\SearchScopes,DefaultScope = 
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:22.0
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: D:\Programme\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
 
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 22.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013.06.02 12:57:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Extensions
[2013.06.02 12:57:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2013.07.09 09:01:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\Firefox\Profiles\kv8pufq0.default\extensions
[2013.05.25 20:39:17 | 002,168,615 | ---- | M] () (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\extensions\firebug@software.joehewitt.com.xpi
[2013.05.08 18:30:46 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.07.09 09:01:12 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\Extensions
[2013.07.03 08:47:09 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2013.07.03 08:47:12 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - default_search_provider: Delta Search (Enabled)
CHR - default_search_provider: search_url = hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: hxxp://google.de/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
CHR - plugin: AdobeAAMDetect (Enabled) = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll
CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Microsoft Office 2013 (Enabled) = D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL
CHR - Extension: Google Docs = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Type Scout = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fedokkaolmkkoeedicihicdeppjjeamj\5_0\
CHR - Extension: Stoppuhr / Timer = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggnidjbcahhbnleinchgobfnabopeioh\3.6_0\
CHR - Extension: IP-Adresse = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpnjjlbngpejmmhgcaagljaomgnginml\7.1_0\
CHR - Extension: Google Maps = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0\
CHR - Extension: Google Mail = C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2013.02.20 09:09:58 | 000,000,920 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 activation.acronis.com
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Microsoft SkyDrive Pro Browser Helper) - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Programme\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - D:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll (TerraTec Electronic GmbH)
O4:64bit: - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [AcronisTibMounterMonitor] C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe (Acronis)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe ()
O4 - HKLM..\Run: [PDFPrint] D:\Programme\PDF24\pdf24.exe (Geek Software GmbH)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [ApplePhotoStreams] C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [SanDiskSecureAccess_Manager.exe] C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe (Gemalto N.V.)
O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\Run: [Steam] D:\Programme\Steam\Steam.exe (Valve Corporation)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-21-1471377960-4142091505-4027430203-1001..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{85857567-4AF6-45DF-A32C-664D377FCD21}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CCED002F-2860-4698-B4A4-8167E81279C0}: DhcpNameServer = 139.7.30.126 139.7.30.125
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O18 - Protocol\Handler\osf {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27:64bit: - HKLM IFEO\utilman.exe: Debugger - C:\Windows\SysNative\cmd.exe (Microsoft Corporation)
O27 - HKLM IFEO\utilman.exe: Debugger - C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation)
O30 - LSA: Security Packages - (livessp) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell - "" = AutoRun
O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\AutoRun\command - "" = "M:\SETUP.EXE" 
O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\configure\command - "" = M:\SETUP.EXE
O33 - MountPoints2\{36bdab4f-5824-11e2-be81-3085a9eac743}\Shell\install\command - "" = M:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.07.12 07:24:52 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Dennis\Desktop\OTL.exe
[2013.07.09 20:39:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\StarCraft II
[2013.07.09 20:39:08 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\Skirmish
[2013.07.09 09:23:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2013.07.09 09:00:53 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Documents\Freemake
[2013.07.09 09:00:52 | 000,000,000 | ---D | C] -- C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
[2013.07.09 09:00:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
[2013.07.09 09:00:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Freemake
[2013.07.09 09:00:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Freemake
[2013.07.08 20:12:51 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\STICK
[2013.07.07 03:00:52 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tssdisai.dll
[2013.07.05 07:36:59 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2013.07.05 07:36:35 | 000,000,000 | ---D | C] -- C:\Windows\softwaredistribution.bak1
[2013.07.03 08:47:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.06.25 08:21:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2013.06.25 08:21:46 | 000,000,000 | ---D | C] -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
[2013.06.23 23:23:57 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\test
[2013.06.23 23:23:09 | 000,000,000 | ---D | C] -- C:\Users\Dennis\Desktop\EraserPortable
[2013.06.23 19:06:31 | 000,000,000 | -HSD | C] -- C:\$$PendingFiles
[2013.06.23 18:22:17 | 001,889,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2013.06.23 18:22:16 | 001,255,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certutil.exe
[2013.06.23 18:22:16 | 001,013,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certutil.exe
[2013.06.23 18:22:16 | 000,733,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2013.06.23 18:22:16 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptnet.dll
[2013.06.23 18:22:15 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptdlg.dll
[2013.06.23 18:22:15 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptdlg.dll
[2013.06.23 18:22:10 | 003,958,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013.06.23 18:22:09 | 000,915,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2013.06.23 18:22:09 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013.06.23 18:22:09 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013.06.23 18:22:09 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013.06.23 18:22:09 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UXInit.dll
[2013.06.23 18:22:09 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013.06.23 18:22:09 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UXInit.dll
 
========== Files - Modified Within 30 Days ==========
 
[2013.07.12 07:24:53 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Dennis\Desktop\OTL.exe
[2013.07.12 06:48:20 | 000,000,565 | ---- | M] () -- C:\Users\Dennis\AppData\Roaming\myMPQ.ini
[2013.07.12 06:45:00 | 000,001,130 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.07.12 06:37:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.07.11 23:59:30 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.07.11 23:59:29 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\drivers\lvuvc.hs
[2013.07.11 23:40:02 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.07.11 07:32:35 | 001,754,016 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.07.11 07:32:35 | 000,755,402 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2013.07.11 07:32:35 | 000,712,950 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.07.11 07:32:35 | 000,156,630 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2013.07.11 07:32:35 | 000,133,260 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.07.09 21:07:52 | 000,083,556 | ---- | M] () -- C:\Users\Dennis\Desktop\DB BAHN - Verbindungen - Verfügbarkeit.pdf
[2013.07.09 20:39:59 | 000,000,974 | ---- | M] () -- C:\Users\Dennis\Desktop\SC2ALLin1.lnk
[2013.07.09 20:23:14 | 000,000,667 | ---- | M] () -- C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
[2013.07.09 09:23:44 | 000,000,615 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk
[2013.07.09 09:20:59 | 000,000,759 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.07.09 09:17:12 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2013.07.09 09:17:00 | 2537,435,135 | -HS- | M] () -- C:\hiberfil.sys
[2013.07.09 09:00:51 | 000,001,324 | ---- | M] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk
[2013.07.08 10:21:30 | 000,166,704 | ---- | M] () -- C:\Users\Dennis\Desktop\Amazon.pdf
[2013.07.01 10:36:19 | 000,002,194 | -H-- | M] () -- C:\Users\Dennis\Documents\Default.rdp
[2013.06.27 15:52:08 | 000,083,672 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Windows\SysNative\drivers\avnetflt.sys
[2013.06.25 08:21:53 | 000,001,543 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.06.23 23:21:37 | 000,001,128 | ---- | M] () -- C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
 
========== Files Created - No Company Name ==========
 
[2013.07.09 21:07:52 | 000,083,556 | ---- | C] () -- C:\Users\Dennis\Desktop\DB BAHN - Verbindungen - Verfügbarkeit.pdf
[2013.07.09 20:41:14 | 000,000,565 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\myMPQ.ini
[2013.07.09 20:39:59 | 000,000,974 | ---- | C] () -- C:\Users\Dennis\Desktop\SC2ALLin1.lnk
[2013.07.09 20:22:38 | 000,000,667 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
[2013.07.09 09:20:59 | 000,000,759 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.07.09 09:00:51 | 000,001,324 | ---- | C] () -- C:\Users\Public\Desktop\Freemake Video Converter.lnk
[2013.07.08 10:21:29 | 000,166,704 | ---- | C] () -- C:\Users\Dennis\Desktop\Amazon.pdf
[2013.06.25 08:21:53 | 000,001,543 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2013.06.23 23:21:37 | 000,001,128 | ---- | C] () -- C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
[2013.05.21 19:47:31 | 001,772,970 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.05.17 09:34:49 | 000,000,288 | ---- | C] () -- C:\Users\Dennis\AppData\Roaming\.backup.dm
[2013.05.17 09:34:44 | 000,007,620 | ---- | C] () -- C:\Users\Dennis\AppData\Local\Resmon.ResmonCfg
[2013.05.17 09:34:44 | 000,000,835 | ---- | C] () -- C:\Users\Dennis\AppData\Local\recently-used.xbel
[2013.05.17 09:33:13 | 000,007,680 | ---- | C] () -- C:\Users\Dennis\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2013.02.06 19:31:31 | 000,000,256 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2013.02.06 19:31:31 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2013.02.06 19:31:23 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2013.02.06 19:31:23 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2013.02.06 19:31:13 | 000,106,496 | ---- | C] () -- C:\Windows\SysWow64\BrMuSNMP.dll
[2013.02.06 19:31:13 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2013.02.06 19:31:13 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2013.01.08 09:06:01 | 000,000,790 | ---- | C] () -- C:\Windows\wiso.ini
[2013.01.03 11:37:38 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
[2013.01.02 08:21:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.12.18 23:04:29 | 004,244,624 | ---- | C] () -- C:\Windows\PE_Rom.dll
[2012.12.18 23:00:44 | 000,014,464 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys
[2012.12.18 22:59:59 | 000,015,232 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
[2012.12.18 22:59:59 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
[2012.12.18 22:59:59 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys
[2012.12.18 19:37:55 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2012.12.18 19:32:14 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS
[2012.10.22 18:40:28 | 000,598,780 | ---- | C] () -- C:\Windows\SysWow64\igvpkrng700.bin
[2012.10.22 18:40:04 | 000,064,512 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2012.10.22 18:40:00 | 000,755,048 | ---- | C] () -- C:\Windows\SysWow64\igcodeckrng700.bin
[2012.09.28 03:29:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.09.28 03:29:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.07.26 10:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2012.07.26 10:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2012.07.26 09:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2012.07.26 03:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2012.07.25 22:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2012.07.25 22:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2012.06.02 16:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2012.05.02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.04.20 14:59:44 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll
[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 
========== ZeroAccess Check ==========
 
[2013.03.24 19:56:07 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.03.06 08:31:28 | 019,758,592 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.03.06 07:03:37 | 017,561,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012.07.26 05:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2012.07.26 05:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012.07.26 05:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
 
========== LOP Check ==========
 
[2013.05.17 09:34:49 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Acronis
[2013.07.03 07:36:43 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ALFBanCo3
[2013.05.17 09:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ALFBanCo3_org
[2013.05.17 09:34:55 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\AnvSoft
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Armagetron
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\e-academy Inc
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\FileZilla
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\ImgBurn
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\IrfanView
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\JAM Software
[2013.05.17 09:34:57 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Leadertech
[2013.05.17 09:35:00 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\Notepad++
[2013.06.26 23:04:06 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\SanDisk
[2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\SanDisk SecureAccess
[2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TeamViewer
[2013.05.17 09:35:01 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TerraTec
[2013.06.02 12:57:34 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\TomTom
[2013.07.11 07:33:15 | 000,000,000 | ---D | M] -- C:\Users\Dennis\AppData\Roaming\UseNeXT
 
========== Purity Check ==========
 
 

< End of report >
         
Code:
ATTFilter
OTL Extras logfile created on: 12.07.2013 07:26:23 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Dennis\Desktop
64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16599)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,95 Gb Total Physical Memory | 5,61 Gb Available Physical Memory | 70,48% Memory free
12,44 Gb Paging File | 7,55 Gb Available in Paging File | 60,69% Paging File free
Paging file location(s): c:\pagefile.sys 4596 4596g:\pagef [Binary data over 200 bytes]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59,28 Gb Total Space | 14,62 Gb Free Space | 24,66% Space Free | Partition Type: NTFS
Drive D: | 70,05 Gb Total Space | 53,85 Gb Free Space | 76,87% Space Free | Partition Type: NTFS
Drive E: | 200,00 Gb Total Space | 15,97 Gb Free Space | 7,98% Space Free | Partition Type: NTFS
Drive F: | 350,51 Gb Total Space | 27,02 Gb Free Space | 7,71% Space Free | Partition Type: NTFS
Drive G: | 381,00 Gb Total Space | 14,16 Gb Free Space | 3,72% Space Free | Partition Type: NTFS
Drive H: | 295,76 Gb Total Space | 41,22 Gb Free Space | 13,94% Space Free | Partition Type: NTFS
Drive I: | 14,89 Gb Total Space | 14,89 Gb Free Space | 100,00% Space Free | Partition Type: FAT32
Drive L: | 99,89 Gb Total Space | 29,33 Gb Free Space | 29,36% Space Free | Partition Type: NTFS
 
