Hallo Liebe Leute,

ich hoffe, es kann mir jemand helfen. Ich habe das Programm TrojanHunter runtergeladen, da ich das Gefühl hatte, dass mein PC ein Trojaner hat.

Beim Scannen hat das Programm Folgendes herausgefunden:

Found malware file: C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFdetect.exe (Vobfus.432)

Found malware file: C:\Users\All Users\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFdetect.exe (Vobfus.432)

Found malware file: C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\acrobatupdater.exe (AgentZ.2056)

Found malware file: C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\readerupdater.exe (AgentZ.2056)

Doch leider kann ich das nicht löschen, da ich eine trial version habe..

Was muss ich tun?

Vielen Dank im Voraus und LG
U-C

Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:

• Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
• Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags.
• Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
• Solltest du mir nicht innerhalb von 5 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
• Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!
  Ich kann Dir niemals eine Garantie geben, dass auch ich alles finde. Eine Formatierung ist meist der schnellere und immer der sicherste Weg.
  Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Ich habe dein Thema in Arbeit und melde mich so schnell wie möglich mit weiteren Anweisungen.

Servus,

Zitat von U-C

Ich habe das Programm TrojanHunter runtergeladen, da ich das Gefühl hatte, dass mein PC ein Trojaner hat.

Wieso hast du das Gefühl, dass ein Trojaner auf dem Rechner ist?
Was ist passiert? Gibt es Auffälligkeiten?
Gibt es Probleme mit deinem Rechner? Wenn ja, welche?

Zitat von U-C

Beim Scannen hat das Programm Folgendes herausgefunden:

Found malware file: C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFdetect.exe (Vobfus.432)

Found malware file: C:\Users\All Users\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFdetect.exe (Vobfus.432)

Found malware file: C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\acrobatupdater.exe (AgentZ.2056)

Found malware file: C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\readerupdater.exe (AgentZ.2056)

Das sind alles legitime Dateien, keine Trojaner, keine Malware. Das ist quasi ein Fehlalarm von TrojanHunter.

Zitat von U-C

Was muss ich tun?

Meine Fragen beantworten.

Servus,

vielen Dank für die schnelle Antwort!

Da bin ich schonmal beruhigt... Während ich z.B. etwas google oder nur so im Internet surfe z.B. Youtube, Mails checken, kommen ständig Warnungen von dubiosen Programm, dass mein Computer in Gefahr ist. Oder, dass mein Laufwerk C bereinigt werden müsste " Klicken Sie auf bereinigen"- was ich natürlich nicht gemacht habe.

Des Weiteren schließt sich mein Browser öfters von ganz alleine und die Internetverbindung ist wird immer langsamer.

Ich hoffe, ich könnte deine Fragen einigermaßen verständlich beantworten..

Servus,

Zitat von U-C

Da bin ich schonmal beruhigt... Während ich z.B. etwas google oder nur so im Internet surfe z.B. Youtube, Mails checken, kommen ständig Warnungen von dubiosen Programm, dass mein Computer in Gefahr ist. Oder, dass mein Laufwerk C bereinigt werden müsste " Klicken Sie auf bereinigen"- was ich natürlich nicht gemacht habe.

Des Weiteren schließt sich mein Browser öfters von ganz alleine und die Internetverbindung ist wird immer langsamer.

Wie heißen diese Programme, von denen du Warnungen bekommst?


Ich würde deinen Rechner gerne mal etwas näher inspizieren, nur um sicher zu gehen.


So geht es los:




Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So ich habe jetzt alles gemacht was du gesagt hast

Das sind jetzt so 4 Sachen, die ich angezeigt bekommen habe:
FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by PC (administrator) on 05-08-2013 16:53:24
Running from C:\Users\PC\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Windows\system32\LFOGRPOW.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\TrojanHunter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\PC\AppData\Local\Temp\IS3571~1\QtraxInstaller.exe
() C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
HKLM-x32\...\Runonce: [Del16251326] - cmd.exe /Q /D /c del "C:\Users\PC\AppData\Local\Temp\0.del" [x]
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [NTRedirect] - C:\Windows\SysWOW64\rundll32.exe [44544 2009-07-14] (Microsoft Corporation) <===== ATTENTION
HKCU\...\Run: [CCleaner] - C:\Program Files\CCleaner\CCleaner64.exe [6154008 2013-05-24] (Piriform Ltd)
HKCU\...\Runonce: [Del16251326] - cmd.exe /Q /D /c del "C:\Users\PC\AppData\Local\Temp\0.del" [x]
HKCU\...\RunOnce: [Qtrax] - C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 1914874918.portal.qtrax.com [387224 2013-05-13] (Microsoft Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 1
HKCU\...\Policies\system: [DisableTaskMgr] 1
HKCU\...\Policies\system: [DisableChangePassword] 1
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security)
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll  [2691536 2013-07-26] ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * tpnative

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Delta Search
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = Delta Search
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10015
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10015
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -  No File
BHO-x32: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll (PriceGong)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll (Delta-search.com)
BHO-x32: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -  No File
BHO-x32: LyricXeeker - {d2f7ea55-9ec3-4993-a1e9-62bdb904fd6d} - C:\Program Files (x86)\LyriXeeker\125.dll (LyriXeeker Tech)
BHO-x32: holasearch Helper Object - {DFF9B2DA-EF99-4B26-83CB-7058299999D8} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll (holasearch.com)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: No Name - {f34c9277-6577-4dff-b2d7-7d58092f272f} -  No File
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - No Name - {f34c9277-6577-4dff-b2d7-7d58092f272f} -  No File
Toolbar: HKLM-x32 - Holasearch Toolbar - {C510DFFB-0AFE-484C-BA40-CED5B74C4EEF} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchTlbr.dll (holasearch.com)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.220.18.8 89.246.64.8

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default
FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: LyricXeeker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\125
FF Extension: Delta Toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\ffxtlbr@delta.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\125.xpi
FF Extension: No Name - C:\Program Files (x86)\LyriXeeker\125.xpi

Chrome: 
=======
CHR Extension: (PriceGong) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.11_0
CHR Extension: (Delta Toolbar) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: (LyricXeeker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\epojlgbehpaeekopencdagbdamnkppci\1.125_0
CHR Extension: (hola Toolbar) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla\1.1_0
CHR Extension: (DealPly) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.5.3.0_0
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\PC\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\125.crx
CHR HKLM-x32\...\Chrome\Extension: [fagpjgjmoaccgkkpjeoinehnoaimnbla] - C:\Users\PC\AppData\Roaming\BabSolution\CR\hola.crx
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2847696 2013-07-26] ()
S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
S4 FUSServices; C:\Windows\SysWOW64\FUSServices.exe [10752 2010-01-09] ()
S4 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-22] (GFI Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 XMLDIUSB; C:\Windows\System32\Drivers\XMLDIUSB.sys [55808 2010-01-30] (OEM)
S3 dsio; \??\C:\Program Files (x86)\Common Files\TrustPort\bin\dsio.sys [x]
U4 vsserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00002347 _____ C:\Users\PC\Desktop\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Delta
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-05 16:49 - 2013-08-05 16:49 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 16:47 - 2013-08-05 16:47 - 00109768 _____ C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 04:42 - 2013-08-05 16:44 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:29 - 2013-08-05 03:31 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:09 - 2013-08-05 12:20 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 03:09 - 2013-08-05 03:10 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:09 - 2013-08-05 03:10 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:07 - 2013-08-05 03:08 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-04 16:21 - 2013-08-05 04:39 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:20 - 2013-08-05 04:33 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-04 16:19 - 2013-08-05 16:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Systweak
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:41 - 2013-08-03 02:41 - 00655200 _____ C:\Users\PC\Downloads\setup.exe
2013-08-03 02:40 - 2013-08-05 16:50 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-03 02:39 - 2013-08-05 16:49 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-03 02:39 - 2013-08-05 16:49 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-03 02:39 - 2013-08-05 16:49 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-08-03 02:39 - 2013-08-05 16:49 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:26 - 2013-08-05 16:36 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 03:26 - 2013-08-05 12:19 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 03:26 - 2013-08-02 03:31 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:26 - 2013-08-02 03:31 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:20 - 2013-08-02 03:25 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-29 18:46 - 2013-07-29 18:47 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-18 00:01 - 2013-07-18 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-14 19:58 - 2013-07-14 21:44 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 04:02 - 2013-05-29 08:15 - 17829376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 04:02 - 2013-05-29 07:50 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 04:02 - 2013-05-29 07:43 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 04:02 - 2013-05-29 07:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 04:02 - 2013-05-29 07:35 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 04:02 - 2013-05-29 07:34 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 07:33 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 04:02 - 2013-05-29 07:31 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 07:27 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 04:02 - 2013-05-29 07:27 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 07:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 07:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 07:18 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 04:02 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 04:02 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 04:02 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 04:02 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-11 04:02 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-10 16:52 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 16:52 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 16:52 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 16:52 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 16:47 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 16:46 - 2013-04-10 07:45 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 16:46 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe
136

==================== One Month Modified Files and Folders =======

2013-08-05 16:53 - 2013-08-05 16:53 - 00000000 ____D C:\FRST
2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:52 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-05 16:52 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00002347 _____ C:\Users\PC\Desktop\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Delta
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-05 16:50 - 2013-08-03 02:40 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-05 16:50 - 2013-07-01 14:20 - 00003370 _____ C:\Windows\System32\Tasks\EPUpdater
2013-08-05 16:49 - 2013-08-05 16:49 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 16:49 - 2013-08-03 02:39 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-05 16:49 - 2013-08-03 02:39 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-05 16:49 - 2013-08-03 02:39 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-08-05 16:49 - 2013-08-03 02:39 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 16:47 - 2013-08-05 16:47 - 00109768 _____ C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-05 16:44 - 2013-08-05 04:42 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 16:36 - 2013-08-02 03:26 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-05 16:34 - 2013-06-28 21:35 - 00000000 ____D C:\Users\PC\AppData\Roaming\PerformerSoft
2013-08-05 16:32 - 2013-08-04 16:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Systweak
2013-08-05 15:57 - 2013-06-11 11:42 - 01195779 _____ C:\Windows\WindowsUpdate.log
2013-08-05 15:14 - 2013-03-23 21:05 - 00380928 ___SH C:\Users\PC\Desktop\Thumbs.db
2013-08-05 14:40 - 2011-11-04 21:53 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-05 14:40 - 2011-11-04 21:53 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-05 14:40 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-05 14:38 - 2012-10-28 23:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 13:47 - 2013-06-27 23:03 - 00000000 ____D C:\Users\PC\Desktop\uni
2013-08-05 13:37 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-08-05 13:37 - 2011-11-04 13:24 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-08-05 13:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-05 13:33 - 2011-11-04 13:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-05 13:16 - 2012-10-28 23:54 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-08-05 13:15 - 2013-04-14 18:42 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-08-05 12:23 - 2012-10-26 18:24 - 00003906 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24}
2013-08-05 12:20 - 2013-08-05 03:09 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 12:20 - 2013-01-15 18:56 - 00000000 ___RD C:\Users\PC\Dropbox
2013-08-05 12:20 - 2013-01-15 18:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\Dropbox
2013-08-05 12:19 - 2013-08-02 03:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-05 12:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 05:37 - 2011-02-10 21:23 - 00000000 ____D C:\SWSetup
2013-08-05 05:14 - 2011-12-12 02:45 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2013-08-05 05:09 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files\Bonjour
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-08-05 04:43 - 2013-06-21 17:53 - 00000000 ___RD C:\Users\PC\Desktop\mm
2013-08-05 04:43 - 2012-10-29 17:17 - 00000000 ____D C:\Users\PC\Desktop\Laptob Datein 1
2013-08-05 04:42 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Politik
2013-08-05 04:39 - 2013-08-04 16:21 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-05 04:33 - 2013-08-04 16:20 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-05 04:33 - 2012-10-26 18:24 - 00000000 ___RD C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:31 - 2013-08-05 03:29 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:10 - 2013-08-05 03:09 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:10 - 2013-08-05 03:09 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:08 - 2013-08-05 03:07 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-05 02:23 - 2012-11-18 22:47 - 00000000 ____D C:\Users\PC\Documents\Youcam
2013-08-04 17:18 - 2012-11-03 00:20 - 00000000 ____D C:\Windows\Minidump
2013-08-04 17:18 - 2012-10-26 18:39 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-04 16:13 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Musik
2013-08-04 14:32 - 2013-04-07 18:23 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC
2013-08-04 14:32 - 2013-04-07 18:23 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForPC.job
2013-08-03 11:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:44 - 2012-10-26 18:19 - 00000000 ____D C:\Users\PC
2013-08-03 02:41 - 2013-08-03 02:41 - 00655200 _____ C:\Users\PC\Downloads\setup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:31 - 2013-08-02 03:26 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:31 - 2013-08-02 03:26 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:27 - 2013-02-12 22:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-02 03:25 - 2013-08-02 03:20 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-31 12:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-31 10:32 - 2012-11-24 12:36 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC-HP$
2013-07-31 10:32 - 2012-11-24 12:36 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job
2013-07-29 18:47 - 2013-07-29 18:46 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-19 11:02 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Depression Konzept
2013-07-18 00:01 - 2013-07-18 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-16 09:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-15 19:11 - 2012-11-25 20:11 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-07-14 21:44 - 2013-07-14 19:58 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 09:43 - 2013-03-13 15:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 09:43 - 2011-11-04 13:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 04:15 - 2012-10-26 19:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:50 - 2012-11-04 16:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-10 01:50 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe

Files to move or delete:
====================
C:\Windows\SysWOW64\rundll32.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-25 18:12

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---


FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-08-2013
Ran by PC at 2013-08-05 16:54:40
Running from C:\Users\PC\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Ad-Aware Browsing Protection (x32 Version: 1.0.1.82)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)
AMD APP SDK Runtime (Version: 2.5.709.2)
AMD Catalyst Install Manager (Version: 3.0.838.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Bejeweled 3 (x32 Version: 2.2.0.98)
BrowserDefender (x32)
Cake Mania (x32 Version: 2.2.0.98)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center InstallProxy (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Localization All (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0817.2216.38121)
CCC Help Chinese Standard (x32 Version: 2011.0817.2215.38121)
CCC Help Chinese Traditional (x32 Version: 2011.0817.2215.38121)
CCC Help Czech (x32 Version: 2011.0817.2215.38121)
CCC Help Danish (x32 Version: 2011.0817.2215.38121)
CCC Help Dutch (x32 Version: 2011.0817.2215.38121)
CCC Help English (x32 Version: 2011.0817.2215.38121)
CCC Help Finnish (x32 Version: 2011.0817.2215.38121)
CCC Help French (x32 Version: 2011.0817.2215.38121)
CCC Help German (x32 Version: 2011.0817.2215.38121)
CCC Help Greek (x32 Version: 2011.0817.2215.38121)
CCC Help Hungarian (x32 Version: 2011.0817.2215.38121)
CCC Help Italian (x32 Version: 2011.0817.2215.38121)
CCC Help Japanese (x32 Version: 2011.0817.2215.38121)
CCC Help Korean (x32 Version: 2011.0817.2215.38121)
CCC Help Norwegian (x32 Version: 2011.0817.2215.38121)
CCC Help Polish (x32 Version: 2011.0817.2215.38121)
CCC Help Portuguese (x32 Version: 2011.0817.2215.38121)
CCC Help Russian (x32 Version: 2011.0817.2215.38121)
CCC Help Spanish (x32 Version: 2011.0817.2215.38121)
CCC Help Swedish (x32 Version: 2011.0817.2215.38121)
CCC Help Thai (x32 Version: 2011.0817.2215.38121)
CCC Help Turkish (x32 Version: 2011.0817.2215.38121)
ccc-utility64 (Version: 2011.0817.2216.38121)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Companion Suite Pro LL2 (x32 Version: 1.2.6)
Companion Suite Pro LL2 Drivers (x32 Version: 1.2.6)
Cradle of Rome 2 (x32 Version: 2.2.0.98)
CyberLink YouCam (x32 Version: 3.5.0.4528)
D3DX10 (x32 Version: 15.4.2368.0902)
DealPly (HKCU)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Delta Chrome Toolbar (x32)
Delta toolbar   (x32 Version: 1.8.22.0)
Dropbox (HKCU Version: 2.0.22)
eaner (Version: 4.02)
ESU for Microsoft Windows 7 SP1 (x32 Version: 2.1.1)
Farm Frenzy (x32 Version: 2.2.0.98)
Farmscapes (x32 Version: 2.2.0.98)
FATE (x32 Version: 2.2.0.97)
Final Drive Fury (x32 Version: 2.2.0.95)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.21.153)
hola Chrome Toolbar (x32)
holasearch toolbar   (x32 Version: 1.8.16.16)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Documentation (x32 Version: 1.1.0.0)
HP Games (x32 Version: 1.0.2.5)
HP Launch Box (Version: 1.0.12)
HP On Screen Display (x32 Version: 1.3.5)
HP Quick Launch (x32 Version: 2.7.2)
HP QuickWeb (x32 Version: 3.1.1.10197)
HP Recovery Manager (x32 Version: 2.0.0)
HP Security Assistant (Version: 1.0.12)
HP Setup (x32 Version: 9.0.15076.3891)
HP Setup Manager (x32 Version: 1.2.14901.3869)
IDT Audio (x32 Version: 1.0.6365.0)
iLivid (x32 Version: 4.0.0.2208)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Display Audio Driver (x32 Version: 6.14.00.3074)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026)
iTunes (Version: 11.0.4.4)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest II (x32 Version: 2.2.0.97)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LyricXeeker (x32)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Business 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Notification Center (x32 Version: 0.7.7.813)
Open It! (x32 Version: 1.1.1)
opensource (x32 Version: 1.0.14960.3876)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
PriceGong 2.6.11 (x32 Version: 2.6.11)
PX Profile Update (x32 Version: 1.00.1.)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player (HKCU)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.2.13.0)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
ScanSoft PaperPort 11 (x32 Version: 11.1.0000)
Search-Results Toolbar (x32 Version: 1.0.0.12)
Skype™ 6.6 (x32 Version: 6.6.106)
SweetPacks Toolbar for Internet Explorer 4.5 (x32 Version: 4.5.0000)
swMSM (x32 Version: 12.0.0.1)
Synaptics TouchPad Driver (Version: 15.3.11.0)
Torchlight (x32 Version: 2.2.0.98)
TrojanHunter 5.5 (x32 Version: 5.5)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Zip Opener (HKCU)
Update Installer for WildTangent Games App (x32)
Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)
VIP Access SDK (1.0.1.2)  (x32 Version: 1.0.1.2)
Virtual Families (x32 Version: 2.2.0.98)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Vittalia Installer (x32 Version: 1.0)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Zip Opener Packages (HKCU)
Zuma's Revenge (x32 Version: 2.2.0.98)

