Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 12.08.2013, 13:29   #1
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hallo zusammen,

ich habe seit einigen Tagen das Problem, dass sich in Firefox gelegentlich ein weiteres Fenster mit folgendem Inhalt öffnet:

hxxp://serve.bannersdontwork.com/text/javascript
hxxp://serve.bannersdontwork.com/&m=true

Was kann ich dagegen tun?

Ich habe alle Logfiles wie in der Anleitung erstellt und freue mich auf eine Rückmeldung, danke bereits im Voraus! =)

LG Nela

defogger_disable.txt

Code:
ATTFilter
 defogger_disable by jpshortstuff (23.02.10.1)
Log created at 13:37 on 12/08/2013 (Nelli)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

FRST.txt

Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02
Ran by Nelli (administrator) on 12-08-2013 13:40:54
Running from C:\Users\Nelli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
( ) C:\Windows\system32\lxczcoms.exe
( ) C:\Windows\system32\lxeccoms.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\loggingserver.exe
(Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\AVG Secure Search\vprot.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG Secure Search\vprot.exe [2285232 2013-07-29] ()
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={92B34DDB-9A67-4FFB-B737-B6FB0AC75D3E}&mid=82fab4fa306347d0ac2c9dc9d5d2f52a-721d5dd7c126087c8f5c335bf7626a0b12457f2a&lang=de&ds=pd011&pr=sa&d=2012-09-14 13:36:35&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://www2.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=94874C8093361CD6
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={92B34DDB-9A67-4FFB-B737-B6FB0AC75D3E}&mid=82fab4fa306347d0ac2c9dc9d5d2f52a-721d5dd7c126087c8f5c335bf7626a0b12457f2a&lang=de&ds=pd011&pr=sa&d=2012-09-14 13:36:35&v=15.2.0.5&pid=avg&sg=0&sap=dsp&q={searchTerms}
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns64.dll (DVDVideoSoft Ltd.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.4.0.5\AVG Secure Search_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GbR)
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default
FF user.js: detected! => C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\user.js
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.4.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\avg-secure-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF Extension: IMinent Toolbar - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
FF Extension: hdvc - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\hdvc@hdvc.com.xpi
FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG Secure Search\FireFoxExt\15.4.0.5
FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\15.4.0.5
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: No Name - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\

Chrome: 
=======
CHR HomePage: hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs"
CHR Extension: (SweetIM for Facebook) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0
CHR Extension: (Wajam) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0
CHR Extension: (AVG Security Toolbar) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\14.2.0.1_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx
CHR HKLM-x32\...\Chrome\Extension: [kpkbnefaikfaeadgidhpoanckoiaheli] - C:\Program Files (x86)\HDvidCodec.com\HDvidCodec10.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG Secure Search\ChromeExt\15.4.0.5\avg.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)
R2 WajamUpdater; C:\Program Files (x86)\Wajam\Updater\WajamUpdater.exe [109064 2012-10-05] (Wajam)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:39 - 2013-08-12 13:39 - 00125244 _____ C:\Users\Nelli\Desktop\Extras.Txt
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000472 _____ C:\Users\Nelli\Desktop\defogger_disable.log
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:36 - 2013-08-12 13:37 - 00050477 _____ C:\Users\Nelli\Desktop\Defogger.exe
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe

==================== One Month Modified Files and Folders =======

2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:39 - 2013-08-12 13:39 - 00125244 _____ C:\Users\Nelli\Desktop\Extras.Txt
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-12 13:37 - 2013-08-12 13:37 - 00000472 _____ C:\Users\Nelli\Desktop\defogger_disable.log
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:37 - 2013-08-12 13:36 - 00050477 _____ C:\Users\Nelli\Desktop\Defogger.exe
2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
2013-08-12 13:20 - 2012-03-20 01:51 - 01936571 _____ C:\Windows\WindowsUpdate.log
2013-08-12 12:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-12 10:23 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-12 10:23 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-12 10:21 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-12 10:21 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-12 10:21 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 10:18 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam
2013-08-12 10:17 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox
2013-08-12 10:17 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox
2013-08-12 10:16 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-12 10:16 - 2013-05-04 18:48 - 00012860 _____ C:\ProgramData\lxecscan.log
2013-08-12 10:16 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-12 10:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-12 10:15 - 2009-07-14 06:51 - 00083657 _____ C:\Windows\setupact.log
2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-08 22:45 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen
2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen
2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic
2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon
2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-07-29 22:26 - 2012-09-14 13:36 - 00000000 ____D C:\Program Files (x86)\AVG Secure Search
2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe
2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-12 10:48

==================== End Of Log ============================
         

Addition.txt

Code:
ATTFilter
 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 13:41:24
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVG Security Toolbar (x32 Version: 15.4.0.5)
Babylon toolbar on IE (x32)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
Wajam (x32 Version: 1.51)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)

==================== Restore Points  =========================

11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/12/2013 10:15:53 AM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (08/12/2013 01:18:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b
Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917, Zeitstempel: 0x51c06a5b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00173668
ID des fehlerhaften Prozesses: 0x1a68
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (08/11/2013 11:28:56 AM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (08/10/2013 00:06:15 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (08/10/2013 00:04:20 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: firefox.exe, Version: 22.0.0.4917, Zeitstempel: 0x51c06b1b
Name des fehlerhaften Moduls: xul.dll, Version: 22.0.0.4917, Zeitstempel: 0x51c06a5b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00173668
ID des fehlerhaften Prozesses: 0x1328
Startzeit der fehlerhaften Anwendung: 0xfirefox.exe0
Pfad der fehlerhaften Anwendung: firefox.exe1
Pfad des fehlerhaften Moduls: firefox.exe2
Berichtskennung: firefox.exe3

Error: (08/09/2013 10:22:07 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (08/09/2013 06:33:48 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)

Error: (08/08/2013 08:31:52 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: YouCam.exe, Version: 5.0.1108.17955, Zeitstempel: 0x4eb8a7a9
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x14fc
Startzeit der fehlerhaften Anwendung: 0xYouCam.exe0
Pfad der fehlerhaften Anwendung: YouCam.exe1
Pfad des fehlerhaften Moduls: YouCam.exe2
Berichtskennung: YouCam.exe3

Error: (08/08/2013 08:30:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: KiesAirMessage.exe, Version: 1.0.0.0, Zeitstempel: 0x50725e24
Name des fehlerhaften Moduls: KiesAirMessageCtl.dll, Version: 1.0.0.0, Zeitstempel: 0x50725e22
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000657f8
ID des fehlerhaften Prozesses: 0xc60
Startzeit der fehlerhaften Anwendung: 0xKiesAirMessage.exe0
Pfad der fehlerhaften Anwendung: KiesAirMessage.exe1
Pfad des fehlerhaften Moduls: KiesAirMessage.exe2
Berichtskennung: KiesAirMessage.exe3

Error: (08/07/2013 08:35:49 PM) (Source: MemeoBackgroundService) (User: )
Description: Problem starting Memeo Background Service :Ausnahmefehler "System.Reflection.TargetInvocationException: Ein Aufrufziel hat einen Ausnahmefehler verursacht. ---> System.Security.Principal.IdentityNotMappedException: Manche oder alle Identitätsverweise konnten nicht übersetzt werden.
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   bei System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   bei System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   bei System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   bei System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   bei System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)" bei der Remotekonfiguration.   bei System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   bei System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   bei RemoteServerService.MemeoBackgroundService.OnStart(String[] args)


System errors:
=============
Error: (08/12/2013 10:15:45 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/12/2013 10:15:45 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.

Error: (08/11/2013 11:28:01 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/11/2013 11:28:01 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.

Error: (08/10/2013 00:05:44 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/10/2013 00:05:44 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.

Error: (08/09/2013 10:21:49 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/09/2013 10:21:49 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.

Error: (08/09/2013 06:33:31 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "lxecCATSCustConnectService" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (08/09/2013 06:33:31 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxecCATSCustConnectService erreicht.


Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 70%
Total physical RAM: 4007.05 MB
Available physical RAM: 1173.07 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5029.13 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.71 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

Gmer.txt

Code:
ATTFilter
GMER 2.1.19163 - hxxp://www.gmer.net
Rootkit scan 2013-08-12 13:50:44
Windows 6.1.7601 Service Pack 1 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 ST950042 rev.0002 465,76GB
Running: gmer_2.1.19163.exe; Driver: C:\Users\Nelli\AppData\Local\Temp\pwdoqpod.sys


---- Disk sectors - GMER 2.1 ----

Disk    \Device\Harddisk0\DR0                         unknown MBR code

---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\WLANExt.exe [1316:128]    0000000180125430
Thread  C:\Windows\system32\WLANExt.exe [1316:668]    00000001800c47f0
Thread  C:\Windows\system32\WLANExt.exe [1316:1140]   0000000180125430
Thread  C:\Windows\system32\WLANExt.exe [1316:1632]   000007fefa842f9c
Thread  C:\Windows\system32\WLANExt.exe [1316:2140]   0000000001148bf8
Thread  C:\Windows\system32\WLANExt.exe [1316:2144]   0000000001148c14
Thread  C:\Windows\system32\WLANExt.exe [1316:2148]   0000000001148bdc
Thread  C:\Windows\system32\WLANExt.exe [1316:2152]   000007fefa842f9c
Thread  C:\Windows\System32\rundll32.exe [3872:1132]  0000000180095630

---- EOF - GMER 2.1 ----
         

Alt 12.08.2013, 13:34   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hallo und

Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 12.08.2013, 15:29   #3
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hallo Cosinus,

vielen Dank für die schnelle Hilfe!
Anbei die weiteren Logfiles, ich habe alles Schritt für Schritt befolgt...

AdwCleaner[S1].txt

AdwCleaner Logfile:
Code:
ATTFilter
# AdwCleaner v2.306 - Datei am 12/08/2013 um 15:27:36 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****

Gestoppt & Gelöscht : WajamUpdater
         
AdwCleaner[S2].txt

Code:
ATTFilter
# AdwCleaner v2.306 - Datei am 12/08/2013 um 15:54:23 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****
         
AdwCleaner[S3].txt

Code:
ATTFilter
# AdwCleaner v2.306 - Datei am 12/08/2013 um 15:54:36 erstellt
# Aktualisiert am 19/07/2013 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzer : Nelli - NELLI-PC
# Bootmodus : Normal
# Ausgeführt unter : C:\Users\Nelli\Desktop\adwcleaner.exe
# Option [Löschen]


**** [Dienste] ****


***** [Dateien / Ordner] *****

Datei Gelöscht : C:\END
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml
Datei Gelöscht : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
Datei Gelöscht : C:\user.js
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\hdvc@hdvc.com.xpi
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml
Datei Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\SweetIm.xml
Gelöscht mit Neustart : C:\Program Files (x86)\Common Files\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\AVG Secure Search
Ordner Gelöscht : C:\Program Files (x86)\BabylonToolbar
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\Wajam
Ordner Gelöscht : C:\ProgramData\AVG Secure Search
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\AVG Secure Search
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\avg@toolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\BabylonToolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Temp\Iminent
Ordner Gelöscht : C:\Users\Nelli\AppData\Local\Wajam
Ordner Gelöscht : C:\Users\Nelli\AppData\LocalLow\AVG Secure Search
Ordner Gelöscht : C:\Users\Nelli\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\dvdvideosoftiehelpers
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\jetpack
Ordner Gelöscht : C:\Users\Nelli\AppData\Roaming\pdfforge

***** [Registrierungsdatenbank] *****

Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\AVG Secure Search
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\InstallCore
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKCU\Software\Softonic
Schlüssel Gelöscht : HKCU\Software\Wajam
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\Software\AVG Secure Search
Schlüssel Gelöscht : HKLM\Software\AVG Security Toolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\b
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\escort.escrtBtn.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\S
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Schlüssel Gelöscht : HKLM\Software\Wajam
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\522d6deb33aed48
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Tarma Installer
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{acaa314b-eeba-48e4-ad47-84e31c44796c}]
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Wert Gelöscht : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

***** [Internet Browser] *****

-\\ Internet Explorer v10.0.9200.16635

Ersetzt : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 --> hxxp://www.google.com

-\\ Mozilla Firefox v22.0 (de)

Datei : C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\prefs.js

C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\user.js ... Gelöscht !

Gelöscht : user_pref("browser.newtabpage.pinned", "[null,{\"url\":\"hxxp://www.facebook.com/nela.sengis\",\"tit[...]
Gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=109989");
Gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.BabylonToolbar_i.id", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15419");
Gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.173:04:39");
Gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Gelöscht : user_pref("extensions.delta.admin", false);
Gelöscht : user_pref("extensions.delta.aflt", "babsst");
Gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Gelöscht : user_pref("extensions.delta.dfltLng", "en");
Gelöscht : user_pref("extensions.delta.excTlbr", false);
Gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Gelöscht : user_pref("extensions.delta.id", "948776190000000000004c8093361cd6");
Gelöscht : user_pref("extensions.delta.instlDay", "15825");
Gelöscht : user_pref("extensions.delta.instlRef", "sst");
Gelöscht : user_pref("extensions.delta.newTab", false);
Gelöscht : user_pref("extensions.delta.prdct", "delta");
Gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Gelöscht : user_pref("extensions.delta.rvrt", "false");
Gelöscht : user_pref("extensions.delta.smplGrp", "none");
Gelöscht : user_pref("extensions.delta.tlbrId", "base");
Gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Gelöscht : user_pref("extensions.delta.vrsn", "1.8.16.16");
Gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.16.1620:57:23");
Gelöscht : user_pref("extensions.delta.vrsni", "1.8.16.16");

-\\ Google Chrome v28.0.1500.95

Datei : C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Preferences

Gelöscht [l.1] : icon_url ={"backup":{"session":{"urls_to_restore_on_startup":["hxxp://www2.delta-search.com/?affID=119776&babs[...]

*************************

AdwCleaner[S1].txt - [369 octets] - [12/08/2013 15:27:36]
AdwCleaner[S2].txt - [333 octets] - [12/08/2013 15:54:23]
AdwCleaner[S3].txt - [32992 octets] - [12/08/2013 15:54:36]

########## EOF - C:\AdwCleaner[S3].txt - [33053 octets] ##########
         
--- --- ---


JRT.txt

Code:
ATTFilter
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.4.4 (08.12.2013:1)
OS: Windows 7 Home Premium x64
Ran by Nelli on 12.08.2013 at 16:06:25,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim



~~~ Files

Successfully deleted: [File] "C:\Windows\wininit.ini"



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{0FECD12F-8A7A-45B3-8028-BE0E60A7815D}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{7721423D-A5FA-4BE0-B189-9925ED8681AA}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{7C4DBEC7-94B4-48D2-BA97-521092BEF214}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{809CD42A-6276-450F-A3E2-57FAB9B84F09}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{99305D57-634E-4E51-9FD4-207931175E20}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{AE39C2E1-9FAC-42CA-B9A6-74BC5E868F07}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{BBB17F9E-172E-43C1-B12D-C004B81A49C4}
Successfully deleted: [Empty Folder] C:\Users\Nelli\appdata\local\{F06FEC9D-F23E-45CD-A54D-9DAE7A183731}