Computer Name: DENNIS-PC | User Name: Dennis | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = CE 37 E6 AF FF 6A CD 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{07F7AE09-FBE5-46B1-B33A-1D8E263B2394}" = lport=445 | protocol=6 | dir=in | app=system | 
"{085F0C99-7FAA-4E0C-90B4-BE30A387CE39}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{22ECFE2E-B1C3-41AF-9FF8-D579B2441313}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{32181453-8CCE-4E5A-A4F4-BD64B13E3667}" = rport=445 | protocol=6 | dir=out | app=system | 
"{3B28FBE3-20D2-4014-BC9D-047CB838D175}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{3F7BA72F-4961-49FB-868E-2563CAA56A13}" = lport=3702 | protocol=17 | dir=in | app=d:\programme\visualstudio2012\common7\ide\wdexpress.exe | 
"{51F9EC06-A687-4D53-9F02-98DFA038C150}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{57596EAC-C99C-41A2-99FA-02C1FE7DC073}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{6283C3D9-7F31-48BC-A167-CA239612A4C1}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{76F526E2-FF4A-4867-BA4D-7CF42333D778}" = lport=139 | protocol=6 | dir=in | app=system | 
"{78AB8096-E0D1-4738-B968-45BC00E58EE0}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{79353B8B-09F3-4327-B246-B4735419C711}" = rport=137 | protocol=17 | dir=out | app=system | 
"{8B4B047E-01EE-4F17-BDCC-A3A12F412B27}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe | 
"{9645E638-2A0F-4042-BCB9-58708486424C}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{A5B1DA88-6F0A-47EE-B204-66A81A70C7F6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{A78FDD4D-C354-47BC-8C5C-E1A82548830E}" = lport=3389 | protocol=17 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe | 
"{C135BED8-9002-4A32-B994-623B9A72AF70}" = lport=137 | protocol=17 | dir=in | app=system | 
"{C2B0F641-0135-4934-A587-CA3DAEBF37FE}" = lport=138 | protocol=17 | dir=in | app=system | 
"{C7FD1924-8A07-4B5B-8499-1F189E30D439}" = rport=138 | protocol=17 | dir=out | app=system | 
"{D01AFAF2-BBD9-4F85-892C-B03EB3EDC875}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D02BB960-99A4-4C6F-A7F7-67F58A73E34A}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D75BFD0D-10E0-48BE-B96A-A306E6504C51}" = lport=3389 | protocol=6 | dir=in | svc=termservice | app=%systemroot%\system32\svchost.exe | 
"{DB1B5242-1ED6-4EDD-B6A4-062EFDA4D2E5}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner | 
"{E5741AB9-7137-431E-91ED-B9C2242CE66F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{EE8986D6-47FD-446C-B119-B56FD99490EA}" = rport=139 | protocol=6 | dir=out | app=system | 
"{FF258F7E-F40E-4B9E-BE23-61A7D5290840}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{033B97F7-449E-4867-AC42-33965B947EBC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{062BA0E7-5E2A-4444-92FF-8B85BDB04BBB}" = dir=out | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | 
"{077E7610-54CD-4988-AF47-AE7F504FD31A}" = protocol=6 | dir=in | app=d:\programme\terratec\versioncheck\versioncheck.exe | 
"{0D13C9BF-7C2D-47E8-BE82-30CBC9439513}" = protocol=6 | dir=in | app=c:\program files (x86)\asus\ai suite ii\ai suite ii.exe | 
"{0E5AF445-E232-4BB7-8A02-2AF2F819CCB0}" = dir=out | name=@{microsoft.microsoftskydrive_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftskydrive/resources/shortproductname} | 
"{0E7E997B-53DE-4874-94D5-1DC5EA6E8AFC}" = protocol=6 | dir=in | app=d:\programme\terratec\cinergydvr.exe | 
"{112D0A94-C9E2-48F3-88ED-C7FE19A6AEF3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{1419B558-42A7-4CDB-95B2-0641EC819F2D}" = dir=out | name=amazon | 
"{143E6848-F84A-4F59-81B4-F79882B8588A}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{1552E134-EE42-40A4-A6F2-10089BAFD8F7}" = protocol=17 | dir=in | app=d:\programme\steam\steam.exe | 
"{156189B4-B138-4117-A860-80843B70F827}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{1B5370E8-4084-442E-AE8C-A7CF995C4783}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{1D3CCE58-ED73-4D1C-A4FF-580C5AA1BC00}" = dir=out | name=@{microsoft.bingfinance_2.0.0.300_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | 
"{240E38CE-2ADF-4503-B2A0-6C8B2CA9DD70}" = dir=out | name=@{44352gadgetwe.unitconversion_1.0.1.4_neutral__wrnqd43hr7tc6?ms-resource://44352gadgetwe.unitconversion/resources/appstorename} | 
"{25002815-373A-430A-867C-5B4799FC5F46}" = dir=in | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{27E5989D-82CE-4B76-89A9-C7DA46652501}" = dir=out | name=skype | 
"{2D49554E-0761-4811-A1D4-99422654DA31}" = protocol=6 | dir=in | app=c:\program files (x86)\brother\brmfl06a\faxrx.exe | 
"{31EDC103-9F84-4922-9858-1BA7CD13FA92}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{350C7FD1-C44C-4BE2-9847-6DB052318D40}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{35343913-29C2-463A-9A33-6BFAB9B2E606}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | 
"{38087BFB-4F6C-4514-9C05-2257CB48CE3C}" = dir=in | name=skype | 
"{39F7FF37-D99D-4C80-8956-C8AE65A21D79}" = protocol=6 | dir=in | app=d:\programme\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{3C237C80-AF3D-4337-A768-BA3CCE342216}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{490B1D59-2BED-4168-87E8-D517784B4041}" = dir=in | name=@{microsoft.windowsphotos_16.4.4388.928_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphotos/photo/residappname} | 
"{50B34BB1-A26D-4DC7-98B8-819D03844E1C}" = dir=out | name=@{microsoft.bingsports_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | 
"{537060B7-D53A-44B8-87B1-8FAA82DD0688}" = protocol=17 | dir=in | app=d:\programme\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{5B7226E6-C26A-4898-B427-18B8BBA48A17}" = dir=out | name=@{microsoft.bingmaps_1.6.1821.2624_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | 
"{5F4DCD7F-4A86-4344-B5C3-C690CA152650}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{62071E59-4B70-4C1E-B214-650B258664BD}" = dir=out | name=@{microsoft.bingweather_2.0.0.288_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | 
"{694ED10E-5474-4AE4-AB4D-08CE7F4529BC}" = dir=in | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | 
"{6DE381F3-FF8A-45EA-82D1-0AFD19F47D53}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | 
"{6DFF85EA-1E15-4F1E-BD2A-682B4D801394}" = dir=out | name=@{microsoft.bingnews_2.0.0.273_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | 
"{7274EA3D-DC2F-47B4-B562-2390F864DAA9}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{74D2F9C5-1EA9-4A34-A156-8ABBCB3E3099}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | 
"{777EE770-45AD-4811-BCE8-5A912DE66E58}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{7FD395A2-E337-4C9A-B6C3-BC18CB60462B}" = dir=out | name=microsoft minesweeper | 
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{8319566F-9C98-4E26-80A6-740A0C7F3FF1}" = protocol=6 | dir=in | app=d:\programme\filezilla ftp client\filezilla.exe | 
"{84C42697-426E-48E7-B293-493C4CA8945C}" = protocol=17 | dir=in | app=d:\programme\filezilla ftp client\filezilla.exe | 
"{87481535-9D4A-41CD-B3AA-A7E3976FB4EC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{875652B2-3465-479E-A36B-837C0F7CF104}" = dir=in | app=d:\programme\itunes\itunes.exe | 
"{8B6ABFF0-69BE-4C1D-A3F8-0DFD936E14A3}" = dir=out | name=@{microsoft.bingtravel_2.0.0.274_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | 
"{932F836E-574B-440C-A523-57318BA4731C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{958C1D2A-75D2-4CB7-91CE-D1C9119051ED}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{96B46E0C-2973-4F86-8E6D-E042A7D0189D}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | 
"{9908E706-5C0E-4773-87A5-563BEB90848C}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{9BDF4387-3312-4DE9-A35E-80F8973E42F1}" = protocol=17 | dir=in | app=d:\programme\terratec\cinergydvr.exe | 
"{A19605E4-EFE5-40F7-9530-DECE30F02692}" = dir=out | name=@{browserchoice_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://browserchoice/resources/displayname} | 
"{A43861A3-0C2A-40EC-836A-42FDB5A1F3DD}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{AC05E5BF-E4C5-4145-8653-094962C39792}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | 
"{ACB1F1C7-DB66-429E-B978-B844D6DA6FFA}" = dir=out | name=@{microsoft.zunemusic_1.4.18.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{AD25907E-2A84-4E9B-B87F-CBC01EE11569}" = protocol=6 | dir=out | app=system | 
"{B154FB87-5830-410E-B2D3-4171A724E836}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{B55B938E-3184-47C1-AD2C-E0AD3A844B77}" = protocol=6 | dir=in | app=d:\programme\steam\steam.exe | 
"{BD0B2124-B7AA-4738-AB86-275D750A3808}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C0208E7E-7008-431B-88FB-CC681A9D2BA8}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{C1DD0B81-9169-491E-A9D0-2FF2C76911DF}" = dir=out | name=@{microsoft.reader_6.2.9200.20623_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{C2115DBB-29A0-4A5C-847D-2CAB59E095BD}" = dir=out | name=@{microsoft.bing_1.5.1.259_x64__8wekyb3d8bbwe?ms-resource://microsoft.bing/resources/app_name} | 
"{C98A8C8D-6DEB-4818-BE87-608F99F6420A}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{CDD8E311-B7FE-4EAF-870E-4AA1F9FA6FA2}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{D5D8AA81-2881-4EB7-9620-93A7A52B222D}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{D7A9AEC1-7347-444F-A5CE-775ADBE1D563}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{D7BF93E0-B075-44B4-9484-6E59707219D2}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{DA327EEE-00F9-4D85-908E-D4DCE027C9AB}" = protocol=17 | dir=in | app=d:\programme\terratec\versioncheck\versioncheck.exe | 
"{DBBEA8A6-EAE1-4817-B2CC-A3DBA1EB242E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{E15B149D-5499-4776-B5A1-5DB5EF8BD21D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{E16F8E5B-FCC0-4366-8F9B-9DB3505D15CE}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{E5D39BA6-6BC9-4018-9CBD-AA9477A638C1}" = protocol=6 | dir=in | app=d:\programme\terratec\insttool.exe | 
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{E90FCD7A-D1E5-4FBA-A45A-18A0733601DE}" = protocol=17 | dir=in | app=c:\program files (x86)\asus\ai suite ii\ai suite ii.exe | 
"{EA366C9D-4E89-4C66-AC38-D725C015B31D}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{EAAD3AD7-F2BE-4B79-AD59-619437332C9B}" = dir=out | name=@{microsoft.xboxlivegames_1.3.10.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | 
"{F1573109-C098-43A4-9F09-4C27164E2985}" = protocol=17 | dir=in | app=d:\programme\terratec\insttool.exe | 
"{F217ED78-0637-46A0-A8D3-8586D507E53D}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{F2671453-C0F0-4CC5-9667-E33391D24105}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{F50A13B3-AA86-4B67-8F7A-CCE8799C205D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{F8C150D6-E5D7-453B-BC70-2CC85503EBC2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FAA37F8F-C424-4ABC-A2AC-8A7557D21E85}" = protocol=17 | dir=in | app=c:\program files (x86)\brother\brmfl06a\faxrx.exe | 
"TCP Query User{0E1DDB2C-BECC-472D-926D-5AE526AF412F}L:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=l:\spiele\starcraft ii\versions\base15405\sc2.exe | 
"TCP Query User{3C8A0B85-C65F-4E43-82CE-EB0115C5B00B}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"TCP Query User{E790C3E2-7219-4A27-83BA-E13ED78BBD34}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"UDP Query User{9082F519-D713-473D-A5B5-C1C550F8785D}L:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=l:\spiele\starcraft ii\versions\base15405\sc2.exe | 
"UDP Query User{B9F092D8-7B02-4B13-A01A-0DA8B0C89794}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
"UDP Query User{EDDFA90B-CD13-451E-B9D1-00BB11AB35FB}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{13C9CD03-A5FE-4F50-AC8A-17B77C38CC52}" = Microsoft SQL Server 2012 Transact-SQL ScriptDom 
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)
"{27EF252D-800C-ED42-9904-459FE0046225}" = Windows Software Development Kit for Windows Store Apps DirectX x64 Remote
"{2B997E80-3BEC-3222-9114-98DBE1182B2E}" = Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{36E619BC-A234-4EC3-849B-779A7C865A45}" = Microsoft SQL Server 2012 Data-Tier App Framework 
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{55FABD1D-8BE6-4A1A-958D-52B15F1DFEF0}" = Microsoft SQL Server 2012 Transact-SQL Compiler Service 
