Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: VAF Player lässt sich nicht deinstallieren

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 26.02.2014, 21:34   #1
Lillly
 
VAF Player lässt sich nicht deinstallieren - Icon17

VAF Player lässt sich nicht deinstallieren



Hallo

Da in lezter Zeit leider öfter Pop-Ups wie (Casinoseiten/ Werbung usw.) beim surfen auftauchen, habe ich mal im PC rumgestöbert. Zwar sagt mir Avira das ich frei von allem Übel bin, aber dem Braten traue ich nicht, zumal bei ab und an durchgeführten suchlaufen mit Malwarebytes Anti-Malware immer mal wieder was gefunden wird.
Ich bin auf das Programm VAF Player gestoßen und habe versucht es zu deinstallieren.
Das erste was mich stutzig macht ist das aufeinmal Spanisch im Fensterchen erscheint. (Espere mientras Windows configura VAFPlayer) danach bricht der forgang ab und es erfolgt die Meldung:
Error 1001. Beim Initialisieren der Installation ist eine Ausnahme /aufgetreten: Sytem.IO.FileNotFoundException: Die Datei oder Assembl "file://C:\Program Files\TuguuSL\VAFPlaer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebebe Datei nicht finden. (Aceptar)
Beim googeln bin ich auf das Forum hier gestoßen in dem das selbe problem in einem anderen Tread angesprochen wurde. Was könnte ich nun tun?
Danke Lilly

Geändert von Lillly (26.02.2014 um 22:04 Uhr)

Alt 27.02.2014, 06:53   #2
schrauber
/// the machine
/// TB-Ausbilder
 

VAF Player lässt sich nicht deinstallieren - Standard

VAF Player lässt sich nicht deinstallieren



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 27.02.2014, 10:36   #3
Lillly
 
VAF Player lässt sich nicht deinstallieren - Standard

VAF Player lässt sich nicht deinstallieren



Hallo und vielen Dank für die schnelle Antwort und Hilfe.
ich hoffe das ist so richtig



FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by Anwender (administrator) on ANWENDER-PC on 27-02-2014 11:42:10
Running from C:\Users\Anwender\Downloads
Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(BitDefender SRL) C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(UPEK Inc.) C:\Program Files\Common Files\SPBA\upeksvr.exe
(Egis Technology Inc.) c:\Program Files\Acer Bio Protection\CompPtcVUI.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Acer Incorporated) C:\Program Files\Acer\Registration\GregHSRW.exe
(Egis Technology Inc.) c:\Program Files\Acer Bio Protection\BASVC.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(O2Micro International) C:\Windows\system32\DRIVERS\o2flash.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Acer Incorporated) C:\Program Files\Acer\Acer VCM\RS_Service.exe
(Acer) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft) C:\Program Files\Yontoo\Y2Desktop.Updater.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(InterVideo) C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
() C:\Windows\PLFSetI.exe
(Egis Technology Inc.) C:\Program Files\Acer Bio Protection\PdtWzd.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Acer Inc.) C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe
(BitDefender S.R.L.) C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Akamai Technologies, Inc.) C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Akamai Technologies, Inc.) C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\HidFind.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apntex.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Farbar) C:\Users\Anwender\Downloads\FRST(1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [PLFSetI] - C:\Windows\PLFSetI.exe [200704 2008-07-29] ()
HKLM\...\Run: [VitaKeyPdtWzd] - c:\Program Files\Acer Bio Protection\PdtWzd.exe [3575808 2009-08-06] (Egis Technology Inc.)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1130504 2009-08-28] (Dritek System Inc.)
HKLM\...\Run: [IntelliPoint] - c:\Program Files\Microsoft IntelliPoint\ipoint.exe [1797008 2010-07-21] (Microsoft Corporation)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [ePower_DMC] - C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exe [421888 2009-07-20] (Acer Inc.)
HKLM\...\Run: [BitDefender Antiphishing Helper] - C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe [69632 2009-02-23] (BitDefender)
HKLM\...\Run: [BDAgent] - C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe [843144 2011-07-12] (BitDefender S.R.L.)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [217088 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-05-30] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
Winlogon\Notify\spba: C:\Program Files\Common Files\SPBA\homefus2.dll (UPEK Inc.)
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [Akamai NetSession Interface] - C:\Users\Anwender\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [Yontoo Desktop] - C:\Users\Anwender\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC)
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-09-16] (Google Inc.)
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {654723f7-d569-11e0-a0bb-00262d63c4ed} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {65472402-d569-11e0-a0bb-00262d63c4ed} - E:\setup_vmc_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {ad69cfb4-81c5-11e3-8db4-00262d63c4ed} - E:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {ad69cfc9-81c5-11e3-8db4-00262d63c4ed} - E:\.\Setup.exe AUTORUN=1
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {b4f99ca1-8a00-11e1-8d68-f73eaa368bda} - F:\Autorun.exe
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {bc7eccb3-c81a-11e0-985a-00262d63c4ed} - "E:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-1344457485-3714030486-2191688968-1003\...\MountPoints2: {eea5c2e1-8469-11e3-8cd9-001e101f82a7} - E:\.\Setup.exe AUTORUN=1
Lsa: [Notification Packages] c:\Program Files\Acer Bio Protection\PwdFilter
Startup: C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.babylon.com/?affID=120519&tt=190313_wo3&babsrc=HP_ss_bad2g&mntrId=88D20026C61F5E32
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&m=travelmate_5730&r=27050110c216l03h8z225x4851j275
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKLM - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKLM - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=120519&tt=190313_wo3&babsrc=SP_ss_bad2g&mntrId=88D20026C61F5E32
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {6552C7DD-90A4-4387-B795-F8F96747DE19} URL = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_deDE361DE361
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}
BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: No Name - {43C6D902-A1C5-45c9-91F6-FD9E90337E18} -  No File
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Web Check - {E155F23C-9931-47c6-A619-20E6FCA86D75} - C:\Program Files\Web Check\WebCheck.dll (Web Check)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll (DVDVideoSoft Ltd.)
Toolbar: HKLM - No Name - {CCAC5586-44D7-4c43-B64A-F042461A97D2} -  No File
Toolbar: HKLM - BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler: tmtb - {04EAF3FB-4BAC-4B5A-A37D-A1CF210A5A42} -  No File
Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default
FF NetworkProxy: "autoconfig_url", "proxy.cenesco.de"
FF NetworkProxy: "ftp", "proxy.cenesco.de"
FF NetworkProxy: "ftp_port", 8080
FF NetworkProxy: "gopher", "proxy.cenesco.de"
FF NetworkProxy: "gopher_port", 8080
FF NetworkProxy: "http", "proxy.cenesco.de"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "no_proxies_on", "localhost,127.0.0.1"
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "proxy.cenesco.de"
FF NetworkProxy: "socks_port", 8080
FF NetworkProxy: "ssl", "proxy.cenesco.de"
FF NetworkProxy: "ssl_port", 8080
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\conduit.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\delta.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-12.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-13.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-14.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-15.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-16.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-17.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-18.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-19.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\iminent.xml
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\searchplugins\sweetim.xml
FF Extension: Plus-HD-3.8 - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\c17236e8-fd66-44bc-aeef-1e00981cbb64@0a4ee0fe-5356-4fd3-b37c-5cd5671a315c.com [2014-01-30]
FF Extension: vis - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\EFGLQA@78ETGYN-0W7FN789T87.COM [2013-11-22]
FF Extension: Delta Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\ffxtlbr@delta.com [2013-03-29]
FF Extension: ProxTube - Unblock YouTube - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\ich@maltegoetz.de [2013-12-17]
FF Extension: Yontoo - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\plugin@yontoo.com [2013-03-29]
FF Extension: Google Toolbar for Firefox - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2011-06-08]
FF Extension: ICQ Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-27]
FF Extension: DVDVideoSoft Toolbar - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} [2010-06-15]
FF Extension: Adblock Plus Pop-up Addon - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\adblockpopups@jessehakanen.net.xpi [2014-02-26]
FF Extension: NoScript - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-02-26]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-21]
FF Extension: Adblock Plus - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-08-14]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Anwender\AppData\Roaming\Mozilla\Firefox\Profiles\p05w97uj.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2011-07-11]
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2014-02-15]
FF HKLM\...\Firefox\Extensions: [{22181a4d-af90-4ca3-a569-faed9118d6bc}] - c:\Program Files\Trend Micro\TrendSecure\TISProToolbar\FirefoxExtension
FF HKLM\...\Firefox\Extensions: [{3112ca9c-de6d-4884-a869-9855de68056c}] - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Google Toolbar for Firefox - C:\ProgramData\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2010-04-09]
FF HKLM\...\Firefox\Extensions: [FFToolbar@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2009\FFToolbar\
FF Extension: BitDefender Antiphishing Toolbar - C:\Program Files\BitDefender\BitDefender 2009\FFToolbar\ []
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011-07-04]
FF HKLM\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\ []
FF HKLM\...\Firefox\Extensions: [{52b0f3db-f988-4788-b9dc-861d016f4487}] - C:\Program Files\Web Check\WebCheck.xpi
FF Extension: Web Check - C:\Program Files\Web Check\WebCheck.xpi [2013-08-12]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\BitDefender\BitDefender 2009\tbextension\
FF Extension: bdToolbar - C:\Program Files\BitDefender\BitDefender 2009\tbextension\ []