~~~ FireFox

Successfully deleted: [File] C:\Users\Nelli\AppData\Roaming\mozilla\firefox\profiles\yeqxaunu.default\invalidprefs.js
Emptied folder: C:\Users\Nelli\AppData\Roaming\mozilla\firefox\profiles\yeqxaunu.default\minidumps [252 files]



~~~ Chrome

Successfully deleted: [Folder] C:\Users\Nelli\appdata\local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Successfully deleted: [Folder] C:\Users\Nelli\appdata\local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 12.08.2013 at 16:13:56,15
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
FRST.txt


FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02
Ran by Nelli (administrator) on 12-08-2013 16:19:18
Running from C:\Users\Nelli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
( ) C:\Windows\system32\lxczcoms.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
( ) C:\Windows\system32\lxeccoms.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/favicon.ico"
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:03 - 2013-08-12 16:04 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 15:54 - 2013-08-12 15:55 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:54 - 2013-08-12 15:55 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe

==================== One Month Modified Files and Folders =======

2013-08-12 16:13 - 2013-08-12 16:13 - 00002328 _____ C:\Users\Nelli\Desktop\JRT.txt
2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:04 - 2013-08-12 16:03 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 16:04 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-12 16:04 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-12 16:04 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 16:03 - 2012-03-20 01:51 - 01955992 _____ C:\Windows\WindowsUpdate.log
2013-08-12 16:00 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox
2013-08-12 16:00 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox
2013-08-12 16:00 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam
2013-08-12 15:59 - 2013-05-04 18:48 - 00012970 _____ C:\ProgramData\lxecscan.log
2013-08-12 15:58 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-12 15:58 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-12 15:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-12 15:58 - 2009-07-14 06:51 - 00083713 _____ C:\Windows\setupact.log
2013-08-12 15:55 - 2013-08-12 15:54 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:55 - 2013-08-12 15:54 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-12 15:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-08 22:45 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen
2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen
2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic
2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon
2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe
2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-12 10:48

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---


Addition.txt
Code:
ATTFilter
 Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 16:19:39
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)

==================== Restore Points  =========================

11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 52%
Total physical RAM: 4007.05 MB
Available physical RAM: 1895.97 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5674.8 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.91 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         
__________________

Alt 12.08.2013, 15:44   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk
ShortcutTarget: Versandhelfer.lnk -> C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe (No File)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&affID=119776&babsrc=SP_ss&mntrId=94874C8093361CD6
BHO-x32: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
CHR HomePage: http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6
CHR RestoreOnStartup: "http://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs"
CHR Extension: (SweetIM for Facebook) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn\1.0.0.0_0
CHR Extension: (Wajam) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp\1.24_0
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp\1.0.1.0_0
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml
C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml
C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
C:\Program Files (x86)\BabylonToolbar
C:\Program Files (x86)\Wajam
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 12.08.2013, 16:02   #5
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Fixlog.txt

Code:
ATTFilter
 Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 17:01:14 Run:1
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==============================================

C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Versandhelfer.lnk => Moved successfully.
C:\Program Files (x86)\Versandhelfer\Versandhelfer.exe not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key not found.
HKCR\Wow6432Node\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} => Key not found.
HKCR\Wow6432Node\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C} => Key not found.
CHR HomePage: hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6 ==> The Chrome "Settings" can be used to fix the entry.
CHR RestoreOnStartup: "hxxp://www2.delta-search.com/?affID=119776&babsrc=HP_ss&mntrId=94874C8093361CD6"]},"tabs":{"use_vertical_tabs" ==> The Chrome "Settings" can be used to fix the entry.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp => Moved successfully.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}" => File/Directory not found.
"C:\Users\Nelli\AppData\Local\Wajam\Chrome\wajam.crx" => File/Directory not found.
C:\Users\Nelli\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx => Moved successfully.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\delta.xml" => File/Directory not found.
"C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\searchplugins\sweetim.xml" => File/Directory not found.
"C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml" => File/Directory not found.
"C:\Program Files (x86)\BabylonToolbar" => File/Directory not found.
"C:\Program Files (x86)\Wajam" => File/Directory not found.

==== End of Fixlog ====
         


Alt 12.08.2013, 21:58   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Ok, bitte ein frisches Log mit FRST machen
__________________
--> Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox

Alt 12.08.2013, 22:07   #7
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



FRST.txt


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-08-2013 02
Ran by Nelli (administrator) on 12-08-2013 23:05:21
Running from C:\Users\Nelli\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
() C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
( ) C:\Windows\system32\lxczcoms.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
( ) C:\Windows\system32\lxeccoms.exe
(Memeo) C:\Program Files (x86)\Memeo\AutoBackup\MemeoBackgroundService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
() C:\Program Files (x86)\PHotkey\ATouch64.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\POSD.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\LXCZbmgr.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe
() C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung Electronics) C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe
(Lexmark International, Inc.) C:\Program Files (x86)\Lexmark 1200 Series\lxczbmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(TODO: <Company name>) C:\Program Files (x86)\PHotkey\HCSynApi.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\watchmi\TvdTray.exe
(Dropbox, Inc.) C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2832168 2011-09-30] (Synaptics Incorporated)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-09-16] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [lxczbmgr.exe] - C:\Program Files (x86)\Lexmark 1200 Series\lxczbmgr.exe [74408 2009-04-27] (Lexmark International, Inc.)
HKLM\...\Run: [lxecmon.exe] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\lxecmon.exe [770728 2011-01-23] ()
HKLM\...\Run: [EzPrint] - C:\Program Files (x86)\Lexmark Pro800-Pro900 Series\ezprint.exe [148280 2011-01-23] ()