"{5E03A267-415E-5383-FA8F-3CE4145663B9}" = AMD Catalyst Install Manager
"{5FB4C443-6BD6-1514-2717-3827D65AE6FB}" = Windows Software Development Kit DirectX x64 Remote
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{64A5D39C-95CD-4B8B-B2FA-6C713133B57F}" = Microsoft-System-CLR-Typen für SQL Server 2012 (x64)
"{66CF1DF9-1715-4325-89BC-76B1CA2EE3BE}" = Adobe Premiere Elements 11
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{6F07A6C2-9068-3673-A120-DC10012468C6}" = Microsoft Visual Studio Team Foundation Server 2012 Object Model
"{704C0303-D20C-45AF-BD2B-556EAF31BE09}" = iCloud
"{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
"{843AD902-84EA-3CE3-90F3-6866E567427D}" = Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU
"{89EE4A30-080F-2C95-6F78-C98D18FBD74D}" = AMD Accelerated Video Transcoding
"{8E4BA1E5-54E8-41F0-919B-CD875B83CFCE}" = Microsoft SQL Server 2012 Native Client 
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{90150000-002A-0000-1000-0000000FF1CE}" = Microsoft Office 64-bit Components 2013
"{90150000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2013
"{98225B15-ECF5-4645-B5AC-F8C5E869A5D5}" = Microsoft SQL Server Compact 4.0 SP1 x64 DEU 
"{987FE247-4E69-4A2E-A961-D14F901FDBF6}" = Logitech Webcam Software
"{9CF11D16-ECEB-90A5-A028-CA9E068D848B}" = ccc-utility64
"{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727
"{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727
"{AD49BD4B-6CEE-4EA2-B53E-8EB0606F1B11}" = Microsoft SQL Server 2012 Command Line Utilities 
"{D4DA7C91-A59F-4C72-BAC4-DF7C76AB1CB8}" = Microsoft SQL Server 2012 Management Objects (x64)
"{ED1EBD88-D341-321A-BB22-52D7E703E316}" = Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU
"{EF18EF0F-96D3-4A6B-9600-2197F1720A15}" = Microsoft SQL Server 2012 Express LocalDB 
"{F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}" = Intel® Trusted Connect Service Client
"097FFCDCC4FD60E5718889F1A1C7F15458FD6845" = Windows-Treiberpaket - TerraTec  (AF9035BDA) Media  (05/18/2009 8.08.18.01)
"430A686A491BA2CF5123106A821772D4CFD2F3DE" = Windows-Treiberpaket - TERRATEC  (AF15BDA) Media  (09/17/2009 6.9.28.5)
"GIMP-2_is1" = GIMP 2.8.4
"PremElem110" = Adobe Premiere Elements 11
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00C84D22-DB8F-4159-BF70-682B8EA56A1E}" = Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01)
"{017F8447-2A1D-0DDB-B5D7-CA2BFACE2886}" = CCC Help French
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{054E9A1C-3EA2-C657-E787-FD8DCF5C3D3B}" = CCC Help Czech
"{093E5DE2-3F0E-4305-905E-712231AF3731}" = Microsoft Visual C++ 2012 32bit Compilers - DEU Resources
"{0CC1DAFB-40C8-4903-953D-471E541477C7}" = WISO Steuer-Sparbuch 2012
"{11D08055-939C-432b-98C3-E072478A0CD7}" = PSE10 STI Installer
"{15B644D2-BB50-45AE-95E6-7717B15181E7}" = TERRATEC CINERGY T USB XE MKII (64 Bit)
"{1948E039-EC79-4591-951D-9867A8C14C90}" = Microsoft .NET Framework 4.5 SDK
"{1BE2AFE6-209E-3862-AE45-DA9D3D21BD65}" = Microsoft Visual Studio Express 2012 for Windows Desktop
"{1C163D33-33B3-33EB-A617-0D4D852BE8E1}" = Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727
"{1DE2BD51-0300-772D-5E18-F337D95D5687}" = CCC Help German
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F64A9D9-1014-4703-9AB3-D40186EC1FD9}" = Cinergy T Stick Driver Installation (64 Bit)
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{224E8FEB-5C1F-077F-6FC5-602AC1AE644D}" = CCC Help Danish
"{22D3A614-482C-444A-932C-9DA1B8ECDFD2}" = Elements 10 Organizer
"{23176E97-26CB-C72A-19EB-BFB21AC1D15A}" = Windows Software Development Kit DirectX x86 Remote
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{275E9C49-C72F-D754-DEB7-77F10A9C00D8}" = CCC Help Japanese
"{28C7A4BB-3966-4373-8376-C11F38290630}" = Microsoft SQL Server 2012 T-SQL Language Service 
"{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727
"{30049739-BE95-6591-B504-E6D7057D49CC}" = CCC Help Spanish
"{34D3688E-A737-44C5-9E2A-FF73618728E1}" = AI Suite II
"{362BEB3B-09C8-4DAA-87A5-EE3E667C84BA}" = Wolverine Student/Demo Software
"{3F1EB155-F96E-EB7B-2EF2-7375490E0FA9}" = CCC Help English
"{42F61556-29ED-8122-F39E-6F04EA5FF279}" = Windows Software Development Kit for Windows Store Apps DirectX x86 Remote
"{4705DBFD-9D5E-4D23-817C-8CA7359B7BDE}" = Entity Framework Designer für Visual Studio 2012 - DEU
"{49402ED1-A795-4435-A745-1B781BE621A6}" = Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B023D7B-9E67-795D-FB31-B5E1F6DCA451}" = CCC Help Italian
"{4C0B27C3-3E8F-4BD2-80FF-6E9E48EBD6D8}" = Microsoft-System-CLR-Typen für SQL Server 2012
"{555A2B41-E7C9-4389-B605-7393A5B80559}" = Microsoft Visual Studio 2012-Vorbereitung
"{55F6C486-8C75-2A72-DAFE-CE78A624C9F7}" = CCC Help Russian
"{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}" = True Image 2013
"{59F3D2AC-5F1F-4A93-8F23-6FD4F029D9A9}Visible" = True Image 2013
"{5AF23993-7152-1620-E43F-1B4542FB4F84}" = CCC Help Thai
"{5AF4B3C4-C393-48D7-AC7E-8E7615579548}" = Adobe AIR
"{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}" = Microsoft .NET Framework 4.5 Multi-Targeting Pack
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{60D5EF2A-4E0C-2C30-38F6-59C26E134F4A}" = Windows Software Development Kit
"{63326924-3CAF-C858-3A8F-8598C87019D7}" = Catalyst Control Center
"{63822E89-11AA-F8EC-D433-F72A85799EC0}" = CCC Help Greek
"{63B7AC7E-0178-4F4F-A79B-08D97ADD02D7}" = System Requirements Lab for Intel
"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{66361420-4905-AEB8-17AE-172FDD164A7E}" = CCC Help Polish
"{69ec32be-d994-44de-9eae-6d86ced6f352}" = Microsoft Visual Studio Express 2012 für Windows Desktop - DEU
"{6B7B7E62-9F56-4C87-8664-0E20F2CAB03B}" = Microsoft SQL Server 2012 Management Objects
"{6DAB46E3-D017-3E2B-85D8-F57A230384C0}" = Microsoft Visual Studio Team Foundation Server 2012 Team Explorer
"{6E839820-0BBA-4310-9D06-4463BAEA6641}" = Secure Download Manager
"{70D065C3-77E5-45E9-A75C-EEB2E84EA869}" = Erforderliche Komponenten für SSDT 
"{769F2A4B-84A3-9486-ADD2-9E5AB4B4E1E3}" = Catalyst Control Center InstallProxy
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{7A67126D-47F8-37CF-9F81-BB597A9A6C6D}" = Microsoft Visual Studio Express 2012 für Windows Desktop - DEU
"{7E48AFD3-F28A-4E54-99A8-9F3A4A27DBC4}" = Brother MFL-Pro Suite MFC-5460CN
"{80054F6B-11DA-40F6-8306-F9AB2F9074EB}" = Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU
"{800F484E-9D69-492D-B656-7BAA32586142}" = Microsoft Visual Studio 2012 Shell (Minimum)
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 5.2.0
"{820C677A-41B2-48C3-8136-FEE35A052E73}" = Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies
"{8773DD1C-5FB2-95B5-5A93-0EFEAC900A4D}" = CCC Help Norwegian
"{8BAB88C4-5024-3236-84B5-115054CD32B3}" = Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU
"{8CCBB0BF-9CC1-1A65-BB93-56012A460EE6}" = CCC Help Portuguese
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90150000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Korrekturhilfen 2013 - Deutsch
"{90150000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-0000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office*- Français
"{90150000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Italiano
"{90150000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2013
"{90150000-0054-0407-0000-0000000FF1CE}" = Microsoft Visio MUI (German) 2013
"{90150000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2013
"{90150000-00E1-0407-0000-0000000FF1CE}" = Microsoft Office OSM MUI (German) 2013
"{90849941-4C23-3054-B575-3833700DF788}" = Microsoft Help Viewer 2.0 Language Pack - DEU
"{91150000-0051-0000-0000-0000000FF1CE}" = Microsoft Visio Professional 2013
"{98B45D1C-6EB1-460D-A87D-2B60678DC105}" = Microsoft .NET Framework 4.5 SDK - DEU Lang Pack
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0A3CE05-96CB-52E9-434E-074F3BB7807E}" = CCC Help Turkish
"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help
"{A1785BD4-3486-4E7E-8074-E3FC61B8F315}" = Microsoft Visual C++ 2012 x86-x64 Compilers
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9C64319-932F-D02B-B14C-FFFC3EC49E77}" = CCC Help Chinese Standard
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Deutsch
"{B33EA6ED-6F46-3BE1-98D2-F43D2A82EE39}" = Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources
"{B362A397-B38A-3A23-A190-611F9C7EB4F9}" = Microsoft Visual C++ 2012 Core Libraries
"{B614E5FA-6DA4-45A1-845C-52F870240A89}" = PRE11 STI 64Installer
"{BD87E147-2948-4E49-9FD9-890A4AE4300A}" = Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen
"{C09DB932-7619-7B56-30E3-C0454811D6D7}" = CCC Help Korean
"{C1BE4600-7D15-3D1E-8AA2-B3241DB1D063}" = Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core
"{C22A4697-BD77-ACB1-744F-1FD0A0BFF798}" = CCC Help Swedish
"{C408E706-94A7-454C-8B52-538AA6CBD0FB}" = True Image 2013 Plus Pack
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D11F66FF-82B3-DDB8-1146-525370552BE1}" = Windows Software Development Kit for Windows Store Apps
"{D4B457B2-260F-C561-CA87-703BD3B724CA}" = Catalyst Control Center Graphics Previews Common
"{D4D065E1-3ABF-41D0-B385-FC6F027F4D00}" = Elements 11 Organizer
"{D6CDB506-297D-AE70-0EF6-DE5185F961BE}" = CCC Help Chinese Traditional
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver
"{E511AE89-54BB-481D-BC4A-1B1F1E1B7693}" = Microsoft SQL Server Data Tools - DEU (11.1.20828.01)
"{EC5F4C1B-F838-4CB7-8561-8F809296428B}" = TomTom HOME
"{ECFD508E-68A2-91B2-46DD-1D03D783D94B}" = Catalyst Control Center Localization All
"{EDE361D5-35A5-DA7D-3462-C3DABD24029B}" = CCC Help Hungarian
"{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}" = Adobe Photoshop Elements 10
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F1E7DD6A-AE2D-D706-BEB3-937F76CA6AE9}" = CCC Help Finnish
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F56F54DD-BCB2-1221-2CB7-E983A5CF9D15}" = CCC Help Dutch
"{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}" = Microsoft SQL Server 2012 Data-Tier App Framework 
"{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) SDK for OpenCL - CPU Only Runtime Package
"{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727
"{FEB375AB-6EEC-3929-8FAF-188ED81DD8B5}" = Microsoft Help Viewer 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 10" = Adobe Photoshop Elements 10
"Alf-BanCo3_is1" = ALF-BanCo 3
"Any Video Converter 5_is1" = Any Video Converter 5 5.0.4
"Avira AntiVir Desktop" = Avira Free Antivirus
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"DVBViewer TERRATEC Edition_is1" = DVBViewer TERRATEC Edition
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FileZilla Client" = FileZilla Client 3.6.0.2
"Freemake Video Converter_is1" = Freemake Video Converter Version 4.0.2
"Google Chrome" = Google Chrome
"HD Tune_is1" = HD Tune 2.55
"ImgBurn" = ImgBurn
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"Microsoft Help Viewer 2.0" = Microsoft Help Viewer 2.0
"Microsoft Help Viewer 2.0 Language Pack - DEU" = Microsoft Help Viewer 2.0 Language Pack - DEU
"Mozilla Firefox 22.0 (x86 de)" = Mozilla Firefox 22.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Notepad++" = Notepad++
"Office15.VISPROR" = Microsoft Visio Professional 2013
"PS3 Media Server" = PS3 Media Server
"Rename Master_is1" = Rename Master
"Steam App 8930" = Sid Meier's Civilization V
"TeamViewer 8" = TeamViewer 8
"TreeSize Free_is1" = TreeSize Free V2.7
"UseNeXT by Tangysoft_is1" = UseNeXT by Tangysoft
"VirtualCloneDrive" = VirtualCloneDrive
"VLC media player" = VLC media player 2.0.7
"WinGrub" = WinGrub
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-1471377960-4142091505-4027430203-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"@@__UNKNOWN__@@SanDiskSecureAccess_Manager.exe" = SanDiskSecureAccess_Manager.exe
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 05.07.2013 01:13:46 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
 Zeitstempel: 0x50223ca5  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
 Zeitstempel: 0x515fac6e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0005221e  ID des fehlerhaften
 Prozesses: 0x1a58  Startzeit der fehlerhaften Anwendung: 0x01ce793e381ee59a  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: aab4281d-e531-11e2-be9e-3085a9eac743
Vollständiger
 Name des fehlerhaften Pakets:   Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist: 
 