Chrome: 
=======
CHR HomePage: 
CHR RestoreOnStartup: "tabs" : 
	{
		"use_compact_navigation_bar" : false,
		"use_vertical_tabs"
CHR DefaultSearchKeyword: babylon.com
CHR DefaultSearchProvider: Babylon
CHR DefaultSearchURL: hxxp://search.babylon.com/?q={searchTerms}&affID=120519&tt=190313_wo3&babsrc=SP_ss_bad2g&mntrId=88D20026C61F5E32
CHR Extension: (Yontoo) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc [2013-11-22]
CHR Extension: (DVDVideoSoft Browser Extension) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2013-05-06]
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\Anwender\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm [2011-07-04]
CHR HKLM\...\Chrome\Extension: [dacechnliklhcacondhhkkfobapdopee] - C:\Program Files\Web Check\WebCheck.crx [2013-08-12]
CHR HKLM\...\Chrome\Extension: [niapdbllcanepiiimjjndipklodoedlc] - C:\Program Files\Yontoo\YontooLayers.crx [2013-06-25]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-05-23]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2013-02-24]

========================== Services (Whitelisted) =================

R2 Akamai; c:\program files\common files\akamai/netsession_win_8fa3539.dll [4569856 2013-07-01] (Akamai Technologies, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [144672 2009-08-28] (Apple Inc.)
S3 Arrakis3; C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [172032 2009-01-20] ()
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576 2009-08-12] ()
R2 Greg_Service; C:\Program Files\Acer\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated)
R2 IGBASVC; c:\Program Files\Acer Bio Protection\BASVC.exe [3453440 2009-08-06] (Egis Technology Inc.)
R2 LIVESRV; C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe [413696 2011-07-12] (BitDefender SRL)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe [235216 2013-02-05] (McAfee, Inc.)
S3 npggsvc; C:\Windows\system32\GameMon.des [3717904 2010-08-18] (INCA Internet Co., Ltd.)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144640 2009-06-18] (NewTech Infosystems, Inc.)
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [65536 2007-02-13] (O2Micro International)
R2 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [253952 2009-07-10] (Acer Incorporated)
S3 scan; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\scan.dll [323584 2011-07-12] (S.C. BitDefender S.R.L)
R2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [240160 2009-07-04] (Acer)
S2 VSSERV; C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe [1638240 2011-07-12] (BitDefender S. R. L.)
R2 Yontoo Desktop Updater; C:\Users\Anwender\AppData\Roaming\Yontoo\YontooDesktop.exe [42784 2013-03-23] (Yontoo LLC)
S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [X]
S2 SfCtlCom; "c:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe" [X]
S3 TMBMServer; "c:\Program Files\Trend Micro\BM\TMBMSRV.exe" /service [X]
S3 TmPfw; "c:\Program Files\Trend Micro\Internet Security\TmPfw.exe" [X]
S3 TmProxy; "c:\Program Files\Trend Micro\Internet Security\TmProxy.exe" [X]
S3 WPFFontCache_v0400; C:\Windows\Microsoft.NET\Framework\v4.0.30128\WPF\WPFFontCache_v0400.exe [X]