==================== Restore Points  =========================

30-07-2013 11:31:07 Windows Update
31-07-2013 00:22:10 Windows Update
03-08-2013 00:34:39 Windows Update
03-08-2013 09:03:55 Windows Defender Checkpoint
04-08-2013 14:21:52 RegClean Pro So, Aug 04, 13  16:21
05-08-2013 00:23:11 Konfiguriert YouCam
05-08-2013 02:50:07 Removed HP Software Framework
05-08-2013 03:06:26 Removed Bonjour
05-08-2013 03:07:22 Removed ScanSoft PaperPort 11
05-08-2013 03:08:33 Removed HP Software Framework
05-08-2013 03:09:28 Removed Apple Software Update
05-08-2013 03:10:17 Removed HP Power Manager
05-08-2013 03:12:50 Removed HP SimplePass PE 2011.
05-08-2013 03:16:44 HPSF Applying updates
05-08-2013 03:17:25 Removed Microsoft SQL Server 2005 Compact Edition [ENU]
05-08-2013 03:29:44 HPSF Applying updates
05-08-2013 10:30:47 PC Performer Mo, Aug 05, 13  12:30
05-08-2013 11:31:06 Removed HP Support Assistant.
05-08-2013 11:34:55 Windows Modules Installer
05-08-2013 11:35:55 Windows Modules Installer

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0E756D8D-756C-41E2-BEA6-67524853BDFD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\NetworkCheck => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_NetworkCheck.exe No File
Task: {108ED07C-03A6-41B5-BD57-5210640D816E} - System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24} => C:\Windows\system32\msfeedssync.exe [2011-11-04] (Microsoft Corporation)
Task: {296BED8D-8F7A-40EE-AFDD-642839AC7E7F} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2012-07-23] (DealPly)
Task: {36F254D2-C6CB-45A9-8C9D-52F22394C168} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {370B0840-7ADC-42CB-8CB4-8D695C560633} - System32\Tasks\HPCeeScheduleForPC-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {424202EF-76FA-4231-BF7A-5153EB49F987} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {58A24A98-E7CB-4B24-8C1F-1A8963D3C8B7} - System32\Tasks\DigitalSite => C:\Users\PC\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE [2013-04-12] ()
Task: {61360211-0BEE-4906-8179-5D9AEAB7C840} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {69EBF01E-16AF-43A1-BF6C-0AACD9FCDD08} - System32\Tasks\EPUpdater => C:\Users\PC\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-08-04] ()
Task: {6C7BF802-9EB1-4122-947C-51C8A85A2D86} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {7104F768-5868-488F-93A3-688D5F28BF27} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-04] (LyriXeeker Tech)
Task: {7803460A-27D3-496B-BA5B-4E7D2A672A4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {7B23AA02-47AA-4438-ACD7-39F35F3E30F0} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {7BC9611B-2327-49BD-9843-F5E12BC6F221} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {8C6D4064-CEB6-447A-A60D-CD73070211D9} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {98CB5CC5-54F9-473B-AFF5-A5288B369E48} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {99FAE62C-6ADA-47F5-9A51-5EB3A1C981E4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-09-28] (CyberLink)
Task: {A6FE4960-A3EC-4F51-8824-561B0E954A5B} - System32\Tasks\HPCeeScheduleForPC => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {AC019BF5-2EB9-4103-AEE1-09CD370F4CBB} - System32\Tasks\DealPly => C:\Users\PC\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE [2013-03-10] ()
Task: {BB2B61AB-8F28-4C1A-B734-149274723F67} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2011-09-28] ()
Task: {BE76026C-82DF-4A96-8176-AA380970A760} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {DBA3C8D2-8158-498F-85B1-8327426FBA35} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {DD4945D1-995B-4E69-8A16-D5F5030AEF80} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\DigitalSite.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/05/2013 00:19:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 05:08:08 AM) (Source: MsiInstaller) (User: PC-HP)
Description: Produkt: ScanSoft PaperPort 11 -- Fehler 1706.Für das Produkt ScanSoft PaperPort 11 wurde kein Installationspaket gefunden.  Das Windows-Installationsprogramm kann nicht fortgesetzt werden.

Error: (08/05/2013 04:58:03 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 04:51:24 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 02:20:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 00:07:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:41:31 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:34:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/05/2013 02:38:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 00:20:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 11:35:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 11:05:35 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 10:50:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 10:12:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 09:12:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 05:07:41 AM) (Source: DCOM) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe -Embedding740{9C0BA3C1-2B67-45EB-BF69-BED9658D28D2}

Error: (08/05/2013 04:33:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 04:06:10 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (08/05/2013 00:19:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 05:08:08 AM) (Source: MsiInstaller)(User: PC-HP)
Description: Produkt: ScanSoft PaperPort 11 -- Fehler 1706.Für das Produkt ScanSoft PaperPort 11 wurde kein Installationspaket gefunden.  Das Windows-Installationsprogramm kann nicht fortgesetzt werden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (08/05/2013 04:58:03 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\PC\Downloads\esetsmartinstaller_deu.exe

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\$Recycle.Bin\S-1-5-21-3199093499-978631591-3148159529-1001\$RAHMNXL.exe

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\$Recycle.Bin\S-1-5-21-3199093499-978631591-3148159529-1001\$R50CCKS.exe

Error: (08/05/2013 04:51:24 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe

Error: (08/05/2013 02:20:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 00:07:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:41:31 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:34:05 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-19 11:36:38.235
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.165
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.756
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.726
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 44%
Total physical RAM: 6091.86 MB
Available physical RAM: 3365.33 MB
Total Pagefile: 12181.9 MB
Available Pagefile: 9265.45 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:440.99 GB) (Free:363.23 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.61 GB) (Free:2.19 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 257422C2)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)

==================== End Of Log ============================
         

--- --- ---


FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by PC (administrator) on 05-08-2013 16:57:08
Running from C:\Users\PC\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Windows\system32\LFOGRPOW.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Dropbox, Inc.) C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe
(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\TrojanHunter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
(Microsoft Corporation) C:\Windows\SysWOW64\schtasks.exe
() C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
() C:\Users\PC\Qtrax\Player\Notification.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
HKLM-x32\...\Runonce: [Del16251326] - cmd.exe /Q /D /c del "C:\Users\PC\AppData\Local\Temp\0.del" [x]
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [NTRedirect] - C:\Windows\SysWOW64\rundll32.exe [44544 2009-07-14] (Microsoft Corporation) <===== ATTENTION
HKCU\...\Run: [CCleaner] - C:\Program Files\CCleaner\CCleaner64.exe [6154008 2013-05-24] (Piriform Ltd)
HKCU\...\Run: [QtraxNotification] - C:\Users\PC\Qtrax\Player\Notification.exe [118568 2013-08-05] ()
HKCU\...\Runonce: [Del16251326] - cmd.exe /Q /D /c del "C:\Users\PC\AppData\Local\Temp\0.del" [x]
HKCU\...\RunOnce: [Qtrax] - C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 1914874918.portal.qtrax.com [387224 2013-05-13] (Microsoft Corporation)
HKCU\...\Policies\system: [DisableLockWorkstation] 1
HKCU\...\Policies\system: [DisableTaskMgr] 1
HKCU\...\Policies\system: [DisableChangePassword] 1
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security)
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll  [2691536 2013-07-26] ()
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * tpnative

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Delta Search
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = Delta Search
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM-x32 - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKLM-x32 - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKLM-x32 - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10015
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
SearchScopes: HKCU - {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp://eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKCU - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = hxxp://dts.search-results.com/sr?src=ieb&gct=ds&appid=342&systemid=406&apn_dtid=BND406&apn_ptnrs=AG6&o=APN10645&apn_uid=4660003445044822&q={searchTerms}
SearchScopes: HKCU - {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://de.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&crg=3.1010000.10015
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -  No File
BHO-x32: PriceGong - Price Comparison - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.11\PriceGongIE.dll (PriceGong)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll (Delta-search.com)
BHO-x32: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} -  No File
BHO-x32: LyricXeeker - {d2f7ea55-9ec3-4993-a1e9-62bdb904fd6d} - C:\Program Files (x86)\LyriXeeker\125.dll (LyriXeeker Tech)
BHO-x32: holasearch Helper Object - {DFF9B2DA-EF99-4B26-83CB-7058299999D8} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll (holasearch.com)
BHO-x32: SweetPacks Browser Helper - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
BHO-x32: No Name - {f34c9277-6577-4dff-b2d7-7d58092f272f} -  No File
Toolbar: HKLM-x32 - SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
Toolbar: HKLM-x32 - No Name - {f34c9277-6577-4dff-b2d7-7d58092f272f} -  No File
Toolbar: HKLM-x32 - Holasearch Toolbar - {C510DFFB-0AFE-484C-BA40-CED5B74C4EEF} - C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchTlbr.dll (holasearch.com)
Toolbar: HKLM-x32 - Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll (Delta-search.com)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.220.18.8 89.246.64.8

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default
FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\user.js
FF NewTab: hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: LyricXeeker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\125
FF Extension: Delta Toolbar - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\ffxtlbr@delta.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\125.xpi
FF Extension: No Name - C:\Program Files (x86)\LyriXeeker\125.xpi

Chrome: 
=======
CHR Extension: (PriceGong) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok\5.6.11_0
CHR Extension: (Delta Toolbar) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde\1.4_0
CHR Extension: (LyricXeeker) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\epojlgbehpaeekopencdagbdamnkppci\1.125_0
CHR Extension: (hola Toolbar) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla\1.1_0
CHR Extension: (DealPly) - C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.5.3.0_0
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.6.11\pricegong.crx
CHR HKLM-x32\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\PC\AppData\Roaming\BabSolution\CR\Delta.crx
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\125.crx
CHR HKLM-x32\...\Chrome\Extension: [fagpjgjmoaccgkkpjeoinehnoaimnbla] - C:\Users\PC\AppData\Roaming\BabSolution\CR\hola.crx
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2847696 2013-07-26] ()
S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
S4 FUSServices; C:\Windows\SysWOW64\FUSServices.exe [10752 2010-01-09] ()
S4 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-22] (GFI Software)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 XMLDIUSB; C:\Windows\System32\Drivers\XMLDIUSB.sys [55808 2010-01-30] (OEM)
S3 dsio; \??\C:\Program Files (x86)\Common Files\TrustPort\bin\dsio.sys [x]
U4 vsserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-05 16:53 - 2013-08-05 16:53 - 00000000 ____D C:\FRST
2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00002347 _____ C:\Users\PC\Desktop\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Delta
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-05 16:49 - 2013-08-05 16:49 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 16:47 - 2013-08-05 16:47 - 00109768 _____ C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 04:42 - 2013-08-05 16:44 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:29 - 2013-08-05 03:31 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:09 - 2013-08-05 12:20 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 03:09 - 2013-08-05 03:10 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:09 - 2013-08-05 03:10 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:07 - 2013-08-05 03:08 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-04 16:21 - 2013-08-05 04:39 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:20 - 2013-08-05 04:33 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-04 16:19 - 2013-08-05 16:32 - 00000000 ____D C:\Users\PC\AppData\Roaming\Systweak
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:41 - 2013-08-03 02:41 - 00655200 _____ C:\Users\PC\Downloads\setup.exe
2013-08-03 02:40 - 2013-08-05 16:50 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-03 02:39 - 2013-08-05 16:49 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-03 02:39 - 2013-08-05 16:49 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-03 02:39 - 2013-08-05 16:49 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-08-03 02:39 - 2013-08-05 16:49 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:26 - 2013-08-05 16:36 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 03:26 - 2013-08-05 12:19 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 03:26 - 2013-08-02 03:31 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:26 - 2013-08-02 03:31 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:20 - 2013-08-02 03:25 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-29 18:46 - 2013-07-29 18:47 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-18 00:01 - 2013-07-18 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-14 19:58 - 2013-07-14 21:44 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 04:02 - 2013-05-29 08:15 - 17829376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 04:02 - 2013-05-29 07:50 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 04:02 - 2013-05-29 07:43 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 04:02 - 2013-05-29 07:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 04:02 - 2013-05-29 07:35 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 04:02 - 2013-05-29 07:34 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 07:33 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 04:02 - 2013-05-29 07:31 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 07:27 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 04:02 - 2013-05-29 07:27 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 07:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 07:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 07:18 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 04:02 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 04:02 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 04:02 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 04:02 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-11 04:02 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-10 16:52 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 16:52 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 16:52 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 16:52 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 16:47 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 16:46 - 2013-04-10 07:45 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 16:46 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe
137