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [966072 2012-10-11] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe [580096 2012-10-09] (Samsung Electronics)
HKCU\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [843208 2012-10-19] (Samsung)
MountPoints2: {0a39669c-ba41-11e1-a621-4c8093361cd9} - F:\iStudio.exe
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [506712 2011-02-03] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-04] (CyberLink)
HKLM-x32\...\Run: [RemoteControl10] - C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-31] (CyberLink Corp.)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [309688 2012-10-11] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] - C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [684024 2012-10-17] (Cisco Systems, Inc.)
HKLM-x32\...\Run: [DivXMediaServer] - C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [x]
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\Default\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
HKU\Default User\...\RunOnce: [Screensaver] - C:\Windows\Web\Wallpaper\MEDION\start.vbs [129 2009-10-23] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [241984 2011-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll [203072 2011-10-16] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\watchmi tray.lnk
ShortcutTarget: watchmi tray.lnk -> C:\Windows\Installer\{409DC300-28AF-468F-9624-1F3309701881}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe (Acresso Software Inc.)
Startup: C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Nelli\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.aldi.com
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
BHO-x32: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GbR)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Lexmark Symbolleiste - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll ()
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: youtubeunblocker - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\youtubeunblocker@unblocker.yt.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{7F23E3F4-F72E-4f4f-8761-854C8942708F}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi
FF Extension: No Name - C:\Users\Nelli\AppData\Roaming\Mozilla\Firefox\Profiles\yeqxaunu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt

Chrome: 
=======
CHR RestoreOnStartup: "hxxp://www.google.com/favicon.ico"
CHR HKLM-x32\...\Chrome\Extension: [ibnmbpihhamedhophbnjjpidokcknoid] - C:\Program Files (x86)\AP Suggestor\APSuggestor.crx
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2009-12-19] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CxAudMsg; C:\Windows\system32\CxAudMsg64.exe [198784 2010-12-17] (Conexant Systems Inc.)
R2 CyberLink PowerDVD 10 MS Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSMonitorService.exe [70952 2011-04-14] (CyberLink)
R2 CyberLink PowerDVD 10 MS Service; C:\Program Files (x86)\CyberLink\PowerDVD10\Device\MediaServer\CLMSServer.exe [312616 2011-04-14] (CyberLink)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [156672 2011-10-14] ()
R2 lxcz_device; C:\Windows\system32\lxczcoms.exe [566192 2007-04-19] ( )
S2 lxecCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\lxecserv.exe [45736 2010-04-14] (Lexmark International, Inc.)
R2 lxec_device; C:\Windows\system32\lxeccoms.exe [1052328 2010-04-14] ( )
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-09-16] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1522312 2012-11-22] (pdfforge GbR)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [905864 2012-11-22] (pdfforge GbR)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] ()
R2 vToolbarUpdater15.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe [1616048 2013-07-29] (AVG Secure Search)
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [70144 2011-10-07] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-07-29] (AVG Technologies)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-12] (PEGATRON)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:03 - 2013-08-12 19:58 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 15:54 - 2013-08-12 15:55 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:54 - 2013-08-12 15:55 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe

==================== One Month Modified Files and Folders =======

2013-08-12 22:49 - 2012-03-20 01:53 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-12 22:38 - 2012-04-03 22:44 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-12 19:58 - 2013-08-12 16:03 - 00000000 ____D C:\Users\Nelli\Desktop\bannersdontwork_problem
2013-08-12 19:58 - 2013-01-28 20:39 - 00000000 ____D C:\Users\Nelli\Documents\Finanzen
2013-08-12 17:01 - 2012-03-20 00:59 - 00000000 ___RD C:\Users\Nelli\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-12 16:06 - 2013-08-12 16:06 - 00000000 ____D C:\Windows\ERUNT
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:06 - 2009-07-14 06:45 - 00016944 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-12 16:05 - 2013-08-12 16:05 - 00959697 _____ (Oleg N. Scherbakov) C:\Users\Nelli\Desktop\JRT.exe
2013-08-12 16:04 - 2011-11-04 03:51 - 00654400 _____ C:\Windows\system32\perfh007.dat
2013-08-12 16:04 - 2011-11-04 03:51 - 00130240 _____ C:\Windows\system32\perfc007.dat
2013-08-12 16:04 - 2009-07-14 07:13 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 16:03 - 2012-03-20 01:51 - 01975458 _____ C:\Windows\WindowsUpdate.log
2013-08-12 16:00 - 2012-10-09 23:21 - 00000000 ___RD C:\Users\Nelli\Dropbox
2013-08-12 16:00 - 2012-10-09 23:13 - 00000000 ____D C:\Users\Nelli\AppData\Roaming\Dropbox
2013-08-12 16:00 - 2012-03-20 03:34 - 00000000 ____D C:\Users\Nelli\Documents\Youcam
2013-08-12 15:59 - 2013-05-04 18:48 - 00012970 _____ C:\ProgramData\lxecscan.log
2013-08-12 15:58 - 2013-06-07 22:00 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2013-08-12 15:58 - 2012-03-20 01:53 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-12 15:58 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-12 15:58 - 2009-07-14 06:51 - 00083713 _____ C:\Windows\setupact.log
2013-08-12 15:55 - 2013-08-12 15:54 - 00032985 _____ C:\AdwCleaner[S3].txt
2013-08-12 15:55 - 2013-08-12 15:54 - 00000121 _____ C:\Windows\DeleteOnReboot.bat
2013-08-12 15:54 - 2013-08-12 15:54 - 00000333 _____ C:\AdwCleaner[S2].txt
2013-08-12 15:27 - 2013-08-12 15:27 - 00000369 _____ C:\AdwCleaner[S1].txt
2013-08-12 13:41 - 2013-08-12 13:41 - 00377856 _____ C:\Users\Nelli\Desktop\gmer_2.1.19163.exe
2013-08-12 13:40 - 2013-08-12 13:40 - 00000000 ____D C:\FRST
2013-08-12 13:39 - 2013-08-12 13:39 - 01575246 _____ (Farbar) C:\Users\Nelli\Desktop\FRST64.exe
2013-08-12 13:38 - 2013-08-12 13:38 - 00109218 _____ C:\Users\Nelli\Desktop\OTL.Txt
2013-08-12 13:37 - 2013-08-12 13:37 - 00000000 _____ C:\Users\Nelli\defogger_reenable
2013-08-12 13:37 - 2012-03-20 00:59 - 00000000 ____D C:\Users\Nelli
2013-08-12 13:25 - 2013-08-12 13:25 - 00602112 _____ (OldTimer Tools) C:\Users\Nelli\Desktop\OTL.exe
2013-08-12 13:20 - 2013-08-12 13:20 - 00666633 _____ C:\Users\Nelli\Desktop\adwcleaner.exe
2013-08-11 11:29 - 2012-07-07 14:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-04 16:51 - 2012-03-20 03:31 - 00000000 ____D C:\Users\Nelli\Documents\Reisen
2013-08-04 15:19 - 2013-01-06 13:24 - 00000000 ____D C:\Program Files (x86)\TVPlayerClassic
2013-08-04 15:14 - 2012-03-20 03:30 - 00000000 ____D C:\Users\Nelli\Documents\Groupon
2013-07-29 22:28 - 2013-06-28 18:38 - 00003717 _____ C:\Program Files (x86)\Mozilla Firefoxavg-secure-search.xml
2013-07-29 22:26 - 2012-09-14 13:36 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-07-21 18:48 - 2012-03-20 01:10 - 00000000 ____D C:\Users\Nelli\AppData\Local\Adobe
2013-07-21 18:46 - 2012-04-03 22:44 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-07-21 18:45 - 2012-04-03 22:44 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-21 18:45 - 2011-11-07 18:44 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-07-15 23:44 - 2012-03-20 01:53 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-07-15 23:44 - 2012-03-20 01:53 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-07-15 18:37 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-12 10:48

==================== End Of Log ============================
         
--- --- ---


Addition.txt

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 11-08-2013 02
Ran by Nelli at 2013-08-12 23:05:43
Running from C:\Users\Nelli\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
