Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: V9 Startseite bei IE+F.Fox- Wie entfernen ?

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 22.08.2013, 10:02   #1
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Servus

Ich habe mir die V9 Seuche eingefangen. (Browser: Firefox)+(Internet Explorer)
Hat jemand Erfahrung damit wie man die am besten wieder los wird?

Bitte nur wenn schon selbst erfolgreich beseitigt.
Tipps wie: In den Extras das PlugIn deaktivieren oder der Anleitung auf der V9 Seite folgen etc. brauche ich nicht ! Da diese Methoden nicht funktionieren.
hab das jetz zig mal durch,ohne erfolg

verstehe sowieso nicht wie mann sich sowas einfangen kann
hab als virenprogi Avast anti Virus
und habe auch noch Malwarebytes am laufen,trotzdem fängt mann sich sowas ein

hoffe es kann mir einer helfen

Ps suche ein gutes Trojaner program zum Überprüfen des Pc,gibt es da etwas

Alt 22.08.2013, 10:38   #2
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!




Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
__________________

__________________

Alt 22.08.2013, 11:58   #3
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Hallo danke erstmal für Hilfe
hier ist die FRST.txt

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by GERDL (administrator) on 22-08-2013 12:52:43
Running from C:\Users\GERDL\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Uniblue Systems Ltd) C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe
(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe
() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Oracle Corporation) C:\Program Files (x86)\JDownloader\jre\bin\javaw.exe
(Microsoft Corporation) C:\Windows\sysWOW64\wbem\wmiprvse.exe
(Solid State Networks) C:\Users\GERDL\AppData\Local\Temp\install_flashplayer11x32ax_chra_awa_aih.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_8_800_94_ActiveX.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
() C:\Program Files (x86)\Trojancheck 6\tc6.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13269064 2013-02-06] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7468784 2013-02-28] (Logitech Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-05-17] (ICQ, LLC.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\GERDL\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-15] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-15] (Samsung)
HKCU\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
MountPoints2: {46878852-c91a-11e2-92bc-6cf049057a11} - G:\SETUP.EXE
MountPoints2: {a9d67d7f-a99a-11e2-904f-6cf049057a11} - F:\pushinst.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TaskTray] -  [x]
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-15] (Samsung Electronics Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993
SearchScopes: HKLM-x32 - DefaultScope {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = 
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://search.v9.com/web/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=3538993
SearchScopes: HKLM-x32 - {d3f22a84-2a84-49eb-91e6-5dadaaf0165d} URL = hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?p2=^GR^xdm516^YY^de&ptb=2889D461-468B-4CF6-BD3A-C1AE696FCA3E&ind=2013062006&n=77fce376&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3293887&CUI=UN40124201419551628&UM=2
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012 URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir=
SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3293887&CUI=UN40124201419551628&UM=2
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {78DC6520-62F5-F6B7-61E8-754CE1DEEBDD} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default
FF user.js: detected! => C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\user.js
FF SelectedSearchEngine: Mysearchdial
FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir=
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\Mysearchdial.xml
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\vgrabber-v16-customized-web-search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\v9.xml
FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\{ad9a41d2-9a49-4fa6-a79e-71a0785364c8}
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR Extension: () - C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\Extensions\agembgempdmebanhogdjbpcmppdmklbe\10.16.100.504_0
CHR HKLM-x32\...\Chrome\Extension: [agembgempdmebanhogdjbpcmppdmklbe] - C:\Users\GERDL\AppData\Local\CRE\agembgempdmebanhogdjbpcmppdmklbe.crx

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-20] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-06-20] (Taiwan Shui Mu Chih Ching Technology Limited.)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2013-06-14] (Advanced Micro Devices Inc.)
S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-06-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-06] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-06] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-06] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd)
S3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 EverestDriver; \??\C:\Users\GERDL\AppData\Local\Temp\EverestDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-22 12:50 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Downloads\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 09:22 - 2013-08-21 22:05 - 2824734107 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.German.720p.HDTV.x264-DN.mp4
2013-08-22 09:21 - 2013-08-22 09:22 - 41067236 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part27.rar
2013-08-22 09:21 - 2013-08-22 09:22 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part26.rar
2013-08-22 09:20 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part25.rar
2013-08-22 09:20 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part24.rar
2013-08-22 09:19 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part23.rar
2013-08-22 09:19 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part22.rar
2013-08-22 09:18 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part21.rar
2013-08-22 09:18 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part20.rar
2013-08-22 09:17 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part19.rar
2013-08-22 09:16 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part18.rar
2013-08-22 09:15 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part17.rar
2013-08-22 09:15 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part16.rar
2013-08-22 09:14 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part15.rar
2013-08-22 09:14 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part14.rar
2013-08-22 09:13 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part13.rar
2013-08-22 09:12 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part12.rar
2013-08-22 09:12 - 2013-08-22 09:13 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part11.rar
2013-08-22 09:11 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part10.rar
2013-08-22 09:10 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part09.rar
2013-08-22 09:10 - 2013-08-22 09:11 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part08.rar
2013-08-22 09:09 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part07.rar
2013-08-22 09:08 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part06.rar
2013-08-22 09:08 - 2013-08-22 09:09 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part05.rar
2013-08-22 09:07 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part04.rar
2013-08-22 09:07 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part03.rar
2013-08-22 09:06 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part02.rar
2013-08-22 09:06 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part01.rar
2013-08-22 09:05 - 2013-08-22 09:23 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-21 22:23 - 2013-08-21 22:23 - 40083640 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(360p_H.264-AAC).mp4
2013-08-21 22:18 - 2013-08-21 22:22 - 17235711 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(240p_H.264-AAC).3gp
2013-08-21 22:18 - 2013-08-21 22:19 - 06241354 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(144p_H.264-AAC).3gp
2013-08-21 22:17 - 2013-08-16 12:23 - 00000000 ____D C:\Users\GERDL\Downloads\Sie macht heiße Bilder mit ihrer geilen Freundin
2013-08-21 11:01 - 2013-08-21 11:02 - 00000000 ____D C:\Users\GERDL\Downloads\Equilibrium - Waldschrein (EP) (2013)
2013-08-20 18:47 - 2013-07-06 09:21 - 00000000 ____D C:\Users\GERDL\Downloads\poe-seelen
2013-08-20 18:41 - 2013-07-22 08:42 - 00000175 _____ C:\Users\GERDL\Downloads\Share-Online.biz Premium.url
2013-08-20 18:41 - 2013-07-22 08:42 - 00000141 _____ C:\Users\GERDL\Downloads\BitShare.com Premium.url
2013-08-20 18:41 - 2013-07-22 08:42 - 00000130 _____ C:\Users\GERDL\Downloads\Cloudzer.net Premium.url
2013-08-20 18:41 - 2013-07-22 08:42 - 00000123 _____ C:\Users\GERDL\Downloads\Uploaded.net Premium.url
2013-08-20 18:41 - 2013-07-22 08:42 - 00000122 _____ C:\Users\GERDL\Downloads\Freakshare.com Premium.url
2013-08-20 18:41 - 2013-07-20 13:38 - 1531820032 _____ C:\Users\GERDL\Downloads\Olympus.ld.HD.de-FIJ.avi
2013-08-20 18:31 - 2013-08-20 07:39 - 00000000 ____D C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX
2013-08-20 18:19 - 2013-08-18 23:08 - 1562562560 _____ C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi
2013-08-20 17:37 - 2013-08-13 09:00 - 00000000 ____D C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013
2013-08-20 17:06 - 2013-08-20 17:33 - 00000000 ____D C:\Users\GERDL\Downloads\Kronehit Vol.13
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-20 14:22 - 2013-03-18 21:02 - 244530063 _____ C:\Users\GERDL\Downloads\SWTCWS04E22.rar
2013-08-20 14:22 - 2013-03-18 21:00 - 244221655 _____ C:\Users\GERDL\Downloads\SWTCWS04E21.rar
2013-08-20 14:22 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E22.Rache.German.BDRip.XviD-iNTENTiON
2013-08-20 14:22 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E21.Brueder.German.BDRip.XviD-iNTENTiON
2013-08-20 14:19 - 2013-03-19 06:25 - 244277191 _____ C:\Users\GERDL\Downloads\SWTCWS04E19.rar
2013-08-20 14:19 - 2013-03-19 06:25 - 244080189 _____ C:\Users\GERDL\Downloads\SWTCWS04E20.rar
2013-08-20 14:19 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E20.Kopfgeld.German.BDRip.XviD-iNTENTiON
2013-08-20 14:19 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E19.Wiedergeburt.German.BDRip.XviD-iNTENTiON
2013-08-20 14:16 - 2013-03-19 06:23 - 245358203 _____ C:\Users\GERDL\Downloads\SWTCWS04E17.rar
2013-08-20 14:16 - 2013-03-19 06:22 - 244185659 _____ C:\Users\GERDL\Downloads\SWTCWS04E18.rar
2013-08-20 14:16 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E18.Doppeltes.Spiel.German.BDRip.XviD-iNTENTiON
2013-08-20 14:16 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E17.Entkommen.German.BDRip.XviD-iNTENTiON
2013-08-20 14:13 - 2013-03-19 06:22 - 244220791 _____ C:\Users\GERDL\Downloads\SWTCWS04E15.rar
2013-08-20 14:13 - 2013-03-19 06:22 - 244058713 _____ C:\Users\GERDL\Downloads\SWTCWS04E16.rar
2013-08-20 14:13 - 2013-01-07 22:19 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E16.Freund.und.Feind.German.BDRip.XviD-iNTENTiON
2013-08-20 14:13 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E15.Transformer.German.BDRip.XviD-iNTENTiON
2013-08-20 14:11 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E14.Der.andere.Weg.German.BDRip.XviD-iNTENTiON
2013-08-20 14:10 - 2013-03-19 06:22 - 245715355 _____ C:\Users\GERDL\Downloads\SWTCWS04E13.rar
2013-08-20 14:10 - 2013-03-19 06:20 - 245804433 _____ C:\Users\GERDL\Downloads\SWTCWS04E14.rar
2013-08-20 14:10 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E13.Meister.und.Sklave.German.BDRip.XviD-iNTENTiON
2013-08-20 14:08 - 2013-03-19 06:20 - 244257613 _____ C:\Users\GERDL\Downloads\SWTCWS04E12.rar
2013-08-20 14:08 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E12.Sklaven.der.Republik.German.BDRip.XviD-iNTENTiON
2013-08-20 14:07 - 2013-03-19 06:17 - 245045913 _____ C:\Users\GERDL\Downloads\SWTCWS04E11.rar
2013-08-20 14:07 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E11.Sklaverei.German.BDRip.XviD-iNTENTiON
2013-08-20 14:05 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E10.Krells.Blutbad.German.BDRip.XviD-iNTENTiON
2013-08-20 14:04 - 2013-03-19 06:17 - 244301937 _____ C:\Users\GERDL\Downloads\SWTCWS04E09.rar
2013-08-20 14:04 - 2013-03-19 06:14 - 244157981 _____ C:\Users\GERDL\Downloads\SWTCWS04E10.rar
2013-08-20 14:04 - 2013-01-07 22:18 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E09.Befehlsverweigerung.German.BDRip.XviD-iNTENTiON
2013-08-20 14:01 - 2013-03-19 06:18 - 244370839 _____ C:\Users\GERDL\Downloads\SWTCWS04E08.rar
2013-08-20 14:01 - 2013-03-19 06:17 - 244149407 _____ C:\Users\GERDL\Downloads\SWTCWS04E07.rar
2013-08-20 14:01 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E08.Die.Bruchpiloten.German.BDRip.XviD-iNTENTiON
2013-08-20 14:01 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E07.Die.Dunkelheit.von.Umbara.German.BDRip.XviD-iNTENTiON
2013-08-20 13:59 - 2013-03-19 06:18 - 245581577 _____ C:\Users\GERDL\Downloads\SWTCWS04E06.rar
2013-08-20 13:59 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E06.Zwischen.den.Welten.German.BDRip.XviD-iNTENTiON
2013-08-20 13:58 - 2013-03-19 06:13 - 247142371 _____ C:\Users\GERDL\Downloads\SWTCWS04E05.rar
2013-08-20 13:58 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E05.Unterwelt.German.BDRip.XviD-iNTENTiON
2013-08-20 13:55 - 2013-03-19 06:13 - 244347843 _____ C:\Users\GERDL\Downloads\SWTCWS04E04.rar
2013-08-20 13:55 - 2013-03-19 06:12 - 245489077 _____ C:\Users\GERDL\Downloads\SWTCWS04E03.rar
2013-08-20 13:55 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E04.Krieger.des.Schattens.German.BDRip.XviD-iNTENTiON
2013-08-20 13:55 - 2013-01-07 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E03.Koenigreiche.muss.man.sich.verdienen.German.BDRip.XviD-iNTENTiON
2013-08-20 13:52 - 2013-03-19 06:26 - 244151074 _____ C:\Users\GERDL\Downloads\SWTCWS04E02.rar
2013-08-20 13:52 - 2013-03-19 06:12 - 244232815 _____ C:\Users\GERDL\Downloads\SWTCWS04E01.rar
2013-08-20 13:52 - 2013-01-07 22:16 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E02.Eine.letzte.Hoffnung.German.BDRip.XviD-iNTENTiON
2013-08-20 13:52 - 2013-01-07 22:16 - 00000000 ____D C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E01.Krieg.der.Meere.German.BDRip.XviD-iNTENTiON
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 13:36 - 2011-07-16 19:34 - 00000000 ____D C:\Users\GERDL\Downloads\var_keys_500HD_800HD_8000HD
2013-08-19 11:00 - 2013-08-21 09:03 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:09 - 2013-04-14 00:43 - 00000205 _____ C:\Users\GERDL\Downloads\cloudzer.net Premium Account.url
2013-08-19 10:09 - 2013-04-14 00:43 - 00000197 _____ C:\Users\GERDL\Downloads\UPLOADED.TO Premium Account.url
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:55 - 2013-08-19 09:57 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-08-19 09:54 - 2013-08-22 12:00 - 00000286 _____ C:\Windows\Tasks\DSite.job
2013-08-19 09:54 - 2013-08-19 10:00 - 00003226 _____ C:\Windows\System32\Tasks\DSite
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DSite
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 10:11 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-19 09:27 - 2013-08-19 07:34 - 3716747201 _____ C:\Users\GERDL\Downloads\WWE Summer Slam 2013 German English 720p.mkv
2013-08-19 06:49 - 2013-08-19 06:49 - 00423709 _____ C:\Users\GERDL\AppData\Local\mysearchdial_speedial_v9.0.2.crx
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 18:45 - 2013-08-20 20:36 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-15 18:45 - 2013-08-15 18:48 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:44 - 2013-08-15 18:45 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 07:34 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 07:34 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 07:34 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 07:34 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 07:34 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 07:34 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 07:33 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 07:33 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 07:30 - 2013-08-14 07:32 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:29 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 07:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 07:28 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 07:28 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 07:28 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 07:28 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 07:28 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 07:28 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 07:28 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 07:28 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:18 - 2013-08-11 15:19 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 15:15 - 2013-08-10 21:33 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:41 - 2013-08-10 11:44 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:45 - 2013-08-06 16:49 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:45 - 2013-08-06 16:46 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:24 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2013-07-29 05:24 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2013-07-29 05:22 - 2013-08-19 10:48 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:21 - 2013-06-14 19:57 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-06-14 19:56 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-28 11:52 - 2013-08-19 10:59 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