==================== Drivers (Whitelisted) ====================

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-28] (Avira Operations GmbH & Co. KG)
S3 bdfm; C:\Windows\System32\drivers\bdfm.sys [111112 2008-09-18] (BitDefender S.R.L. Bucharest, ROMANIA)
R3 Bdfndisf; C:\Windows\System32\DRIVERS\bdfndisf.sys [104456 2011-07-12] (BitDefender LLC)
S3 bdfsfltr; C:\Windows\System32\DRIVERS\bdfsfltr.sys [242184 2008-12-10] (BitDefender S.R.L. Bucharest, ROMANIA)
S1 bdftdif; C:\Program Files\Common Files\BitDefender\BitDefender Firewall\bdftdif.sys [137224 2011-07-12] (BitDefender LLC)
S3 BDSelfPr; C:\Program Files\BitDefender\BitDefender 2009\bdselfpr.sys [8832 2009-01-12] (BitDefender S.R.L.)
R2 BDVEDISK; C:\Program Files\BitDefender\BitDefender 2009\BDVEDISK.sys [82696 2008-10-06] (BitDefender S.R.L.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2012-04-22] (DT Soft Ltd)
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [102912 2009-06-29] (Huawei Technologies Co., Ltd.)
S3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [47104 2009-07-13] (Atheros Communications, Inc.)
S3 Profos; C:\Program Files\Common Files\BitDefender\BitDefender Threat Scanner\profos.sys [13056 2008-09-02] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2012-08-27] (Avira GmbH)
R2 tmpreflt; C:\Windows\System32\DRIVERS\tmpreflt.sys [36368 2010-01-05] (Trend Micro Inc.)
R2 tmxpflt; C:\Windows\System32\DRIVERS\tmxpflt.sys [225808 2010-01-05] (Trend Micro Inc.)
R2 vsapint; C:\Windows\System32\DRIVERS\vsapint.sys [1223832 2010-01-05] (Trend Micro Inc.)
S3 cpuz132; \??\C:\Users\Anwender\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S1 ntiomin; No ImagePath
S3 tmactmon; system32\DRIVERS\tmactmon.sys [X]
S2 tmcomm; system32\DRIVERS\tmcomm.sys [X]
S3 tmevtmgr; system32\DRIVERS\tmevtmgr.sys [X]
S1 tmlwf; system32\DRIVERS\tmlwf.sys [X]
S1 tmtdi; system32\DRIVERS\tmtdi.sys [X]
S2 tmwfp; system32\DRIVERS\tmwfp.sys [X]
S3 XDva359; \??\C:\Windows\system32\XDva359.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-27 11:29 - 2014-02-27 11:30 - 01143808 _____ (Farbar) C:\Users\Anwender\Desktop\FRST(1).exe
2014-02-27 03:01 - 2014-02-27 03:01 - 00000000 ____D () C:\12f13b8b55346718d96f86
2014-02-27 03:00 - 2014-02-27 11:25 - 00009325 _____ () C:\Windows\IE11_main.log
2014-02-27 00:45 - 2014-02-27 00:45 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{6CD44A0E-A6BB-4804-9866-16C31771AC13}
2014-02-27 00:10 - 2014-02-27 00:10 - 00000000 ____D () C:\Users\Anwender\Desktop\Neuer Ordner (2)
2014-02-26 23:43 - 2014-02-26 23:44 - 00039272 _____ () C:\Users\Anwender\Downloads\Addition.txt
2014-02-26 23:42 - 2014-02-26 23:42 - 00380416 _____ () C:\Users\Anwender\Downloads\Gmer-19357.exe
2014-02-26 23:41 - 2014-02-27 11:42 - 00029424 _____ () C:\Users\Anwender\Downloads\FRST.txt
2014-02-26 23:41 - 2014-02-27 11:42 - 00000000 ____D () C:\FRST
2014-02-26 23:40 - 2014-02-26 23:40 - 01143808 _____ (Farbar) C:\Users\Anwender\Downloads\FRST.exe
2014-02-26 23:39 - 2014-02-26 23:39 - 00000478 _____ () C:\Users\Anwender\Downloads\defogger_disable.log
2014-02-26 23:39 - 2014-02-26 23:39 - 00000156 _____ () C:\Users\Anwender\defogger_reenable
2014-02-26 23:37 - 2014-02-26 23:38 - 00050477 _____ () C:\Users\Anwender\Downloads\Defogger.exe
2014-02-26 22:30 - 2014-02-26 22:30 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe
2014-02-26 21:44 - 2014-02-27 11:18 - 00000224 _____ () C:\Windows\setupact.log
2014-02-26 21:44 - 2014-02-26 21:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-26 21:43 - 2014-02-26 22:47 - 00072244 _____ () C:\Windows\PFRO.log
2014-02-26 21:38 - 2014-02-26 21:38 - 00282840 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1(1).exe
2014-02-26 21:34 - 2014-02-26 21:34 - 00283256 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1.exe
2014-02-26 21:29 - 2014-02-26 21:30 - 00000000 ____D () C:\Program Files\Advanced File Optimizer
2014-02-26 21:29 - 2014-02-26 21:29 - 00002259 _____ () C:\Users\Public\Desktop\Advanced File Optimizer.lnk
2014-02-26 21:29 - 2014-02-26 21:29 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Systweak
2014-02-26 21:28 - 2014-02-26 21:28 - 06083952 _____ (Systweak Software ) C:\Users\Anwender\Downloads\advancedfileoptimizersetup_RDF.exe
2014-02-26 21:27 - 2014-02-26 21:27 - 00907018 _____ () C:\Users\Anwender\Downloads\adblockplus-2.5.1.zip
2014-02-26 21:25 - 2014-02-26 21:25 - 00105412 _____ () C:\Users\Anwender\Downloads\adblock_plus_pop_up_addon-0.9.1-fx.zip
2014-02-26 21:01 - 2014-02-26 21:51 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\systweak
2014-02-26 20:43 - 2014-02-26 20:43 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\QuickScan
2014-02-26 20:40 - 2014-02-26 20:40 - 05483968 _____ (Speedchecker Limited ) C:\Users\Anwender\Downloads\pcbeschleunigen_779379ffd9a2421b92a05ba6ddd3e89e_.exe
2014-02-26 20:10 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-26 19:48 - 2014-02-26 21:52 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-26 19:38 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2014-02-26 19:38 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2014-02-26 19:27 - 2014-02-01 08:58 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-26 19:27 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-26 19:27 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-26 19:27 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-26 19:27 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-26 19:26 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-26 19:26 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-26 19:26 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-26 19:26 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-26 19:26 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-26 19:11 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-02-26 19:11 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2014-02-26 19:11 - 2013-07-09 05:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2014-02-26 19:11 - 2013-07-09 05:50 - 00652800 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-02-26 19:11 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2014-02-26 19:11 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2014-02-26 19:11 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2014-02-26 19:11 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2014-02-26 19:10 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-26 19:10 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-26 19:10 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-26 19:10 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-02-26 19:10 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-02-26 19:10 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-02-26 19:10 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-02-26 19:10 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2014-02-26 19:10 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2014-02-26 19:10 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2014-02-26 19:10 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\Windows\system32\nshwfp.dll