 Update for Microsoft Office 2007 (KB2508958) (x32)
7-PDF Split & Merge Version 2.0.2 (Build 234) (x32 Version: 7-PDF Split & Merge - Version 2.0.2 (Build 234))
ABBYY FineReader 6.0 Sprint (x32 Version: 6.00.2146.41621)
Adobe AIR (x32 Version: 3.7.0.1860)
Adobe Flash Player 11 ActiveX (x32 Version: 11.7.700.224)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader X (10.1.7) MUI (x32 Version: 10.1.7)
Alcor Micro USB Card Reader (x32 Version: 1.8.1217.36096)
AMI VR-pulse OS Switcher (Version: 1.1)
Ashampoo Burning Studio (x32 Version: 10.0.10)
Ashampoo Photo Commander (x32 Version: 9.2.0)
Ashampoo Photo Optimizer (x32 Version: 4.0.0)
Ashampoo Snap (x32 Version: 4.3.0)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (x32 Version: 1.0.0.35)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
Cisco AnyConnect Secure Mobility Client  (x32 Version: 3.1.01065)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.01065)
Control ActiveX de Windows Live Mesh para conexiones remotas (x32 Version: 15.4.5722.2)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (x32 Version: 15.4.5722.2)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.0.686)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686)
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686)
CorelDRAW Essentials X5 - Common (x32 Version: 15.3)
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3)
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3)
CorelDRAW Essentials X5 - DE (x32 Version: 15.3)
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3)
CorelDRAW Essentials X5 - EN (x32 Version: 15.3)
CorelDRAW Essentials X5 - ES (x32 Version: 15.3)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0)
CorelDRAW Essentials X5 - Extra Content (x32)
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3)
CorelDRAW Essentials X5 - FR (x32 Version: 15.3)
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3)
CorelDRAW Essentials X5 - IT (x32 Version: 15.3)
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3)
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0)
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3)
CorelDRAW Essentials X5 - WT (x32 Version: 15.3)
CorelDRAW Essentials X5 (x32 Version: 15.2.0.686)
CorelDRAW Essentials X5 (x32 Version: 15.3)
CyberLink LabelPrint (x32 Version: 2.5.3624)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229)
CyberLink MediaShow (x32 Version: 5.1.2414)
CyberLink PhotoNow (x32 Version: 1.1.7717)
CyberLink Power2Go (x32 Version: 7.0.0.1327)
CyberLink PowerDirector (Version: 9.0.0.3419a)
CyberLink PowerDirector (x32 Version: 9.0.0.3419a)
CyberLink PowerDVD 10 (x32 Version: 10.0.3510.02)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306)
CyberLink PowerProducer (x32 Version: 5.0.2.3503)
CyberLink WaveEditor (x32 Version: 1.0.1.3320)
CyberLink YouCam 5 (x32 Version: 5.0.1108)
D3DX10 (x32 Version: 15.4.2368.0902)
Dolby Advanced Audio v2 (x32 Version: 7.2.7000.4)
Dropbox (HKCU Version: 2.0.22)
exant HD Audio (Version: 8.54.14.50)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922)
Free Studio version 2013 (x32 Version: 6.1.1.430)
Free WMA to MP3 Converter 1.16 (x32)
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922)
Google Chrome (x32 Version: 28.0.1500.95)
Google Drive (x32 Version: 1.11.4865.2530)
Google Update Helper (x32 Version: 1.3.21.153)
Intel PROSet Wireless
Intel PROSet Wireless (x32)
Intel(R) Management Engine Components (x32 Version: 7.0.0.1118)
Intel(R) Processor Graphics (x32 Version: 8.15.10.2538)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (Version: 1.2.0.0587)
Intel(R) PROSet/Wireless WiFi Software (Version: 14.2.1000)
Intel(R) Rapid Storage Technology (x32 Version: 10.6.0.1002)
Intel(R) WiDi (x32 Version: 2.2.14.0)
Intel(R) Wireless Display
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
Java(TM) 6 Update 29 (64-bit) (Version: 6.0.290)
Java(TM) 6 Update 29 (x32 Version: 6.0.290)
JDownloader 0.9 (x32 Version: 0.9)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (x32 Version: 15.4.5722.2)
Lexmark 1200 Series
Lexmark Pro800-Pro900 Series
Lexmark Symbolleiste (x32 Version: 4.3.37.0)
Lexmark Tools for Office (x32 Version: 1.29.0.0)
MediaConverter 1.3.1 (x32 Version: 1.3.1)
Medion Home Cinema (x32 Version: 8.0.3216)
Memeo Instant Backup (x32 Version: 4.60.0.7943)
Mesh Runtime (x32 Version: 15.4.5722.2)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Mathematics (64-Bit) (Version: 4.0)
Microsoft Office 2007 Service Pack 3 (SP3) (x32)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003)
Microsoft Office Home and Student 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319 (x32 Version: 10.0.30319)
Mozilla Firefox 22.0 (x86 de) (x32 Version: 22.0)
Mozilla Maintenance Service (x32 Version: 22.0)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
myMugle (x32 Version: 3.0.0.0)
NVIDIA Control Panel 285.64 (Version: 285.64)
NVIDIA Graphics Driver 285.64 (Version: 285.64)
NVIDIA Install Application (Version: 2.1002.46.235)
NVIDIA Optimus 1.5.20 (Version: 1.5.20)
NVIDIA PhysX (x32 Version: 9.10.0513)
NVIDIA Update Components (Version: 1.5.20)
PCSUITE SHREDDER (x32)
PDF Architect (x32 Version: 1.0.41.8362)
PDFCreator (x32 Version: 1.7.0)
PHotkey (x32 Version: 1.00.0045)
PhotoResampling 9.2 (x32)
PlayReady PC Runtime amd64 (Version: 1.3.0)
Pošta Windows Live (x32 Version: 15.4.3502.0922)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.16.0)
Samsung Kies (x32 Version: 2.3.3.12085_7)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.15.0)
Serif PhotoPlus 11 (x32 Version: 11.1.1.019)
Skype™ 6.1 (x32 Version: 6.1.129)
Spelling Dictionaries Support For Adobe Reader X (x32 Version: 10.0.0)
Synaptics Pointing Device Driver (Version: 15.3.27.1)
Update for 2007 Microsoft Office System (KB967642) (x32)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32)
Update für Microsoft Office Excel 2007 Help (KB963678) (x32)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32)
Update für Microsoft Office Word 2007 Help (KB963665) (x32)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.1 (x32 Version: 2.0.1)
watchmi (x32 Version: 2.7.0)
Windows Live (x32 Version: 15.4.3502.0922)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3538.0513)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live Fotótár (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3538.0513)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (x32 Version: 15.4.5722.2)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Mesh ActiveX Control for Remote Connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (x32 Version: 15.4.5722.2)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (x32 Version: 15.4.5722.2)
Windows Live Messenger (x32 Version: 15.4.3538.0513)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinRAR 4.11 (64-Bit) (Version: 4.11.0)

==================== Restore Points  =========================

11-07-2013 09:14:34 Geplanter Prüfpunkt
12-07-2013 00:54:33 Windows Update
19-07-2013 18:34:57 Geplanter Prüfpunkt
03-08-2013 16:29:07 Geplanter Prüfpunkt
10-08-2013 20:08:39 Geplanter Prüfpunkt

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02768EAD-0A5B-4629-84CD-71D383ACCE70} - System32\Tasks\{F82055D1-A3BD-4ACC-8790-4F0F84C7186B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {06B56F0D-905A-472F-8CA7-0E10D0D8CB0B} - System32\Tasks\{B413301B-7E61-491F-AB70-0F06C48FF1F3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {09689C71-147A-4BAB-862C-ED71277E8876} - System32\Tasks\{78C7BB73-D8DB-4052-8B48-91992D96FB8D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0A5A6A4B-C212-472A-A278-FD4FDFDEA012} - System32\Tasks\{EC07800D-F02E-4331-A236-18C72B9B6C7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0AD4613E-1EEC-48C4-831A-4EC3C707A665} - System32\Tasks\{46910F05-7308-40E6-A19C-8A16284E9387} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {0BF15BDD-1C9F-4AB6-82C6-12870DA2E5A2} - System32\Tasks\{B4687708-B3B0-49DC-B098-CA6764C1B064} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {18576D76-F893-42A2-B4A0-DB3DF7C2390D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {1A810642-94FF-46AB-B0AA-EF080852C0C4} - System32\Tasks\{9D4F33AC-43A7-4E5D-B3F1-FA2BC8B05D6F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1C0B7614-4256-4C5C-AC22-1BC640FD6143} - System32\Tasks\{7FD67CCD-D320-40C9-B20D-9DAD504E92DC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {1F3CC8FC-2C29-4C4C-AD85-79ECEB3207E3} - System32\Tasks\