==================== One Month Modified Files and Folders =======

2013-08-05 16:55 - 2013-08-05 16:54 - 00033560 _____ C:\Users\PC\Downloads\Addition.txt
2013-08-05 16:53 - 2013-08-05 16:53 - 00000000 ____D C:\FRST
2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:52 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-05 16:52 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00002347 _____ C:\Users\PC\Desktop\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00001110 _____ C:\Users\Public\Desktop\Open It!.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Delta
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\Delta
2013-08-05 16:50 - 2013-08-03 02:40 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-05 16:50 - 2013-07-01 14:20 - 00003370 _____ C:\Windows\System32\Tasks\EPUpdater
2013-08-05 16:49 - 2013-08-05 16:49 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 16:49 - 2013-08-03 02:39 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-05 16:49 - 2013-08-03 02:39 - 00003024 _____ C:\Windows\System32\Tasks\LyricXeeker Update
2013-08-05 16:49 - 2013-08-03 02:39 - 00000382 _____ C:\Windows\Tasks\LyricXeeker Update.job
2013-08-05 16:49 - 2013-08-03 02:39 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 16:47 - 2013-08-05 16:47 - 00109768 _____ C:\Users\PC\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-05 16:44 - 2013-08-05 04:42 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 16:36 - 2013-08-02 03:26 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-05 16:34 - 2013-06-28 21:35 - 00000000 ____D C:\Users\PC\AppData\Roaming\PerformerSoft
2013-08-05 16:32 - 2013-08-04 16:19 - 00000000 ____D C:\Users\PC\AppData\Roaming\Systweak
2013-08-05 16:31 - 2013-06-11 11:42 - 01195779 _____ C:\Windows\WindowsUpdate.log
2013-08-05 15:14 - 2013-03-23 21:05 - 00380928 ___SH C:\Users\PC\Desktop\Thumbs.db
2013-08-05 14:40 - 2011-11-04 21:53 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-05 14:40 - 2011-11-04 21:53 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-05 14:40 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-05 14:38 - 2012-10-28 23:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 13:47 - 2013-06-27 23:03 - 00000000 ____D C:\Users\PC\Desktop\uni
2013-08-05 13:37 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-08-05 13:37 - 2011-11-04 13:24 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-08-05 13:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-05 13:33 - 2011-11-04 13:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-05 13:16 - 2012-10-28 23:54 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-08-05 13:15 - 2013-04-14 18:42 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-08-05 12:23 - 2012-10-26 18:24 - 00003906 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24}
2013-08-05 12:20 - 2013-08-05 03:09 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 12:20 - 2013-01-15 18:56 - 00000000 ___RD C:\Users\PC\Dropbox
2013-08-05 12:20 - 2013-01-15 18:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\Dropbox
2013-08-05 12:19 - 2013-08-02 03:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-05 12:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 05:37 - 2011-02-10 21:23 - 00000000 ____D C:\SWSetup
2013-08-05 05:14 - 2011-12-12 02:45 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2013-08-05 05:09 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files\Bonjour
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-08-05 04:43 - 2013-06-21 17:53 - 00000000 ___RD C:\Users\PC\Desktop\mm
2013-08-05 04:43 - 2012-10-29 17:17 - 00000000 ____D C:\Users\PC\Desktop\Laptob Datein 1
2013-08-05 04:42 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Politik
2013-08-05 04:39 - 2013-08-04 16:21 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-05 04:33 - 2013-08-04 16:20 - 00000000 ____D C:\Program Files (x86)\MyPC Backup
2013-08-05 04:33 - 2012-10-26 18:24 - 00000000 ___RD C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:31 - 2013-08-05 03:29 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:10 - 2013-08-05 03:09 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:10 - 2013-08-05 03:09 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:08 - 2013-08-05 03:07 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-05 02:23 - 2012-11-18 22:47 - 00000000 ____D C:\Users\PC\Documents\Youcam
2013-08-04 17:18 - 2012-11-03 00:20 - 00000000 ____D C:\Windows\Minidump
2013-08-04 17:18 - 2012-10-26 18:39 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-04 16:13 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Musik
2013-08-04 14:32 - 2013-04-07 18:23 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC
2013-08-04 14:32 - 2013-04-07 18:23 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForPC.job
2013-08-03 11:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:44 - 2012-10-26 18:19 - 00000000 ____D C:\Users\PC
2013-08-03 02:41 - 2013-08-03 02:41 - 00655200 _____ C:\Users\PC\Downloads\setup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:31 - 2013-08-02 03:26 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:31 - 2013-08-02 03:26 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:27 - 2013-02-12 22:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-02 03:25 - 2013-08-02 03:20 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-31 12:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-31 10:32 - 2012-11-24 12:36 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC-HP$
2013-07-31 10:32 - 2012-11-24 12:36 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job
2013-07-29 18:47 - 2013-07-29 18:46 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-19 11:02 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Depression Konzept
2013-07-18 00:01 - 2013-07-18 00:01 - 00000000 ____D C:\Program Files (x86)\ESET
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-16 09:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-15 19:11 - 2012-11-25 20:11 - 00000000 ____D C:\Program Files (x86)\DealPly
2013-07-14 21:44 - 2013-07-14 19:58 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 09:43 - 2013-03-13 15:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 09:43 - 2011-11-04 13:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 04:15 - 2012-10-26 19:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:50 - 2012-11-04 16:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-10 01:50 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe

Files to move or delete:
====================
C:\Windows\SysWOW64\rundll32.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-25 18:12

==================== End Of Log ============================
         

--- --- ---

--- --- ---

FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-08-2013
Ran by PC at 2013-08-05 16:57:58
Running from C:\Users\PC\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Ad-Aware Browsing Protection (x32 Version: 1.0.1.82)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)
AMD APP SDK Runtime (Version: 2.5.709.2)
AMD Catalyst Install Manager (Version: 3.0.838.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Bejeweled 3 (x32 Version: 2.2.0.98)
BrowserDefender (x32)
Cake Mania (x32 Version: 2.2.0.98)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center InstallProxy (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Localization All (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0817.2216.38121)
CCC Help Chinese Standard (x32 Version: 2011.0817.2215.38121)
CCC Help Chinese Traditional (x32 Version: 2011.0817.2215.38121)
CCC Help Czech (x32 Version: 2011.0817.2215.38121)
CCC Help Danish (x32 Version: 2011.0817.2215.38121)
CCC Help Dutch (x32 Version: 2011.0817.2215.38121)
CCC Help English (x32 Version: 2011.0817.2215.38121)
CCC Help Finnish (x32 Version: 2011.0817.2215.38121)
CCC Help French (x32 Version: 2011.0817.2215.38121)
CCC Help German (x32 Version: 2011.0817.2215.38121)
CCC Help Greek (x32 Version: 2011.0817.2215.38121)
CCC Help Hungarian (x32 Version: 2011.0817.2215.38121)
CCC Help Italian (x32 Version: 2011.0817.2215.38121)
CCC Help Japanese (x32 Version: 2011.0817.2215.38121)
CCC Help Korean (x32 Version: 2011.0817.2215.38121)
CCC Help Norwegian (x32 Version: 2011.0817.2215.38121)
CCC Help Polish (x32 Version: 2011.0817.2215.38121)
CCC Help Portuguese (x32 Version: 2011.0817.2215.38121)
CCC Help Russian (x32 Version: 2011.0817.2215.38121)
CCC Help Spanish (x32 Version: 2011.0817.2215.38121)
CCC Help Swedish (x32 Version: 2011.0817.2215.38121)
CCC Help Thai (x32 Version: 2011.0817.2215.38121)
CCC Help Turkish (x32 Version: 2011.0817.2215.38121)
ccc-utility64 (Version: 2011.0817.2216.38121)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Companion Suite Pro LL2 (x32 Version: 1.2.6)
Companion Suite Pro LL2 Drivers (x32 Version: 1.2.6)
Cradle of Rome 2 (x32 Version: 2.2.0.98)
CyberLink YouCam (x32 Version: 3.5.0.4528)
D3DX10 (x32 Version: 15.4.2368.0902)
DealPly (HKCU)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Delta Chrome Toolbar (x32)
Delta toolbar   (x32 Version: 1.8.22.0)
Dropbox (HKCU Version: 2.0.22)
eaner (Version: 4.02)
ESU for Microsoft Windows 7 SP1 (x32 Version: 2.1.1)
Farm Frenzy (x32 Version: 2.2.0.98)
Farmscapes (x32 Version: 2.2.0.98)
FATE (x32 Version: 2.2.0.97)
Final Drive Fury (x32 Version: 2.2.0.95)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.21.153)
hola Chrome Toolbar (x32)
holasearch toolbar   (x32 Version: 1.8.16.16)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Documentation (x32 Version: 1.1.0.0)
HP Games (x32 Version: 1.0.2.5)
HP Launch Box (Version: 1.0.12)
HP On Screen Display (x32 Version: 1.3.5)
HP Quick Launch (x32 Version: 2.7.2)
HP QuickWeb (x32 Version: 3.1.1.10197)
HP Recovery Manager (x32 Version: 2.0.0)
HP Security Assistant (Version: 1.0.12)
HP Setup (x32 Version: 9.0.15076.3891)
HP Setup Manager (x32 Version: 1.2.14901.3869)
IDT Audio (x32 Version: 1.0.6365.0)
iLivid (x32 Version: 4.0.0.2208)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Display Audio Driver (x32 Version: 6.14.00.3074)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026)
iTunes (Version: 11.0.4.4)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest II (x32 Version: 2.2.0.97)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LyricXeeker (x32)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Business 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Notification Center (x32 Version: 0.7.7.813)
Open It! (x32 Version: 1.1.1)
opensource (x32 Version: 1.0.14960.3876)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
PriceGong 2.6.11 (x32 Version: 2.6.11)
PX Profile Update (x32 Version: 1.00.1.)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player (HKCU)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.2.13.0)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
ScanSoft PaperPort 11 (x32 Version: 11.1.0000)
Search-Results Toolbar (x32 Version: 1.0.0.12)
Skype™ 6.6 (x32 Version: 6.6.106)
SweetPacks Toolbar for Internet Explorer 4.5 (x32 Version: 4.5.0000)
swMSM (x32 Version: 12.0.0.1)
Synaptics TouchPad Driver (Version: 15.3.11.0)
Torchlight (x32 Version: 2.2.0.98)
TrojanHunter 5.5 (x32 Version: 5.5)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Zip Opener (HKCU)
Update Installer for WildTangent Games App (x32)
Update Manager for SweetPacks 1.0 (x32 Version: 1.0.0005)
VIP Access SDK (1.0.1.2)  (x32 Version: 1.0.1.2)
Virtual Families (x32 Version: 2.2.0.98)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Vittalia Installer (x32 Version: 1.0)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Zip Opener Packages (HKCU)
Zuma's Revenge (x32 Version: 2.2.0.98)

==================== Restore Points  =========================

30-07-2013 11:31:07 Windows Update
31-07-2013 00:22:10 Windows Update
03-08-2013 00:34:39 Windows Update
03-08-2013 09:03:55 Windows Defender Checkpoint
04-08-2013 14:21:52 RegClean Pro So, Aug 04, 13  16:21
05-08-2013 00:23:11 Konfiguriert YouCam
05-08-2013 02:50:07 Removed HP Software Framework
05-08-2013 03:06:26 Removed Bonjour
05-08-2013 03:07:22 Removed ScanSoft PaperPort 11
05-08-2013 03:08:33 Removed HP Software Framework
05-08-2013 03:09:28 Removed Apple Software Update
05-08-2013 03:10:17 Removed HP Power Manager
05-08-2013 03:12:50 Removed HP SimplePass PE 2011.
05-08-2013 03:16:44 HPSF Applying updates
05-08-2013 03:17:25 Removed Microsoft SQL Server 2005 Compact Edition [ENU]
05-08-2013 03:29:44 HPSF Applying updates
05-08-2013 10:30:47 PC Performer Mo, Aug 05, 13  12:30
05-08-2013 11:31:06 Removed HP Support Assistant.
05-08-2013 11:34:55 Windows Modules Installer
05-08-2013 11:35:55 Windows Modules Installer

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0E756D8D-756C-41E2-BEA6-67524853BDFD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\NetworkCheck => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_NetworkCheck.exe No File
Task: {108ED07C-03A6-41B5-BD57-5210640D816E} - System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24} => C:\Windows\system32\msfeedssync.exe [2011-11-04] (Microsoft Corporation)
Task: {296BED8D-8F7A-40EE-AFDD-642839AC7E7F} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe [2012-07-23] (DealPly)
Task: {36F254D2-C6CB-45A9-8C9D-52F22394C168} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {370B0840-7ADC-42CB-8CB4-8D695C560633} - System32\Tasks\HPCeeScheduleForPC-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {424202EF-76FA-4231-BF7A-5153EB49F987} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {58A24A98-E7CB-4B24-8C1F-1A8963D3C8B7} - System32\Tasks\DigitalSite => C:\Users\PC\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE [2013-04-12] ()
Task: {61360211-0BEE-4906-8179-5D9AEAB7C840} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {69EBF01E-16AF-43A1-BF6C-0AACD9FCDD08} - System32\Tasks\EPUpdater => C:\Users\PC\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe [2013-08-04] ()
Task: {6C7BF802-9EB1-4122-947C-51C8A85A2D86} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {7104F768-5868-488F-93A3-688D5F28BF27} - System32\Tasks\LyricXeeker Update => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe [2013-08-04] (LyriXeeker Tech)
Task: {7803460A-27D3-496B-BA5B-4E7D2A672A4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {7B23AA02-47AA-4438-ACD7-39F35F3E30F0} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {7BC9611B-2327-49BD-9843-F5E12BC6F221} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {8C6D4064-CEB6-447A-A60D-CD73070211D9} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {98CB5CC5-54F9-473B-AFF5-A5288B369E48} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {99FAE62C-6ADA-47F5-9A51-5EB3A1C981E4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-09-28] (CyberLink)
Task: {A6FE4960-A3EC-4F51-8824-561B0E954A5B} - System32\Tasks\HPCeeScheduleForPC => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {AC019BF5-2EB9-4103-AEE1-09CD370F4CBB} - System32\Tasks\DealPly => C:\Users\PC\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE [2013-03-10] ()
Task: {BB2B61AB-8F28-4C1A-B734-149274723F67} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2011-09-28] ()
Task: {BE76026C-82DF-4A96-8176-AA380970A760} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {DBA3C8D2-8158-498F-85B1-8327426FBA35} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {DD4945D1-995B-4E69-8A16-D5F5030AEF80} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\DigitalSite.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\LyricXeeker Update.job => C:\Program Files (x86)\LyriXeeker\LyriXupdate.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/05/2013 00:19:58 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 05:08:08 AM) (Source: MsiInstaller) (User: PC-HP)
Description: Produkt: ScanSoft PaperPort 11 -- Fehler 1706.Für das Produkt ScanSoft PaperPort 11 wurde kein Installationspaket gefunden.  Das Windows-Installationsprogramm kann nicht fortgesetzt werden.

Error: (08/05/2013 04:58:03 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 04:51:24 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/05/2013 02:20:12 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 00:07:03 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:41:31 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:34:05 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/05/2013 02:38:24 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 00:20:23 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 11:35:00 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 11:05:35 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 10:50:44 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 10:12:05 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 09:12:18 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 05:07:41 AM) (Source: DCOM) (User: )
Description: C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe -Embedding740{9C0BA3C1-2B67-45EB-BF69-BED9658D28D2}

Error: (08/05/2013 04:33:16 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 04:06:10 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058


Microsoft Office Sessions:
=========================
Error: (08/05/2013 00:19:58 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 05:08:08 AM) (Source: MsiInstaller)(User: PC-HP)
Description: Produkt: ScanSoft PaperPort 11 -- Fehler 1706.Für das Produkt ScanSoft PaperPort 11 wurde kein Installationspaket gefunden.  Das Windows-Installationsprogramm kann nicht fortgesetzt werden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (08/05/2013 04:58:03 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\PC\Downloads\esetsmartinstaller_deu.exe

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\$Recycle.Bin\S-1-5-21-3199093499-978631591-3148159529-1001\$RAHMNXL.exe

Error: (08/05/2013 04:52:41 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\$Recycle.Bin\S-1-5-21-3199093499-978631591-3148159529-1001\$R50CCKS.exe

Error: (08/05/2013 04:51:24 AM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe

Error: (08/05/2013 02:20:12 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 00:07:03 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:41:31 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/04/2013 10:34:05 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-19 11:36:38.235
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.165
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.756
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.726
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 6091.86 MB
Available physical RAM: 3314.44 MB
Total Pagefile: 12181.9 MB
Available Pagefile: 9205.24 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:440.99 GB) (Free:363.23 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.61 GB) (Free:2.19 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 257422C2)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)

==================== End Of Log ============================
         

--- --- ---


Habe ich alles richtig gemacht, oder fehlt da noch was?

Servus,

Zitat von U-C

Habe ich alles richtig gemacht, oder fehlt da noch was?

Ja, hast du.




Du hast dir jede Menge Adware eingefangen.


Dann starten wir mal die Bereinigung:




AdwCleaner bitte zweimal direkt hintereinander genau so ausführen und beide Logdateien davon posten!

Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

• die beiden Logdateien von AdwCleaner,
• die Logdatei von JRT,
• die Logdatei von MBAM.