Error - 05.07.2013 01:18:30 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
 Zeitstempel: 0x50223ca5  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
 Zeitstempel: 0x515fac6e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0005221e  ID des fehlerhaften
 Prozesses: 0x1b88  Startzeit der fehlerhaften Anwendung: 0x01ce793eee3c0266  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: 54300198-e532-11e2-be9f-3085a9eac743
Vollständiger
 Name des fehlerhaften Pakets:   Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist: 
 
Error - 05.07.2013 01:23:44 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420,
 Zeitstempel: 0x505a9152  Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579,
 Zeitstempel: 0x51635a2e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000000000062a63
ID
 des fehlerhaften Prozesses: 0x1774  Startzeit der fehlerhaften Anwendung: 0x01ce793fd0633e3b
Pfad
 der fehlerhaften Anwendung: C:\Windows\System32\WWAHost.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\winstore\WinStoreUI.dll  Berichtskennung: 0f36c986-e533-11e2-be9f-3085a9eac743
Vollständiger
 Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy  Anwendungs-ID,
 die relativ zum fehlerhaften Paket ist: Windows.Store
 
Error - 05.07.2013 01:23:58 | Computer Name = Dennis-PC | Source = Microsoft-Windows-Immersive-Shell | ID = 2486
Description = Die App „winstore_cw5n1h2txyewy!Windows.Store“ wurde nicht innerhalb
 der vorgesehenen Zeit gestartet.
 
Error - 05.07.2013 01:24:06 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420,
 Zeitstempel: 0x505a9152  Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579,
 Zeitstempel: 0x51635a2e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000000000062a63
ID
 des fehlerhaften Prozesses: 0x1668  Startzeit der fehlerhaften Anwendung: 0x01ce793fddb0f701
Pfad
 der fehlerhaften Anwendung: C:\Windows\System32\WWAHost.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\winstore\WinStoreUI.dll  Berichtskennung: 1c57a70f-e533-11e2-be9f-3085a9eac743
Vollständiger
 Name des fehlerhaften Pakets: winstore_1.0.0.0_neutral_neutral_cw5n1h2txyewy  Anwendungs-ID,
 die relativ zum fehlerhaften Paket ist: Windows.Store
 
Error - 05.07.2013 01:45:29 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
 Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
 Zeile 21.  Ungültige XML-Syntax.
 
Error - 05.07.2013 01:46:31 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
 Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
 Zeile 21.  Ungültige XML-Syntax.
 
Error - 05.07.2013 21:00:41 | Computer Name = Dennis-PC | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\SysWOW64\SmartUI2.ocx".
 Fehler in Manifest- oder Richtliniendatei "C:\Windows\SysWOW64\SmartUI2.ocx" in
 Zeile 21.  Ungültige XML-Syntax.
 
Error - 09.07.2013 03:18:05 | Computer Name = Dennis-PC | Source = Perflib | ID = 1023
Description = 
 
Error - 09.07.2013 03:19:12 | Computer Name = Dennis-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1,
 Zeitstempel: 0x50223ca5  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578,
 Zeitstempel: 0x515fac6e  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0005221e  ID des fehlerhaften
 Prozesses: 0x1864  Startzeit der fehlerhaften Anwendung: 0x01ce7c74731e3aa0  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelp.exe
Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: da38ec76-e867-11e2-bea0-3085a9eac743
Vollständiger
 Name des fehlerhaften Pakets:   Anwendungs-ID, die relativ zum fehlerhaften Paket
 ist: 
 
[ System Events ]
Error - 09.07.2013 01:48:18 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
 
Error - 09.07.2013 01:48:25 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: Microsoft.MicrosoftSolitaireCollection
 
Error - 09.07.2013 01:49:24 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
 
Error - 09.07.2013 01:49:24 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
 
Error - 09.07.2013 02:05:42 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
 
Error - 09.07.2013 02:05:42 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo
 
Error - 09.07.2013 02:06:16 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
 
Error - 09.07.2013 02:06:16 | Computer Name = Dennis-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps
 
Error - 09.07.2013 03:16:30 | Computer Name = Dennis-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 09.07.2013 06:59:53 | Computer Name = Dennis-PC | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
 
< End of report >
         
Danke!

Gruß
Dennis
__________________
Gruß
Dennis

Alt 12.07.2013, 08:13   #2
schrauber
/// the machine
/// TB-Ausbilder
 

Delta Search Toolbar - Standard

Delta Search Toolbar



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 12.07.2013, 09:11   #3
masterds
 
Delta Search Toolbar - Standard

Delta Search Toolbar



Hier die Logs:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 09:08:44
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(PortableApps.com) C:\Users\Dennis\Desktop\EraserPortable\EraserPortable.exe
(The Eraser Project) C:\Users\Dennis\Desktop\EraserPortable\App\Eraser\Eraser.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE
(ALF AG) C:\Program Files (x86)\ALFBanCo3\AlfBanCo3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKLM-x32\...\Runonce: [ Malwarebytes Anti-Malware ] - D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [x]
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\RunOnce: [FlashPlayerUpdate] - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_7_700_224_Plugin.exe -update plugin [814472 2013-06-23] (Adobe Systems Incorporated)
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE" 
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938"
CHR DefaultSearchURL: (Delta Search) - hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2013) - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech                  )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech                  )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-09 20:41 - 2013-07-12 06:48 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:36 - 14320640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 19230720 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:30 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-23 18:22 - 2013-04-29 00:30 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-06-23 18:22 - 2013-04-29 00:28 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-23 18:22 - 2013-04-29 00:27 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-23 18:22 - 2013-04-29 00:27 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-23 18:22 - 2013-04-29 00:27 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

==================== One Month Modified Files and Folders =======

2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 09:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 08:46 - 2012-12-18 19:28 - 01210830 _____ C:\Windows\WindowsUpdate.log
2013-07-12 08:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 08:37 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 07:32 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 07:32 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-12 06:48 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 02:00 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-11 23:59 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 23:40 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-11 07:32 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-11 07:32 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-11 07:32 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:17 - 2012-12-18 19:21 - 00133176 _____ C:\Windows\PFRO.log
2013-07-09 09:17 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:16 - 2012-07-26 07:26 - 06029312 ___SH C:\Windows\system32\config\BBI
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:44 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 18:37 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-06-23 18:28 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-06-23 18:26 - 2012-12-18 20:24 - 75825640 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-06 03:00