{EBC0107A-27E6-4456-9980-3883F513495F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {21AA544D-2519-4549-A2B7-C5D62D4376FD} - System32\Tasks\{945D7430-8F26-4F0B-8DB4-54A54B4F6616} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2205DA87-188E-4C43-AFC3-3FFE83E24853} - System32\Tasks\{61908B0F-E2EE-4CCC-A53F-0F6FEB52B308} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {23B03E71-7D6C-4488-86A6-ACC296B6F899} - System32\Tasks\{C3C31BB9-89AC-4AB3-9D9E-AF1DBC3257DA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {24C95FA5-ABFD-430C-8076-BABCC3AA830B} - System32\Tasks\{B9799D49-C6B5-4081-978A-394DB9DAB28E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {272F7FA2-9B20-4B92-B2ED-158BC9F6AC9F} - System32\Tasks\{C75FA60B-CD2F-4CC1-91E0-C15C02BF7A19} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {27DC4101-35F8-4B53-80A2-059E80F94143} - System32\Tasks\{006F757E-36E5-419F-90B0-45EC7EED7D0F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {28A0A582-3928-4BBC-A953-348EBA69D8BD} - System32\Tasks\{9092C394-C4DB-44A3-92E4-B579967AC05F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A8B80A2-90CB-47D4-B156-1146475E9D7B} - System32\Tasks\{91DB47EE-733D-48A8-9C8B-B401D9BB4EE1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {2A9D1B21-C10E-43A3-849C-F72C0533BD08} - System32\Tasks\WPD\SqmUpload_S-1-5-21-1675067217-2774866892-2821489468-1002 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {2CC88C72-E06E-4361-B748-37BE31CB527E} - System32\Tasks\{AA0CD588-455E-4E6A-8C3D-E5098B4BAABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {311EA50B-C17A-4385-BE5C-70511E633FB3} - System32\Tasks\{D17A4C39-5BEE-4D2C-9AD7-08607A220ED7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {312DDE74-BCA1-4E77-9553-DA9EA37E0642} - System32\Tasks\{D3B020AB-8F78-44B9-9D90-B74478DD7603} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {32EE8272-E801-4C64-8681-6C14D1208219} - System32\Tasks\{C42F1D88-AD03-4239-942B-617F4B8A86F6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3A9422D1-EA6A-435A-81B8-CC8547E82516} - System32\Tasks\{7925F03B-B182-4652-893E-7EFC67C66D0C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3ACDCF49-9DDD-4647-A0F0-B4E3163321B5} - System32\Tasks\{035A4774-F011-4751-9150-B07A48A9B493} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3E712F2E-A704-4276-A4DB-9658D18C2907} - System32\Tasks\{3E4EA85A-3882-44A8-A33E-9A147CCAB5EF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {3EFABCFE-E1B1-4515-AD36-ACE1A6FB4620} - System32\Tasks\{B11360C8-0018-4E8E-8CA2-C658FCFFA079} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {407075C5-0EA2-45FB-8590-A903FE8A7025} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\Windows\System32\lpksetup.exe [2010-11-21] (Microsoft Corporation)
Task: {40D9E60B-09B8-4044-8984-162DBADFEF91} - System32\Tasks\{AB724718-AF72-42B7-996F-D1B9C5F0BDF6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {42577CA5-7636-4669-81DF-B321CD5EA347} - System32\Tasks\{6BD0E276-38C8-477B-92AE-F6AD7EE66FD6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {438B387E-E1B9-4D52-B8EA-D8C2F9722A45} - System32\Tasks\{494EF7DF-7A0C-4F64-B0E3-E2B39D52FE8A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {43B3793E-591F-41AA-BC94-67B06021721F} - System32\Tasks\{34199AA6-F406-4B72-83CD-63D3FAA8968C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4459DEC7-B2FC-4F6A-8F1E-B350B32E4865} - System32\Tasks\{88A1D263-182D-45F8-BA93-B7B354D7EDC6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44CE8637-1C88-4F4D-8872-E923315A3528} - System32\Tasks\{C93BA26F-6F1D-491E-90CB-4402A7E49CDF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {44FCEA04-B958-47E7-8F26-DBC14186FE07} - System32\Tasks\{C88C6674-2064-48E9-A539-4D0E7768B155} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4BB2E9BA-B294-4340-BE67-3E5B035ABF58} - System32\Tasks\{049AC1F4-79AF-4B48-8C67-30FDFAF46A7C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {4C10EF4B-53B0-4BD9-967F-E227B758267D} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {4CB3BF8A-C7A9-48F2-A0C6-EF8F03AA3A97} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-21] (Adobe Systems Incorporated)
Task: {4E05AC37-AD3B-4DCA-9938-064634CCDB5E} - System32\Tasks\{F7A5DBCD-9963-4859-851A-F87B9E301575} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {50946178-A983-4339-821E-4A42C17F03BC} - System32\Tasks\{05A49616-96EF-4A5A-80E8-C5A577F77D62} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {51562EEF-1402-4F44-8615-BE8A2762EC3F} - System32\Tasks\{D9942290-9314-42DA-A61D-399D29CD3D69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {53500B94-15DA-4B95-9407-47F1FAA629F4} - System32\Tasks\{98F0B528-505E-42A7-8C7C-3025485402A9} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {55CAB32B-1C5D-4329-A309-C286A565952C} - System32\Tasks\{A289397E-BE87-4253-BAEB-4D4BF5217A5C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {574A2071-6DCE-43C8-9693-430110F10F9B} - System32\Tasks\YCMServiceAgent => C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe [2011-11-08] (CyberLink Corp.)
Task: {5791845C-23E9-4745-8CF2-6B03ECFC7907} - System32\Tasks\{16BCEE64-DCBC-46C8-8F90-238FFE2DD58D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {57D60F68-13EC-49EA-8E61-CAA56B6217F5} - System32\Tasks\{B8AEA034-38D3-4069-8899-F8A844B8E5FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5C05A6A8-35F3-4333-8443-7F862A35F648} - System32\Tasks\{070CD9E0-4E19-4C44-B6FF-A87EE2390C96} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5DF49DD8-7CF4-49F6-9F96-161EA81D92D0} - System32\Tasks\{45DFC4BD-C7C1-4F84-B532-88B15A04FFEB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {5F06F2BF-8A87-4DAC-8FA0-A0324156BEA8} - System32\Tasks\{493B437D-D4FC-4D11-94A6-B9CE68A51F83} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {60C30D26-294F-4F6E-B20C-C32473194C4E} - System32\Tasks\{098370C0-661D-40AF-A1BB-7B8F500584FC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {628CFC9C-E793-490D-B59D-A1FA5A8FB740} - System32\Tasks\{4B859EF0-0E68-4DA8-B620-5051C4184ABF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6825859F-017C-4AAE-BAB5-521AC5CAC494} - System32\Tasks\{D97A6A08-5035-4265-99DC-85CB55173FC7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {68FFB98A-6E8F-44C0-A018-67B16A40A585} - System32\Tasks\{C489461A-25A1-4B70-A539-FE04D480C24D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {69E73F52-0A73-4ABA-AD79-554CCDFA29A2} - System32\Tasks\{7CBAFB04-F825-4A4A-81D4-7A00A50C12B2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6A5D1C73-2B48-4BD4-A1E7-8058C236D8C1} - System32\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe No File
Task: {6AC1CA82-7C9D-4037-A152-041144DF9B47} - System32\Tasks\{58DE006A-AF1E-414D-8363-EC887B8F1381} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6CA65543-C233-489E-8A27-3A930D5C69F9} - System32\Tasks\{4DE65F80-13A5-499B-9C28-5AB3C296B134} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {6F4C4F41-BC39-4D3B-863F-5E67BFF6C043} - System32\Tasks\{7D7B114B-8FEA-4B9D-A650-1212C2C4C36C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {71F8282C-CC8A-4BDA-94BA-6E33A9D795DB} - System32\Tasks\{6C5B3F7F-1854-4010-BD4A-E445F027D4C1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78554F41-AD30-4C5F-8551-FB0C9A941E75} - System32\Tasks\{F5D62368-58BE-46C8-A1C9-F57031F5F917} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {78746FFC-FA28-406A-AF75-634BB06FC84C} - System32\Tasks\{6BD091D8-83CD-4156-B40F-C18521D35909} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {787A64C0-A527-4E0E-A19C-688E448638E4} - System32\Tasks\{3F5D0ADB-938F-4B46-90AF-879956E395D1} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E4BF543-B552-439F-90D0-FEA6DA7FBAAC} - System32\Tasks\{33B2D291-63B9-40D5-AA85-5C2B79135A80} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {7E68B58C-063B-4CF1-AE2F-B9B841AEFDF5} - System32\Tasks\{01D99FEF-0C32-4BBB-B16E-B2C1EA30E606} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8045CAB2-5FC0-4C21-8C43-FF2B342EFBEB} - System32\Tasks\{5BB599C0-594D-46A0-8901-A29C85F7C9F7} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {81009C75-4224-4A73-8541-3E67B27F1AA9} - System32\Tasks\{924C21F0-D164-486D-9559-12F76934F729} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {82DC79D7-02DA-4F29-B5EB-35722A66E218} - System32\Tasks\{F96005EF-5C81-43FB-AA97-16DD2510140F} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {85EC8F51-3B31-42CD-BB61-0626D7AC81C9} - System32\