Hey

habe schritt 1 und 2 schon mal fertig. Die poste ich dann schon mal

Also die beiden LogdateienAdwCleaner Logfile:

# AdwCleaner v2.306 - Datei am 05/08/2013 um 17:20:38 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : PC - PC-HP
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\PC\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : BrowserDefendert

***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
Datei Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\bprotector_prefs.js
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\t01htm0o.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\t01htm0o.default\searchplugins\Babylon.xml
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Gelöscht mit Neustart : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Gelöscht mit Neustart : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\Program Files (x86)\DealPly
Ordner Gelöscht : C:\Program Files (x86)\delta
Ordner Gelöscht : C:\Program Files (x86)\holasearch
Ordner Gelöscht : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Ordner Gelöscht : C:\Program Files (x86)\PriceGong
Ordner Gelöscht : C:\Program Files (x86)\SweetIM
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\boost_interprocess
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
Ordner Gelöscht : C:\ProgramData\SoftSafe
Ordner Gelöscht : C:\ProgramData\SweetIM
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Ordner Gelöscht : C:\Users\PC\AppData\Local\Ilivid
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\ilividtoolbarguid
Ordner Gelöscht : C:\Users\PC\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\DealPly
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\delta
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\holasearch
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\extensions\ffxtlbr@delta.com
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\PC\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Windows\Installer\{5B58EF61-85F2-4977-97A5-84C19F926579}
Ordner Gelöscht : C:\Windows\Installer\{FB697452-8CA4-46B4-98B1-165C922A2EF3}

***** [Registrierungsdatenbank] *****

Daten Gelöscht : HKLM\..\Windows [AppInit_DLLs] = c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\APN DTX
Schlüssel Gelöscht : HKCU\Software\APN PIP
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
Schlüssel Gelöscht : HKCU\Software\BabSolution
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\DealPly
Schlüssel Gelöscht : HKCU\Software\Delta
Schlüssel Gelöscht : HKCU\Software\delta LTD
Schlüssel Gelöscht : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Schlüssel Gelöscht : HKCU\Software\holasearch
Schlüssel Gelöscht : HKCU\Software\ilivid
Schlüssel Gelöscht : HKCU\Software\ilividtoolbarguid
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\a6dfdcbc38be40
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\iLividIEHelper.DNSGuard.1
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\16FE85B52F587794795A481CF9295697
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\16FE85B52F587794795A481CF9295697
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar3.sweetie
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Toolbar3.sweetie.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1FDC0B61-91AC-4157-9B27-CAD9A09AB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{75E8DA27-44AF-40AE-927C-F2EEC99D65B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35E-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\DealPly
Schlüssel Gelöscht : HKLM\Software\Delta
Schlüssel Gelöscht : HKLM\Software\holasearch
Schlüssel Gelöscht : HKLM\Software\iLividSRTB
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\Software\PIP
Schlüssel Gelöscht : HKLM\Software\systweak
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\a6dfdcbc38be40
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F34C9277-6577-4DFF-B2D7-7D58092F272F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5B58EF61-85F2-4977-97A5-84C19F926579}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{FB697452-8CA4-46B4-98B1-165C922A2EF3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Hola Chrome Toolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\holasearch
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilividtoolbarguid
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9FF9AE6F-4553-41A7-B645-B0E88850EABF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CE4DB5A3-58E6-41F1-8761-47238DF4F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Schlüssel Gelöscht : HKLM\SOFTWARE\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014}
Schlüssel Gelöscht : HKU\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EEE6C35B-6118-11DC-9C72-001320C79847}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{F34C9277-6577-4DFF-B2D7-7D58092F272F}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16496

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\prefs.js

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\user.js ... Gelöscht !

Gelöscht : user_pref("browser.newtab.url", "hxxp://www1.delta-search.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&[...]
Gelöscht : user_pref("browser.search.selectedEngine", "Delta Search");
Gelöscht : user_pref("browser.startup.homepage", "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D36[...]
Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.bbDpng", "5");
Gelöscht : user_pref("extensions.delta.cntry", "DE");
Gelöscht : user_pref("extensions.delta.dfltLng", "de");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Gelöscht : user_pref("extensions.delta.hdrMd5", "BE97480306CF83B53AACDFF181340396");
Gelöscht : user_pref("extensions.delta.id", "a01584b10000000000007ce9d3626f22");
Gelöscht : user_pref("extensions.delta.instlDay", "15920");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.22.02:41:02");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.sg", "azb");
Gelöscht : user_pref("extensions.delta.smplGrp", "none");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.22.0");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.22.0");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.22.02:41:02");
Gelöscht : user_pref("extensions.delta_i.babExt", "");
Gelöscht : user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=4963");
Gelöscht : user_pref("extensions.delta_i.srcExt", "ss");

-\\ Google Chrome v28.0.1500.95

Datei : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [25821 octets] - [05/08/2013 17:20:38]

########## EOF - C:\AdwCleaner[S1].txt - [25882 octets] ##########
         

--- --- ---


adw cleaner (S2)AdwCleaner Logfile:

# AdwCleaner v2.306 - Datei am 05/08/2013 um 17:26:11 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : PC - PC-HP
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\PC\Downloads\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\searchplugins\Babylon.xml
Gelöscht mit Neustart : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Ordner Gelöscht : C:\ProgramData\BrowserDefender
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Ordner Gelöscht : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C510DFFB-0AFE-484C-BA40-CED5B74C4EEF}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DFF9B2DA-EF99-4B26-83CB-7058299999D8}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16496

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\prefs.js

[OK] Die Datei ist sauber.

-\\ Google Chrome v28.0.1500.95

Datei : C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] Die Datei ist sauber.

*************************

AdwCleaner[S1].txt - [25886 octets] - [05/08/2013 17:20:38]
AdwCleaner[S2].txt - [2381 octets] - [05/08/2013 17:26:11]

########## EOF - C:\AdwCleaner[S2].txt - [2441 octets] ##########
         

--- --- ---JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.3.3 (08.04.2013:1)
OS: Windows 7 Home Premium x64
Ran by PC on 05.08.2013 at 17:32:32,98
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs
Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