==================== End Of Log ============================
         
--- --- ---


Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-07-2013 01
Ran by Dennis at 2013-07-12 09:09:09
Running from C:\Users\Dennis\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
7-Zip 9.20 (x64 edition) (Version: 9.20.00.0)
Adobe AIR (x32 Version: 3.6.0.6090)
Adobe Community Help (x32 Version: 3.5.23)
Adobe Flash Player 11 Plugin (x32 Version: 11.7.700.224)
Adobe Photoshop Elements 10 (x32 Version: 10.0)
Adobe Premiere Elements 11 (Version: 11.0)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
AI Suite II (x32 Version: 2.01.01)
ALF-BanCo 3 (x32)
AMD Accelerated Video Transcoding (Version: 12.5.100.21219)
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
Any Video Converter 5 5.0.4 (x32)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Apple Software Update (x32 Version: 2.1.3.127)
Asmedia ASM104x USB 3.0 Host Controller Driver (x32 Version: 1.16.2.0)
Avira Free Antivirus (x32 Version: 13.0.0.3737)
Bonjour (Version: 3.0.0.10)
Brother MFL-Pro Suite MFC-5460CN (x32 Version: 1.0.3.0)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center InstallProxy (x32 Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (x32 Version: 2012.1219.1521.27485)
CCC Help Chinese Standard (x32 Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (x32 Version: 2012.1219.1520.27485)
CCC Help Czech (x32 Version: 2012.1219.1520.27485)
CCC Help Danish (x32 Version: 2012.1219.1520.27485)
CCC Help Dutch (x32 Version: 2012.1219.1520.27485)
CCC Help English (x32 Version: 2012.1219.1520.27485)
CCC Help Finnish (x32 Version: 2012.1219.1520.27485)
CCC Help French (x32 Version: 2012.1219.1520.27485)
CCC Help German (x32 Version: 2012.1219.1520.27485)
CCC Help Greek (x32 Version: 2012.1219.1520.27485)
CCC Help Hungarian (x32 Version: 2012.1219.1520.27485)
CCC Help Italian (x32 Version: 2012.1219.1520.27485)
CCC Help Japanese (x32 Version: 2012.1219.1520.27485)
CCC Help Korean (x32 Version: 2012.1219.1520.27485)
CCC Help Norwegian (x32 Version: 2012.1219.1520.27485)
CCC Help Polish (x32 Version: 2012.1219.1520.27485)
CCC Help Portuguese (x32 Version: 2012.1219.1520.27485)
CCC Help Russian (x32 Version: 2012.1219.1520.27485)
CCC Help Spanish (x32 Version: 2012.1219.1520.27485)
CCC Help Swedish (x32 Version: 2012.1219.1520.27485)
CCC Help Thai (x32 Version: 2012.1219.1520.27485)
CCC Help Turkish (x32 Version: 2012.1219.1520.27485)
ccc-utility64 (Version: 2012.1219.1521.27485)
Cinergy T Stick Driver Installation (64 Bit) (x32 Version: 8.08.18.01)
Definition Update for Microsoft Office 2013 (KB2760587) 32-Bit Edition (x32)
dows-Treiberpaket - TerraTec  (AF9035BDA) Media  (05/18/2009 8.08.18.01) (Version: 05/18/2009 8.08.18.01)
DVBViewer TERRATEC Edition (x32)
Elements 10 Organizer (x32 Version: 10.0)
Elements 11 Organizer (x32 Version: 11.0)
Entity Framework Designer für Visual Studio 2012 - DEU (x32 Version: 11.1.20810.00)
Erforderliche Komponenten für SSDT  (x32 Version: 11.0.2100.60)
FileZilla Client 3.6.0.2 (x32 Version: 3.6.0.2)
Freemake Video Converter Version 4.0.2 (x32 Version: 4.0.2)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 28.0.1500.71)
Google Update Helper (x32 Version: 1.3.21.153)
HD Tune 2.55 (x32)
iCloud (Version: 2.1.2.8)
ImgBurn (x32 Version: 2.5.7.0)
Intel(R) Management Engine Components (x32 Version: 8.1.0.1252)
Intel(R) Processor Graphics (x32 Version: 9.17.10.2875)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (x32 Version: 2.0.0.37149)
Intel® Trusted Connect Service Client (Version: 1.24.388.1)
IrfanView (remove only) (x32 Version: 4.35)
iTunes (Version: 11.0.4.4)
Java 7 Update 17 (x32 Version: 7.0.170)
Java Auto Updater (x32 Version: 2.1.9.0)
Logitech Webcam Software (Version: 12.10.1113)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4 Multi-Targeting Pack (x32 Version: 4.0.30319)
Microsoft .NET Framework 4.5 Multi-Targeting Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK - DEU Lang Pack (x32 Version: 4.5.50709)
Microsoft .NET Framework 4.5 SDK (x32 Version: 4.5.50709)
Microsoft Help Viewer 2.0 (x32 Version: 2.0.50727)
Microsoft Help Viewer 2.0 Language Pack - DEU (x32 Version: 2.0.50727)
Microsoft NuGet - Visual Studio Express 2012 for Windows Desktop (x32 Version: 2.0.30717.9005)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 64-bit Components 2013 (Version: 15.0.4420.1017)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Korrekturhilfen 2013 - Deutsch (x32 Version: 15.0.4420.1017)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office OSM MUI (German) 2013 (x32 Version: 15.0.4420.1017)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2013 (x32 Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Proofing Tools 2013 - English (x32 Version: 15.0.4420.1017)
Microsoft Office Proofing Tools 2013 - Italiano (x32 Version: 15.0.4420.1017)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared 64-bit MUI (German) 2013 (Version: 15.0.4420.1017)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2013 (x32 Version: 15.0.4420.1017)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft SQL Server 2012 Command Line Utilities  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Data-Tier App Framework  (Version: 11.0.2316.0)
Microsoft SQL Server 2012 Data-Tier App Framework  (x32 Version: 11.0.2316.0)
Microsoft SQL Server 2012 Express LocalDB  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x32 Version: 11.0.2100.60)
Microsoft SQL Server 2012 Management Objects (x64) (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Native Client  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL Compiler Service  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 Transact-SQL ScriptDom  (Version: 11.0.2100.60)
Microsoft SQL Server 2012 T-SQL Language Service  (x32 Version: 11.0.2100.60)
Microsoft SQL Server Compact 4.0 SP1 x64 DEU  (Version: 4.0.8876.1)
Microsoft SQL Server Data Tools - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft SQL Server Data Tools Build Utilities - DEU (11.1.20828.01) (x32 Version: 11.1.20828.01)
Microsoft Visio MUI (German) 2013 (x32 Version: 15.0.4420.1017)
Microsoft Visio Professional 2013 (x32 Version: 15.0.4420.1017)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Microsoft Visual C++ 2012 32bit Compilers - DEU Resources (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 Core Libraries (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Debug Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Debug Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727)
Microsoft Visual C++ 2012 x86-x64 Compilers (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Express Prerequisites x64 - DEU (Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell (Minimum) Interop Assemblies (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Shell-(Mindest)-Ressourcen (x32 Version: 11.0.50727)
Microsoft Visual Studio 2012 Tools für SQL Server Compact 4.0 SP1 DEU (x32 Version: 4.0.8876.1)
Microsoft Visual Studio 2012-Vorbereitung (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 for Windows Desktop (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Express 2012 für Windows Desktop - DEU (x32 Version: 11.0.50727.42)
Microsoft Visual Studio Team Foundation Server 2012 Object Model (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Object Model Language Pack - DEU (Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer (x32 Version: 11.0.50727)
Microsoft Visual Studio Team Foundation Server 2012 Team Explorer Language Pack - DEU (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer Core (x32 Version: 11.0.50727)
Microsoft Visual Studio Ultimate 2012 XAML UI Designer deu Resources (x32 Version: 11.0.50727)
Microsoft-System-CLR-Typen für SQL Server 2012 (x32 Version: 11.0.2100.60)
Microsoft-System-CLR-Typen für SQL Server 2012 (x64) (Version: 11.0.2100.60)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
Notepad++ (x32 Version: 6.2.3)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (x32 Version: 15.0.4420.1017)
PDF24 Creator 5.2.0 (x32)
Platform (x32 Version: 1.39)
PRE11 STI 64Installer (x32 Version: 11.0)
PS3 Media Server (x32 Version: 1.72.0)
PSE10 STI Installer (x32 Version: 10.0)
Rename Master (x32)
SanDiskSecureAccess_Manager.exe (HKCU Version: 1.1.19755)
Secure Download Manager (x32 Version: 3.1.01)
Sid Meier's Civilization V (x32)
Steam (x32 Version: 1.0.0.0)
System Requirements Lab for Intel (x32 Version: 4.5.11.0)
TeamViewer 8 (x32 Version: 8.0.16642)
TERRATEC CINERGY T USB XE MKII (64 Bit) (x32 Version: 6.09.28.05)
TerraTec Home Cinema (x32 Version: 6.25.6)
TomTom HOME (x32 Version: 2.9.5)
TomTom HOME Visual Studio Merge Modules (x32 Version: 1.0.2)
TreeSize Free V2.7 (x32 Version: 2.7)
True Image 2013 (x32 Version: 16.0.5551)
True Image 2013 Plus Pack (x32 Version: 16.0.5551)
Update for  (KB2504637) (x32 Version: 1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft Excel 2013 (KB2760339) 32-Bit Edition (x32)
Update for Microsoft Lync 2013 (KB2768004) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596802) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2726954) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2726961) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2726996) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2737954) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2752025) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2752094) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2752101) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2760224) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2760538) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2760610) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2767845) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2767860) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2768016) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2810010) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2810014) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2810017) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2810018) 32-Bit Edition (x32)
Update for Microsoft Office 2013 (KB2817320) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32)
Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817327) 32-Bit Edition (x32)
Update for Microsoft OneNote 2013 (KB2760334) 32-Bit Edition (x32)
Update for Microsoft Outlook 2013 (KB2810015) 32-Bit Edition (x32)
Update for Microsoft SkyDrive Pro (KB2767865) 32-Bit Edition (x32)
Update for Microsoft SkyDrive Pro (KB2810019) 32-Bit Edition (x32)
Update for Microsoft Visio 2013 (KB2810008) 32-Bit Edition (x32)
Update for Microsoft Visio Viewer 2013 (KB2768338) 32-Bit Edition (x32)
Update for Microsoft Visual Studio 2012 (KB2781514) (x32 Version: 11.0.51219)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Outlook 2007 Help (KB963677) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
UseNeXT by Tangysoft (x32)
VIA Plattform-Geräte-Manager (x32 Version: 1.39)
VirtualCloneDrive (x32)
VLC media player 2.0.7 (x32 Version: 2.0.7)
Windows Software Development Kit (x32 Version: 8.59.25584)
Windows Software Development Kit DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit DirectX x86 Remote (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps (x32 Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x64 Remote (Version: 8.59.25584)
Windows Software Development Kit for Windows Store Apps DirectX x86 Remote (x32 Version: 8.59.25584)
Windows-Treiberpaket - TERRATEC  (AF15BDA) Media  (09/17/2009 6.9.28.5) (Version: 09/17/2009 6.9.28.5)
WinGrub (x32)
WISO Steuer-Sparbuch 2012 (x32 Version: 19.00.7303)
Wolverine Student/Demo Software (x32 Version: 1.0.0)

==================== Restore Points  =========================


==================== Hosts content: ==========================

2012-07-26 07:26 - 2013-02-20 09:09 - 00000920 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 activation.acronis.com