2014-02-26 19:10 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2014-02-26 19:10 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\Windows\system32\IKEEXT.DLL
2014-02-26 19:10 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\Windows\system32\FWPUCLNT.DLL
2014-02-26 19:10 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2014-02-26 19:10 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2014-02-26 19:10 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2014-02-26 19:10 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll
2014-02-26 19:10 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-02-26 19:10 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll
2014-02-26 19:10 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2014-02-26 19:10 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2014-02-26 19:10 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-02-26 19:10 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-02-26 19:10 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-02-26 19:10 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-02-26 19:10 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-02-26 19:10 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-02-26 19:10 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-02-26 19:10 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-02-26 19:10 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-02-26 19:10 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-02-26 19:10 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-02-26 19:10 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-02-26 19:10 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-02-26 19:10 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-02-26 19:10 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2014-02-26 19:10 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2014-02-26 19:10 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2014-02-26 19:10 - 2013-08-05 02:56 - 00133056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ataport.sys
2014-02-26 19:10 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-02-26 19:10 - 2013-07-26 02:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-02-26 19:10 - 2013-07-26 02:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2014-02-26 19:10 - 2013-07-25 09:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-02-26 19:10 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2014-02-26 19:10 - 2013-07-09 05:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2014-02-26 19:10 - 2013-07-09 05:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2014-02-26 19:10 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-02-26 19:10 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2014-02-26 19:10 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2014-02-26 19:10 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2014-02-26 19:10 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2014-02-26 19:10 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2014-02-26 19:10 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2014-02-26 19:10 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2014-02-26 19:10 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2014-02-26 19:09 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-26 19:09 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-26 19:09 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-26 19:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-26 19:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-26 19:09 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-26 19:09 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-26 19:09 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-26 19:09 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-26 19:09 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-26 19:09 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-02-26 19:09 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-02-26 19:09 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-26 19:09 - 2013-08-02 02:50 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-02-26 19:09 - 2013-08-02 02:49 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-02-26 19:09 - 2013-08-02 02:49 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 02:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 01:52 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-02-26 19:09 - 2013-08-02 01:43 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 01:43 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 01:43 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-02-26 19:09 - 2013-08-02 01:43 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-02-26 19:09 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2014-02-26 19:09 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2014-02-26 19:09 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2014-02-26 19:09 - 2013-06-15 04:38 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-02-26 18:43 - 2014-02-26 18:43 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job
2014-02-22 03:24 - 2014-02-22 03:24 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{57D3F87B-6007-42BA-B92C-854D7EDF6804}
2014-02-18 00:38 - 2014-02-18 00:38 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{4FEFA1FF-8430-46A1-95AF-EAD9C9C57842}
2014-02-15 15:39 - 2014-02-26 21:43 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{30CA8995-2192-4A4E-A83F-F11A2BF0AB9E}