    Value Name          Type                             Value Data                     
========================================================================================
    NTRedirect    REG_SZ    C:\Windows\SysWOW64\rundll32.exe "C:\Users\PC\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\distromatic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{88AEA96D-C839-4D40-9888-4DC0F37C806E}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{88AEA96D-C839-4D40-9888-4DC0F37C806E}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\PC\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\PC\appdata\local\adawarebp"
Successfully deleted: [Folder] "C:\Users\PC\appdata\locallow\datamngr"
Failed to delete: [Folder] "C:\Program Files (x86)\lyrixeeker"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"
Successfully deleted: [Folder] "C:\Program Files (x86)\uniblue\speedupmypc"
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{0A27378B-5BC5-40D9-9CB9-8405B038DB27}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{27E307A1-318E-4E0B-86E6-2811C6B978FE}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{479552DA-F007-48E6-8C10-7A1A3F17949A}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{5BB4E2A2-B980-450C-81C3-9EBEDE2AE557}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{61A7B169-5A12-4D18-BAB9-B29019C92623}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{91BBF29B-388C-4D9A-BF84-EF6AE4E40E7E}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{ED85F71B-2207-48A2-988D-64C5B86B55C8}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{EE651C9A-22D0-4304-8E72-7887947584CF}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F1C319DB-3783-4366-A5E5-26815F5BCF2A}
Successfully deleted: [Empty Folder] C:\Users\PC\appdata\local\{F27C7AF7-C309-4A60-AB99-3D109133A45B}



~~~ FireFox

Successfully deleted: [File] C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\oxamfp2j.default\invalidprefs.js
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Emptied folder: C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\oxamfp2j.default\minidumps [30 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 05.08.2013 at 17:40:02,80
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---


Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2013.08.05.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
PC :: PC-HP [Administrator]

Schutz: Aktiviert

05.08.2013 17:58:43
mbam-log-2013-08-05 (17-58-43).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 214006
Laufzeit: 11 Minute(n), 23 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 6
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{17E58097-6CA5-448B-830F-2A19678248FB} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{17E58097-6CA5-448B-830F-2A19678248FB} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2f7ea55-9ec3-4993-a1e9-62bdb904fd6d} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{d2f7ea55-9ec3-4993-a1e9-62bdb904fd6d} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{32db519c-98a8-4129-828a-368cd8cf25a0} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{F9CF2BCB-2794-4E8B-A570-38B96572C2BE} (PUP.Optional.LyricXeeker.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKCU\Software\Microsoft\Windows\CurrentVersion\Run|NTRedirect (PUP.Optional.A.BabSolution) -> Daten: C:\Windows\SysWOW64\rundll32.exe "C:\Users\PC\AppData\Roaming\BabSolution\Shared\NTRedirect.dll",Run -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\Users\PC\Downloads\setup.exe (PUP.Optional.InstallCore) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\1372f5c.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\1372f63.msi (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\LyricXeeker Update.job (PUP.Optional.Lyrixeeker) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)


Und fertig

Servus,



sieht schon gut aus.
Wir spüren die letzten Reste auf, damit wie sie später entfernen können:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop.
SystemLook (64 bit)

• Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
  

  :filefind
  *systweak*
  *adawarebp*
  *datamngr*
  *lyrixeeker*
  *mypc backup*
  *speedupmypc*
  *sweetim*
  *distromatic*
  *BabSolution*
  *bProtector*
  *BrowserDefender*
  *iLivid*
  *holasearch*
  *DealPly*
  *Babylon*
  *Softonic*
  *delta LTD*
  *PriceGong*
  *OpenCandy*
  *PerformerSoft*
  *SoftSafe*
  *IBUpdater*
  
  :folderfind
  *systweak*
  *adawarebp*
  *datamngr*
  *lyrixeeker*
  *mypc backup*
  *speedupmypc*
  *sweetim*
  *distromatic*
  *BabSolution*
  *bProtector*
  *BrowserDefender*
  *iLivid*
  *holasearch*
  *DealPly*
  *Babylon*
  *Softonic*
  *delta LTD*
  *PriceGong*
  *OpenCandy*
  *PerformerSoft*
  *SoftSafe*
  *IBUpdater*
  
  :regfind
  systweak
  adawarebp
  datamngr
  lyrixeeker
  mypc backup
  speedupmypc
  sweetim
  distromatic
  BabSolution
  bProtector
  BrowserDefender
  iLivid
  holasearch
  DealPly
  Babylon
  Softonic
  delta LTD
  PriceGong
  OpenCandy
  PerformerSoft
  SoftSafe
  IBUpdater
           

• Klicke nun auf den Button Look, um den Scan zu starten.
• Der Suchlauf kann einige Zeit dauern.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.

Gibt es noch Probleme mit Malware? Wenn ja, welche?
Wie läuft der Rechner derzeit?





Bitte poste mit deiner nächsten Antwort

• die beiden Logdateien von FRST,
• die Logdatei von SystemLook,
• die Beantwortung der gestellten Fragen.

hey,

anbei die Daten:
FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-08-2013
Ran by PC (administrator) on 05-08-2013 22:20:53
Running from C:\Users\PC\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Windows\system32\LFOGRPOW.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Iminent) C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(CyberLink) C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Users\PC\Qtrax\Player\Notification.exe
(Dropbox, Inc.) C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Mischel Internet Security) C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe
(Iminent) C:\Program Files (x86)\Iminent\Iminent.exe
(Iminent) C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1424896 2011-09-08] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-07-18] (Microsoft Corporation)
HKLM\...\Winlogon: [Userinit] c:\windows\system32\userinit.exe
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [CCleaner] - C:\Program Files\CCleaner\CCleaner64.exe [6154008 2013-05-24] (Piriform Ltd)
HKCU\...\Run: [QtraxNotification] - C:\Users\PC\Qtrax\Player\Notification.exe [118568 2013-08-05] ()
HKCU\...\Policies\system: [DisableLockWorkstation] 1
HKCU\...\Policies\system: [DisableChangePassword] 1
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [578944 2012-03-05] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [THGuard] - C:\Program Files (x86)\TrojanHunter 5.5\THGuard.exe [1086880 2012-10-23] (Mischel Internet Security)
HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe [1074736 2013-07-02] (Iminent)
HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe [884784 2013-07-02] (Iminent)
Startup: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
BootExecute: autocheck autochk * tpnative

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {88AEA96D-C839-4D40-9888-4DC0F37C806E} URL = hxxp://www.amazon.de/s/ref=azs_osd_ieade?ie=UTF-8&tag=hp-de2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
SearchScopes: HKCU - {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/707-111076-19270-3/4?mpre=hxxp://www.ebay.de/sch/i.html?_nkw={searchTerms}
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: LyricsContainer - {83a2ad96-138f-4a98-b9db-4f65368dba9d} - C:\Program Files (x86)\LyricsContainer\125.dll (RYD Software)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (Iminent)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 62.220.18.8 89.246.64.8

FireFox:
========
FF ProfilePath: C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default
FF user.js: detected! => C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\user.js
FF Keyword.URL: hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: No Name - C:\Users\PC\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: LyricXeeker - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\125
FF Extension: webbooster - C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\Extensions\webbooster@iminent.com.xpi
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKCU\...\Firefox\Extensions: [lyrix@lyrixeeker.co] C:\Program Files (x86)\LyriXeeker\125.xpi
FF HKCU\...\Firefox\Extensions: [Lyrics@LyricsContainer.co] C:\Program Files (x86)\LyricsContainer\125.xpi
FF Extension: No Name - C:\Program Files (x86)\LyricsContainer\125.xpi

Chrome: 
=======
CHR HomePage: hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
CHR RestoreOnStartup: "hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965"
CHR DefaultSearchURL: (Delta Search) - hxxp://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=119357&tsp=4965
CHR DefaultSuggestURL: (Delta Search) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR HKLM-x32\...\Chrome\Extension: [epojlgbehpaeekopencdagbdamnkppci] - C:\Program Files (x86)\LyriXeeker\125.crx
CHR HKLM-x32\...\Chrome\Extension: [fagpjgjmoaccgkkpjeoinehnoaimnbla] - C:\Users\PC\AppData\Roaming\BabSolution\CR\hola.crx
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [keaillmajpeodnbelalgeffidfcdgiem] - C:\Program Files (x86)\LyricsContainer\125.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393080 2012-10-25] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384888 2012-10-25] (BlueStack Systems, Inc.)
S4 FUSServices; C:\Windows\SysWOW64\FUSServices.exe [10752 2010-01-09] ()
S4 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2013-07-18] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-07-18] (Microsoft Corporation)
R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\umbrella.exe [2864448 2013-08-05] (Iminent)

==================== Drivers (Whitelisted) ====================

R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [71032 2012-10-25] (BlueStack Systems)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2012-12-22] (GFI Software)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
S3 XMLDIUSB; C:\Windows\System32\Drivers\XMLDIUSB.sys [55808 2010-01-30] (OEM)
S3 dsio; \??\C:\Program Files (x86)\Common Files\TrustPort\bin\dsio.sys [x]
U4 vsserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-05 18:56 - 2013-08-05 18:56 - 00003816 _____ C:\Windows\System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl
2013-08-05 18:56 - 2013-08-05 18:56 - 00000635 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\ProgramData\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Program Files (x86)\Iminent
2013-08-05 18:55 - 2013-08-05 22:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-05 18:55 - 2013-08-05 18:55 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-05 18:55 - 2013-08-05 18:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-05 18:55 - 2013-08-05 18:55 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-05 18:49 - 2013-08-05 22:16 - 00000402 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-08-05 18:49 - 2013-08-05 18:49 - 00003044 _____ C:\Windows\System32\Tasks\LyricsContainer Update
2013-08-05 18:49 - 2013-08-05 18:49 - 00000000 ____D C:\Program Files (x86)\LyricsContainer
2013-08-05 18:48 - 2013-08-05 18:48 - 00288672 _____ C:\Users\PC\Downloads\Adobe Flash Player 11.exe
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\Malwarebytes
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-05 17:56 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-05 17:54 - 2013-08-05 17:55 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\PC\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-05 17:52 - 2013-08-05 17:52 - 00000051 _____ C:\Users\PC\AppData\Roaming\WB.CFG
2013-08-05 17:52 - 2013-08-05 17:52 - 00000005 _____ C:\Users\PC\AppData\Roaming\WBPU-TTL.DAT
2013-08-05 17:32 - 2013-08-05 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-08-05 17:31 - 2013-08-05 17:31 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\PC\Downloads\JRT.exe
2013-08-05 17:26 - 2013-08-05 17:26 - 00002508 _____ C:\AdwCleaner[S2].txt
2013-08-05 17:20 - 2013-08-05 17:26 - 00000358 _____ C:\Windows\DeleteOnReboot.bat
2013-08-05 17:20 - 2013-08-05 17:21 - 00025886 _____ C:\AdwCleaner[S1].txt
2013-08-05 17:19 - 2013-08-05 17:19 - 00666633 _____ C:\Users\PC\Downloads\adwcleaner.exe
2013-08-05 16:54 - 2013-08-05 16:58 - 00033560 _____ C:\Users\PC\Downloads\Addition.txt
2013-08-05 16:53 - 2013-08-05 16:53 - 00000000 ____D C:\FRST
2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:49 - 2013-08-05 17:37 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 04:42 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:29 - 2013-08-05 03:31 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:09 - 2013-08-05 12:20 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 03:09 - 2013-08-05 03:10 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:09 - 2013-08-05 03:10 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:07 - 2013-08-05 03:08 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-04 16:21 - 2013-08-05 04:39 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:40 - 2013-08-05 16:50 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-03 02:39 - 2013-08-05 18:49 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-03 02:39 - 2013-08-05 16:49 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:26 - 2013-08-05 22:16 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-02 03:26 - 2013-08-05 18:36 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-02 03:26 - 2013-08-02 03:31 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:26 - 2013-08-02 03:31 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:20 - 2013-08-02 03:25 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-29 18:46 - 2013-07-29 18:47 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-14 19:58 - 2013-07-14 21:44 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 04:02 - 2013-05-29 08:15 - 17829376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-11 04:02 - 2013-05-29 07:50 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-11 04:02 - 2013-05-29 07:43 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-11 04:02 - 2013-05-29 07:36 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-11 04:02 - 2013-05-29 07:35 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-11 04:02 - 2013-05-29 07:34 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 07:33 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-07-11 04:02 - 2013-05-29 07:31 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-07-11 04:02 - 2013-05-29 07:29 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 07:27 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-11 04:02 - 2013-05-29 07:27 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 07:25 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 07:25 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 07:18 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-11 04:02 - 2013-05-29 03:56 - 12333568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-11 04:02 - 2013-05-29 03:50 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-11 04:02 - 2013-05-29 03:48 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-07-11 04:02 - 2013-05-29 03:41 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-11 04:02 - 2013-05-29 03:41 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-11 04:02 - 2013-05-29 03:40 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-07-11 04:02 - 2013-05-29 03:38 - 00065024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-11 04:02 - 2013-05-29 03:37 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-07-11 04:02 - 2013-05-29 03:36 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-11 04:02 - 2013-05-29 03:35 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-11 04:02 - 2013-05-29 03:33 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-11 04:02 - 2013-05-29 03:33 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-07-11 04:02 - 2013-05-29 03:29 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-10 16:52 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-07-10 16:52 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-07-10 16:52 - 2013-05-06 08:03 - 01887744 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-10 16:52 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-07-10 16:47 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-07-10 16:46 - 2013-04-10 07:45 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-07-10 16:46 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe
156

==================== One Month Modified Files and Folders =======

2013-08-05 22:20 - 2013-06-11 11:42 - 01266921 ____N C:\Windows\WindowsUpdate.log
2013-08-05 22:17 - 2013-01-15 18:56 - 00000000 ___RD C:\Users\PC\Dropbox
2013-08-05 22:17 - 2013-01-15 18:53 - 00000000 ____D C:\Users\PC\AppData\Roaming\Dropbox
2013-08-05 22:16 - 2013-08-05 18:49 - 00000402 _____ C:\Windows\Tasks\LyricsContainer Update.job
2013-08-05 22:16 - 2013-08-02 03:26 - 00001098 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-05 22:15 - 2013-08-05 18:55 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-05 22:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-05 18:58 - 2011-11-04 21:53 - 00654166 _____ C:\Windows\system32\perfh007.dat
2013-08-05 18:58 - 2011-11-04 21:53 - 00130006 _____ C:\Windows\system32\perfc007.dat
2013-08-05 18:58 - 2009-07-14 07:13 - 01498506 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-05 18:57 - 2012-10-28 23:47 - 00000000 ____D C:\Users\PC\AppData\Roaming\Skype
2013-08-05 18:56 - 2013-08-05 18:56 - 00003816 _____ C:\Windows\System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl
2013-08-05 18:56 - 2013-08-05 18:56 - 00000635 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\ProgramData\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Program Files (x86)\Iminent
2013-08-05 18:56 - 2013-08-05 04:42 - 00000000 ____D C:\Users\PC\Desktop\Antivir
2013-08-05 18:55 - 2013-08-05 18:55 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-05 18:55 - 2013-08-05 18:55 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-05 18:55 - 2013-08-05 18:55 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-05 18:50 - 2012-10-26 19:11 - 00000000 ____D C:\Users\PC\AppData\Local\Adobe
2013-08-05 18:49 - 2013-08-05 18:49 - 00003044 _____ C:\Windows\System32\Tasks\LyricsContainer Update
2013-08-05 18:49 - 2013-08-05 18:49 - 00000000 ____D C:\Program Files (x86)\LyricsContainer
2013-08-05 18:49 - 2013-08-03 02:39 - 00000280 _____ C:\Windows\Tasks\DigitalSite.job
2013-08-05 18:48 - 2013-08-05 18:48 - 00288672 _____ C:\Users\PC\Downloads\Adobe Flash Player 11.exe
2013-08-05 18:36 - 2013-08-02 03:26 - 00001102 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-05 18:36 - 2012-10-29 17:17 - 00000000 ____D C:\Users\PC\Desktop\Laptob Datein 1
2013-08-05 18:21 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-05 18:21 - 2009-07-14 06:45 - 00031856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\Malwarebytes
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-05 17:56 - 2013-08-05 17:56 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-05 17:55 - 2013-08-05 17:54 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\PC\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-05 17:52 - 2013-08-05 17:52 - 00000051 _____ C:\Users\PC\AppData\Roaming\WB.CFG
2013-08-05 17:52 - 2013-08-05 17:52 - 00000005 _____ C:\Users\PC\AppData\Roaming\WBPU-TTL.DAT
2013-08-05 17:37 - 2013-08-05 16:49 - 00000000 ____D C:\Program Files (x86)\LyriXeeker
2013-08-05 17:37 - 2012-11-25 20:12 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-05 17:32 - 2013-08-05 17:32 - 00000000 ____D C:\Windows\ERUNT
2013-08-05 17:31 - 2013-08-05 17:31 - 00562008 _____ (Oleg N. Scherbakov) C:\Users\PC\Downloads\JRT.exe
2013-08-05 17:26 - 2013-08-05 17:26 - 00002508 _____ C:\AdwCleaner[S2].txt
2013-08-05 17:26 - 2013-08-05 17:20 - 00000358 _____ C:\Windows\DeleteOnReboot.bat
2013-08-05 17:21 - 2013-08-05 17:20 - 00025886 _____ C:\AdwCleaner[S1].txt
2013-08-05 17:19 - 2013-08-05 17:19 - 00666633 _____ C:\Users\PC\Downloads\adwcleaner.exe
2013-08-05 16:58 - 2013-08-05 16:54 - 00033560 _____ C:\Users\PC\Downloads\Addition.txt
2013-08-05 16:53 - 2013-08-05 16:53 - 00000000 ____D C:\FRST
2013-08-05 16:52 - 2013-08-05 16:52 - 01788733 _____ (Farbar) C:\Users\PC\Downloads\FRST64.exe
2013-08-05 16:50 - 2013-08-05 16:50 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-05 16:50 - 2013-08-05 16:50 - 00002377 _____ C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qtrax Player.lnk
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Users\PC\AppData\Roaming\Zip Opener Packages
2013-08-05 16:50 - 2013-08-05 16:50 - 00000000 ____D C:\Program Files (x86)\OpenIt
2013-08-05 16:50 - 2013-08-03 02:40 - 00003782 _____ C:\Windows\System32\Tasks\QtraxPlayer
2013-08-05 16:50 - 2013-07-01 14:20 - 00003370 _____ C:\Windows\System32\Tasks\EPUpdater
2013-08-05 16:49 - 2013-08-03 02:39 - 00003208 _____ C:\Windows\System32\Tasks\DigitalSite
2013-08-05 16:48 - 2013-08-05 16:48 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup(1).exe
2013-08-05 15:14 - 2013-03-23 21:05 - 00380928 ___SH C:\Users\PC\Desktop\Thumbs.db
2013-08-05 14:22 - 2013-08-05 14:22 - 00001622 _____ C:\Users\PC\Desktop\Mieterklaerung-alt.txt
2013-08-05 13:47 - 2013-06-27 23:03 - 00000000 ____D C:\Users\PC\Desktop\uni
2013-08-05 13:37 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Hewlett-Packard
2013-08-05 13:37 - 2011-11-04 13:24 - 00000000 ____D C:\Program Files (x86)\Hewlett-Packard
2013-08-05 13:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\Help
2013-08-05 13:33 - 2011-11-04 13:50 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-05 13:16 - 2012-10-28 23:54 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-08-05 13:15 - 2013-04-14 18:42 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-08-05 12:23 - 2012-10-26 18:24 - 00003906 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24}
2013-08-05 12:20 - 2013-08-05 03:09 - 00000000 ____D C:\Program Files (x86)\TrojanHunter 5.5
2013-08-05 11:43 - 2013-08-05 11:43 - 00000000 ____D C:\Users\PC\AppData\Roaming\TrojanHunter
2013-08-05 05:37 - 2011-02-10 21:23 - 00000000 ____D C:\SWSetup
2013-08-05 05:14 - 2011-12-12 02:45 - 00000000 ____D C:\Program Files\Common Files\AuthenTec
2013-08-05 05:09 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files\Bonjour
2013-08-05 05:06 - 2012-11-09 19:07 - 00000000 ____D C:\Program Files (x86)\Bonjour
2013-08-05 04:43 - 2013-06-21 17:53 - 00000000 ___RD C:\Users\PC\Desktop\mm
2013-08-05 04:42 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Politik
2013-08-05 04:39 - 2013-08-04 16:21 - 00000000 ____D C:\Program Files (x86)\Amazon
2013-08-05 04:33 - 2012-10-26 18:24 - 00000000 ___RD C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-05 03:32 - 2013-08-05 03:32 - 00001912 _____ C:\Windows\epplauncher.mif
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-08-05 03:32 - 2013-08-05 03:32 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-08-05 03:31 - 2013-08-05 03:29 - 13813944 _____ (Microsoft Corporation) C:\Users\PC\Downloads\mseinstall.exe
2013-08-05 03:10 - 2013-08-05 03:09 - 00059392 ____R C:\Windows\SysWOW64\streamhlp.dll
2013-08-05 03:10 - 2013-08-05 03:09 - 00000000 ____D C:\ProgramData\TrojanHunter
2013-08-05 03:08 - 2013-08-05 03:07 - 05843488 _____ (Mischel Internet Security                                   ) C:\Users\PC\Downloads\TrojanHunterSetup_5.5_Build_1003.exe
2013-08-05 02:23 - 2012-11-18 22:47 - 00000000 ____D C:\Users\PC\Documents\Youcam
2013-08-04 17:18 - 2012-11-03 00:20 - 00000000 ____D C:\Windows\Minidump
2013-08-04 17:18 - 2012-10-26 18:39 - 00000000 ____D C:\Users\PC\AppData\Local\CrashDumps
2013-08-04 16:21 - 2013-08-04 16:21 - 00129536 _____ C:\Users\Public\AlexaNSISPlugin.4584.dll
2013-08-04 16:17 - 2013-08-04 16:17 - 04653592 _____ (Systweak Inc                                                ) C:\Users\PC\Downloads\rcpsetupdsnr_ds367212.exe
2013-08-04 16:13 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Musik
2013-08-04 14:32 - 2013-04-07 18:23 - 00003168 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC
2013-08-04 14:32 - 2013-04-07 18:23 - 00000320 _____ C:\Windows\Tasks\HPCeeScheduleForPC.job
2013-08-03 11:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-03 02:44 - 2013-08-03 02:44 - 00000000 ____D C:\Users\PC\Qtrax
2013-08-03 02:44 - 2012-10-26 18:19 - 00000000 ____D C:\Users\PC
2013-08-03 02:39 - 2013-08-03 02:39 - 00717160 _____ C:\Users\PC\Downloads\ZipOpenerSetup.exe
2013-08-03 02:39 - 2013-08-03 02:39 - 00000000 ____D C:\Users\PC\AppData\Roaming\DigitalSite
2013-08-02 03:31 - 2013-08-02 03:26 - 00004098 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-08-02 03:31 - 2013-08-02 03:26 - 00003846 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-08-02 03:27 - 2013-08-02 03:27 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-02 03:27 - 2013-02-12 22:24 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-02 03:25 - 2013-08-02 03:20 - 34992280 _____ (Google Inc.) C:\Users\PC\Downloads\ChromeStandaloneSetup_28.0b1500.95.exe
2013-07-31 12:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-07-31 10:32 - 2012-11-24 12:36 - 00003212 _____ C:\Windows\System32\Tasks\HPCeeScheduleForPC-HP$
2013-07-31 10:32 - 2012-11-24 12:36 - 00000336 _____ C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job
2013-07-29 18:47 - 2013-07-29 18:46 - 00000000 ____D C:\Users\PC\AppData\Local\Facebook
2013-07-19 11:02 - 2012-10-29 16:08 - 00000000 ____D C:\Users\PC\Desktop\Depression Konzept
2013-07-17 23:56 - 2013-07-17 23:56 - 02347384 _____ (ESET) C:\Users\PC\Downloads\esetsmartinstaller_deu.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup.exe
2013-07-17 23:45 - 2013-07-17 23:45 - 00142981 _____ C:\Users\PC\Downloads\VTUploader2.0Setup(1).exe
2013-07-16 09:09 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-14 21:44 - 2013-07-14 19:58 - 00000000 ____D C:\Windows\system32\MRT
2013-07-11 09:43 - 2013-03-13 15:19 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-11 09:43 - 2011-11-04 13:40 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-11 05:06 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-07-11 04:15 - 2012-10-26 19:15 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-10 01:50 - 2013-07-10 01:50 - 00002517 _____ C:\Users\Public\Desktop\Skype.lnk
2013-07-10 01:50 - 2012-11-04 16:27 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-10 01:50 - 2011-11-04 13:40 - 00000000 ____D C:\ProgramData\Skype
2013-07-10 01:47 - 2013-07-10 01:47 - 01492584 _____ (Skype Technologies S.A.) C:\Users\PC\Downloads\SkypeSetup.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-25 18:12

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---


FRST Additions Logfile:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-08-2013
Ran by PC at 2013-08-05 22:23:04
Running from C:\Users\PC\Downloads
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