==================== Scheduled Tasks (whitelisted) =============

Task: {10D85952-E3F6-47A1-96CF-5E1C2D874EA6} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2012-07-26] (Microsoft Corporation)
Task: {13A2AC02-B682-48CC-9155-2E2673580117} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical
Task: {17644F17-DC4C-4AC8-9444-7AAA52EB5CDC} - System32\Tasks\Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler
Task: {1AABBAD6-DE4A-420F-88BD-1D23C503D355} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUSessionConnect
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {1DB7C2F1-876C-4F24-AD17-8428211113F9} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents
Task: {1F624D14-7E2B-4B06-91BC-87FAA59768D6} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUScheduledInstall
Task: {214B24F4-FEB4-4C59-AF1F-70136065199C} - System32\Tasks\Microsoft\Windows\Shell\IndexerAutomaticMaintenance
Task: {23700E5C-0E77-499D-908A-415D5C6252F4} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Group Policy
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {29CB5240-0456-424E-A874-20E178FF527D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2C6B9EA8-7F5A-4ABA-BF96-8D352D02A743} - System32\Tasks\Microsoft\Windows\Device Setup\Metadata Refresh
Task: {2E030FA7-3D7C-4E1D-8CFE-56ADB26FD402} - System32\Tasks\Microsoft\Windows\PI\Sqm-Tasks
Task: {3054485A-F517-4E95-9977-4DD827B1E9B3} - System32\Tasks\Microsoft\Windows\WS\Badge Update
Task: {34DB7012-E2C5-47B5-8A3A-1BA7E5F1CFC8} - System32\Tasks\Microsoft\Windows\Servicing\StartComponentCleanup
Task: {378401BA-A703-444A-A79C-3C47AD2DC5B6} - System32\Tasks\Microsoft\Windows\TaskScheduler\Maintenance Configurator
Task: {3AE164E7-30CD-40BC-9422-3EC7A5618965} - System32\Tasks\Microsoft\Windows\WS\WSTask
Task: {3C490ABD-D849-41AF-9AC4-87DD759B0996} - System32\Tasks\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem
Task: {4073C1B3-6E16-4AA8-B7F3-C6A6D35D5071} - System32\Tasks\Microsoft\Windows\TPM\Tpm-Maintenance
Task: {44B3F1B8-5943-4072-8D8C-A9484676AC44} - System32\Tasks\Microsoft\Windows\Live\Roaming\SynchronizeWithStorage
Task: {483A8F5C-5D26-44B5-B49E-AF6741D1BBEB} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2012-07-26] (Microsoft Corporation)
Task: {4B952129-9AE9-41A3-BE2B-8AD2E06F66B6} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskLogon
Task: {4E38299F-33BB-4CE7-970F-DAA74623186C} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe [2012-08-15] (Microsoft Corporation)
Task: {5755E746-D7ED-4C20-A472-66C11834CDE4} - System32\Tasks\Microsoft\Windows\TaskScheduler\Manual Maintenance
Task: {5C4EFB77-EFA6-45DF-A373-D795C0725BFF} - System32\Tasks\Microsoft\Windows\Plug and Play\Device Install Reboot Required
Task: {627441F3-8526-4B62-BF9A-1A3EA414E71A} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2012-07-26] (Microsoft Corporation)
Task: {666D05C3-1A00-45DD-B78D-99FB5845DE9E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.)
Task: {6E9DE125-5583-4031-B572-FEE48F25CFFF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2012-09-20] (Microsoft Corporation)
Task: {6FDDEA7C-6310-428D-AEB2-54FFC72811EF} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319
Task: {74096F94-B654-4DB0-96F5-3C3408B92FE3} - System32\Tasks\Microsoft\Windows\PI\Secure-Boot-Update
Task: {7794C94F-3023-4529-9B15-88BD68F0102F} - System32\Tasks\ASUS\ASUS Network iControl Help Execute => C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetSvcHelpEntry.exe [2012-05-02] (ASUSTeK Computer Inc.)
Task: {7D9A9A1C-499C-40A6-8F8A-5BCC4CC9A87C} - System32\Tasks\Microsoft\Windows\TaskScheduler\Regular Maintenance
Task: {845CB020-68B5-4C6B-9876-7BEC7B3E27AC} - System32\Tasks\Microsoft\Windows\TaskScheduler\Idle Maintenance
Task: {87354DAA-66DF-4B41-9346-15958D96E1D2} - System32\Tasks\Microsoft\Windows\FileHistory\File History (maintenance mode)
Task: {875C10DC-AA06-4867-B17A-8F5AB4D58A4E} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-dennis@stumpe-home.de => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {8CE29BFF-815C-4E3B-AAB1-106ED9279CA8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe No File
Task: {8DFAABBF-F4E0-42C2-ABED-0CB161AC2F97} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {8E11FF85-B8CC-4054-AB3D-6B53B40A475B} - System32\Tasks\Microsoft\Windows\WindowsUpdate\AUFirmwareInstall
Task: {921A1D4E-32FB-46D7-B6C0-6F467884074D} - System32\Tasks\Microsoft\Windows\WS\Sync Licenses
Task: {925B8D6C-EC0A-405A-AAFD-C46D38D39F80} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-04-01] (Google Inc.)
Task: {9479EF8E-11D4-41B3-9783-CC65070D592D} - System32\Tasks\Microsoft\Windows\Time Synchronization\ForceSynchronizeTime
Task: {94DCF254-64FB-4C4E-8E12-5F4055C10C2A} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64
Task: {989A7C6D-BE82-4C3C-AF96-6116039E336B} - System32\Tasks\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => C:\Windows\System32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {A800277E-E202-4492-AD38-3312641CBC04} - System32\Tasks\Microsoft\Windows\Live\Roaming\MaintenanceTask
Task: {AB62FA47-2C99-44B1-A5D0-D4161423BE43} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyRefresh
Task: {AC6259DE-AC59-459E-849E-6ADFFD1ADE63} - System32\Tasks\Microsoft\Windows\Shell\CreateObjectTask
Task: {AD7A143C-F244-4916-8B98-236776C8B313} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2012-03-13] (ASUSTeK Computer Inc.)
Task: {AEB0B5BD-B9E5-458A-898A-E559BD9EB51B} - System32\Tasks\Microsoft\Windows\SettingSync\BackgroundUploadTask
Task: {AF4D8CDD-F3C7-4973-A6E4-C142F48FE0BB} - System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
Task: {AF549BD8-337C-4BF7-8681-36A182E30507} - System32\Tasks\Microsoft\Windows\Chkdsk\ProactiveScan
Task: {B58623CD-C71E-44D5-857D-13F29F5C0AB4} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [2011-09-10] ()
Task: {BC76AEF7-2CF0-4EB6-B65B-A8803E0B5E12} - System32\Tasks\Microsoft\Windows\AppID\SmartScreenSpecific
Task: {C1ACCD1E-4385-4FB2-B5E4-7F2A57A626A2} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan
Task: {C463FD1E-31C7-4C20-AB65-08E514CA152D} - System32\Tasks\Microsoft\Windows\IME\SQM data sender
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {CD1054FF-8005-4904-8B9C-436EAB1E2021} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTaskNetwork
Task: {DBCF6E1B-CE0A-441E-B7A5-219C8BE50C65} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical
Task: {DBD7DFB6-99F3-40A3-BF05-9B41D524F0AD} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start => C:\Windows\system32\sc.exe [2012-07-26] (Microsoft Corporation)
Task: {DECE5921-598D-454B-9A04-B2DE95EFC1B3} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery
Task: {E0069CF7-F17E-497F-BB56-7696D8C40E8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {E4DFE66F-E089-4CC3-A70F-957223D565F4} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask
Task: {E8DAA09B-DF2A-4951-9134-6FA9587793F9} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2012-09-20] (Microsoft Corporation)
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => C:\Windows\system32\rundll32.exe [2012-07-26] (Microsoft Corporation)
Task: {ED0C1F69-C3A2-41EA-B8C3-3F0D83A1F6C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM
Task: {F2C41250-060F-4340-BB9B-1E803CCED374} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-23] (Adobe Systems Incorporated)
Task: {FFE3FD50-646E-4A64-913B-23C4187E6025} - System32\Tasks\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (07/09/2013 09:19:12 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005221e
ID des fehlerhaften Prozesses: 0x1864
Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0
Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1
Pfad des fehlerhaften Moduls: NetSvcHelp.exe2
Berichtskennung: NetSvcHelp.exe3
Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5

Error: (07/09/2013 09:18:05 AM) (Source: Perflib) (User: )
Description: rdyboost4

Error: (07/06/2013 03:00:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/05/2013 07:46:31 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/05/2013 07:45:29 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "1". Fehler in Manifest- oder Richtliniendatei "2" in Zeile 3.
Ungültige XML-Syntax.

Error: (07/05/2013 07:24:06 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420, Zeitstempel: 0x505a9152
Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579, Zeitstempel: 0x51635a2e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000062a63
ID des fehlerhaften Prozesses: 0x1668
Startzeit der fehlerhaften Anwendung: 0xWWAHost.exe0
Pfad der fehlerhaften Anwendung: WWAHost.exe1
Pfad des fehlerhaften Moduls: WWAHost.exe2
Berichtskennung: WWAHost.exe3
Vollständiger Name des fehlerhaften Pakets: WWAHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WWAHost.exe5

Error: (07/05/2013 07:23:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (User: DENNIS-PC)
Description: Die App „winstore_cw5n1h2txyewy!Windows.Store“ wurde nicht innerhalb der vorgesehenen Zeit gestartet.

Error: (07/05/2013 07:23:44 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: WWAHost.exe, Version: 6.2.9200.16420, Zeitstempel: 0x505a9152
Name des fehlerhaften Moduls: WinStoreUI.dll, Version: 6.2.9200.16579, Zeitstempel: 0x51635a2e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000062a63
ID des fehlerhaften Prozesses: 0x1774
Startzeit der fehlerhaften Anwendung: 0xWWAHost.exe0
Pfad der fehlerhaften Anwendung: WWAHost.exe1
Pfad des fehlerhaften Moduls: WWAHost.exe2
Berichtskennung: WWAHost.exe3
Vollständiger Name des fehlerhaften Pakets: WWAHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: WWAHost.exe5

Error: (07/05/2013 07:18:30 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005221e
ID des fehlerhaften Prozesses: 0x1b88
Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0
Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1
Pfad des fehlerhaften Moduls: NetSvcHelp.exe2
Berichtskennung: NetSvcHelp.exe3
Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5

Error: (07/05/2013 07:13:46 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: NetSvcHelp.exe, Version: 1.0.0.1, Zeitstempel: 0x50223ca5
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16578, Zeitstempel: 0x515fac6e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0005221e
ID des fehlerhaften Prozesses: 0x1a58
Startzeit der fehlerhaften Anwendung: 0xNetSvcHelp.exe0
Pfad der fehlerhaften Anwendung: NetSvcHelp.exe1
Pfad des fehlerhaften Moduls: NetSvcHelp.exe2
Berichtskennung: NetSvcHelp.exe3
Vollständiger Name des fehlerhaften Pakets: NetSvcHelp.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: NetSvcHelp.exe5


System errors:
=============
Error: (07/09/2013 00:59:53 PM) (Source: volsnap) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (07/09/2013 09:16:30 AM) (Source: DCOM) (User: DENNIS-PC)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (07/09/2013 08:06:16 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps

Error: (07/09/2013 08:06:16 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps

Error: (07/09/2013 08:05:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo

Error: (07/09/2013 08:05:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo

Error: (07/09/2013 07:49:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo

Error: (07/09/2013 07:49:24 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.ZuneVideo

Error: (07/09/2013 07:48:25 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: Microsoft.MicrosoftSolitaireCollection

Error: (07/09/2013 07:48:18 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070005 fehlgeschlagen: microsoft.windowscommunicationsapps


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-06-03 14:20:38.620
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-24 13:22:03.978
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-22 15:37:09.459
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-22 15:22:46.831
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-22 14:08:04.061
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-22 13:44:37.095
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-21 15:33:11.344
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-21 14:36:08.592
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-21 11:28:48.070
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.

  Date: 2013-05-21 11:14:02.776
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\l3codeca.acm because the set of per-page image hashes could not be found on the system.


==================== Memory info =========================== 

Percentage of memory in use: 36%
Total physical RAM: 8144.86 MB
Available physical RAM: 5143.29 MB
Total Pagefile: 12740.86 MB
Available Pagefile: 7232.28 MB
Total Virtual: 8192 MB
Available Virtual: 8191.77 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:59.28 GB) (Free:14.5 GB) NTFS (Disk=0 Partition=2)
Drive d: (Progs) (Fixed) (Total:70.05 GB) (Free:53.85 GB) NTFS (Disk=1 Partition=1)
Drive e: (Eigene Dateien) (Fixed) (Total:200 GB) (Free:15.96 GB) NTFS (Disk=6 Partition=2)
Drive f: (Filme) (Fixed) (Total:350.51 GB) (Free:27.02 GB) NTFS (Disk=6 Partition=1)
Drive g: (Backup) (Fixed) (Total:381 GB) (Free:14.16 GB) NTFS (Disk=6 Partition=3)
Drive h: (Images_Downloads) (Fixed) (Total:295.76 GB) (Free:41.22 GB) NTFS (Disk=1 Partition=2)
Drive i: () (Removable) (Total:14.89 GB) (Free:14.89 GB) FAT32 (Disk=2 Partition=1)
Drive l: (Spiele) (Fixed) (Total:99.89 GB) (Free:29.33 GB) NTFS (Disk=1 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 60 GB) (Disk ID: E89C5BCF)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=59 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4A472E94)
Partition 1: (Active) - (Size=70 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=100 GB) - (Type=OF Extended)
Partition 3: (Not Active) - (Size=296 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (Size: 15 GB) (Disk ID: 00000000)
Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)

========================================================
Disk: 6 (Size: 932 GB) (Disk ID: 44FDFE06)
Partition 1: (Active) - (Size=351 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=200 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=381 GB) - (Type=OF Extended)

==================== End Of Log ============================
         
__________________
__________________

Alt 12.07.2013, 09:37   #4
schrauber
/// the machine
/// TB-Ausbilder
 

Delta Search Toolbar - Standard

Delta Search Toolbar



Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 12.07.2013, 12:14   #5
masterds
 
Delta Search Toolbar - Standard

Delta Search Toolbar



Hallo!
Hier die Logs.

AdwCleaner:
Code:
ATTFilter
# AdwCleaner v2.305 - Datei am 12/07/2013 um 11:33:07 erstellt
# Aktualisiert am 11/07/2013 von Xplode
# Betriebssystem : Windows 8 Pro  (64 bits)
# Benutzer : Dennis - DENNIS-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Dennis\Desktop\adwcleaner (1).exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****


***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Freemake Video Converter_is1

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16537

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v28.0.1500.71

Datei : C:\Users\Dennis\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.39] : icon_url = "hxxp://www.yd.delta-search.com/favicon.ico",
Gelöscht [l.42] : keyword = "yd.delta-search.com",
Gelöscht [l.46] : search_url = "hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9E[...]
Gelöscht [l.2717] : urls_to_restore_on_startup = [ "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A[...]