==================== One Month Modified Files and Folders =======

2013-08-22 12:50 - 2013-08-22 12:52 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe
2013-08-22 12:50 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Downloads\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 12:45 - 2013-05-30 13:51 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-08-22 12:43 - 2013-04-08 20:11 - 01373226 _____ C:\Windows\WindowsUpdate.log
2013-08-22 12:42 - 2013-04-08 20:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 12:06 - 2013-07-13 10:51 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 12:00 - 2013-08-19 09:54 - 00000286 _____ C:\Windows\Tasks\DSite.job
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 10:55 - 2013-04-14 19:24 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\TS3Client
2013-08-22 10:43 - 2013-05-20 16:43 - 00001170 _____ C:\Windows\Tasks\Plus-HD-1.3-updater.job
2013-08-22 10:43 - 2013-05-20 16:43 - 00001082 _____ C:\Windows\Tasks\Plus-HD-1.3-enabler.job
2013-08-22 10:42 - 2013-05-20 16:42 - 00001748 _____ C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
2013-08-22 10:38 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-22 09:23 - 2013-08-22 09:05 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-22 09:22 - 2013-08-22 09:21 - 41067236 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part27.rar
2013-08-22 09:22 - 2013-08-22 09:21 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part26.rar
2013-08-22 09:21 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part25.rar
2013-08-22 09:21 - 2013-08-22 09:20 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part24.rar
2013-08-22 09:20 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part23.rar
2013-08-22 09:20 - 2013-08-22 09:19 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part22.rar
2013-08-22 09:19 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part21.rar
2013-08-22 09:19 - 2013-08-22 09:18 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part20.rar
2013-08-22 09:18 - 2013-08-22 09:17 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part19.rar
2013-08-22 09:18 - 2013-08-22 09:16 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part18.rar
2013-08-22 09:16 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part17.rar
2013-08-22 09:16 - 2013-08-22 09:15 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part16.rar
2013-08-22 09:15 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part15.rar
2013-08-22 09:15 - 2013-08-22 09:14 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part14.rar
2013-08-22 09:14 - 2013-08-22 09:13 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part13.rar
2013-08-22 09:14 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part12.rar
2013-08-22 09:13 - 2013-08-22 09:12 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part11.rar
2013-08-22 09:12 - 2013-08-22 09:11 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part10.rar
2013-08-22 09:12 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part09.rar
2013-08-22 09:11 - 2013-08-22 09:10 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part08.rar
2013-08-22 09:10 - 2013-08-22 09:09 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part07.rar
2013-08-22 09:10 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part06.rar
2013-08-22 09:09 - 2013-08-22 09:08 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part05.rar
2013-08-22 09:08 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part04.rar
2013-08-22 09:08 - 2013-08-22 09:07 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part03.rar
2013-08-22 09:07 - 2013-08-22 09:06 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part02.rar
2013-08-22 09:07 - 2013-08-22 09:06 - 107064320 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.7-DN.part01.rar
2013-08-22 09:05 - 2013-07-13 10:51 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-22 09:05 - 2013-04-08 20:54 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-22 09:05 - 2013-04-08 20:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-22 09:05 - 2013-04-08 20:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-22 09:00 - 2013-05-18 12:56 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Spotify
2013-08-22 09:00 - 2013-05-17 18:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\ICQ
2013-08-22 08:59 - 2013-04-09 15:33 - 00000000 ____D C:\Users\GERDL\AppData\Local\Adobe
2013-08-22 08:44 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 08:44 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-22 08:37 - 2013-07-13 10:51 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 08:37 - 2013-07-06 12:38 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-22 08:37 - 2013-05-30 13:58 - 00000000 ____D C:\Users\GERDL\Documents\Mein Steuer-Sparbuch Heute
2013-08-22 08:36 - 2013-06-14 07:04 - 00000340 _____ C:\Windows\Tasks\dsmonitor.job
2013-08-22 08:36 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 08:36 - 2009-07-14 06:51 - 00049562 _____ C:\Windows\setupact.log
2013-08-21 22:23 - 2013-08-21 22:23 - 40083640 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(360p_H.264-AAC).mp4
2013-08-21 22:22 - 2013-08-21 22:18 - 17235711 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(240p_H.264-AAC).3gp
2013-08-21 22:21 - 2013-04-22 20:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\vlc
2013-08-21 22:19 - 2013-08-21 22:18 - 06241354 _____ C:\Users\GERDL\Downloads\Deutschlands asozialste Familie Dokumentation Deutsch Teil 2(144p_H.264-AAC).3gp
2013-08-21 22:05 - 2013-08-22 09:22 - 2824734107 _____ C:\Users\GERDL\Downloads\WWE.Monday.Night.RAW.2013.08.19.German.720p.HDTV.x264-DN.mp4
2013-08-21 11:02 - 2013-08-21 11:01 - 00000000 ____D C:\Users\GERDL\Downloads\Equilibrium - Waldschrein (EP) (2013)
2013-08-21 09:03 - 2013-08-19 11:00 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 08:58 - 2013-05-18 12:57 - 00000000 ____D C:\Users\GERDL\AppData\Local\Spotify
2013-08-20 20:36 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-20 20:22 - 2009-07-14 19:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-08-20 20:22 - 2009-07-14 19:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-08-20 20:22 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-20 17:33 - 2013-08-20 17:06 - 00000000 ____D C:\Users\GERDL\Downloads\Kronehit Vol.13
2013-08-20 15:47 - 2013-05-20 16:43 - 00000000 ____D C:\ProgramData\eSafe
2013-08-20 15:47 - 2013-05-20 16:42 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-08-20 15:47 - 2013-04-10 06:22 - 00063452 _____ C:\Windows\PFRO.log
2013-08-20 15:01 - 2013-05-02 14:37 - 00000000 ____D C:\Program Files (x86)\PolarEdit
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-20 09:33 - 2013-04-09 06:56 - 00000000 ____D C:\Program Files\WinRAR
2013-08-20 07:39 - 2013-08-20 18:31 - 00000000 ____D C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:59 - 2013-07-28 11:52 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-08-19 10:49 - 2013-04-08 20:16 - 00000000 ____D C:\Users\GERDL
2013-08-19 10:48 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-19 10:11 - 2013-08-19 09:50 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 10:00 - 2013-08-19 09:54 - 00003226 _____ C:\Windows\System32\Tasks\DSite
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:57 - 2013-08-19 09:55 - 00000000 ____D C:\Program Files (x86)\iMesh Applications
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DSite
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-19 07:34 - 2013-08-19 09:27 - 3716747201 _____ C:\Users\GERDL\Downloads\WWE Summer Slam 2013 German English 720p.mkv
2013-08-19 06:50 - 2013-04-09 06:57 - 00000000 ____D C:\ProgramData\Adobe
2013-08-19 06:49 - 2013-08-19 06:49 - 00423709 _____ C:\Users\GERDL\AppData\Local\mysearchdial_speedial_v9.0.2.crx
2013-08-19 06:03 - 2013-04-09 07:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 23:08 - 2013-08-20 18:19 - 1562562560 _____ C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 12:52 - 2013-04-23 18:26 - 00000000 ____D C:\Users\GERDL\AppData\Local\._Revolution_
2013-08-17 00:04 - 2013-04-19 11:05 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-08-16 12:23 - 2013-08-21 22:17 - 00000000 ____D C:\Users\GERDL\Downloads\Sie macht heiße Bilder mit ihrer geilen Freundin