Tasks\{1DEA6899-866C-42C0-BA48-A7F62CD73481} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8A3D53E1-F989-46A5-AD17-34E89FC291FB} - System32\Tasks\{FC7DB2E6-E8F8-4E80-9B44-1738D897BA42} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8CC32081-E95E-423E-A91C-701B2FEAC397} - System32\Tasks\{750E300E-E6BB-497A-A08D-72C7C59F50A2} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8D781DAD-1AF4-400D-BB58-C0312F480346} - System32\Tasks\{07066D58-5BE4-46BC-A56B-4C2F6B634186} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {8F47DA1E-8BA1-4301-B6D4-3B987945DD3F} - System32\Tasks\{5FA650BA-94A3-4D1C-B3A9-A2B43183BD16} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {91DC09F6-7390-49E5-BA52-E9FA7F0DC506} - System32\Tasks\{162E5266-1231-4806-8EDB-98B5D9DBBDA6} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92CCB63E-F8BA-4313-B0EE-52921C7BE98E} - System32\Tasks\{C922B4EA-B3D9-4343-A4C1-034989C81F97} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {92FA0992-88F0-4799-981F-669385862AC3} - System32\Tasks\{FA3D4DCC-F714-4EFB-B7D0-78D0656DC906} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {97A61783-DBB9-438D-BE1D-2093260B47E1} - System32\Tasks\{BF54C924-BE15-4763-A1DF-F310B8752F23} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {99F815AF-B0FA-477C-A333-E3E62FB5DCC4} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {9DF09107-36B8-4524-85E1-523F6CD621FF} - System32\Tasks\{AB69E0D5-7737-495F-B1A9-72D6BF4E353B} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {9F0E25E9-21A3-4707-BF4A-9B29639C97E6} - System32\Tasks\{1112BAE9-62A8-4CF9-8094-DFDFB83446C5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A005C9AF-E5A6-4EAE-BB05-3F4AACB214B3} - System32\Tasks\{08888828-6E28-4AC6-A91F-A61FBD44E160} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A26CB0C0-E3E4-4BFB-831B-A14B6014F197} - System32\Tasks\{CF47BA78-DB59-4E21-A1E2-74CBEB761E63} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A89E1836-27BC-4255-A8AA-C498108C0040} - System32\Tasks\{1D34C46E-BC5B-4DCA-82A1-9C34E0FAED69} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {A9C2AE8F-A97B-4E2C-A49B-3417A694D31F} - System32\Tasks\{218203D4-8378-4032-B560-6560763670C3} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AA7D99FA-5AEB-44F8-9E97-EB3C48A304A3} - System32\Tasks\{0E5CE861-53EC-45B6-99EF-EB65E4262B37} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AAC0714F-1612-46CE-A0C2-280AF398B507} - System32\Tasks\{8941DFEF-44EE-460B-BEB6-F0553EB49ADB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {AF6C4E6E-963F-452B-A036-BC64A8034679} - System32\Tasks\{A3E7DC47-10D2-481B-936C-459D7695D41D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B1757880-04EE-4FE6-94AE-76572C5BE47A} - System32\Tasks\{659FCD88-92B6-4341-8F64-2766343C4732} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B4FA1AFD-D5C5-444E-9995-B6CAA843A579} - System32\Tasks\{453185F3-88EB-407A-AAA2-0E1FF1482B9E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B59A9CDE-01CF-4DE5-80BD-DF0A71857655} - System32\Tasks\{791C72F6-D561-4A65-89A5-BA4CD9AAC567} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {B5E5C4EC-7695-4631-9F7E-A284C7552576} - System32\Tasks\{98CD5596-30F2-40A3-B8DE-2F0288B28105} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BA711B9A-5D13-4F6C-9C69-1DF06977A10E} - System32\Tasks\{A18AF419-F34C-4F3F-8998-60250F41882C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BB48FF8C-8E6D-409F-87B5-C37D76DD5D87} - System32\Tasks\SpottyFiles Update => C:\Program Files (x86)\SpottyFiles\SpottyFilesUpdater.exe No File
Task: {BE42A363-7FD5-4419-88A5-E107F7B1C863} - System32\Tasks\{66C6CB7E-9106-4074-B0E5-DFE8EDB28A39} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BE8A510E-3C89-4164-A07E-BCDAB13E88C2} - System32\Tasks\{70DBCCC7-1B3C-4A5B-A48D-28C6396446B5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {BF5EB366-6E53-4AB7-8A38-5AE5B6C0C891} - System32\Tasks\{41BE99BE-1315-4F2F-98CD-B6B7F4837C26} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C155F411-1E6C-4245-BAD7-C4EBCFB9C119} - System32\Tasks\{11BCC65F-16A5-42E8-84A9-D3599A86460C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C468C046-27D0-44FF-8430-A40EAC93EB05} - System32\Tasks\{204BBF9C-74CB-443C-AFEE-0BEDD8242179} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {C6D2D9EC-852D-4ED6-9DB0-489A3CAFC498} - System32\Tasks\{0ED560A2-23D7-400E-841A-4FC09DCCA6ED} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA193016-E6C4-440D-B046-427617FFC9D2} - System32\Tasks\{43720F8B-2711-4EEB-BC55-D6C456ABC4AA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CA73936E-7392-44ED-8E2B-E662A06761A3} - System32\Tasks\{6A40D400-7BEB-4C5D-A77B-6F94E84DEBEF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CAD0864C-FF67-4B31-A88C-29D7BC615239} - System32\Tasks\{46A241A2-3DC2-4BAC-8C98-589F60EB4623} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCAFA911-BA10-484E-A4CD-D46688FB3FB5} - System32\Tasks\{2A1125D4-45C2-4588-B32C-F215AB4F4DF5} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {CCED0615-88D5-4254-9DF6-9F2F405416ED} - System32\Tasks\{7C063A08-FD21-45DE-BE60-72102FC5BBBD} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D141B09E-6FF9-47A5-8A57-DB3FFFAB11FD} - System32\Tasks\{A3E73D14-AD40-4C50-9436-5A2110721DF8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D1830F60-8FB6-4440-AF70-3F127D6E7835} - System32\Tasks\{5FB3A7CA-47E0-46E3-9691-96960DBDAC33} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {D47E5AED-F7A8-494E-9A3E-DF6E0251BA8C} - System32\Tasks\{C7C7B320-85AB-4DD2-8CFD-5AA5C0F1A3F0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DC456B82-0EE7-4913-A142-70571102E821} - System32\Tasks\{02653CAE-1DF0-458D-954C-290074CA2756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE364A4F-C786-4C27-8781-D2CE7897F8A3} - System32\Tasks\{407F5116-C48F-4BEF-93CB-9B84EC8140CC} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DE55DE74-AD25-4903-A805-21B89711CD95} - System32\Tasks\{2242EB69-A689-4618-9099-10F0D4E3B82D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {DF826B9A-8373-4C8E-A07F-2FAB3185E75D} - System32\Tasks\{6FC51F55-988F-4331-A1B0-65A96EB62714} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E4833643-F149-457D-AFCD-BA48415A1206} - System32\Tasks\{144107FA-5F7C-4BB0-9F95-B7ECA0B4DEE8} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E5EF0172-FEE5-4F97-B88B-78AC1E18E87D} - System32\Tasks\{61D0D500-1D02-4996-A37E-DBA7F63BE6E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {E9A69FDD-7BE3-468C-AE96-DB50607E96FE} - System32\Tasks\{BDA707CE-834C-4A94-86F9-F9749AE6B781} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EBF0F9E0-9821-4F14-8AA5-38328D6E49BE} - System32\Tasks\{117BBBE4-1DBB-43D8-BA67-664D257D7F9C} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EE82A3CE-7120-4B5A-A2E5-F1D232C555A5} - System32\Tasks\{EB4A9BC1-47FE-499A-9C73-089DD52B2643} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {EF2C589A-B0FA-4C22-A575-DCC607F77D88} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-20] (Google Inc.)
Task: {F0EA9897-CE27-4ED3-AA53-FB3CD04424CE} - System32\Tasks\{2169BF42-9ECB-43CF-BE05-FE4B064FCE5E} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F1012CC3-D7A6-4CF3-B5F9-F8731FFBF808} - System32\Tasks\{3EDA1107-F837-401F-9A40-D46329686257} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2133E5A-1F74-4F10-9993-D7D8FD1E275C} - System32\Tasks\{B26156AC-42BA-4CD6-9226-58F972A0D2EB} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F2C8E8F1-2095-4F71-9865-B513AE503958} - System32\Tasks\{2B418A9B-6435-425E-8D19-CDCA97825756} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6876887-975A-4258-BB79-53ED210D854A} - System32\Tasks\{C7ED4D7B-6D5C-46D6-B453-FB25EBB8F5EA} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F6E394A1-4251-439A-AAA9-C04FDF0B9FC9} - System32\Tasks\{E4E3C51A-D5A5-4BCD-8F11-E2F90DE9C18A} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {F8AD349C-0D68-4B56-8D4F-0EAEE68640CB} - System32\Tasks\{F683AFB7-3C9B-4CDD-B960-871994415F6D} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FAC9C308-C8DF-4F1D-AFEC-A67A9882753A} - System32\Tasks\{405A6984-3687-41A1-AE20-DF3030ADF9E0} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FCF3F52C-A0F4-4209-9010-10B7D5E57387} - System32\Tasks\{55937D5C-6ED0-43E9-B4A6-02B26F9CBC15} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: {FE5BE871-9E40-4BD5-A611-C48789CB0FEB} - System32\Tasks\{2DD86116-6A4F-4CFF-8F37-543E331203DF} => c:\program files (x86)\google\chrome\application\chrome.exe [2013-07-25] (Google Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => C:\Windows\TEMP\{4697A8B0-81E0-4476-9255-148C33CE540E}.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Faulty Device Manager Devices =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Bluetooth-Peripheriegerät