*************************

AdwCleaner[R1].txt - [6837 octets] - [09/07/2013 09:14:46]
AdwCleaner[S1].txt - [6654 octets] - [09/07/2013 09:15:37]
AdwCleaner[S2].txt - [1437 octets] - [12/07/2013 11:33:07]

########## EOF - C:\AdwCleaner[S2].txt - [1497 octets] ##########
         
JRT:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.0.7 (07.11.2013:1)
OS: Windows 8 Pro x64
Ran by Dennis on 12.07.2013 at 11:47:20,18
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [File] C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\invalidprefs.js
Emptied folder: C:\Users\Dennis\AppData\Roaming\mozilla\firefox\profiles\kv8pufq0.default\minidumps [4 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.07.2013 at 11:49:53,65
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 12:06:01
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\LogonUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rdpclip.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Don HO don.h@free.fr) C:\Program Files (x86)\Notepad++\notepad++.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE" 
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox

Chrome: 
=======
CHR HomePage: hxxp://google.de/
CHR RestoreOnStartup: "hxxp://www.yd.delta-search.com/?babsrc=HP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938"
CHR DefaultSearchURL: (Delta Search) - hxxp://www.yd.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C983085A9EAC743&affID=121563&tt=040713_rdrctful&tsp=4938
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.71\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U17) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_180.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.170.2) - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office 2013) - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech                  )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech                  )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:33 - 2013-07-12 11:34 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-10 17:14 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 17:14 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 17:14 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:14 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:14 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:14 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:14 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:14 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:14 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 20:41 - 2013-07-12 10:24 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

==================== One Month Modified Files and Folders =======

2013-07-12 12:02 - 2012-12-18 19:28 - 01563051 _____ C:\Windows\WindowsUpdate.log
2013-07-12 12:00 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 11:53 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:45 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-12 11:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:44 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-12 11:44 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 11:42 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-12 11:39 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-12 11:39 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-12 11:39 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 11:35 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-12 11:35 - 2012-12-18 19:21 - 00134088 _____ C:\Windows\PFRO.log
2013-07-12 11:35 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-12 11:34 - 2013-07-12 11:33 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:34 - 2012-07-26 12:29 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 11:34 - 2012-07-26 07:26 - 01048576 ___SH C:\Windows\system32\config\BBI
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 10:24 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 09:35 - 2012-12-18 20:24 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-12 09:33 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 09:20 - 2013-01-08 08:53 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-07-12 09:19 - 2013-01-08 09:06 - 00000790 _____ C:\Windows\wiso.ini
2013-07-12 09:18 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 09:18 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-12 01:43 - 2013-07-10 17:14 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-12 01:25 - 2013-07-10 17:14 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-12 09:29

==================== End Of Log ============================
         
--- --- ---

__________________
Gruß
Dennis

Alt 12.07.2013, 12:28   #6
schrauber
/// the machine
/// TB-Ausbilder
 

Delta Search Toolbar - Standard

Delta Search Toolbar




ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
--> Delta Search Toolbar

Alt 12.07.2013, 17:52   #7
masterds
 
Delta Search Toolbar - Standard

Delta Search Toolbar



ESET ohne Ergebnis.