Ad-Aware Browsing Protection (x32 Version: 1.0.1.82)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.1.629)
AMD APP SDK Runtime (Version: 2.5.709.2)
AMD Catalyst Install Manager (Version: 3.0.838.0)
Apple Application Support (x32 Version: 2.3.4)
Apple Mobile Device Support (Version: 6.1.0.13)
Bejeweled 3 (x32 Version: 2.2.0.98)
Cake Mania (x32 Version: 2.2.0.98)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Graphics Previews Common (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center InstallProxy (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Localization All (x32 Version: 2011.0817.2216.38121)
Catalyst Control Center Profiles Mobile (x32 Version: 2011.0817.2216.38121)
CCC Help Chinese Standard (x32 Version: 2011.0817.2215.38121)
CCC Help Chinese Traditional (x32 Version: 2011.0817.2215.38121)
CCC Help Czech (x32 Version: 2011.0817.2215.38121)
CCC Help Danish (x32 Version: 2011.0817.2215.38121)
CCC Help Dutch (x32 Version: 2011.0817.2215.38121)
CCC Help English (x32 Version: 2011.0817.2215.38121)
CCC Help Finnish (x32 Version: 2011.0817.2215.38121)
CCC Help French (x32 Version: 2011.0817.2215.38121)
CCC Help German (x32 Version: 2011.0817.2215.38121)
CCC Help Greek (x32 Version: 2011.0817.2215.38121)
CCC Help Hungarian (x32 Version: 2011.0817.2215.38121)
CCC Help Italian (x32 Version: 2011.0817.2215.38121)
CCC Help Japanese (x32 Version: 2011.0817.2215.38121)
CCC Help Korean (x32 Version: 2011.0817.2215.38121)
CCC Help Norwegian (x32 Version: 2011.0817.2215.38121)
CCC Help Polish (x32 Version: 2011.0817.2215.38121)
CCC Help Portuguese (x32 Version: 2011.0817.2215.38121)
CCC Help Russian (x32 Version: 2011.0817.2215.38121)
CCC Help Spanish (x32 Version: 2011.0817.2215.38121)
CCC Help Swedish (x32 Version: 2011.0817.2215.38121)
CCC Help Thai (x32 Version: 2011.0817.2215.38121)
CCC Help Turkish (x32 Version: 2011.0817.2215.38121)
ccc-utility64 (Version: 2011.0817.2216.38121)
Chuzzle Deluxe (x32 Version: 2.2.0.95)
Companion Suite Pro LL2 (x32 Version: 1.2.6)
Companion Suite Pro LL2 Drivers (x32 Version: 1.2.6)
Cradle of Rome 2 (x32 Version: 2.2.0.98)
CyberLink YouCam (x32 Version: 3.5.0.4528)
D3DX10 (x32 Version: 15.4.2368.0902)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (x32)
Dropbox (HKCU Version: 2.0.22)
eaner (Version: 4.02)
ESU for Microsoft Windows 7 SP1 (x32 Version: 2.1.1)
Farm Frenzy (x32 Version: 2.2.0.98)
Farmscapes (x32 Version: 2.2.0.98)
FATE (x32 Version: 2.2.0.97)
Final Drive Fury (x32 Version: 2.2.0.95)
Fishdom (TM) 2 (x32 Version: 2.2.0.98)
Google Chrome (x32 Version: 28.0.1500.95)
Google Update Helper (x32 Version: 1.3.21.153)
HP Auto (Version: 1.0.12935.3667)
HP Client Services (Version: 1.1.12938.3539)
HP Customer Experience Enhancements (x32 Version: 6.0.1.8)
HP Documentation (x32 Version: 1.1.0.0)
HP Games (x32 Version: 1.0.2.5)
HP Launch Box (Version: 1.0.12)
HP On Screen Display (x32 Version: 1.3.5)
HP Quick Launch (x32 Version: 2.7.2)
HP QuickWeb (x32 Version: 3.1.1.10197)
HP Recovery Manager (x32 Version: 2.0.0)
HP Security Assistant (Version: 1.0.12)
HP Setup (x32 Version: 9.0.15076.3891)
HP Setup Manager (x32 Version: 1.2.14901.3869)
IDT Audio (x32 Version: 1.0.6365.0)
Iminent (x32 Version: 6.27.21.0)
Insaniquarium Deluxe (x32 Version: 2.2.0.97)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Display Audio Driver (x32 Version: 6.14.00.3074)
Intel(R) Identity Protection Technology 1.1.2.0 (x32 Version: 1.1.2.0)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1144)
Intel(R) Rapid Storage Technology (x32 Version: 10.5.0.1026)
iTunes (Version: 11.0.4.4)
Jewel Match 3 (x32 Version: 2.2.0.98)
Jewel Quest II (x32 Version: 2.2.0.97)
Jewel Quest Solitaire 2 (x32 Version: 2.2.0.98)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
LyricsContainer (x32)
LyricXeeker (x32)
Mahjongg Artifacts (x32 Version: 2.2.0.95)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 Service Pack 1 (SP1) (x32)
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Home and Business 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.6029.1000)
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.6029.1000)
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Single Image 2010 (x32 Version: 14.0.6029.1000)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.6029.1000)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.59192)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
Mystery of Mortlake Mansion (x32 Version: 2.2.0.98)
Notification Center (x32 Version: 0.7.7.813)
Open It! (x32 Version: 1.1.1)
opensource (x32 Version: 1.0.14960.3876)
Picasa 3 (x32 Version: 3.9)
Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.98)
Polar Bowler (x32 Version: 2.2.0.97)
PX Profile Update (x32 Version: 1.00.1.)
Qtrax Connection Manager (HKCU Version: 20.13.07.02)
Qtrax Player (HKCU)
Ralink RT5390 802.11b/g/n WiFi Adapter (x32 Version: 3.2.13.0)
Ranch Rush 2 - Premium Edition (x32 Version: 2.2.0.98)
Realtek Ethernet Controller Driver (x32 Version: 7.48.823.2011)
Realtek PCIE Card Reader (x32 Version: 6.1.7601.85)
ScanSoft PaperPort 11 (x32 Version: 11.1.0000)
Skype™ 6.6 (x32 Version: 6.6.106)
swMSM (x32 Version: 12.0.0.1)
Synaptics TouchPad Driver (Version: 15.3.11.0)
Torchlight (x32 Version: 2.2.0.98)
TrojanHunter 5.5 (x32 Version: 5.5)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
Update for Microsoft Office 2010 (KB2553065) (x32)
Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2566458) (x32)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (x32)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (x32)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition (x32)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (x32)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (x32)
Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition (x32)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (x32)
Update for Zip Opener (HKCU)
Update Installer for WildTangent Games App (x32)
VIP Access SDK (1.0.1.2)  (x32 Version: 1.0.1.2)
Virtual Families (x32 Version: 2.2.0.98)
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.98)
Vittalia Installer (x32 Version: 1.0)
Wedding Dash (x32 Version: 2.2.0.95)
WildTangent Games App (HP Games) (x32 Version: 4.0.5.32)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
Zip Opener Packages (HKCU)
Zuma's Revenge (x32 Version: 2.2.0.98)

==================== Restore Points  =========================

30-07-2013 11:31:07 Windows Update
31-07-2013 00:22:10 Windows Update
03-08-2013 00:34:39 Windows Update
03-08-2013 09:03:55 Windows Defender Checkpoint
04-08-2013 14:21:52 RegClean Pro So, Aug 04, 13  16:21
05-08-2013 00:23:11 Konfiguriert YouCam
05-08-2013 02:50:07 Removed HP Software Framework
05-08-2013 03:06:26 Removed Bonjour
05-08-2013 03:07:22 Removed ScanSoft PaperPort 11
05-08-2013 03:08:33 Removed HP Software Framework
05-08-2013 03:09:28 Removed Apple Software Update
05-08-2013 03:10:17 Removed HP Power Manager
05-08-2013 03:12:50 Removed HP SimplePass PE 2011.
05-08-2013 03:16:44 HPSF Applying updates
05-08-2013 03:17:25 Removed Microsoft SQL Server 2005 Compact Edition [ENU]
05-08-2013 03:29:44 HPSF Applying updates
05-08-2013 10:30:47 PC Performer Mo, Aug 05, 13  12:30
05-08-2013 11:31:06 Removed HP Support Assistant.
05-08-2013 11:34:55 Windows Modules Installer
05-08-2013 11:35:55 Windows Modules Installer

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0E756D8D-756C-41E2-BEA6-67524853BDFD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\NetworkCheck => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\Detection_NetworkCheck.exe No File
Task: {108ED07C-03A6-41B5-BD57-5210640D816E} - System32\Tasks\User_Feed_Synchronization-{75E60267-188F-4D4B-8264-70DD63169C24} => C:\Windows\system32\msfeedssync.exe [2011-11-04] (Microsoft Corporation)
Task: {11DCA7ED-218C-475E-9013-F3AE42F89647} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {296BED8D-8F7A-40EE-AFDD-642839AC7E7F} - System32\Tasks\DealPlyUpdate => C:\Program Files (x86)\DealPly\DealPlyUpdate.exe No File
Task: {312CDAAE-F5A2-4915-88F6-A231A222B985} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe [2013-07-18] (Microsoft Corporation)
Task: {36F254D2-C6CB-45A9-8C9D-52F22394C168} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {370B0840-7ADC-42CB-8CB4-8D695C560633} - System32\Tasks\HPCeeScheduleForPC-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {424202EF-76FA-4231-BF7A-5153EB49F987} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {4C70165D-0779-48AC-B229-C10A6F2A19CD} - System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl => C:\Users\PC\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\ChromeInstaller.exe [2013-07-30] (Iminent)
Task: {58A24A98-E7CB-4B24-8C1F-1A8963D3C8B7} - System32\Tasks\DigitalSite => C:\Users\PC\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE [2013-04-12] ()
Task: {61360211-0BEE-4906-8179-5D9AEAB7C840} - System32\Tasks\ScanSoft Background Update => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [2006-10-25] (Nuance Communications, Inc.)
Task: {69EBF01E-16AF-43A1-BF6C-0AACD9FCDD08} - System32\Tasks\EPUpdater => C:\Users\PC\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe No File
Task: {6C7BF802-9EB1-4122-947C-51C8A85A2D86} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {7803460A-27D3-496B-BA5B-4E7D2A672A4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-08-02] (Google Inc.)
Task: {8C6D4064-CEB6-447A-A60D-CD73070211D9} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe No File
Task: {98CB5CC5-54F9-473B-AFF5-A5288B369E48} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-05-24] (Piriform Ltd)
Task: {99FAE62C-6ADA-47F5-9A51-5EB3A1C981E4} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-09-28] (CyberLink)
Task: {A6FE4960-A3EC-4F51-8824-561B0E954A5B} - System32\Tasks\HPCeeScheduleForPC => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2011-07-15] (Hewlett-Packard)
Task: {AC019BF5-2EB9-4103-AEE1-09CD370F4CBB} - System32\Tasks\DealPly => C:\Users\PC\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {BB2B61AB-8F28-4C1A-B734-149274723F67} - System32\Tasks\Registration => C:\Program Files (x86)\Hewlett-Packard\HP Setup\Dependencies\RemEngine.exe [2011-09-28] ()
Task: {BE76026C-82DF-4A96-8176-AA380970A760} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {C23F62A7-2392-40EF-BA5F-DD92621BD0AF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-05] (Adobe Systems Incorporated)
Task: {C475D8BA-F905-4A78-8718-63AC04471006} - System32\Tasks\LyricsContainer Update => C:\Program Files (x86)\LyricsContainer\LrcsCtrUpdr.exe [2013-08-04] (RYD Software)
Task: {DBA3C8D2-8158-498F-85B1-8327426FBA35} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04] (Adobe Systems Incorporated)
Task: {DD4945D1-995B-4E69-8A16-D5F5030AEF80} - System32\Tasks\QtraxPlayer => C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe [2013-05-13] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DigitalSite.job => ?
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPC.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\LyricsContainer Update.job => C:\Program Files (x86)\LyricsContainer\LrcsCtrUpdr.exe

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (08/05/2013 10:16:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 06:37:24 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (08/05/2013 06:14:57 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (08/05/2013 10:17:19 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 06:57:29 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 06:56:18 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "SProtection" ist als interaktiver Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

Error: (08/05/2013 06:15:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 05:51:32 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuche-Ressourcenveröffentlichung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (08/05/2013 05:39:56 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (08/05/2013 10:16:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/05/2013 06:37:24 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\PC\Downloads\esetsmartinstaller_deu.exe

Error: (08/05/2013 06:14:57 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity Errors:
===================================
  Date: 2013-07-19 11:36:38.235
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.225
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.175
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-19 11:36:38.165
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.766
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.756
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2013-07-13 15:13:12.726
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 6091.86 MB
Available physical RAM: 3928.26 MB
Total Pagefile: 12181.9 MB
Available Pagefile: 9782.14 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:440.99 GB) (Free:363.41 GB) NTFS (Disk=0 Partition=2) ==>[System with boot components (obtained from reading drive)]
Drive d: (Recovery) (Fixed) (Total:20.61 GB) (Free:2.19 GB) NTFS (Disk=0 Partition=3) ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:3.96 GB) (Free:1.08 GB) FAT32 (Disk=0 Partition=4)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 257422C2)
Partition 1: (Active) - (Size=199 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=441 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=21 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=4 GB) - (Type=0C)

==================== End Of Log ============================
         

--- --- ---

LSystemLook 30.07.11 by jpshortstuff
Log created at 22:24 on 05/08/2013 by PC
Administrator - Elevation successful

========== filefind ==========

Searching for "*systweak*"
No files found.

Searching for "*adawarebp*"
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.dll --a---- 318872 bytes [23:20 11/12/2012] [23:20 11/12/2012] C55D73BF01BEB9C25516FA519174CC9C
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe --a---- 542104 bytes [23:20 11/12/2012] [23:20 11/12/2012] DF7AEEC25E5C006EEC61206476F48629
C:\Users\All Users\Ad-Aware Browsing Protection\adawarebp.dll --a---- 318872 bytes [23:20 11/12/2012] [23:20 11/12/2012] C55D73BF01BEB9C25516FA519174CC9C
C:\Users\All Users\Ad-Aware Browsing Protection\adawarebp.exe --a---- 542104 bytes [23:20 11/12/2012] [23:20 11/12/2012] DF7AEEC25E5C006EEC61206476F48629

Searching for "*datamngr*"
No files found.

Searching for "*lyrixeeker*"
No files found.

Searching for "*mypc backup*"
No files found.

Searching for "*speedupmypc*"
No files found.

Searching for "*sweetim*"
No files found.

Searching for "*distromatic*"
No files found.

Searching for "*BabSolution*"
No files found.

Searching for "*bProtector*"
No files found.

Searching for "*BrowserDefender*"
C:\Windows\Prefetch\BROWSERDEFENDER.EXE-62524200.pf --a---- 30700 bytes [00:24 05/08/2013] [14:50 05/08/2013] A660DF35F2F003AAABD99C1581C9AF85
C:\Windows\System32\Tasks\BrowserDefendert --a---- 3436 bytes [14:50 05/08/2013] [14:50 05/08/2013] 8444D519E7504D38BE49BC3FAE167689

Searching for "*iLivid*"
C:\Users\PC\Downloads\iLividSetupV1.exe --a---- 1302424 bytes [18:57 27/11/2012] [18:57 27/11/2012] A572625DB335FCCA490C909C373FB81C

Searching for "*holasearch*"
No files found.

Searching for "*DealPly*"
C:\Windows\System32\Tasks\DealPly --a---- 3482 bytes [08:07 07/02/2013] [18:11 16/03/2013] FD52B70225C0B2F3FCE040C2C359D1A8
C:\Windows\System32\Tasks\DealPlyUpdate --a---- 3304 bytes [18:11 25/11/2012] [18:11 25/11/2012] 3F89962238E95558E6CF05D47AE0D32B

Searching for "*Babylon*"
C:\Users\PC\AppData\Local\Temp\8DD1A082-BAB0-7891-8C74-BC4EED533129\Latest\Babylon.dat --a---- 12384 bytes [14:49 05/08/2013] [12:17 19/02/2013] 825E5733974586A0A1229A53361ED13E

Searching for "*Softonic*"
No files found.

Searching for "*delta LTD*"
No files found.

Searching for "*PriceGong*"
No files found.

Searching for "*OpenCandy*"
No files found.

Searching for "*PerformerSoft*"
No files found.

Searching for "*SoftSafe*"
C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\extern\kingsoftSafeguard.xml --a---- 618 bytes [10:56 09/02/2013] [14:28 24/04/2012] E7BE97006F2213266A33D726FDBBE913
C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\extern\kingsoftSafeguard.xml.md5 --a---- 32 bytes [10:56 09/02/2013] [17:44 29/06/2012] D885CA3A040A7350B1CB313C9DC264ED

Searching for "*IBUpdater*"
No files found.

========== folderfind ==========

Searching for "*systweak*"
No folders found.

Searching for "*adawarebp*"
No folders found.

Searching for "*datamngr*"
No folders found.

Searching for "*lyrixeeker*"
C:\Program Files (x86)\LyriXeeker d------ [14:49 05/08/2013]

Searching for "*mypc backup*"
No folders found.

Searching for "*speedupmypc*"
No folders found.

Searching for "*sweetim*"
No folders found.

Searching for "*distromatic*"
No folders found.

Searching for "*BabSolution*"
No folders found.

Searching for "*bProtector*"
No folders found.

Searching for "*BrowserDefender*"
No folders found.

Searching for "*iLivid*"
No folders found.

Searching for "*holasearch*"
No folders found.

Searching for "*DealPly*"
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\static.dealply.com d------ [22:51 12/02/2013]
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\macromedia.com\support\flashplayer\sys\#static.dealply.com d------ [22:51 12/02/2013]
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\static.dealply.com\flash\dealply_swf_engine.swf d------ [22:51 12/02/2013]

Searching for "*Babylon*"
No folders found.

Searching for "*Softonic*"
No folders found.

Searching for "*delta LTD*"
No folders found.

Searching for "*PriceGong*"
No folders found.

Searching for "*OpenCandy*"
No folders found.

Searching for "*PerformerSoft*"
No folders found.

Searching for "*SoftSafe*"
No folders found.

Searching for "*IBUpdater*"
No folders found.

========== regfind ==========

Searching for "systweak"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\systweakasp_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\systweakasp_RASMANCS]

Searching for "adawarebp"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\adawarebp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Ad-Aware Browsing Protection]
"command"=""C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASDLG]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\AppDataLow\Software\adawarebp]

Searching for "datamngr"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
"item"="DATAMNGR"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
"command"="C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E704E34-0FD7-4216-8B49-E4A8C853DB34}]
"AppPath"="C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"

Searching for "lyrixeeker"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"lyrix@lyrixeeker.co"="C:\Program Files (x86)\LyriXeeker\125.xpi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\epojlgbehpaeekopencdagbdamnkppci]
"Path"="C:\Program Files (x86)\LyriXeeker\125.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
"Publisher"="LyriXeeker Tech"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
"UninstallString"="C:\Program Files (x86)\LyriXeeker\uninstall.exe"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\AppDataLow\Software\LyriXeeker]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Mozilla\Firefox\Extensions]
"lyrix@lyrixeeker.co"="C:\Program Files (x86)\LyriXeeker\125.xpi"

Searching for "mypc backup"
No data found.

Searching for "speedupmypc"
No data found.

Searching for "sweetim"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3199093499-978631591-3148159529-1001\Software\SweetIM]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sweetpacks Communicator]
"command"="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\conf\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\resources\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]
"16FE85B52F587794795A481CF9295697"="C?\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\resources\sqlite\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]
"16FE85B52F587794795A481CF9295697"="C?\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\Logs\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"Contact"="SweetIM Technical Support Department"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"HelpLink"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"InstallLocation"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"Publisher"="SweetIM Technologies Ltd."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"URLInfoAbout"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"URLUpdateInfo"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"Contact"="SweetIM Technical Support Department"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"HelpLink"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"InstallLocation"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"Publisher"="SweetIM Technologies Ltd."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"URLInfoAbout"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"URLUpdateInfo"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\toolbar_vit_sweetim_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\toolbar_vit_sweetim_RASMANCS]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3199093499-978631591-3148159529-1001\Software\SweetIM]

Searching for "distromatic"
No data found.

Searching for "BabSolution"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla]
"path"="C:\Users\PC\AppData\Roaming\BabSolution\CR\hola.crx"

Searching for "bProtector"
No data found.

Searching for "BrowserDefender"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{424202EF-76FA-4231-BF7A-5153EB49F987}]
"Path"="\BrowserDefendert"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"

Searching for "iLivid"
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Users\PC\AppData\Local\iLivid]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Users\PC\AppData\Local\iLivid]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Users\PC\AppData\Local\iLivid]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Users\PC\AppData\Local\iLivid]

Searching for "holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc\CurVer]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore\CurVer]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd\CurVer]
@="holasearch.holasearchdskBnd.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr\CurVer]
@="holasearch.holasearchHlpr.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1E44819B-54E1-411B-9D9F-38D7B913BCF2}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\LocalServer32]
@=""C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\ProgID]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\VersionIndependentProgID]
@="esrv.holasearchESrvc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchApp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\ProgID]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\VersionIndependentProgID]
@="holasearch.holasearchappCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C46EFEA4-B0F3-428B-9E77-650E3634EC56}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5882DB3D-175D-4CDC-A030-1B7EC2BC8EC6}]
"AppName"="holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5882DB3D-175D-4CDC-A030-1B7EC2BC8EC6}]
"AppPath"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{1E44819B-54E1-411B-9D9F-38D7B913BCF2}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\LocalServer32]
@=""C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\ProgID]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\VersionIndependentProgID]
@="esrv.holasearchESrvc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchApp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\ProgID]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\VersionIndependentProgID]
@="holasearch.holasearchappCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C46EFEA4-B0F3-428B-9E77-650E3634EC56}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"

Searching for "DealPly"
[HKEY_CURRENT_USER\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]
"path"="C:\Program Files (x86)\DealPly\DealPly.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{296BED8D-8F7A-40EE-AFDD-642839AC7E7F}]
"Path"="\DealPlyUpdate"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC019BF5-2EB9-4103-AEE1-09CD370F4CBB}]
"Path"="\DealPly"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyUpdate]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]
"path"="C:\Program Files (x86)\DealPly\DealPly.crx"

Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

Searching for "Softonic"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1e40ca8e_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\29629339_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_trustport-internet-security_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_trustport-internet-security_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1e40ca8e_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\29629339_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "

Searching for "delta LTD"
No data found.

Searching for "PriceGong"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"c"="hxxp://www.powerpackdl.com/downloads/pricegong.exe"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"i"="hxxp://www.pricegong.com/TermsofUse.aspx"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"j"="PriceGong"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"n"="rv:HKCR,AppID\\PriceGongIE.DLL,AppID,{835315FC-1BF6-4CA9-80CD-F6C158D40692}"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"x"="hxxp://www.pricegong.com/favicon.ico"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"y"="hxxp://www.pricegong.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"c"="hxxp://www.powerpackdl.com/downloads/pricegong.exe"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"i"="hxxp://www.pricegong.com/TermsofUse.aspx"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"j"="PriceGong"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"n"="rv:HKCR,AppID\\PriceGongIE.DLL,AppID,{835315FC-1BF6-4CA9-80CD-F6C158D40692}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"x"="hxxp://www.pricegong.com/favicon.ico"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"y"="hxxp://www.pricegong.com/"

Searching for "OpenCandy"
No data found.

Searching for "PerformerSoft"
No data found.

Searching for "SoftSafe"
No data found.

Searching for "IBUpdater"
No data found.

Searching for " "
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><!-- --><!-- Monotype Imaging print ticket --><!-- --><!-- --><!--
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><!-- --><!-- Monotype Imaging print capabilities --><!-- --><!-- --><!-- JobComment --><!--
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/> </Resource> </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990& 0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990& 0&________&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715 &0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715 &0&________&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475& 0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475& 0&________&1#]