2013-08-15 18:48 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:45 - 2013-08-15 18:44 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 17:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-14 07:32 - 2013-08-14 07:30 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:30 - 2013-04-09 03:52 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-13 09:00 - 2013-08-20 17:37 - 00000000 ____D C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-12 16:28 - 2013-06-13 19:25 - 00000000 ____D C:\Users\GERDL\.gimp-2.8
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:19 - 2013-08-11 15:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 00:22 - 2009-07-14 06:45 - 00291840 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-10 21:33 - 2013-08-11 15:15 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 12:08 - 2013-04-08 20:43 - 00062480 _____ C:\Users\GERDL\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-10 11:44 - 2013-08-10 11:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:41 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:49 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:46 - 2013-08-06 16:45 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-08-04 14:09 - 2013-04-16 23:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-08-02 07:42 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-04-08 20:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-28 11:53 - 2013-07-20 21:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Conduit
2013-07-26 07:13 - 2013-08-14 07:34 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 07:13 - 2013-08-14 07:33 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-14 07:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 05:35 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-14 07:33 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-14 07:33 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-14 07:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-26 05:11 - 2013-08-14 07:33 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-26 04:49 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-14 07:34 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-14 07:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 07:28 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 07:28 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 09:48

==================== End Of Log ============================
         
--- --- ---



und hier die Addition.txt FRST Additions Logfile:
Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-08-2013 02
Ran by GERDL at 2013-08-22 12:53:36
Running from C:\Users\GERDL\Desktop
Boot Mode: Normal
==========================================================


==================== Installed Programs =======================

   
AdblockIE (x32 Version: 1.2)
Adobe Flash Player 11 ActiveX (x32 Version: 11.8.800.94)
Adobe Flash Player 11 Plugin (x32 Version: 11.8.800.94)
Adobe Reader XI (11.0.03) - Deutsch (x32 Version: 11.0.03)
AMD Accelerated Video Transcoding (Version: 12.10.100.30320)
AMD APP SDK Runtime (Version: 10.0.1124.2)
AMD Catalyst Install Manager (Version: 8.0.911.0)
AMD Drag and Drop Transcoding (Version: 2.00.0000)
AMD Fuel (Version: 2013.0320.2223.38347)
AMD Media Foundation Decoders (Version: 1.0.80320.2221)
AMD Steady Video Plug-In  (Version: 2.06.0000)
AMD VISION Engine Control Center (x32 Version: 2013.0320.2223.38347)
Anleitung für Epson Connect (x32)
Avast License by ZeNiX [2012-06-29] (x32)
avast! Free Antivirus (x32 Version: 8.0.1489.0)
AVM FRITZ!WLAN (x32 Version: 1.2.0.0)
Battle.net (x32)
Catalyst Control Center - Branding (x32 Version: 1.00.0000)
Catalyst Control Center Graphics Previews Common (x32 Version: 2013.0320.2223.38347)
Catalyst Control Center InstallProxy (x32 Version: 2013.0320.2223.38347)
Catalyst Control Center Localization All (x32 Version: 2013.0320.2223.38347)
CCC Help Chinese Standard (x32 Version: 2013.0320.2222.38347)
CCC Help Chinese Traditional (x32 Version: 2013.0320.2222.38347)
CCC Help Czech (x32 Version: 2013.0320.2222.38347)
CCC Help Danish (x32 Version: 2013.0320.2222.38347)
CCC Help Dutch (x32 Version: 2013.0320.2222.38347)
CCC Help English (x32 Version: 2013.0320.2222.38347)
CCC Help Finnish (x32 Version: 2013.0320.2222.38347)
CCC Help French (x32 Version: 2013.0320.2222.38347)
CCC Help German (x32 Version: 2013.0320.2222.38347)
CCC Help Greek (x32 Version: 2013.0320.2222.38347)
CCC Help Hungarian (x32 Version: 2013.0320.2222.38347)
CCC Help Italian (x32 Version: 2013.0320.2222.38347)
CCC Help Japanese (x32 Version: 2013.0320.2222.38347)
CCC Help Korean (x32 Version: 2013.0320.2222.38347)
CCC Help Norwegian (x32 Version: 2013.0320.2222.38347)
CCC Help Polish (x32 Version: 2013.0320.2222.38347)
CCC Help Portuguese (x32 Version: 2013.0320.2222.38347)
CCC Help Russian (x32 Version: 2013.0320.2222.38347)
CCC Help Spanish (x32 Version: 2013.0320.2222.38347)
CCC Help Swedish (x32 Version: 2013.0320.2222.38347)
CCC Help Thai (x32 Version: 2013.0320.2222.38347)
CCC Help Turkish (x32 Version: 2013.0320.2222.38347)
ccc-utility64 (Version: 2013.0320.2223.38347)
CDBurnerXP (x32 Version: 4.5.1.4003)
Ch Editor (x32)
DAEMON Tools Lite (x32 Version: 4.47.1.0333)
DEUTSCHLAND SPIELT GAME CENTER (x32 Version: 1.0.0.47)
Documents To Go Desktop for Android (x32 Version: 3.0000.037)
Dr. Hardware 2013 13.0d (x32)
dreamboxEDIT -- The one and only settings editor for your Dreambox (x32)
Driver Genius Professional Edition (x32 Version: 10.0)
DriverScanner (x32 Version: 4.0.11.0)
Epson Benutzerhandbuch WF-2530 Series (x32)
Epson Connect Printer Setup (x32 Version: 1.1.1)
Epson Easy Photo Print 2 (x32 Version: 2.4.0.0)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (x32 Version: 1.00.0000)
Epson Event Manager (x32 Version: 3.01.0005)
Epson E-Web Print (x32 Version: 1.17.0000)
Epson FAX Utility (x32 Version: 1.30.00)
Epson Netzwerkhandbuch WF-2530 Series (x32)
Epson PC-FAX Driver (x32)
EPSON Printer Finder (x32 Version: 1.0.0)
EPSON Scan (x32)
EpsonNet Print (x32 Version: 2.5.00)
EVEREST Home Edition v2.20 (x32 Version: 2.20)
Free Video to DVD Converter version 5.0.24.419 (x32 Version: 5.0.24.419)
GIMP 2.8.4 (Version: 2.8.4)
Google Chrome (x32 Version: 29.0.1547.57)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
ICQ7M (x32 Version: 7.8)
IncrediMail (x32 Version: 6.3.9.5260)
IncrediMail 2.0 (x32 Version: 6.3.9.5260)
Java 7 Update 25 (x32 Version: 7.0.250)
Java Auto Updater (x32 Version: 2.1.9.5)
JDownloader 0.9 (x32 Version: 0.9)
Logitech Gaming Software (Version: 8.45.88)
Logitech Gaming Software 8.45 (Version: 8.45.88)
Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300)
Microsoft .NET Framework 4.5 (Version: 4.5.50709)
Microsoft .NET Framework 4.5 DEU Language Pack (Version: 4.5.50709)
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014)
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
Mozilla Firefox 23.0.1 (x86 de) (x32 Version: 23.0.1)
Mozilla Maintenance Service (x32 Version: 23.0.1)
Mozilla Thunderbird 17.0.5 (x86 de) (x32 Version: 17.0.5)
Nero Burning ROM (x32 Version: 12.0.20000)
Nero Burning ROM Help (CHM) (x32 Version: 12.0.3000)
Nero BurningROM 12 (x32 Version: 12.0.00300)
Nero ControlCenter (x32 Version: 11.0.15200)
Nero ControlCenter Help (CHM) (x32 Version: 12.0.5000)
Nero Core Components (x32 Version: 11.0.18100)
Nero SharedVideoCodecs (x32 Version: 1.0.12100.2.0)
Nero Update (x32 Version: 11.0.11800.31.0)
ON WF-2530 Series Printer Uninstall
Plus-HD-1.3 (x32 Version: 1.27.153.0)
Prerequisite installer (x32 Version: 12.0.0002)
Razer DeathAdder(TM) Mouse (x32 Version: 3.03)
Realtek Ethernet Controller Driver (x32 Version: 7.69.304.2013)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6839)
Samsung Kies (x32 Version: 2.6.0.13064_2)
SAMSUNG USB Driver for Mobile Phones (Version: 1.5.27.0)
SetEditOctagon (remove only) (x32)
SiSoftware Sandra Lite 2013.SP3a (Version: 19.44.2013.5)
Software Updater (x32 Version: 4.1.1)
Spotify (HKCU Version: 0.9.1.57.ge7405149)
TeamSpeak 3 Client (Version: 3.0.10)
Total Commander 64-bit (Remove or Repair) (Version: 8.01)
Trojancheck 6 (x32)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1)
Update for Video Converter (HKCU)
Video Converter Packages (HKCU)
VLC media player 2.0.6 (x32 Version: 2.0.6)
WinRAR 4.20 (64-Bit) (Version: 4.20.0)
WinZipper (x32 Version: 1.4.8)
WISO Steuer-Sparbuch 2013 (x32 Version: 20.00.8137)
Xilisoft MKV Converter (x32 Version: 7.0.1.1219)