==================== One Month Modified Files and Folders =======

2014-02-27 11:42 - 2014-02-26 23:41 - 00029424 _____ () C:\Users\Anwender\Downloads\FRST.txt
2014-02-27 11:42 - 2014-02-26 23:41 - 00000000 ____D () C:\FRST
2014-02-27 11:30 - 2014-02-27 11:29 - 01143808 _____ (Farbar) C:\Users\Anwender\Desktop\FRST(1).exe
2014-02-27 11:27 - 2010-07-26 19:02 - 01401431 _____ () C:\Windows\WindowsUpdate.log
2014-02-27 11:26 - 2009-07-14 05:34 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-27 11:26 - 2009-07-14 05:34 - 00017408 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-27 11:25 - 2014-02-27 03:00 - 00009325 _____ () C:\Windows\IE11_main.log
2014-02-27 11:22 - 2009-07-28 04:34 - 01782480 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 11:18 - 2014-02-26 21:44 - 00000224 _____ () C:\Windows\setupact.log
2014-02-27 11:18 - 2010-03-03 16:07 - 00000000 ____D () C:\Program Files\Common Files\Akamai
2014-02-27 03:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-27 03:01 - 2014-02-27 03:01 - 00000000 ____D () C:\12f13b8b55346718d96f86
2014-02-27 00:45 - 2014-02-27 00:45 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{6CD44A0E-A6BB-4804-9866-16C31771AC13}
2014-02-27 00:45 - 2012-07-23 16:08 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Windows Live
2014-02-27 00:31 - 2010-03-04 12:56 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Adobe
2014-02-27 00:30 - 2012-06-06 13:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-27 00:30 - 2012-06-06 13:48 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-27 00:30 - 2011-07-04 09:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-27 00:10 - 2014-02-27 00:10 - 00000000 ____D () C:\Users\Anwender\Desktop\Neuer Ordner (2)
2014-02-27 00:08 - 2012-05-12 03:45 - 00000159 _____ () C:\Users\Anwender\Desktop\Screen Cap.ini
2014-02-26 23:44 - 2014-02-26 23:43 - 00039272 _____ () C:\Users\Anwender\Downloads\Addition.txt
2014-02-26 23:42 - 2014-02-26 23:42 - 00380416 _____ () C:\Users\Anwender\Downloads\Gmer-19357.exe
2014-02-26 23:40 - 2014-02-26 23:40 - 01143808 _____ (Farbar) C:\Users\Anwender\Downloads\FRST.exe
2014-02-26 23:39 - 2014-02-26 23:39 - 00000478 _____ () C:\Users\Anwender\Downloads\defogger_disable.log
2014-02-26 23:39 - 2014-02-26 23:39 - 00000156 _____ () C:\Users\Anwender\defogger_reenable
2014-02-26 23:39 - 2010-01-05 18:40 - 00000000 ____D () C:\Users\Anwender
2014-02-26 23:38 - 2014-02-26 23:37 - 00050477 _____ () C:\Users\Anwender\Downloads\Defogger.exe
2014-02-26 22:49 - 2013-03-29 01:39 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Yontoo
2014-02-26 22:47 - 2014-02-26 21:43 - 00072244 _____ () C:\Windows\PFRO.log
2014-02-26 22:47 - 2009-09-16 09:03 - 00000000 ____D () C:\Windows\ShellNew
2014-02-26 22:30 - 2014-02-26 22:30 - 01241834 _____ () C:\Users\Anwender\Downloads\adwcleaner.exe
2014-02-26 21:52 - 2014-02-26 19:48 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-26 21:51 - 2014-02-26 21:01 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\systweak
2014-02-26 21:44 - 2014-02-26 21:44 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-26 21:43 - 2014-02-15 15:39 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-26 21:43 - 2012-05-05 19:33 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-26 21:39 - 2010-06-22 19:57 - 00001113 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-02-26 21:38 - 2014-02-26 21:38 - 00282840 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1(1).exe
2014-02-26 21:34 - 2014-02-26 21:34 - 00283256 _____ (Mozilla) C:\Users\Anwender\Downloads\Firefox Setup Stub 27.0.1.exe
2014-02-26 21:30 - 2014-02-26 21:29 - 00000000 ____D () C:\Program Files\Advanced File Optimizer
2014-02-26 21:29 - 2014-02-26 21:29 - 00002259 _____ () C:\Users\Public\Desktop\Advanced File Optimizer.lnk
2014-02-26 21:29 - 2014-02-26 21:29 - 00000000 ____D () C:\Users\Anwender\AppData\Local\Systweak
2014-02-26 21:28 - 2014-02-26 21:28 - 06083952 _____ (Systweak Software ) C:\Users\Anwender\Downloads\advancedfileoptimizersetup_RDF.exe
2014-02-26 21:27 - 2014-02-26 21:27 - 00907018 _____ () C:\Users\Anwender\Downloads\adblockplus-2.5.1.zip
2014-02-26 21:25 - 2014-02-26 21:25 - 00105412 _____ () C:\Users\Anwender\Downloads\adblock_plus_pop_up_addon-0.9.1-fx.zip
2014-02-26 21:19 - 2011-07-01 07:37 - 00000000 ____D () C:\Windows\pss
2014-02-26 20:56 - 2009-09-16 08:11 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-26 20:54 - 2011-11-04 04:45 - 00000000 ____D () C:\Fraps
2014-02-26 20:50 - 2012-05-08 12:50 - 00000000 ____D () C:\Windows\Minidump
2014-02-26 20:43 - 2014-02-26 20:43 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\QuickScan
2014-02-26 20:40 - 2014-02-26 20:40 - 05483968 _____ (Speedchecker Limited ) C:\Users\Anwender\Downloads\pcbeschleunigen_779379ffd9a2421b92a05ba6ddd3e89e_.exe
2014-02-26 20:33 - 2012-06-26 23:08 - 00001033 _____ () C:\Users\Anwender\Desktop\Dropbox.lnk
2014-02-26 20:33 - 2012-06-26 23:08 - 00000000 ___RD () C:\Users\Anwender\Dropbox
2014-02-26 20:33 - 2012-06-26 23:05 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-02-26 20:33 - 2012-06-26 23:04 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\Dropbox
2014-02-26 20:33 - 2010-06-21 13:31 - 00001271 _____ () C:\Windows\WinInit.Ini
2014-02-26 20:26 - 2009-09-19 01:04 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-02-26 20:26 - 2009-07-14 05:33 - 00415056 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-26 20:23 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-26 20:17 - 2009-09-19 01:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-26 18:46 - 2010-06-22 20:16 - 00002125 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-26 18:43 - 2014-02-26 18:43 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job
2014-02-22 03:24 - 2014-02-22 03:24 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{57D3F87B-6007-42BA-B92C-854D7EDF6804}
2014-02-20 22:25 - 2010-01-07 21:19 - 00000000 ____D () C:\Users\Anwender\AppData\Roaming\TS3Client
2014-02-20 22:23 - 2013-01-08 02:45 - 00000020 _____ () C:\Users\Anwender\Documents\aionmemo_1b4d24c4.dat
2014-02-18 00:38 - 2014-02-18 00:38 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{4FEFA1FF-8430-46A1-95AF-EAD9C9C57842}
2014-02-05 10:34 - 2014-02-05 10:34 - 00000000 ____D () C:\Users\Anwender\AppData\Local\{30CA8995-2192-4A4E-A83F-F11A2BF0AB9E}
2014-02-05 10:27 - 2012-10-30 01:40 - 00004608 _____ () C:\Users\Anwender\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-04 19:09 - 2010-01-05 13:27 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-01 08:58 - 2014-02-26 19:27 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 08:58 - 2014-02-26 19:26 - 01767936 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 08:58 - 2014-02-26 19:26 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 02877952 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 08:57 - 2014-02-26 19:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 08:57 - 2014-02-26 19:26 - 14359040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 08:57 - 2014-02-26 19:26 - 13760512 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 08:57 - 2014-02-26 19:26 - 02049024 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 08:34 - 2014-02-26 19:27 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 07:38 - 2014-02-26 19:27 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe

Some content of TEMP:
====================
C:\Users\Anwender\AppData\Local\Temp\avgnt.exe
C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih.exe
C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih_1.exe
C:\Users\Anwender\AppData\Local\Temp\install_flashplayer12x32_ltr5x32d_awc_aih_2.exe
C:\Users\Anwender\AppData\Local\Temp\mfc80.dll
C:\Users\Anwender\AppData\Local\Temp\mfc80u.dll
C:\Users\Anwender\AppData\Local\Temp\mfcm80.dll
C:\Users\Anwender\AppData\Local\Temp\mfcm80u.dll
C:\Users\Anwender\AppData\Local\Temp\msvcm80.dll
C:\Users\Anwender\AppData\Local\Temp\msvcp80.dll
C:\Users\Anwender\AppData\Local\Temp\msvcr80.dll
C:\Users\Anwender\AppData\Local\Temp\OSU.exe
C:\Users\Anwender\AppData\Local\Temp\Uninstaller.exe
C:\Users\Anwender\AppData\Local\Temp\WtgDriverInstallX.dll
C:\Users\Anwender\AppData\Local\Temp\WTGXMLUtil.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-09-08 20:08

==================== End Of Log ============================
         
--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---

--- --- ---
Additional Scan

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 26-02-2014 02
Ran by Anwender at 2014-02-26 23:43:30
Running from C:\Users\Anwender\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================