"DeviceDesc"="NERO "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><!-- --><!-- Monotype Imaging print ticket --><!-- --><!-- --><!--
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><!-- --><!-- Monotype Imaging print capabilities --><!-- --><!-- --><!-- JobComment --><!--
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "

-= EOF =-

LSystemLook 30.07.11 by jpshortstuff
Log created at 22:24 on 05/08/2013 by PC
Administrator - Elevation successful

========== filefind ==========

Searching for "*systweak*"
No files found.

Searching for "*adawarebp*"
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.dll --a---- 318872 bytes [23:20 11/12/2012] [23:20 11/12/2012] C55D73BF01BEB9C25516FA519174CC9C
C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe --a---- 542104 bytes [23:20 11/12/2012] [23:20 11/12/2012] DF7AEEC25E5C006EEC61206476F48629
C:\Users\All Users\Ad-Aware Browsing Protection\adawarebp.dll --a---- 318872 bytes [23:20 11/12/2012] [23:20 11/12/2012] C55D73BF01BEB9C25516FA519174CC9C
C:\Users\All Users\Ad-Aware Browsing Protection\adawarebp.exe --a---- 542104 bytes [23:20 11/12/2012] [23:20 11/12/2012] DF7AEEC25E5C006EEC61206476F48629

Searching for "*datamngr*"
No files found.

Searching for "*lyrixeeker*"
No files found.

Searching for "*mypc backup*"
No files found.

Searching for "*speedupmypc*"
No files found.

Searching for "*sweetim*"
No files found.

Searching for "*distromatic*"
No files found.

Searching for "*BabSolution*"
No files found.

Searching for "*bProtector*"
No files found.

Searching for "*BrowserDefender*"
C:\Windows\Prefetch\BROWSERDEFENDER.EXE-62524200.pf --a---- 30700 bytes [00:24 05/08/2013] [14:50 05/08/2013] A660DF35F2F003AAABD99C1581C9AF85
C:\Windows\System32\Tasks\BrowserDefendert --a---- 3436 bytes [14:50 05/08/2013] [14:50 05/08/2013] 8444D519E7504D38BE49BC3FAE167689

Searching for "*iLivid*"
C:\Users\PC\Downloads\iLividSetupV1.exe --a---- 1302424 bytes [18:57 27/11/2012] [18:57 27/11/2012] A572625DB335FCCA490C909C373FB81C

Searching for "*holasearch*"
No files found.

Searching for "*DealPly*"
C:\Windows\System32\Tasks\DealPly --a---- 3482 bytes [08:07 07/02/2013] [18:11 16/03/2013] FD52B70225C0B2F3FCE040C2C359D1A8
C:\Windows\System32\Tasks\DealPlyUpdate --a---- 3304 bytes [18:11 25/11/2012] [18:11 25/11/2012] 3F89962238E95558E6CF05D47AE0D32B

Searching for "*Babylon*"
C:\Users\PC\AppData\Local\Temp\8DD1A082-BAB0-7891-8C74-BC4EED533129\Latest\Babylon.dat --a---- 12384 bytes [14:49 05/08/2013] [12:17 19/02/2013] 825E5733974586A0A1229A53361ED13E

Searching for "*Softonic*"
No files found.

Searching for "*delta LTD*"
No files found.

Searching for "*PriceGong*"
No files found.

Searching for "*OpenCandy*"
No files found.

Searching for "*PerformerSoft*"
No files found.

Searching for "*SoftSafe*"
C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\extern\kingsoftSafeguard.xml --a---- 618 bytes [10:56 09/02/2013] [14:28 24/04/2012] E7BE97006F2213266A33D726FDBBE913
C:\Program Files\Common Files\Bitdefender\SetupInformation\downloader\extern\kingsoftSafeguard.xml.md5 --a---- 32 bytes [10:56 09/02/2013] [17:44 29/06/2012] D885CA3A040A7350B1CB313C9DC264ED

Searching for "*IBUpdater*"
No files found.

========== folderfind ==========

Searching for "*systweak*"
No folders found.

Searching for "*adawarebp*"
No folders found.

Searching for "*datamngr*"
No folders found.

Searching for "*lyrixeeker*"
C:\Program Files (x86)\LyriXeeker d------ [14:49 05/08/2013]

Searching for "*mypc backup*"
No folders found.

Searching for "*speedupmypc*"
No folders found.

Searching for "*sweetim*"
No folders found.

Searching for "*distromatic*"
No folders found.

Searching for "*BabSolution*"
No folders found.

Searching for "*bProtector*"
No folders found.

Searching for "*BrowserDefender*"
No folders found.

Searching for "*iLivid*"
No folders found.

Searching for "*holasearch*"
No folders found.

Searching for "*DealPly*"
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\static.dealply.com d------ [22:51 12/02/2013]
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\macromedia.com\support\flashplayer\sys\#static.dealply.com d------ [22:51 12/02/2013]
C:\Users\PC\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave Flash\WritableRoot\#SharedObjects\NS6RQ2XF\static.dealply.com\flash\dealply_swf_engine.swf d------ [22:51 12/02/2013]

Searching for "*Babylon*"
No folders found.

Searching for "*Softonic*"
No folders found.

Searching for "*delta LTD*"
No folders found.

Searching for "*PriceGong*"
No folders found.

Searching for "*OpenCandy*"
No folders found.

Searching for "*PerformerSoft*"
No folders found.

Searching for "*SoftSafe*"
No folders found.

Searching for "*IBUpdater*"
No folders found.

========== regfind ==========

Searching for "systweak"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\systweakasp_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\systweakasp_RASMANCS]

Searching for "adawarebp"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\adawarebp]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Ad-Aware Browsing Protection]
"command"=""C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASDLG]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\AppDataLow\Software\adawarebp]

Searching for "datamngr"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
"item"="DATAMNGR"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DATAMNGR]
"command"="C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E704E34-0FD7-4216-8B49-E4A8C853DB34}]
"AppPath"="C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0028FE51-2BFF-4A35-8266-0D10A6A4DF27}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F8BD6963-EDBD-44DD-A5DA-038F96222E8A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Program Files (x86)\Search Results Toolbar\Datamngr\SRTOOL~1\dtUser.exe|Name=Search-Results Toolbar DTX Broker|"

Searching for "lyrixeeker"
[HKEY_CURRENT_USER\Software\AppDataLow\Software\LyriXeeker]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"lyrix@lyrixeeker.co"="C:\Program Files (x86)\LyriXeeker\125.xpi"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\epojlgbehpaeekopencdagbdamnkppci]
"Path"="C:\Program Files (x86)\LyriXeeker\125.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
"Publisher"="LyriXeeker Tech"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\lyrix@lyrixeeker.co]
"UninstallString"="C:\Program Files (x86)\LyriXeeker\uninstall.exe"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\AppDataLow\Software\LyriXeeker]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Mozilla\Firefox\Extensions]
"lyrix@lyrixeeker.co"="C:\Program Files (x86)\LyriXeeker\125.xpi"

Searching for "mypc backup"
No data found.

Searching for "speedupmypc"
No data found.

Searching for "sweetim"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3199093499-978631591-3148159529-1001\Software\SweetIM]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sweetpacks Communicator]
"command"="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\02F47BF73B948514FAACADD8CBBDF37D]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\080D9F5E1E95FEE4794CE438E635239E]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12BF94BD06C95F343A77631402B9556A]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1E264E0A5959A1C46BA9175A878B12EA]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2124D8A8CF720FD44866190AF560228E]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\conf\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27A325ACED8CA4743A30127638591ADB]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E6768B6932D112438F047C54D180635]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\350D17402BD84234EAF7D32F08172D7C]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\351716A953E21214898904032EAE2E81]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\397C771A7BCAC904697C3EC629ED33ED]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3EE8C5F419057E1478A654868CEE60B5]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4735D908D66E1BA46B6C2D7185A12B2B]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\resources\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\69D6A6B2ED56AF24EA6335EAD6E91CA4]
"16FE85B52F587794795A481CF9295697"="C?\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76D8378E2DDAED3428720A631F6E3BF0]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\resources\sqlite\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFA128C2B0FF414D805FC5627883401]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\86EDC790504E1834DBC20C9A04328FD2]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\green\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\97C3D0F82E712E241A2F969F45E3351C]
"16FE85B52F587794795A481CF9295697"="C?\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98CC8BF5A4A6E6C4ABF7051DDAB8B058]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A001B259DB7D694E818BE29B973992C]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E7F556BF224D804D96A96F0F6344789]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\blue\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A189D17A469616C4688D23E192996267]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BAE2EC163C6A68A48921573E0E7E199D]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF4F885EDEE45644EB1E0C99E0162399]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C06C6662FA5B04646829E4A460857770]
"254796BF4AC84B64891B61C529A2E23F"="C:\ProgramData\SweetIM\Communicator\Logs\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE21F3FD57B244142880EF15A165A156]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\orange\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CEEB3E14ABE8270419B0FD762E18F7C6]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D15DAF33C220F91468A1D7D57C31ACD7]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\conf\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D3BA76A44C779424889063D5098ED2D6]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D0EB9FDBD90C04D92A7E729058F10D]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E4748F9A4181FCE46A23C13B517B9420]
"16FE85B52F587794795A481CF9295697"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED1B5E9A3BDB51349BF96E842C062D98]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\Microsoft.VC90.CRT\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FECBC2BC14DA6CD459BD59A041709836]
"254796BF4AC84B64891B61C529A2E23F"="C:\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"Contact"="SweetIM Technical Support Department"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"HelpLink"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"InstallLocation"="C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"Publisher"="SweetIM Technologies Ltd."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"URLInfoAbout"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\16FE85B52F587794795A481CF9295697\InstallProperties]
"URLUpdateInfo"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"Contact"="SweetIM Technical Support Department"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"HelpLink"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"InstallLocation"="C:\Program Files (x86)\SweetIM\Communicator\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"Publisher"="SweetIM Technologies Ltd."
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"URLInfoAbout"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\254796BF4AC84B64891B61C529A2E23F\InstallProperties]
"URLUpdateInfo"="hxxp://www.sweetim.com"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\toolbar_vit_sweetim_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\toolbar_vit_sweetim_RASMANCS]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{A21972B4-5118-42E3-B07B-3ABF8F630877}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{F0F839E5-89DE-4467-9E52-606055705D06}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe|Name=SweetPacksUpdateManager|"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3199093499-978631591-3148159529-1001\Software\SweetIM]

Searching for "distromatic"
No data found.

Searching for "BabSolution"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fagpjgjmoaccgkkpjeoinehnoaimnbla]
"path"="C:\Users\PC\AppData\Roaming\BabSolution\CR\hola.crx"

Searching for "bProtector"
No data found.

Searching for "BrowserDefender"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{424202EF-76FA-4231-BF7A-5153EB49F987}]
"Path"="\BrowserDefendert"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BrowserDefendert]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2A0F3D1B-0909-4FF4-B272-609CCE6054E7}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{472734EA-242A-422B-ADF8-83D1E48CC825}]
"DllName"="PCTBrowserDefender.dll"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe"="Application Manager"

Searching for "iLivid"
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Users\PC\AppData\Local\iLivid]
[HKEY_CURRENT_USER\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Users\PC\AppData\Local\iLivid]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Trolltech\OrganizationDefaults\Qt Factory Cache 4.8\com.trolltech.Qt.QImageIOHandlerFactoryInterface:\C:\Users\PC\AppData\Local\iLivid]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Trolltech\OrganizationDefaults\Qt Plugin Cache 4.8.false\C:\Users\PC\AppData\Local\iLivid]

Searching for "holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc\CurVer]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\esrv.holasearchESrvc.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore\CurVer]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchappCore.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd\CurVer]
@="holasearch.holasearchdskBnd.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchdskBnd.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr\CurVer]
@="holasearch.holasearchHlpr.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\holasearch.holasearchHlpr.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{1E44819B-54E1-411B-9D9F-38D7B913BCF2}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\LocalServer32]
@=""C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\ProgID]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\VersionIndependentProgID]
@="esrv.holasearchESrvc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchApp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\ProgID]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\VersionIndependentProgID]
@="holasearch.holasearchappCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{C46EFEA4-B0F3-428B-9E77-650E3634EC56}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5882DB3D-175D-4CDC-A030-1B7EC2BC8EC6}]
"AppName"="holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5882DB3D-175D-4CDC-A030-1B7EC2BC8EC6}]
"AppPath"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{1E44819B-54E1-411B-9D9F-38D7B913BCF2}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\LocalServer32]
@=""C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\ProgID]
@="esrv.holasearchESrvc.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{A1EC45B2-B5F7-4B87-955E-E97F778ACAE8}\VersionIndependentProgID]
@="esrv.holasearchESrvc"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchApp.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\ProgID]
@="holasearch.holasearchappCore.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{B71E4FEB-89F8-4ACB-A60F-A7DE399119AE}\VersionIndependentProgID]
@="holasearch.holasearchappCore"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{C46EFEA4-B0F3-428B-9E77-650E3634EC56}\InprocServer32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\bh\holasearch.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"hp_url"="hxxp://www.holasearch.com/?babsrc=HP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"nt_url"="hxxp://www.holasearch.com/?babsrc=NT_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"dsFFX"="holasearch"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"uninstaller"="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\uninstall.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"sp_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"tb_url"="hxxp://www.holasearch.com/?q={searchTerms}&babsrc=TB_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\AppID\{8D5CFE57-B0FD-4396-97A2-DFD0B7DA935B}\instl\data]
"kw_url"="hxxp://www.holasearch.com/?babsrc=SP_ss&mntrId=A0157CE9D3626F22&affID=121962&tsp=4927&q="
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchsrv.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{58B41DCD-55B2-48EB-A55A-E330070FFC00}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0]
@="holasearchCmn 1.0 Type Library"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\0\win32]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16\holasearchEng.dll\2"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\TypeLib\{9BA19DB8-5C5A-4C13-AEEB-A1336113333E}\1.0\HELPDIR]
@="C:\Program Files (x86)\holasearch\holasearch\1.8.16.16"

Searching for "DealPly"
[HKEY_CURRENT_USER\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]
"path"="C:\Program Files (x86)\DealPly\DealPly.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{296BED8D-8F7A-40EE-AFDD-642839AC7E7F}]
"Path"="\DealPlyUpdate"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AC019BF5-2EB9-4103-AEE1-09CD370F4CBB}]
"Path"="\DealPly"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPly]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DealPlyUpdate]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Wow6432Node\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje]
"path"="C:\Program Files (x86)\DealPly\DealPly.crx"

Searching for "Babylon"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}]
"DllName"="BabylonToolbar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}]
"DllName"="BabylonToolbarTlbr.dll"

Searching for "Softonic"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1e40ca8e_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\29629339_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_mp3directcut_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_trustport-internet-security_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_fuer_trustport-internet-security_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\1e40ca8e_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_mp3directcut.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\29629339_0]
@="{0.0.0.00000000}.{f8047516-971f-40ba-85de-843482a8264a}|\Device\HarddiskVolume2\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "

Searching for "delta LTD"
No data found.

Searching for "PriceGong"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"c"="hxxp://www.powerpackdl.com/downloads/pricegong.exe"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"i"="hxxp://www.pricegong.com/TermsofUse.aspx"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"j"="PriceGong"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"n"="rv:HKCR,AppID\\PriceGongIE.DLL,AppID,{835315FC-1BF6-4CA9-80CD-F6C158D40692}"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"x"="hxxp://www.pricegong.com/favicon.ico"
[HKEY_CURRENT_USER\Software\PowerPack\225\13]
"y"="hxxp://www.pricegong.com/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\PriceGong_RASMANCS]
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"c"="hxxp://www.powerpackdl.com/downloads/pricegong.exe"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"i"="hxxp://www.pricegong.com/TermsofUse.aspx"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"j"="PriceGong"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"n"="rv:HKCR,AppID\\PriceGongIE.DLL,AppID,{835315FC-1BF6-4CA9-80CD-F6C158D40692}"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"x"="hxxp://www.pricegong.com/favicon.ico"
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\PowerPack\225\13]
"y"="hxxp://www.pricegong.com/"

Searching for "OpenCandy"
No data found.

Searching for "PerformerSoft"
No data found.

Searching for "SoftSafe"
No data found.

Searching for "IBUpdater"
No data found.

Searching for " "
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><!-- --><!-- Monotype Imaging print ticket --><!-- --><!-- --><!--
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><!-- --><!-- Monotype Imaging print capabilities --><!-- --><!-- --><!-- JobComment --><!--
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell]
"ConfigXML"=" <PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/> <Capability Type="Shell"/> </Resource> </Res
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\WSMAN\Plugin\Microsoft.PowerShell32]
"ConfigXML"="<PlugInConfiguration xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Name="microsoft.powershell32" Filename="%windir%\system32\pwrshplugin.dll" SDKVersion="1" XmlRenderingType="text" Architecture="32" > <InitializationParameters> <Param Name="PSVersion" Value="2.0"/> </InitializationParameters> <Resources> <Resource ResourceUri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" SupportsOptions="true" ExactMatch="true"> <Security xmlns="hxxp://schemas.microsoft.com/wbem/wsman/1/config/PluginConfiguration" Uri="hxxp://schemas.microsoft.com/powershell/microsoft.powershell32" ExactMatch="true" Sddl="O:NSG:BAD:P(A;;GA;;;BA)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)"/>
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715&0&_ _______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475&0&__ ______&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990& 0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&10D4990& 0&________&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715 &0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&11AC6715 &0&________&1#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475& 0&________&0#]
"DeviceDesc"="NERO "
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\WpdBusEnumRoot\UMB\2&37c186b&0&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_ODYS&PROD_NERO&REV_2.00#7&2706475& 0&________&1#]
"DeviceDesc"="NERO "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><!-- --><!-- Monotype Imaging print ticket --><!-- --><!-- --><!--
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Laser Pro LL2]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities version="1" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlnssf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlnssk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:mti="hxxp://schemas.monotypeimaging.com/ptpc/2006/1" xmlnsem="hxxp://schemas.monotypeimaging.com/ptpc/oem/2006/1"><!-- --><!-- Monotype Imaging print capabilities --><!-- --><!-- --><!-- JobComment --><!--
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"G:\Menu.exe"="CnMemory Software "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Downloads\SoftonicDownloader_fuer_trustport-internet-security.exe"="Softonic Downloader "
[HKEY_USERS\S-1-5-21-3199093499-978631591-3148159529-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\PC\Desktop\TrustPort_Internet_Security_12.0.0.4788.exe"="TrustPort Internet Security "

-= EOF =-

Sooo, der PC läuft wieder ganz gut- dafür erstmal sehr herzlichen Dank!
Der hat nur noch beim Hochfahren einige Schwierigkeiten
z.B. wenn man sein PW eingegeben hat, dann braucht der einige Zeit bis sich der PC öffnet. Und beim Hochfahren bleibt es zunächst lange Zeit schwarz, bis ich beim Benutzerkonto meinen PW eingeben kann.

Wie kann ich mich in Zukunft vor Viren etc. schützen? Was könntest du mir empfehlen? :=)

Servus,

Zitat von U-C

Sooo, der PC läuft wieder ganz gut- dafür erstmal sehr herzlichen Dank!

Danken kannst du mir, wenn wir fertig sind, was noch nicht der Fall ist.

Zitat von U-C

Der hat nur noch beim Hochfahren einige Schwierigkeiten
z.B. wenn man sein PW eingegeben hat, dann braucht der einige Zeit bis sich der PC öffnet. Und beim Hochfahren bleibt es zunächst lange Zeit schwarz, bis ich beim Benutzerkonto meinen PW eingeben kann.

Ist bei meinem Rechner standardmäßig so, aber bei dir war es wohl vorher nicht so, oder?

Zitat von U-C

Wie kann ich mich in Zukunft vor Viren etc. schützen? Was könntest du mir empfehlen? :=)

Tipps gibts am Ende der Bereinigung.



Du hast dich schon wieder mit Adware infiziert:

2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Users\PC\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\ProgramData\Iminent
2013-08-05 18:56 - 2013-08-05 18:56 - 00000000 ____D C:\Program Files (x86)\Iminent

Eine Bereinigung macht keinen Sinn, wenn du willkürlich irgendwelche Software währenddessen installierst!
Jetzt können wir wieder von vorne anfangen...





Schritt 1
Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 2

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 3
Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

• die Logdatei von AdwCleaner,
• die Logdatei von JRT,
• die Logdatei von MBAM.

Ist bei meinem Rechner standardmäßig so, aber bei dir war es wohl vorher nicht so, oder?

richtig, aber war wohl ne einmalige Sache. Läuft wieder standartmäßig

Eine Bereinigung macht keinen Sinn, wenn du willkürlich irgendwelche Software währenddessen installierst!
Jetzt können wir wieder von vorne anfangen...

Das tut mir leid... ich sollte einen Adobe Flash player insterllieren, damit ich youtube vid. anschauen kann.. ich insterlliere dann während der Reinigung nichts mehr!AdwCleaner Logfile:

# AdwCleaner v2.306 - Datei am 06/08/2013 um 14:37:07 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : PC - PC-HP
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\PC\Downloads\adwcleaner(1).exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\Windows\Tasks\LyricsContainer Update.job
Gelöscht mit Neustart : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Ordner Gelöscht : C:\Program Files (x86)\LyricsContainer

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\LyricsContainer
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

***** [Internet Browser] *****

-\\ Internet Explorer v9.0.8112.16496

[OK] Die Registrierungsdatenbank ist sauber.

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\prefs.js

C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\oxamfp2j.default\user.js ... Gelöscht !

Gelöscht : user_pref("iminent.webbooster.scripts.minibar.SOFTONICREFRESHRATE", "140000");
Gelöscht : user_pref("iminent.webbooster.scripts.sslminibar.SOFTONICREFRESHRATE", "140000");

*************************

AdwCleaner[S1].txt - [25886 octets] - [05/08/2013 17:20:38]
AdwCleaner[S2].txt - [2508 octets] - [05/08/2013 17:26:11]
AdwCleaner[S3].txt - [11018 octets] - [06/08/2013 14:37:07]

########## EOF - C:\AdwCleaner[S3].txt - [11079 octets] ##########
         

--- --- ---JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.3.4 (08.06.2013:1)
OS: Windows 7 Home Premium x64
Ran by PC on 06.08.2013 at 14:41:03,44
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Program Files (x86)\lyrixeeker"