==================== Restore Points  =========================

20-08-2013 07:39:45 Windows Update
20-08-2013 12:40:47 Installed AdblockIE
20-08-2013 13:00:38 Photo Notifier and Animation Creator wurde entfernt.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {074F9911-569C-4B77-9013-BFC8F76FC92E} - System32\Tasks\0 => c:\program files\internet explorer\iexplore.exe [2013-07-26] (Microsoft Corporation)
Task: {1AD22E8F-EBA2-468A-BD86-57100EB26C4B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.)
Task: {2E40F464-8BF6-41D2-9C0D-C64297D40478} - System32\Tasks\Plus-HD-1.3-enabler => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe [2013-05-20] (Plus HD)
Task: {4F41F563-E566-4AE7-AF1F-97A36F0A03C1} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {53961B92-7EE8-4B20-A657-891A9FD25A36} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe No File
Task: {59F756E6-B93C-4EAF-B84E-5C90EC358761} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-11-20] (Microsoft Corporation)
Task: {78662844-9B9C-4354-B540-AE70408E0651} - System32\Tasks\Omiga Plus RunAsStdUser => C:\Program Files (x86)\Omiga Plus\omigaplus.exe No File
Task: {7B1FAB7F-3AC7-4E84-AFAF-2ED525C8976B} - System32\Tasks\dsmonitor => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe [2013-05-27] (Uniblue Systems Ltd)
Task: {7DC04877-F3DC-4909-BD2C-83A32027DC40} - System32\Tasks\Plus-HD-1.3-updater => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe [2013-05-20] (Plus HD)
Task: {83F5FA30-DC84-403D-83D9-9E0682D90BBD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-13] (Google Inc.)
Task: {9446D2FA-B395-42BF-8030-7732B9DAF0B9} - System32\Tasks\4547 => C:\Windows\System32\wscript.exe [2009-07-14] (Microsoft Corporation)
Task: {9781F73E-73AC-456B-92E8-C491D15F22CD} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-08-22] (Adobe Systems Incorporated)
Task: {B6A43609-8D56-4E0A-BE12-D7DCF7E14A55} - System32\Tasks\DealPly => C:\Users\GERDL\AppData\Roaming\DealPly\UPDATE~1\UPDATE~1.EXE No File
Task: {D120D613-4625-4FC8-AA5B-4BB2D915F299} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)
Task: {DAC20E81-BF07-4D3C-9994-73699E99BA23} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {E804B04D-B511-485B-876D-D6DDDE469810} - System32\Tasks\DSite => C:\Users\GERDL\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE [2013-08-19] ()
Task: {F275F796-51B0-4246-9CF3-BC32216EB4CC} - System32\Tasks\Plus-HD-1.3-firefoxinstaller => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe [2013-05-20] (Plus HD)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DSite.job => C:\Users\GERDL\AppData\Roaming\DSite\UPDATE~1\UPDATE~1.EXE
Task: C:\Windows\Tasks\dsmonitor.job => C:\Program Files (x86)\Uniblue\DriverScanner\dsmonitor.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-enabler.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-enabler.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-firefoxinstaller.exe
Task: C:\Windows\Tasks\Plus-HD-1.3-updater.job => C:\Program Files (x86)\Plus-HD-1.3\Plus-HD-1.3-updater.exe

==================== Faulty Device Manager Devices =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/22/2013 00:51:48 PM) (Source: Application Hang) (User: )
Description: Programm FRST64.exe, Version 3.3.8.1 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 180

Startzeit: 01ce9f25602f9e79

Endzeit: 2

Anwendungspfad: C:\Users\GERDL\Downloads\FRST64.exe

Berichts-ID:

Error: (08/22/2013 11:06:06 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: tc6.exe, Version: 6.0.0.0, Zeitstempel: 0x2a425e19
Name des fehlerhaften Moduls: tc6.exe, Version: 6.0.0.0, Zeitstempel: 0x2a425e19
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00001f6c
ID des fehlerhaften Prozesses: 0x156c
Startzeit der fehlerhaften Anwendung: 0xtc6.exe0
Pfad der fehlerhaften Anwendung: tc6.exe1
Pfad des fehlerhaften Moduls: tc6.exe2
Berichtskennung: tc6.exe3

Error: (08/22/2013 09:53:56 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"1". Fehler in Manifest- oder Richtliniendatei "SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"2" in Zeile  SMC,processorArchitecture="x86",type="win32",version="8.2.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: SMC,processorArchitecture="x86",type="win32",version="8.2.0.0".
Definition: SMC,processorArchitecture="x86",type="win32",version="12.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.

Error: (08/22/2013 09:48:51 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest2" in Zeile C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.

Error: (08/21/2013 10:20:43 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x138c
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (08/20/2013 08:28:05 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x34b4
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (08/20/2013 08:25:51 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x14a4
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (08/20/2013 08:22:55 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x998
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (08/20/2013 08:22:33 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x341c
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3

Error: (08/20/2013 04:33:28 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: wmplayer.exe, Version: 12.0.7601.17514, Zeitstempel: 0x4ce7a485
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000
ID des fehlerhaften Prozesses: 0x388
Startzeit der fehlerhaften Anwendung: 0xwmplayer.exe0
Pfad der fehlerhaften Anwendung: wmplayer.exe1
Pfad des fehlerhaften Moduls: wmplayer.exe2
Berichtskennung: wmplayer.exe3


System errors:
=============
Error: (08/22/2013 00:42:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (08/22/2013 00:42:58 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (08/22/2013 00:42:58 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (08/22/2013 00:42:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (08/22/2013 00:42:57 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (08/22/2013 00:42:57 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (08/22/2013 00:18:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%-2140993535

Error: (08/22/2013 00:18:06 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler beendet: 
%%-2140993535

Error: (08/22/2013 00:18:06 PM) (Source: PNRPSvc) (User: )
Description: 0x80630801

Error: (08/22/2013 00:07:36 PM) (Source: Disk) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk1\DR1.


Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2013-06-12 20:21:10.331
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\GERDL\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-12 20:21:10.207
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Users\GERDL\AppData\Local\Temp\EverestDriver.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-12 20:21:09.367
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-06-12 20:21:09.196
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 27%
Total physical RAM: 10237.55 MB
Available physical RAM: 7399.48 MB
Total Pagefile: 20473.29 MB
Available Pagefile: 15742.04 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:346.44 GB) NTFS
Drive d: (MyDrive) (Fixed) (Total:465.76 GB) (Free:157.06 GB) NTFS
Drive g: (OFFICE12) (CDROM) (Total:0.56 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 660E024F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 466 GB) (Disk ID: 420080D9)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
--- --- ---
__________________

Alt 22.08.2013, 12:31   #4
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Code:
ATTFilter
C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX
C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi
C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013
C:\Users\GERDL\Downloads\Kronehit Vol.13
C:\Users\GERDL\Downloads\SWTCWS04E22.rar
C:\Users\GERDL\Downloads\SWTCWS04E21.rar
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E22.Rache.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E21.Brueder.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\SWTCWS04E19.rar
C:\Users\GERDL\Downloads\SWTCWS04E20.rar
         
Ist dir eigentlich klar, dass du dich mit illegalen Downloads auf gefährlich dünnem Eis begibst?
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.08.2013, 12:55   #5
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Zitat:
Zitat von cosinus Beitrag anzeigen
Code:
ATTFilter
C:\Users\GERDL\Downloads\Iron.Man.3.2013.German.AC3LD.BDRiP.XviD-HQX
C:\Users\GERDL\Downloads\The.Forbidden.Girl.HD.de.avi
C:\Users\GERDL\Downloads\German Top 100 Single Charts 19.08.2013
C:\Users\GERDL\Downloads\Kronehit Vol.13
C:\Users\GERDL\Downloads\SWTCWS04E22.rar
C:\Users\GERDL\Downloads\SWTCWS04E21.rar
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E22.Rache.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\Star.Wars.The.Clone.Wars.S04E21.Brueder.German.BDRip.XviD-iNTENTiON
C:\Users\GERDL\Downloads\SWTCWS04E19.rar
C:\Users\GERDL\Downloads\SWTCWS04E20.rar
         
Ist dir eigentlich klar, dass du dich mit illegalen Downloads auf gefährlich dünnem Eis begibst?
jo weiss ich
sollte aber nicht das Problem sein,den hab eigentlich schon lange nichts mehr runter geladen,da ich die zeit gar nicht habe,abe abe diese Woche Urlaub da konnte ich es wieder mal nicht lassen.aber nun zu meinen Problem wie bekomme ich den mist weg


Alt 22.08.2013, 12:57   #6
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Lange???
Die Datumsstempel dieser dubiosen Downloads sind tw. von heute morgen 9:20!!


Adware/Junkware/Toolbars entfernen


1. Schritt: adwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).




2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.




3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
--> V9 Startseite bei IE+F.Fox- Wie entfernen ?

Alt 22.08.2013, 14:41   #7
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



so hab das mal gemacht hoffe es war alles richtig
Code:
ATTFilter
# AdwCleaner v3.000 - Report created 22/08/2013 at 14:05:38
# Updated 20/08/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : GERDL - GERDL-PC
# Running from : C:\Users\GERDL\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\eSafe
Folder Deleted : C:\ProgramData\ICQ\ICQToolbar
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\ICQ6Toolbar
Folder Deleted : C:\Program Files (x86)\iMesh Applications
Folder Deleted : C:\Program Files (x86)\Omiga Plus
Folder Deleted : C:\Program Files (x86)\Common Files\337
Folder Deleted : C:\Users\GERDL\AppData\Local\Conduit
Folder Deleted : C:\Users\GERDL\AppData\Local\Temp\AirInstaller
Folder Deleted : C:\Users\GERDL\AppData\Local\Temp\Desk365
Folder Deleted : C:\Users\GERDL\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\GERDL\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\GERDL\AppData\Roaming\337
Folder Deleted : C:\Users\GERDL\AppData\Roaming\DSite
Folder Deleted : C:\Users\GERDL\AppData\Roaming\eIntaller
Folder Deleted : C:\Users\GERDL\AppData\Roaming\Omiga Plus
Folder Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
File Deleted : C:\END
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Babylon.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\delta.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-1.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-2.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-3.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-4.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\icqplugin-5.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\Mysearchdial.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\v9.xml
File Deleted : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\user.js
File Deleted : C:\Windows\System32\Tasks\Dealply
File Deleted : C:\Windows\Tasks\DSite.job
File Deleted : C:\Windows\System32\Tasks\DSite
File Deleted : C:\Windows\System32\Tasks\Omiga Plus RunAsStdUser

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Public\Desktop\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\Desktop\Internet Explorer (64-bit).lnk
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk
Shortcut Disinfected : C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Internet Explorer (64-bit).lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\DeskSvc
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox
Key Deleted : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox.1
Key Deleted : HKLM\SOFTWARE\5c28fdee06fe848
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C522512A-9C2C-4DE5-9F63-976B560FEF14}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7C3B01BC-53A5-48A0-A43B-0C67731134B9}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0ABE0FED-50E7-4E42-A125-57C0A11DBCDE}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D3F22A84-2A84-49EB-91E6-5DADAAF0165D}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\delta LTD
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\Imesh
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\mysearchdial
Key Deleted : HKCU\Software\mysearchdial.com
Key Deleted : HKCU\Software\V9
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\Toolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Desksvc
Key Deleted : HKLM\Software\eSafeSecControl
Key Deleted : HKLM\Software\ICQ\ICQToolbar
Key Deleted : HKLM\Software\ImInstaller
Key Deleted : HKLM\Software\V9
Key Deleted : HKLM\Software\V9Software
Key Deleted : [x64] HKLM\SOFTWARE\DomaIQ
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16660

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [ICQ Search]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v23.0.1 (de)

[ File : C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\prefs.js ]

Line Deleted : user_pref("CT3293887_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1375004247777,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3293887&octid=CT3293887&SearchSource=61&CUI=UN34707285961225229&UM=2&UP=SP1BA74EF2-8F65-4AF8-B663-072C99548DD2");
Line Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Vgrabber V1.6 Customized Web Search");
Line Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3293887&ctid=CT3293887&SearchSource=2&CUI=UN34707285961225229&UM=2&q=");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.5.3&q=");
Line Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT3293887");
Line Deleted : user_pref("browser.search.defaultenginename", "Mysearchdial");
Line Deleted : user_pref("browser.search.defaultthis.engineName", "Vgrabber V1.6 Customized Web Search");
Line Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3293887&CUI=UN34707285961225229&UM=2&SearchSource=3&q={searchTerms}");
Line Deleted : user_pref("browser.search.order.1", "Mysearchdial");
Line Deleted : user_pref("browser.search.selectedEngine", "Mysearchdial");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.backgroundjs", "\n\n/*****************************************************************************[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.js", "\n\n  /************************************************************************************\[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return app[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_102.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_104.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_119.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_120.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_123.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_13.name", "CrossriderAppUtils");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_138.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_155.code", "if (typeof appAPI.internal.monetization === \"undefined\") {\n    appAP[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.a[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.que[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_con[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_87.code", "var CROSSRIDER_PLATFORM=true;var JQ=bbrsJQ=$jquery;if(appAPI.platform==\[...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_91.code", "(function(h){var p=(function(){var R=0;var Z=\"\";function Q(ac){return [...]
Line Deleted : user_pref("extensions.a509508ef0b144616a5570d58601be33dc4a581e90ea646dba18558e021ee138ccom31257.31257.plugins.plugin_92.code", "if(typeof appAPI.internal.monetization===\"undefined\"){appAPI.internal.[...]
Line Deleted : user_pref("extensions.crossrider.bic", "13ecfa5eb97f197a8d02e1dbe9394705");
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.bbDpng", "21");
Line Deleted : user_pref("extensions.delta.cntry", "DE");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.hdrMd5", "CB3357C3C0B71BC0082058E337984DC5");
Line Deleted : user_pref("extensions.delta.id", "74a7dc4900000000000024651140774f");
Line Deleted : user_pref("extensions.delta.instlDay", "15816");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1618:08:03");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.sg", "azb");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1618:08:03");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
Line Deleted : user_pref("extensions.mysearchdial.aflt", "airmsd");
Line Deleted : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Line Deleted : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q");
Line Deleted : user_pref("extensions.mysearchdial.cntry", "DE");
Line Deleted : user_pref("extensions.mysearchdial.cr", "2045151825");
Line Deleted : user_pref("extensions.mysearchdial.dfltLng", "");
Line Deleted : user_pref("extensions.mysearchdial.dfltSrch", true);
Line Deleted : user_pref("extensions.mysearchdial.dnsErr", true);
Line Deleted : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
Line Deleted : user_pref("extensions.mysearchdial.excTlbr", false);
Line Deleted : user_pref("extensions.mysearchdial.hdrMd5", "D1DE022BBEBA61FC38C515448EBA51FC");
Line Deleted : user_pref("extensions.mysearchdial.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1[...]
Line Deleted : user_pref("extensions.mysearchdial.id", "6CF049057A11DC49");
Line Deleted : user_pref("extensions.mysearchdial.instlDay", "15936");
Line Deleted : user_pref("extensions.mysearchdial.instlRef", "");
Line Deleted : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1[...]
Line Deleted : user_pref("extensions.mysearchdial.lastVrsnTs", "");
Line Deleted : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1[...]
Line Deleted : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.sg", "{smplGrp}");
Line Deleted : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Line Deleted : user_pref("extensions.mysearchdial.tlbrId", "base");
Line Deleted : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1[...]
Line Deleted : user_pref("extensions.mysearchdial.vrsn", "");
Line Deleted : user_pref("extensions.mysearchdial.vrsni", "");
Line Deleted : user_pref("extensions.mysearchdial_i.hmpg", true);
Line Deleted : user_pref("extensions.mysearchdial_i.newTab", false);
Line Deleted : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Line Deleted : user_pref("extensions.mysearchdial_i.vrsnTs", "6:49:43");
Line Deleted : user_pref("icqtoolbar.engineVerified", false);
Line Deleted : user_pref("icqtoolbar.firstTbRun", false);
Line Deleted : user_pref("icqtoolbar.geolastmodified", 1374930562);
Line Deleted : user_pref("icqtoolbar.icqgeo", 49);
Line Deleted : user_pref("icqtoolbar.installTime", "1369283356");
Line Deleted : user_pref("icqtoolbar.previousFFVersion", "22.0");
Line Deleted : user_pref("icqtoolbar.showPc", false);
Line Deleted : user_pref("icqtoolbar.skip_default_search", "no");
Line Deleted : user_pref("icqtoolbar.uninstStatSent", true);
Line Deleted : user_pref("icqtoolbar.uniqueID", "136568848913656883691365792110894");
Line Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3293887&octid=CT3293887&SearchSource=61&CUI=UN34707285961225229&UM=2&UP=SP1BA74EF2-8F65-4AF8-B663-072C99548DD2");
Line Deleted : user_pref("smartbar.machineId", "JOVG1TDVWI5NFFM+ZNFGNMWJ4UKN9VUS8XKJVOUB4TIPWP5T8Q2XNZCSYM/P0NXMBPJQBLB0LHE9ZA7MVBEQ+G");