SecurityCheck:
Code:
ATTFilter
 Results of screen317's Security Check version 0.99.68  
   x64 (UAC is enabled)  
 Internet Explorer 10  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
Avira Desktop      
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java 7 Update 17  
 Java version out of Date! 
 Adobe Flash Player 	11.8.800.94  
 Adobe Reader XI  
 Mozilla Firefox (22.0) 
 Google Chrome 27.0.1453.116  
 Google Chrome 28.0.1500.71  
````````Process Check: objlist.exe by Laurent````````  
 Avira Antivir avgnt.exe 
 Avira Antivir avguard.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         
FRST:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-07-2013 01
Ran by Dennis (administrator) on 12-07-2013 17:48:06
Running from C:\Users\Dennis\Desktop
Windows 8 Pro (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(TomTom) D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe
(VIA Technologies, Inc.) C:\Windows\system32\viakaraokesrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\ControlCenter3\brccMCtl.exe
(Acronis) D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) D:\Programme\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Network iControl\NetSvcHelp\NetiCtrlTray.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Vernam7) L:\Spiele\StarCraft II\SC2ALLin1\SC2ALLin1.exe
(Microsoft Corporation) C:\Windows\syswow64\wwahost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IgfxTray] - C:\Windows\system32\igfxtray.exe [171040 2012-10-22] (Intel Corporation)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [399392 2012-10-22] (Intel Corporation)
HKLM\...\Run: [Persistence] - C:\Windows\system32\igfxpers.exe [441888 2012-10-22] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] - "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [403888 2012-08-23] (Acronis)
HKCU\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKCU\...\Run: [Steam] - "D:\Programme\Steam\Steam.exe" -silent [x]
HKCU\...\Run: [SanDiskSecureAccess_Manager.exe] - C:\Users\Dennis\AppData\Roaming\SanDisk\SanDiskSecureAccess_Manager.exe [30705792 2013-04-17] (Gemalto N.V.)
HKCU\...\Policies\system: [DisableRegistryTools] 0
HKCU\...\Policies\system: [DisableTaskMgr] 0
MountPoints2: {36bdab4f-5824-11e2-be81-3085a9eac743} - "M:\SETUP.EXE" 
HKLM-x32\...\Run: [avgnt] - "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min [345144 2013-06-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [ASUS AiChargerPlus Execute] - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe [550272 2012-08-20] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [HDAudDeck] - C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r [5123216 2012-06-08] (VIA)
HKLM-x32\...\Run: [Adobe ARM] - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [LogitechQuickCamRibbon] - "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide [2793304 2009-10-14] ()
HKLM-x32\...\Run: [VirtualCloneDrive] - "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s [89456 2011-03-07] (Elaborate Bytes AG)
HKLM-x32\...\Run: [StartCCC] - "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BrMfcWnd] - C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN [1159168 2009-05-26] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [ControlCenter3] - C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe /autorun [114688 2008-12-24] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [PDFPrint] - D:\Programme\PDF24\pdf24.exe [x]
HKLM-x32\...\Run: [TrueImageMonitor.exe] - "D:\Programme\Acronis\TrueImage2013\TrueImageHome\TrueImageMonitor.exe" [x]
HKLM-x32\...\Run: [AcronisTibMounterMonitor] - C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [943856 2012-07-24] (Acronis)
HKLM-x32\...\Run: [SunJavaUpdateSched] - "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [iTunesHelper] - "D:\Programme\iTunes\iTunesHelper.exe" [x]
IMEO\utilman.exe: [Debugger] c:\windows\system32\cmd.exe
Startup: C:\ProgramData\Start Menu\Programs\Startup\ALF-BanCo 3 Reminder.lnk
ShortcutTarget: ALF-BanCo 3 Reminder.lnk -> C:\Program Files (x86)\ALFBanCo3\AlfReminder3.exe (Alf - AG)
Startup: C:\ProgramData\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> D:\Programme\WISO\Steuer_2012\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://t.de.msn.com/
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - D:\Programme\TerraTec\ThcDeskBand.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - D:\Programme\Microsoft Office\Office15\MSOSB.DLL No File
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - D:\Programme\Microsoft Office\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - D:\Programme\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Extensions\home2@tomtom.com
FF Extension: firebug - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\firebug@software.joehewitt.com.xpi
FF Extension: No Name - C:\Users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\kv8pufq0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] C:\Program Files\IB Updater\Firefox

Chrome: 
=======
CHR HomePage: hxxp://google.de/

==================== Services (Whitelisted) =================

R2 AdobeActiveFileMonitor10.0; C:\Program Files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [169624 2011-09-01] (Adobe Systems Incorporated)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [84024 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [108088 2013-06-27] (Avira Operations GmbH & Co. KG)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-12-18] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2012-12-18] (ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.01.06\AsusFanControlService.exe [1475200 2012-12-18] (ASUSTeK Computer Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 TomTomHOMEService; D:\Programme\TOMTOM\TomTom HOME 2\TomTomHOMEService.exe [93072 2013-03-22] (TomTom)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2012-05-04] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [14920 2013-01-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AF15BDA; C:\Windows\system32\DRIVERS\AF15BDA.sys [370528 2013-02-14] (AfaTech                  )
S3 AF9035BDA; C:\Windows\system32\DRIVERS\AF9035BDA.sys [274344 2012-08-10] (AfaTech                  )
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R3 AiChargerPlus; C:\Windows\SysWow64\drivers\AiChargerPlus.sys [14848 2012-04-19] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2012-12-18] ()
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2012-12-18] (MCCI Corporation)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdW86.sys [104184 2012-12-21] (Advanced Micro Devices)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [100712 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [130016 2013-04-06] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2013-04-06] (Avira Operations GmbH & Co. KG)
R3 LVPr2M64; C:\Windows\system32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30232 2009-10-07] ()
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [1093256 2013-02-20] (Acronis)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-12 17:42 - 2013-07-12 17:42 - 00890988 _____ C:\Users\Dennis\Desktop\SecurityCheck.exe
2013-07-12 13:24 - 2013-07-12 13:24 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-12 13:16 - 2013-07-12 13:17 - 02347384 _____ (ESET) C:\Users\Dennis\Downloads\esetsmartinstaller_enu.exe
2013-07-12 12:15 - 2013-07-12 12:15 - 03371680 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 12:14 - 2013-07-12 12:14 - 00001506 _____ C:\AdwCleaner[S3].txt
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:33 - 2013-07-12 11:34 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-10 17:14 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-10 17:14 - 2013-06-12 01:26 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-10 17:14 - 2013-06-12 01:25 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-10 17:14 - 2013-06-12 01:25 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-10 17:14 - 2013-06-01 11:25 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 17:14 - 2013-06-01 11:21 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 17:14 - 2013-05-31 01:14 - 04036096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 17:14 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 17:14 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 17:14 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 17:14 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-09 20:41 - 2013-07-12 17:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:22 - 2013-07-09 20:23 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:15 - 2013-07-09 09:16 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:00 - 2013-07-09 09:01 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-08 20:12 - 2013-07-08 20:13 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-07 03:00 - 2013-05-16 00:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:03 - 2013-07-05 07:04 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-03 08:47 - 2013-07-09 09:01 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:23 - 2013-06-23 23:36 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-23 19:06 - 2013-07-06 03:02 - 00000000 __SHD C:\$$PendingFiles
2013-06-23 18:22 - 2013-05-16 00:37 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-06-23 18:22 - 2013-05-16 00:35 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-06-23 18:22 - 2013-05-14 15:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-06-23 18:22 - 2013-05-14 11:23 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-06-23 18:22 - 2013-05-04 09:45 - 02233600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-06-23 18:22 - 2013-04-29 00:28 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-06-23 18:22 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-06-23 18:22 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-06-23 18:22 - 2013-04-24 01:12 - 01569792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-06-23 18:22 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-06-23 18:22 - 2013-04-24 00:55 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-06-23 18:22 - 2013-04-24 00:55 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-06-23 18:22 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-06-23 18:22 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll

==================== One Month Modified Files and Folders =======

2013-07-12 17:45 - 2013-04-01 19:25 - 00001130 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-07-12 17:42 - 2013-07-12 17:42 - 00890988 _____ C:\Users\Dennis\Desktop\SecurityCheck.exe
2013-07-12 17:41 - 2013-07-09 20:41 - 00000565 _____ C:\Users\Dennis\AppData\Roaming\myMPQ.ini
2013-07-12 17:37 - 2012-12-18 22:10 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-07-12 17:15 - 2012-12-18 19:28 - 01648837 _____ C:\Windows\WindowsUpdate.log
2013-07-12 17:02 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-07-12 13:24 - 2013-07-12 13:24 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-12 13:21 - 2012-12-18 19:36 - 00003600 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1471377960-4142091505-4027430203-1001
2013-07-12 13:17 - 2013-07-12 13:16 - 02347384 _____ (ESET) C:\Users\Dennis\Downloads\esetsmartinstaller_enu.exe
2013-07-12 13:15 - 2013-04-01 19:25 - 00001126 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-12 12:19 - 2012-07-26 12:27 - 00755402 _____ C:\Windows\system32\perfh007.dat
2013-07-12 12:19 - 2012-07-26 12:27 - 00156630 _____ C:\Windows\system32\perfc007.dat
2013-07-12 12:19 - 2012-07-26 09:28 - 01754016 _____ C:\Windows\system32\PerfStringBackup.INI
2013-07-12 12:15 - 2013-07-12 12:15 - 03371680 _____ C:\Windows\system32\FNTCACHE.DAT
2013-07-12 12:15 - 2012-12-18 19:32 - 00000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2013-07-12 12:15 - 2012-12-18 19:21 - 00134740 _____ C:\Windows\PFRO.log
2013-07-12 12:15 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-07-12 12:15 - 2012-07-26 07:26 - 02097152 ___SH C:\Windows\system32\config\BBI
2013-07-12 12:14 - 2013-07-12 12:14 - 00001506 _____ C:\AdwCleaner[S3].txt
2013-07-12 11:49 - 2013-07-12 11:49 - 00000869 _____ C:\Users\Dennis\Desktop\JRT.txt
2013-07-12 11:47 - 2013-07-12 11:47 - 00000000 ____D C:\Windows\ERUNT
2013-07-12 11:45 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Adobe
2013-07-12 11:44 - 2013-07-12 11:44 - 00559306 _____ (Oleg N. Scherbakov) C:\Users\Dennis\Desktop\JRT.exe
2013-07-12 11:44 - 2012-12-18 22:10 - 00003772 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-12 11:34 - 2013-07-12 11:33 - 00001566 _____ C:\AdwCleaner[S2].txt
2013-07-12 11:34 - 2012-07-26 12:29 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-12 11:30 - 2013-07-12 11:30 - 00662345 _____ C:\Users\Dennis\Desktop\adwcleaner (1).exe
2013-07-12 09:35 - 2012-12-18 20:24 - 78185248 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-07-12 09:33 - 2012-12-29 17:07 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 09:20 - 2013-01-08 08:53 - 00000000 ____D C:\ProgramData\Buhl Data Service GmbH
2013-07-12 09:19 - 2013-01-08 09:06 - 00000790 _____ C:\Windows\wiso.ini
2013-07-12 09:18 - 2013-05-17 09:34 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\ALFBanCo3
2013-07-12 09:18 - 2013-01-02 09:01 - 00000000 ____D C:\ProgramData\AlfBanCo3
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Buhl Data Service
2013-07-12 09:17 - 2013-07-12 09:17 - 00000000 ____D C:\Users\Dennis\AppData\Local\Buhl Data Service
2013-07-12 09:08 - 2013-07-12 09:08 - 00000000 ____D C:\FRST
2013-07-12 09:06 - 2013-07-12 09:06 - 01778143 _____ (Farbar) C:\Users\Dennis\Desktop\FRST64.exe
2013-07-12 07:31 - 2013-07-12 07:31 - 00098160 _____ C:\Users\Dennis\Desktop\Extras.Txt
2013-07-12 07:30 - 2013-07-12 07:30 - 00114366 _____ C:\Users\Dennis\Desktop\OTL.Txt
2013-07-12 07:24 - 2013-07-12 07:24 - 00602112 _____ (OldTimer Tools) C:\Users\Dennis\Desktop\OTL.exe
2013-07-12 07:23 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\Documents\StarCraft II
2013-07-11 23:40 - 2013-04-01 19:25 - 00004102 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-11 23:40 - 2013-04-01 19:25 - 00003866 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-11 07:33 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\UseNeXT
2013-07-10 17:10 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-07-09 21:08 - 2013-05-17 09:35 - 00125952 ___SH C:\Users\Dennis\Desktop\Thumbs.db
2013-07-09 20:39 - 2013-07-09 20:39 - 00000974 _____ C:\Users\Dennis\Desktop\SC2ALLin1.lnk
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Users\Dennis\Desktop\Skirmish
2013-07-09 20:39 - 2013-07-09 20:39 - 00000000 ____D C:\Program Files (x86)\StarCraft II
2013-07-09 20:23 - 2013-07-09 20:22 - 00000667 _____ C:\Users\Dennis\AppData\Roaming\MPQEditor.ini
2013-07-09 09:28 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\vlc
2013-07-09 09:23 - 2013-05-17 09:36 - 00000615 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-07-09 09:20 - 2013-07-09 09:20 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\Dennis\Downloads\mbam-setup-1.75.0.1300.exe
2013-07-09 09:20 - 2013-07-09 09:20 - 00000759 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2013-07-09 09:17 - 2012-12-18 21:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-07-09 09:16 - 2013-07-09 09:15 - 00006654 _____ C:\AdwCleaner[S1].txt
2013-07-09 09:16 - 2012-07-26 07:37 - 00000000 ____D C:\Windows\servicing
2013-07-09 09:14 - 2013-07-09 09:14 - 00650027 _____ C:\Users\Dennis\Downloads\adwcleaner.exe
2013-07-09 09:14 - 2013-07-09 09:14 - 00006837 _____ C:\AdwCleaner[R1].txt
2013-07-09 09:01 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\Documents\Freemake
2013-07-09 09:01 - 2013-07-03 08:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-07-09 09:00 - 2013-07-09 09:00 - 00001324 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\ProgramData\Freemake
2013-07-09 09:00 - 2013-07-09 09:00 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-07-09 08:59 - 2013-07-09 08:59 - 01271952 _____ (Ellora Assets Corporation                                   ) C:\Users\Dennis\Downloads\FreemakeVideoConverterSetup.exe
2013-07-09 08:06 - 2013-05-17 09:33 - 00000000 ____D C:\Users\Dennis\AppData\Local\Packages
2013-07-08 20:13 - 2013-07-08 20:12 - 00000000 ____D C:\Users\Dennis\Desktop\STICK
2013-07-06 03:02 - 2013-06-23 19:06 - 00000000 __SHD C:\$$PendingFiles
2013-07-05 07:36 - 2013-07-05 07:36 - 00000000 ____D C:\Windows\softwaredistribution.bak1
2013-07-05 07:04 - 2013-07-05 07:04 - 00197481 _____ C:\Users\Dennis\Downloads\apps.diagcab
2013-07-05 07:04 - 2013-07-05 07:03 - 87922960 _____ (Microsoft Corporation) C:\Users\Dennis\Downloads\msert.exe
2013-07-01 10:36 - 2013-05-17 09:35 - 00002194 ____H C:\Users\Dennis\Documents\Default.rdp
2013-06-28 00:04 - 2012-07-26 10:14 - 00693112 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-28 00:04 - 2012-07-26 10:14 - 00078200 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-27 15:52 - 2013-05-07 11:40 - 00083672 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2013-06-27 09:21 - 2013-05-17 09:33 - 00091736 _____ C:\Users\Dennis\AppData\Local\GDIPFONTCACHEV1.DAT
2013-06-26 23:04 - 2013-05-17 09:35 - 00000000 ____D C:\Users\Dennis\AppData\Roaming\SanDisk
2013-06-26 19:10 - 2013-04-17 09:41 - 00000000 ____D C:\Windows\rescache
2013-06-25 08:21 - 2013-06-25 08:21 - 00001543 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iTunes
2013-06-25 08:21 - 2013-06-25 08:21 - 00000000 ____D C:\Program Files\iPod
2013-06-23 23:36 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\test
2013-06-23 23:23 - 2013-06-23 23:23 - 00000000 ____D C:\Users\Dennis\Desktop\EraserPortable
2013-06-23 23:22 - 2013-06-23 23:22 - 01402992 _____ (PortableApps.com) C:\Users\Dennis\Downloads\EraserPortable_5.8.8_English.paf.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup.exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00793536 _____ C:\Users\Dennis\Downloads\ZipOpenerSetup (1).exe
2013-06-23 23:21 - 2013-06-23 23:21 - 00001128 _____ C:\Users\Dennis\Desktop\Continue Zip Opener Installation.lnk
2013-06-12 01:43 - 2013-07-10 17:14 - 14329856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-06-12 01:43 - 2013-07-10 17:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-06-12 01:42 - 2013-07-10 17:14 - 02046976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-06-12 01:26 - 2013-07-10 17:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-06-12 01:25 - 2013-07-10 17:14 - 19238912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-06-12 01:25 - 2013-07-10 17:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-12 09:29

==================== End Of Log ============================
         
--- --- ---
__________________
Gruß
Dennis

Alt 12.07.2013, 17:54   #8
schrauber
/// the machine
/// TB-Ausbilder
 

Delta Search Toolbar - Standard

Delta Search Toolbar



Java bitte updaten. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 12.07.2013, 17:54   #9
masterds
 
Delta Search Toolbar - Standard

Delta Search Toolbar



Scheint mir jetzt alles wieder sauber zu sein!

Vielen Vielen Dank!

:-)
__________________
Gruß
Dennis

Alt 12.07.2013, 17:55   #10
schrauber
/// the machine
/// TB-Ausbilder
 

Delta Search Toolbar - Standard

Delta Search Toolbar



Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.


Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu Delta Search Toolbar
7-zip, adobe reader xi, antivir, autorun, avira, bho, bonjour, continue, down, error, firefox, flash player, helper, helper.exe, home, homepage, iexplore.exe, install.exe, installation, logfile, lws.exe, mozilla, ntdll.dll, object, office 2013, plug-in, realtek, registry, richtlinie, scan, security, senden, software, svchost.exe, visual studio, windows



Ähnliche Themen: Delta Search Toolbar


  1. Delta search toolbar und andere Ads by browser+ Apps
    Log-Analyse und Auswertung - 02.06.2015 (16)
  2. Delta-Toolbar, Downloadsponsor etc.
    Log-Analyse und Auswertung - 07.08.2014 (9)
  3. babylon search und delta search als startseite im browser
    Plagegeister aller Art und deren Bekämpfung - 07.06.2014 (9)
  4. Search d.p Engine. Ist das Delta-Search? Wenn nein, egal ich werde es nicht mehr los
    Log-Analyse und Auswertung - 27.01.2014 (11)
  5. Delta Search Toolbar Virus
    Plagegeister aller Art und deren Bekämpfung - 07.08.2013 (9)
  6. Windows XP - Delta Toolbar deinstalliert - Sauber?
    Log-Analyse und Auswertung - 07.08.2013 (7)
  7. Delta Search und Babylon search - Malware durch Freeware, Windows Vista
    Plagegeister aller Art und deren Bekämpfung - 16.07.2013 (37)
  8. Probleme mit Delta Search Toolbar und Spy Hunter 4.
    Plagegeister aller Art und deren Bekämpfung - 28.06.2013 (12)
  9. Delta Search
    Plagegeister aller Art und deren Bekämpfung - 26.06.2013 (9)
  10. Bundespolizei Virus, Delta-search toolbar und 13 weitere infizierte Objekte
    Log-Analyse und Auswertung - 16.06.2013 (9)
  11. Löschen Toolbar Delta Search (Win 8)
    Plagegeister aller Art und deren Bekämpfung - 29.05.2013 (11)
  12. Delta Search mit Spybot entfernt; Delta Search taucht jedoch in neuen Tab trotzdem auf
    Plagegeister aller Art und deren Bekämpfung - 17.04.2013 (10)
  13. delta search
    Log-Analyse und Auswertung - 01.04.2013 (9)
  14. Delta Toolbar . - gefährlich und schwer wieder zu deinstalliern
    Mülltonne - 27.03.2013 (1)
  15. Delta Search und Babylon Search entfernt - Ist nun alles weg?
    Log-Analyse und Auswertung - 16.03.2013 (18)
  16. Delta Search
    Plagegeister aller Art und deren Bekämpfung - 03.03.2013 (15)

Zum Thema Delta Search Toolbar - Hallo zusammen! Die DeltaSearch Toolbar habe ich zwar deinstalliert und größtenteils entfernt, aber leider eben nur "größtenteils" . Google Chrome startet noch immer auf der Delta-Seite, obwohl in den Einstellungen - Delta Search Toolbar...
Archiv
Du betrachtest: Delta Search Toolbar auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.