~~~ FireFox

Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Failed to delete: [Folder] "C:\Program Files (x86)\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\\lyrics@lyricscontainer.co
Successfully deleted the following from C:\Users\PC\AppData\Roaming\mozilla\firefox\profiles\oxamfp2j.default\prefs.js

user_pref("iminent.webbooster.scripts.minibar.LayoutId", "1");
user_pref("iminent.webbooster.scripts.minibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.minibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.minibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.minibar.Services.SmartFavCode", "02");
user_pref("iminent.webbooster.scripts.minibar.ShowThankyouPixel", "0");
user_pref("iminent.webbooster.scripts.minibar.displayFavLinks", "1");
user_pref("iminent.webbooster.scripts.sslminibar.LayoutId", "1");
user_pref("iminent.webbooster.scripts.sslminibar.ROOTEXTENSION", "chrome://iminentwebbooster/content/minibar");
user_pref("iminent.webbooster.scripts.sslminibar.Services.BHPCode", "01");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultEvent", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.DefaultWebSite", "000");
user_pref("iminent.webbooster.scripts.sslminibar.Services.IminentClientCode", "11");
user_pref("iminent.webbooster.scripts.sslminibar.Services.SmartFavCode", "02");



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.08.2013 at 14:52:50,20
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---


Malwarebytes Anti-Malware (Test) 1.75.0.1300
Malwarebytes : Free Anti-Malware download

Datenbank Version: v2013.08.06.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
PC :: PC-HP [Administrator]

Schutz: Aktiviert

06.08.2013 14:56:43
mbam-log-2013-08-06 (14-56-43).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 214077
Laufzeit: 8 Minute(n), 31 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Servus,



ok, und jetzt nochmal das hier:





Schritt 1
Kontrollscan mit FRST
Führe wie zuvor beschrieben einen Scan mit FRST aus.
Setze dazu eine Haken bei Addition.txt rechts unten und klicke auf Scan.
Es werden wieder zwei Logdateien erzeugt. Poste mir diese.





Schritt 2
Lade SystemLook von jpshortstuff vom folgenden Spiegel herunter und speichere das Tool auf dem Desktop.
SystemLook (64 bit)

• Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
• Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
  

  :filefind
  *systweak*
  *adawarebp*
  *datamngr*
  *lyrixeeker*
  *mypc backup*
  *speedupmypc*
  *sweetim*
  *distromatic*
  *BabSolution*
  *bProtector*
  *BrowserDefender*
  *iLivid*
  *holasearch*
  *DealPly*
  *Babylon*
  *Softonic*
  *delta LTD*
  *PriceGong*
  *OpenCandy*
  *PerformerSoft*
  *SoftSafe*
  *IBUpdater*
  
  :folderfind
  *systweak*
  *adawarebp*
  *datamngr*
  *lyrixeeker*
  *mypc backup*
  *speedupmypc*
  *sweetim*
  *distromatic*
  *BabSolution*
  *bProtector*
  *BrowserDefender*
  *iLivid*
  *holasearch*
  *DealPly*
  *Babylon*
  *Softonic*
  *delta LTD*
  *PriceGong*
  *OpenCandy*
  *PerformerSoft*
  *SoftSafe*
  *IBUpdater*
  
  :regfind
  systweak
  adawarebp
  datamngr
  lyrixeeker
  mypc backup
  speedupmypc
  sweetim
  distromatic
  BabSolution
  bProtector
  BrowserDefender
  iLivid
  holasearch
  DealPly
  Babylon
  Softonic
  delta LTD
  PriceGong
  OpenCandy
  PerformerSoft
  SoftSafe
  IBUpdater
           

• Klicke nun auf den Button Look, um den Scan zu starten.
• Der Suchlauf kann einige Zeit dauern.
• Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
• Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.

Bitte poste mit deiner nächsten Antwort

• die beiden Logdateien von FRST,
• die Logdatei von SystemLook.