-\\ Google Chrome v29.0.1547.57

[ File : C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [22175 octets] - [22/08/2013 14:05:20]
AdwCleaner[S0].txt - [20371 octets] - [22/08/2013 14:05:38]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20432 octets] ##########
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 5.5.3 (08.21.2013:1)
OS: Windows 7 Home Premium x64
Ran by GERDL on 22.08.2013 at 14:14:15,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\dsiteproducts
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyrixeeker
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\plus-hd-1.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\uniblue
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\driverscanner
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220322122257}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220322122257}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT3293887
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660366126657}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0A070C62-11EB-452D-A5AD-4655FD8AE012}



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\dsmonitor.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-enabler.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-1.3-updater.job
Successfully deleted: [File] "C:\Users\GERDL\appdata\local\mysearchdial_speedial_v9.0.2.crx"
Successfully deleted: [File] "C:\Users\GERDL\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\driverscanner.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\Users\GERDL\AppData\Roaming\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\Users\GERDL\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files (x86)\driver-soft"
Successfully deleted: [Folder] "C:\Program Files (x86)\uniblue\driverscanner"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ FireFox

Emptied folder: C:\Users\GERDL\AppData\Roaming\mozilla\firefox\profiles\wexuu7i6.default\minidumps [34 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 22.08.2013 at 14:19:53,13
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-08-2013 02
Ran by GERDL (administrator) on 22-08-2013 15:37:39
Running from C:\Users\GERDL\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Seiko Epson Corporation) C:\Windows\system32\EscSvc64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDWebCam.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPop3.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPictureViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMovieViewer.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDYT.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\GERDL\AppData\Roaming\Spotify\spotify.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\Kies.exe
(Samsung) C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIIVE.EXE
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
() C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
() C:\Program Files (x86)\Razer\DeathAdder\razertra.exe
(Razer Inc.) C:\Program Files (x86)\Razer\DeathAdder\razerofa.exe
() C:\Program Files (x86)\Razer\DeathAdder\vdDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13269064 2013-02-06] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [7468784 2013-02-28] (Logitech Inc.)
HKCU\...\Run: [ICQ] - C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2013-05-17] (ICQ, LLC.)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\GERDL\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [Spotify] - C:\Users\GERDL\AppData\Roaming\Spotify\Spotify.exe [4640768 2013-07-09] (Spotify Ltd)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [KiesPreload] - C:\Program Files (x86)\Samsung\Kies\Kies.exe [1564016 2013-07-15] (Samsung)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844656 2013-07-15] (Samsung)
HKCU\...\Run: [EPLTarget\P0000000000000001] - C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIIVE.EXE [283232 2012-02-28] (SEIKO EPSON CORPORATION)
MountPoints2: {46878852-c91a-11e2-92bc-6cf049057a11} - G:\SETUP.EXE
MountPoints2: {a9d67d7f-a99a-11e2-904f-6cf049057a11} - F:\pushinst.exe
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [TaskTray] -  [x]
HKLM-x32\...\Run: [DeathAdder] - C:\Program Files (x86)\Razer\DeathAdder\razerhid.exe [248320 2011-03-21] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [FUFAXRCV] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [502912 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] - C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [863360 2012-04-03] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1058912 2012-04-02] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [AVMWlanClient] - C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2012-08-21] (AVM Berlin)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [311152 2013-07-15] (Samsung Electronics Co., Ltd.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://en.v9.com/?utm_source=b&utm_medium=update&from=update&uid=SAMSUNGXHD502HJ_S20BJ9CSC10557&ts=1369914606
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0A070C62-11EB-452D-A5AD-4655FD8AE012 URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=airmsd&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzytDyDyB0AtCtC0D0CyEzytN0D0Tzu0CyDzyyCtN1L2XzutBtFtBtFyEtFyBtAtCtN1L1Czu1T1L1C1H1B1Q&cr=2045151825&ir=
SearchScopes: HKCU - {78DC6520-62F5-F6B7-61E8-754CE1DEEBDD} URL = 
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files\AMD\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO-x32: E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
BHO-x32: SteadyVideoBHO Class - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - C:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll (Advanced Micro Devices)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: af0.Adblock.BHO - {90EFF544-3981-4d46-85C9-C0361D0931D6} - C:\Windows\\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - E-Web Print - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files (x86)\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll (Advanced Micro Devices)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\searchplugins\vgrabber-v16-customized-web-search.xml
FF Extension: No Name - C:\Users\GERDL\AppData\Roaming\Mozilla\Firefox\Profiles\wexuu7i6.default\Extensions\509508ef-0b14-4616-a557-0d58601be33d@c4a581e9-0ea6-46db-a185-58e021ee138c.com
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [e-webprint@epson.com] C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF Extension: E-Web Print - C:\Program Files (x86)\Epson Software\E-Web Print\Firefox Add-on
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\GERDL\AppData\Local\Google\Chrome\User Data\Default\Extensions\agembgempdmebanhogdjbpcmppdmklbe\10.16.100.504_0
CHR HKLM-x32\...\Chrome\Extension: [agembgempdmebanhogdjbpcmppdmklbe] - C:\Users\GERDL\AppData\Local\CRE\agembgempdmebanhogdjbpcmppdmklbe.crx

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-03-20] (Advanced Micro Devices, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\RpcAgentSrv.exe [71832 2009-04-22] (SiSoftware)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [424104 2013-06-20] (Taiwan Shui Mu Chih Ching Technology Limited.)

==================== Drivers (Whitelisted) ====================

R0 amdide64; C:\Windows\System32\DRIVERS\amdide64.sys [11904 2013-06-14] (Advanced Micro Devices Inc.)
S0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-06-14] (Advanced Micro Devices, Inc.)
R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-07-06] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-07-06] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-07-06] ()
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2012-04-25] (AVM Berlin)
R2 DRHARD64; C:\Windows\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Licensed for Gebhard Software)
R2 DRHMSR64; C:\Windows\system32\drivers\DRHMSR64.sys [14760 2011-12-06] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-05-30] (DT Soft Ltd)
S3 fwlanusb5; C:\Windows\System32\DRIVERS\fwlanusb5.sys [982784 2012-08-21] (AVM GmbH)
R3 LGPBTDD; C:\Windows\System32\Drivers\LGPBTDD.sys [30728 2009-07-01] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2013.SP3a\WNt500x64\Sandra.sys [23112 2009-08-07] (SiSoftware)
S3 EverestDriver; \??\C:\Users\GERDL\AppData\Local\Temp\EverestDriver.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-22 14:14 - 2013-08-22 14:14 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Downloads\JRT.exe
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Desktop\JRT.exe
2013-08-22 14:11 - 2013-08-22 14:11 - 00020525 _____ C:\Users\GERDL\Desktop\AdwCleaner[S0].txt
2013-08-22 14:04 - 2013-08-22 14:06 - 00000000 ____D C:\AdwCleaner
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Downloads\adwcleaner.exe
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Desktop\adwcleaner.exe
2013-08-22 12:53 - 2013-08-22 12:53 - 00024260 _____ C:\Users\GERDL\Desktop\Addition.txt
2013-08-22 12:52 - 2013-08-22 12:50 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 09:05 - 2013-08-22 09:23 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 11:00 - 2013-08-21 09:03 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 10:11 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-15 18:45 - 2013-08-20 20:36 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-15 18:45 - 2013-08-15 18:48 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:44 - 2013-08-15 18:45 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 07:34 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 07:34 - 2013-07-26 07:12 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 07:34 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 07:34 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 07:34 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 07:34 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 07:34 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 07:34 - 2013-07-26 04:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-08-14 07:34 - 2013-07-26 03:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-08-14 07:33 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 07:33 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 07:33 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 07:33 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 07:33 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 07:30 - 2013-08-14 07:32 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:29 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 07:29 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 07:29 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 07:28 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 07:28 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 07:28 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 07:28 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 07:28 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 07:28 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 07:28 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 07:28 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 07:28 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 07:28 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 07:28 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 07:28 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 07:28 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:18 - 2013-08-11 15:19 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 15:15 - 2013-08-10 21:33 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:41 - 2013-08-10 11:44 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:45 - 2013-08-06 16:49 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:45 - 2013-08-06 16:46 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:24 - 2013-06-21 02:07 - 00203672 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2013-07-29 05:24 - 2013-06-21 02:07 - 00103448 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2013-07-29 05:22 - 2013-08-19 10:48 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:21 - 2013-06-14 19:57 - 04659712 _____ (Dmitry Streblechenko) C:\Windows\SysWOW64\Redemption.dll
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:20 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-06-14 19:56 - 00821824 _____ (Devguru Co., Ltd.) C:\Windows\SysWOW64\dgderapi.dll
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-28 11:52 - 2013-08-19 10:59 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