Description: Bluetooth-Peripheriegerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 66%
Total physical RAM: 4007.05 MB
Available physical RAM: 1340.44 MB
Total Pagefile: 8012.29 MB
Available Pagefile: 5102.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.8 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:404.66 GB) (Free:227.51 GB) NTFS (Disk=0 Partition=2)
Drive d: (Recover) (Fixed) (Total:60 GB) (Free:29.93 GB) NTFS (Disk=0 Partition=3)

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=405 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=1 GB) - (Type=12)

==================== End Of Log ============================
         

Alt 12.08.2013, 22:11   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 13.08.2013, 06:37   #9
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hier schon mal der erste Step...

mbam-log

Code:
ATTFilter
 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.12.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16635
Nelli :: NELLI-PC [Administrator]

Schutz: Aktiviert

12.08.2013 23:30:17
mbam-log-2013-08-12 (23-30-17).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 252504
Laufzeit: 6 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 6
C:\Users\Nelli\AppData\Local\Temp\BundleSweetIMSetup.exe (PUP.Optional.SweetIM) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nelli\AppData\Local\Temp\nsc84D5.tmp (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nelli\AppData\Local\Temp\wajam_install.exe (PUP.Optional.Wajam.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\$RECYCLE.BIN\S-1-5-21-1675067217-2774866892-2821489468-1002\$RWCKN84.exe (PUP.BundleInstaller.DW) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nelli\AppData\Local\Temp\C2798ECC-BAB0-7891-AC4A-4CB2EDC70356\MyBabylonTB.exe (PUP.Optional.Delta) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Nelli\AppData\Local\Temp\is-B3LDF.tmp\OCSetupHlp.dll (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         
...und hier das Eset-Log

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=29f1b3fce845d94fa6de0c689da1d64a
# engine=14752
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-13 01:02:37
# local_time=2013-08-13 03:02:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 2797260 153065629 0 0
# compatibility_mode=5893 16776574 100 94 2740645 127985607 0 0
# scanned=284628
# found=2
# cleaned=0
# scan_time=11205
sh=54183157469A030B362BB6D5D6E3B56315D6C0E8 ft=1 fh=93f79e2d0ef07e99 vn="Win32/HackTool.Gendel.A trojan" ac=I fn="C:\gendel32.exe"
sh=11445FCF304B2043FF37461C4F34F492EE5BB19C ft=1 fh=21ba350e23674168 vn="multiple threats" ac=I fn="C:\Users\Nelli\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZEMU08MW\yontoosetup[1].exe"
         

Alt 13.08.2013, 08:36   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Zitat:
C:\gendel32.exe
Bitte diese Datei bei Virustotal auswerten lassen und den Ergebnislink posten. Falls Du die Datei nicht siehst, musst Du sie evtl. vorher sichtbar machen.
Wenn die Datei schon ausgewertet sein sollte, bitte eine weitere Auswertung starten.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 13.08.2013, 12:34   #11
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hab es scannen lassen, hier das Ergebnis:

Zitat:
https://www.virustotal.com/de/file/32e8e5edba4aacb769eac1266c360b4abe096566dda199d2fc2e0ac1fffe3208/analysis/1376393431/

Alt 13.08.2013, 13:44   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Scan mit SystemLook (x64)

Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop.
SystemLook (64 bit)
  • Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
    Code:
    ATTFilter
    :filefind
    *gendel32*
    
    :folderfind
    *gendel32*
    
    :regfind
    gendel32
             
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 13.08.2013, 15:31   #13
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



SystemLook.txt

Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 16:17 on 13/08/2013 by Nelli
Administrator - Elevation successful

========== filefind ==========

Searching for "*gendel32*"
C:\gendel32.exe	--a---- 53248 bytes	[18:20 01/06/2012]	[22:00 19/12/2002] 35BC2808ED08326DAC79DC41CDF3D61C
C:\Windows\Prefetch\GENDEL32.EXE-BB48DCCB.pf	--a---- 14744 bytes	[11:29 13/08/2013]	[11:29 13/08/2013] 6CF484088DD2219ABDD369CBDBD2FDFA

========== folderfind ==========

Searching for "*gendel32*"
No folders found.

========== regfind ==========

Searching for "gendel32"
No data found.

-= EOF =-
         

Alt 13.08.2013, 15:35   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Zitat:
C:\gendel32.exe
Bitte diese Datei löschen. Mehr sollte das nicht sein. Leere aber bitte nochmal deine TEMP-Ordner:

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 13.08.2013, 15:59   #15
Nela88
 
Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Standard

Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox



Hallo Cosinus,

die Datei ist gelöscht und den TFC habe ich ausführen lassen - zum Neustart wurde ich nicht aufgefordert. Wars das nun?

Antwort

Themen zu Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox
4d36e972-e325-11ce-bfc1-08002be10318, avg security toolbar, bannersdontwork, device driver, dvdvideosoft ltd., excel, farbar, farbar recovery scan tool, homepage, iminent toolbar, problem, pup.bundleinstaller.dw, pup.optional.delta, pup.optional.opencandy, pup.optional.somoto, pup.optional.sweetim, pup.optional.wajam.a, secure search, services.exe, svchost.exe, vtoolbarupdater, win32/hacktool.gendel.a



Ähnliche Themen: Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox


  1. Probleme mit serve.bannersdontwork.com
    Log-Analyse und Auswertung - 07.12.2013 (7)
  2. Windows 8 - serve.bannersdontwork
    Plagegeister aller Art und deren Bekämpfung - 09.10.2013 (7)
  3. N°1 serve.bannersdontwork.com
    Log-Analyse und Auswertung - 26.09.2013 (7)
  4. Problem mit serve.bannersdontwork.com
    Log-Analyse und Auswertung - 25.09.2013 (4)
  5. N°2 serve.bannersdontwork.com
    Mülltonne - 25.09.2013 (1)
  6. serve.bannersdontwork.com
    Log-Analyse und Auswertung - 17.09.2013 (13)
  7. Problem mit http://serve.bannersdontwork.com
    Log-Analyse und Auswertung - 22.08.2013 (9)
  8. Win7 FireFox Googlesearch HTTP Error 302 - Moved
    Log-Analyse und Auswertung - 21.08.2013 (11)
  9. serve.bannersdontwork.com
    Log-Analyse und Auswertung - 15.08.2013 (15)
  10. Firefox öffnet websites wie serve.bannersdontwork
    Log-Analyse und Auswertung - 13.08.2013 (7)
  11. wieder serve.bannersdontwork.com etc.
    Plagegeister aller Art und deren Bekämpfung - 04.08.2013 (16)
  12. Wie entferne ich http://serve.bannersdontwork.com/text/javascript http://serve.bannersdontwork.com/&m=true
    Log-Analyse und Auswertung - 18.06.2013 (10)
  13. bannersdontwork und survey.central öffnen sich im Firefox - OTL Logfiles gepostet
    Log-Analyse und Auswertung - 12.06.2013 (9)
  14. bannersdontwork und survey.central öffnen sich im Firefox - OTL Logfiles gepostet
    Mülltonne - 11.06.2013 (1)
  15. IE & Firefox öffnen eigenständig Seiten http://serve.bannersdontwork.com etc.
    Log-Analyse und Auswertung - 10.06.2013 (23)
  16. beim öffnen von Morzilla-Firefox steht:http://search.conduit.com/?ctid=
    Plagegeister aller Art und deren Bekämpfung - 12.11.2010 (1)
  17. Was ist das: <script language='javascript' src='http://127.0.0.1:1027/js.cgi?pcaw&r=1
    Plagegeister aller Art und deren Bekämpfung - 18.10.2004 (4)

Zum Thema Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox - Hallo zusammen, ich habe seit einigen Tagen das Problem, dass sich in Firefox gelegentlich ein weiteres Fenster mit folgendem Inhalt öffnet: hxxp://serve.bannersdontwork.com/text/javascript hxxp://serve.bannersdontwork.com/&m=true Was kann ich dagegen tun? Ich habe - Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox...
Archiv
Du betrachtest: Win7 - 64bit: Öffnen von http://serve.bannersdontwork.com/text/javascript und http://serve.bannersdontwork.com/&m=true in Firefox auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.