==================== One Month Modified Files and Folders =======

2013-08-22 15:35 - 2013-08-22 14:19 - 00003407 _____ C:\Users\GERDL\Desktop\JRT.txt
2013-08-22 15:35 - 2013-07-13 10:51 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-22 15:35 - 2013-04-08 20:54 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-22 14:28 - 2013-05-18 12:56 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Spotify
2013-08-22 14:16 - 2013-06-14 07:05 - 00000000 ____D C:\ProgramData\Uniblue
2013-08-22 14:16 - 2013-06-14 07:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Uniblue
2013-08-22 14:16 - 2013-06-14 07:04 - 00000000 ____D C:\Program Files (x86)\Uniblue
2013-08-22 14:14 - 2013-08-22 14:14 - 00000000 ____D C:\Windows\ERUNT
2013-08-22 14:14 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:14 - 2009-07-14 06:45 - 00014928 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Downloads\JRT.exe
2013-08-22 14:13 - 2013-08-22 14:13 - 01021455 _____ (Thisisu) C:\Users\GERDL\Desktop\JRT.exe
2013-08-22 14:11 - 2013-08-22 14:11 - 00020525 _____ C:\Users\GERDL\Desktop\AdwCleaner[S0].txt
2013-08-22 14:10 - 2013-04-08 20:11 - 01380263 _____ C:\Windows\WindowsUpdate.log
2013-08-22 14:08 - 2013-05-17 18:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\ICQ
2013-08-22 14:07 - 2013-07-13 10:51 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-22 14:07 - 2013-04-10 06:22 - 00064050 _____ C:\Windows\PFRO.log
2013-08-22 14:07 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-22 14:07 - 2009-07-14 06:51 - 00049618 _____ C:\Windows\setupact.log
2013-08-22 14:06 - 2013-08-22 14:04 - 00000000 ____D C:\AdwCleaner
2013-08-22 14:05 - 2013-04-12 16:41 - 00000000 ____D C:\ProgramData\ICQ
2013-08-22 14:05 - 2013-04-09 07:07 - 00001053 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-22 14:05 - 2013-04-08 20:16 - 00000995 _____ C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-22 14:05 - 2013-04-08 20:16 - 00000965 _____ C:\Users\GERDL\Desktop\Internet Explorer (64-bit).lnk
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Downloads\adwcleaner.exe
2013-08-22 14:04 - 2013-08-22 14:04 - 00975858 _____ C:\Users\GERDL\Desktop\adwcleaner.exe
2013-08-22 12:53 - 2013-08-22 12:53 - 00024260 _____ C:\Users\GERDL\Desktop\Addition.txt
2013-08-22 12:52 - 2013-04-09 15:33 - 00000000 ____D C:\Users\GERDL\AppData\Local\Adobe
2013-08-22 12:50 - 2013-08-22 12:52 - 01576476 _____ (Farbar) C:\Users\GERDL\Desktop\FRST64.exe
2013-08-22 12:48 - 2013-08-22 12:48 - 00000000 ____D C:\FRST
2013-08-22 12:45 - 2013-05-30 13:51 - 00000000 ____D C:\Program Files (x86)\WinZipper
2013-08-22 11:05 - 2013-08-22 11:05 - 00001015 _____ C:\Users\GERDL\Desktop\Trojancheck.lnk
2013-08-22 11:05 - 2013-08-22 11:05 - 00000000 ____D C:\Program Files (x86)\Trojancheck 6
2013-08-22 10:55 - 2013-04-14 19:24 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\TS3Client
2013-08-22 10:38 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-08-22 09:23 - 2013-08-22 09:05 - 00002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-22 09:05 - 2013-07-13 10:51 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-22 09:05 - 2013-04-08 20:54 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-22 09:05 - 2013-04-08 20:54 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-22 09:05 - 2013-04-08 20:54 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-08-22 08:37 - 2013-07-06 12:38 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-22 08:37 - 2013-05-30 13:58 - 00000000 ____D C:\Users\GERDL\Documents\Mein Steuer-Sparbuch Heute
2013-08-21 22:21 - 2013-04-22 20:04 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\vlc
2013-08-21 09:03 - 2013-08-19 11:00 - 00000005 _____ C:\Users\GERDL\AppData\Roaming\WBPU-TTL.DAT
2013-08-21 08:58 - 2013-05-18 12:57 - 00000000 ____D C:\Users\GERDL\AppData\Local\Spotify
2013-08-20 20:36 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Battle.net
2013-08-20 20:22 - 2009-07-14 19:58 - 00698688 _____ C:\Windows\system32\perfh007.dat
2013-08-20 20:22 - 2009-07-14 19:58 - 00148828 _____ C:\Windows\system32\perfc007.dat
2013-08-20 20:22 - 2009-07-14 07:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-20 15:47 - 2013-05-20 16:42 - 00000000 ____D C:\Program Files (x86)\Plus-HD-1.3
2013-08-20 15:01 - 2013-05-02 14:37 - 00000000 ____D C:\Program Files (x86)\PolarEdit
2013-08-20 14:41 - 2013-08-20 14:41 - 00000000 ____D C:\Program Files (x86)\af0.net
2013-08-20 09:33 - 2013-04-09 06:56 - 00000000 ____D C:\Program Files\WinRAR
2013-08-19 21:07 - 2013-08-19 21:07 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-08-19 11:00 - 2013-08-19 11:00 - 00000058 _____ C:\Users\GERDL\AppData\Roaming\WB.CFG
2013-08-19 10:59 - 2013-08-19 10:59 - 00000681 _____ C:\Users\GERDL\Documents\GERDL - Verknüpfung.lnk
2013-08-19 10:59 - 2013-07-28 11:52 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2013-08-19 10:49 - 2013-04-08 20:16 - 00000000 ____D C:\Users\GERDL
2013-08-19 10:48 - 2013-07-29 05:22 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-08-19 10:11 - 2013-08-19 09:50 - 00002083 _____ C:\Users\Public\Desktop\Xilisoft MKV Converter.lnk
2013-08-19 10:00 - 2013-08-19 10:00 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Video Converter Packages
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\Documents\My Received Files
2013-08-19 09:57 - 2013-08-19 09:57 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\MusicNet
2013-08-19 09:54 - 2013-08-19 09:54 - 00000000 ____D C:\Program Files (x86)\VideoConverter
2013-08-19 09:51 - 2013-08-19 09:51 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\ProgramData\Xilisoft
2013-08-19 09:50 - 2013-08-19 09:50 - 00000000 ____D C:\Program Files (x86)\Xilisoft
2013-08-19 09:40 - 2013-08-19 09:40 - 00065536 _____ C:\Windows\IFinst27.exe
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ch Editor
2013-08-19 09:40 - 2013-08-19 09:40 - 00000000 ____D C:\Program Files (x86)\Ch Editor
2013-08-19 06:50 - 2013-04-09 06:57 - 00000000 ____D C:\ProgramData\Adobe
2013-08-19 06:03 - 2013-04-09 07:07 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-18 14:19 - 2013-08-18 14:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-18 12:52 - 2013-04-23 18:26 - 00000000 ____D C:\Users\GERDL\AppData\Local\._Revolution_
2013-08-17 00:04 - 2013-04-19 11:05 - 00000000 ____D C:\Program Files (x86)\Epson Software
2013-08-15 18:48 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Battle.net
2013-08-15 18:45 - 2013-08-15 18:45 - 00000000 ____D C:\Users\GERDL\AppData\Local\Blizzard Entertainment
2013-08-15 18:45 - 2013-08-15 18:44 - 00000000 ____D C:\Program Files (x86)\Battle.net
2013-08-15 18:44 - 2013-08-15 18:44 - 00001124 _____ C:\Users\Public\Desktop\Battle.net.lnk
2013-08-14 19:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-14 17:25 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-08-14 07:32 - 2013-08-14 07:30 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 07:30 - 2013-04-09 03:52 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-12 16:28 - 2013-08-12 16:28 - 00002233 _____ C:\Users\GERDL\AppData\Local\recently-used.xbel
2013-08-12 16:28 - 2013-06-13 19:25 - 00000000 ____D C:\Users\GERDL\.gimp-2.8
2013-08-11 15:19 - 2013-08-11 15:19 - 00000742 _____ C:\Users\Public\Desktop\My DocsToGo.lnk
2013-08-11 15:19 - 2013-08-11 15:19 - 00000000 ___SD C:\Users\GERDL\Documents\My DocsToGo
2013-08-11 15:19 - 2013-08-11 15:18 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\DocumentsToGoDesktopAndroid
2013-08-11 15:18 - 2013-08-11 15:18 - 00001314 _____ C:\Users\Public\Desktop\Documents To Go Desktop for Android.lnk
2013-08-11 15:18 - 2013-08-11 15:18 - 00000000 ____D C:\Program Files (x86)\Documents To Go Desktop for Android
2013-08-11 00:22 - 2009-07-14 06:45 - 00291840 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-10 21:33 - 2013-08-11 15:15 - 00295933 _____ C:\Users\GERDL\Desktop\tippen2013-2014---1-17 spieltage.xlsx
2013-08-10 12:08 - 2013-04-08 20:43 - 00062480 _____ C:\Users\GERDL\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-10 11:44 - 2013-08-10 11:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Windows\PCHEALTH
2013-08-10 11:43 - 2013-08-10 11:43 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2013-08-10 11:42 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Users\GERDL\AppData\Local\Microsoft Help
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files\Microsoft Office
2013-08-10 11:41 - 2013-08-10 11:41 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2013-08-10 11:41 - 2009-07-14 20:18 - 00000000 ____D C:\Windows\ShellNew
2013-08-10 11:40 - 2013-08-10 11:40 - 00000000 __RHD C:\MSOCache
2013-08-06 16:49 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\GHISLER
2013-08-06 16:47 - 2013-08-06 16:47 - 00000000 ____D C:\Users\GERDL\AppData\Local\GHISLER
2013-08-06 16:46 - 2013-08-06 16:45 - 00000000 ____D C:\totalcmd
2013-08-06 16:45 - 2013-08-06 16:45 - 00000646 _____ C:\Users\GERDL\Desktop\Total Commander 64 bit.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000632 _____ C:\Users\GERDL\Desktop\Total Commander.lnk
2013-08-06 16:45 - 2013-08-06 16:45 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander
2013-08-04 14:09 - 2013-04-16 23:17 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-08-02 07:42 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-07-29 07:30 - 2013-07-29 07:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-07-29 05:22 - 2013-07-29 05:22 - 00002006 _____ C:\Users\Public\Desktop\Samsung Kies (Lite).lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00001996 _____ C:\Users\Public\Desktop\Samsung Kies.lnk
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\Documents\samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Roaming\Samsung
2013-07-29 05:22 - 2013-07-29 05:22 - 00000000 ____D C:\Users\GERDL\AppData\Local\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\ProgramData\Samsung
2013-07-29 05:22 - 2013-07-29 05:20 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-07-29 05:20 - 2013-04-08 20:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-07-29 05:19 - 2013-07-29 05:19 - 00000000 ____D C:\Users\GERDL\AppData\Local\Downloaded Installations
2013-07-26 07:13 - 2013-08-14 07:34 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-07-26 07:13 - 2013-08-14 07:33 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-07-26 07:13 - 2013-08-14 07:33 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-07-26 07:12 - 2013-08-14 07:34 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-07-26 07:12 - 2013-08-14 07:33 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-07-26 05:35 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-07-26 05:13 - 2013-08-14 07:33 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-07-26 05:13 - 2013-08-14 07:33 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-07-26 05:12 - 2013-08-14 07:34 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-07-26 05:12 - 2013-08-14 07:33 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-07-26 05:11 - 2013-08-14 07:34 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-07-26 05:11 - 2013-08-14 07:33 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-07-26 04:49 - 2013-08-14 07:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-07-26 04:39 - 2013-08-14 07:34 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-07-26 03:59 - 2013-08-14 07:34 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-07-25 11:25 - 2013-08-14 07:28 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-07-25 10:57 - 2013-08-14 07:28 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-22 09:48

==================== End Of Log ============================
         
--- --- ---

Alt 22.08.2013, 14:44   #8
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.08.2013, 14:50   #9
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?





werd ich machen gleich
eine frage hab ich noch,,ist das Virenprogram das ich habe gut oder nicht zu empfehlenbenutze avast anti virus freeware

oder kenst du ein gutes das mann empfehlen kann,,würd mir auch eins kaufen hauptsache 100% sicher

Alt 22.08.2013, 14:52   #10
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Avast ist ok und wird auch von uns empfohlen

Zitat:
eins kaufen hauptsache 100% sicher
Es gibt keine 100%!
Schon garnicht nur mit einem Virenscanner!
Ei System ist immer so sicher, wie der Anwender es eingerichtet hat und pflegt
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.08.2013, 17:05   #11
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



hallo

wurde nichts mehr gefunden
problem ist nun gelöst danke dir

Alt 22.08.2013, 18:36   #12
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Bitte trotzdem beide Logs posten
__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Alt 22.08.2013, 21:09   #13
biakua
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



hallo
sorry hab wohl esset online scanner Übersehn Er hatt wieder was gefunden


Code:
ATTFilter
 Malwarebytes Anti-Malware  (PRO) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2013.08.22.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 10.0.9200.16660
GERDL :: GERDL-PC [Administrator]

Schutz: Aktiviert

22.08.2013 19:49:58
mbam-log-2013-08-22 (19-49-58).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 369161
Laufzeit: 32 Minute(n), 51 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)
         
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14869
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 05:40:13
# local_time=2013-08-22 07:40:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3583533 153903085 0 0
# compatibility_mode=5893 16776573 100 94 7196 128823063 0 0
# scanned=211024
# found=5
# cleaned=0
# scan_time=6641
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=AC40992B000498F496E667772A50361A5A8E364C ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\GERDL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\AWB5P75T\firstload_com[1].htm"
sh=DA602313EC344E31F340105C29DF699267F73B84 ft=1 fh=34999f3f19837452 vn="multiple threats" ac=I fn="C:\Users\GERDL\AppData\Local\Temp\is1070216317\yontoo-C4.exe"
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\Desktop\Ihre_letzte_Mahnung_01.07.2013\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=F2CE0586FEAD9177CB5522DE3C684D1EA167BB37 ft=0 fh=0000000000000000 vn="a variant of Android/Plankton.I trojan" ac=I fn="C:\Users\GERDL\Documents\samsung\Kies\Backup\GT-I9300\GT-I9300_+4915141909356\GT-I9300_20130729053154\Others\blackmart\downloads\com.gtp.nextlauncher.2147483600.apk"
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14869
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 06:24:33
# local_time=2013-08-22 08:24:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3586193 153905745 0 0
# compatibility_mode=5893 16776573 100 94 6193 128825723 0 0
# scanned=82552
# found=3
# cleaned=0
# scan_time=2397
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=AC40992B000498F496E667772A50361A5A8E364C ft=0 fh=0000000000000000 vn="HTML/ScrInject.B.Gen virus" ac=I fn="C:\Users\GERDL\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\AWB5P75T\firstload_com[1].htm"
sh=DA602313EC344E31F340105C29DF699267F73B84 ft=1 fh=34999f3f19837452 vn="multiple threats" ac=I fn="C:\Users\GERDL\AppData\Local\Temp\is1070216317\yontoo-C4.exe"
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=0fe5615e983f4e42aa78ffbcce395736
# engine=14872
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2013-08-22 08:02:20
# local_time=2013-08-22 10:02:20 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=774 16777213 85 91 3592060 153911612 0 0
# compatibility_mode=5893 16776573 100 94 12060 128831590 0 0
# scanned=163722
# found=3
# cleaned=0
# scan_time=3530
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\AppData\Local\IM\Identities\{C69B1FCB-E357-4BAC-9B3C-2A926BA242D5}\Message Store\Attachments\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=D8292A133F0D8CD31863DCB1EC30B0330F530959 ft=0 fh=0000000000000000 vn="Win32/Trustezeb.C trojan" ac=I fn="C:\Users\GERDL\Desktop\Ihre_letzte_Mahnung_01.07.2013\Amazon GmbH Aufforderung 01.07.2013.zip"
sh=F2CE0586FEAD9177CB5522DE3C684D1EA167BB37 ft=0 fh=0000000000000000 vn="a variant of Android/Plankton.I trojan" ac=I fn="C:\Users\GERDL\Documents\samsung\Kies\Backup\GT-I9300\GT-I9300_+4915141909356\GT-I9300_20130729053154\Others\blackmart\downloads\com.gtp.nextlauncher.2147483600.apk"
         

Alt 22.08.2013, 21:50   #14
cosinus
/// Winkelfunktion
/// TB-Süch-Tiger™
 
V9 Startseite  bei IE+F.Fox- Wie entfernen ? - Standard

V9 Startseite bei IE+F.Fox- Wie entfernen ?



Das erste ist nur der Mailanhang selbst. Löschen.
Das andere löschen wir mit TFC:

TFC - Temp File Cleaner

Lade dir TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.
  • Öffne die TFC.exe.
    Vista und Win 7 User mit Rechtsklick "als Administrator starten".
  • Schließe alle anderen Programme.
  • Drücke auf den Button Start.
  • Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

__________________
"Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak)

Das Trojaner-Board unterstützen
Warum Linux besser als Windows ist!

Antwort

Themen zu V9 Startseite bei IE+F.Fox- Wie entfernen ?
anleitung, anti, avast, beste, besten, brauche, browser, deaktivieren, einfangen, entfernen, erfahrung, erfolgreich, explorer, firefox, folge, folgen, fängt, interne, internet, internet explorer, laufen, malwarebytes, plugin, seite, startseite, wie entfernen



Ähnliche Themen: V9 Startseite bei IE+F.Fox- Wie entfernen ?


  1. Windows 8- omiga-plus als Startseite entfernen - Welche Scans durchführen?
    Plagegeister aller Art und deren Bekämpfung - 12.01.2015 (14)
  2. Webseaches.com als Startseite von Mozilla lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 01.09.2014 (14)
  3. SM.de Startseite entfernen
    Plagegeister aller Art und deren Bekämpfung - 14.08.2014 (9)
  4. awesomehp virus in google chrom startseite entfernen
    Log-Analyse und Auswertung - 27.02.2014 (2)
  5. Foxstart.com (Startseite) entfernen
    Anleitungen, FAQs & Links - 24.01.2014 (2)
  6. startseite.com entfernen
    Plagegeister aller Art und deren Bekämpfung - 12.01.2014 (11)
  7. Nationzoom als Startseite lässt sich nicht ändern/entfernen
    Plagegeister aller Art und deren Bekämpfung - 18.12.2013 (1)
  8. nattly.com Startseite entfernen
    Anleitungen, FAQs & Links - 08.12.2013 (2)
  9. search.softonic.com Startseite Toolbar entfernen
    Anleitungen, FAQs & Links - 17.11.2013 (2)
  10. delta-force als startseite lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 04.07.2013 (5)
  11. snap.do Startseite und Browserleiste (Firefox/Win7-32Bit) entfernen
    Log-Analyse und Auswertung - 11.05.2013 (9)
  12. search.babylon.com als Startseite lässt sich nicht entfernen
    Plagegeister aller Art und deren Bekämpfung - 24.10.2012 (21)
  13. MY start incredibar entfernen durch Downloads auf Google startseite
    Log-Analyse und Auswertung - 13.10.2012 (2)
  14. Startseite.com entfernen
    Plagegeister aller Art und deren Bekämpfung - 08.10.2012 (2)
  15. my start incredibar lässt sich nicht als startseite entfernen
    Log-Analyse und Auswertung - 05.09.2012 (24)
  16. Startseite lässt sich nicht entfernen und unerwünschte Werbeseiten
    Plagegeister aller Art und deren Bekämpfung - 21.03.2009 (1)
  17. Startseite lässt sich nicht entfernen !!!
    Log-Analyse und Auswertung - 09.04.2005 (7)

Zum Thema V9 Startseite bei IE+F.Fox- Wie entfernen ? - Servus Ich habe mir die V9 Seuche eingefangen. (Browser: Firefox)+(Internet Explorer) Hat jemand Erfahrung damit wie man die am besten wieder los wird? Bitte nur wenn schon selbst erfolgreich beseitigt. - V9 Startseite bei IE+F.Fox- Wie entfernen ?...
Archiv
Du betrachtest: V9 Startseite bei IE+F.Fox- Wie entfernen ? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.