==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
µTorrent (HKLM\...\uTorrent) (Version: 1.8.5 - )
Acer Bio Protection (HKLM\...\InstallShield_{E09664BB-BB08-45FA-87D1-33EAB0E017F5}) (Version: 6.2.48 - Egis Technology Inc.)
Acer Crystal Eye Webcam (HKLM\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.7.1 - Suyin Optronics Corp)
Acer Empowering Technology (HKLM\...\{8F1B6239-FEA0-450A-A950-B05276CE177C}) (Version: 3.0.3016 - Acer Incorporated)
Acer ePower Management (HKLM\...\{58E5844B-7CE2-413D-83D1-99294BF6C74F}) (Version: 3.0.3019 - Acer Incorporated)
Acer eRecovery Management (HKLM\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3003 - Acer Incorporated)
Acer GridVista (HKLM\...\GridVista) (Version: 3.01.0730 - Acer Inc.)
Acer Registration (HKLM\...\Acer Registration) (Version: 1.02.3006 - Acer Incorporated)
Acer ScreenSaver (HKLM\...\Acer Screensaver) (Version: 1.1.0812 - Acer Incorporated)
Acer Updater (HKLM\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.01.3014 - Acer Incorporated)
Acer VCM (HKLM\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3000 - Acer Incorporated)
Acrobat.com (HKLM\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe AIR (Version: 1.5.0.7220 - Adobe Systems Inc.) Hidden
Adobe Flash Player 10 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 10.0.22.87 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader 9.5.5 MUI (HKLM\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.5.5 - Adobe Systems Incorporated)
Advanced File Optimizer (HKLM\...\Advanced File Optimizer_is1) (Version: 2.1.1000.10518 - Systweak Software)
Aion (HKCU\...\NCsoft-Aion) (Version:  - NCsoft)
Aion (HKCU\...\NCsoft-AionEU) (Version:  - NCsoft)
AION Free-To-Play (HKLM\...\InstallShield_{6A9EF6CF-7630-4E33-AE22-7D70F3AF4B05}) (Version: 2.70.0000 - Gameforge)
AION Free-To-Play (Version: 2.70.0000 - Gameforge) Hidden
AION Free-To-Play PTS (Version: 3.00.0000 - Gameforge) Hidden
AION Free-to-Play PTS Client Version 1.0 (HKLM\...\{E9C6FF3B-126F-47F3-8E70-9FFF1340CD37}_is1) (Version: 1.0 - Gameforge)
Akamai NetSession Interface (HKCU\...\Akamai) (Version:  - Akamai Technologies, Inc)
Akamai NetSession Interface Service (HKLM\...\Akamai) (Version:  - )
ALPS Touch Pad Driver (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.5.2015.1103 - Alps Electric)
AMD APP SDK Runtime (Version: 2.4.650.9 - Advanced Micro Devices Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.60524.2309 - ATI Technologies Inc.) Hidden
Apple Application Support (HKLM\...\{122ADF8C-DDA1-480C-9936-C88F2825B265}) (Version: 2.1.9 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}) (Version: 2.6.0.32 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ATI AVIVO Codecs (Version: 10.7.0.40702 - ATI Technologies Inc.) Hidden
ATI Catalyst Install Manager (HKLM\...\{278ABC06-C7AF-F987-FC4A-789582993D2D}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
BitDefender Internet Security 2009 (HKLM\...\{27148014-3B0A-402B-8130-6B056357D12D}) (Version: 12.0.12.1 - BitDefender)
Bonjour (HKLM\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
Broadcom Gigabit Integrated Controller (HKLM\...\{49F3D04B-B849-4C89-AB31-2366A004EA28}) (Version: 12.24.02 - Broadcom Corporation)
CanoScan Toolbox Ver4.1 (HKLM\...\{BCE46757-7674-4416-BEDB-68205A60409E}) (Version:  - )
Catalyst Control Center - Branding (Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2011.0524.2352.41027 - ATI) Hidden
Catalyst Control Center InstallProxy (Version: 2009.0702.1239.20840 - ATI Technologies, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2011.0524.2352.41027 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2011.0524.2352.41027 - ATI) Hidden
Catalyst Pro Control Center (Version: 2011.0524.2352.41027 - Ihr Firmenname) Hidden
CCC Help English (Version: 2011.0524.2351.41027 - ATI) Hidden
ccc-utility (Version: 2011.0524.2352.41027 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 2.33 - Piriform)
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 4.45.4.0314 - DT Soft Ltd)
Die Sims™ 3 (HKLM\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.19.44 - Electronic Arts)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.0.34 - DivX, LLC)
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
DVDVideoSoftTB Toolbar (HKLM\...\DVDVideoSoftTB Toolbar) (Version:  - )
eSobi v2 (HKLM\...\InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}) (Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (Version: 2.0.4.000274 - esobi Inc.) Hidden
Fingerprint Solution (Version: 6.1.48.0 - Egis Technology Inc.) Hidden
Free YouTube to MP3 Converter version 3.12.0.128 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
HDAUDIO Soft Data Fax Modem with SmartCP (HKLM\...\CNXT_MODEM_HDA_HSF) (Version: 7.80.4.55 - Conexant Systems)
ICQ7.2 (HKLM\...\{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}) (Version: 7.2 - ICQ)
Identity Card (HKLM\...\Identity Card) (Version: 1.00.3001 - Acer Incorporated)
Intel® Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version:  - Intel Corporation)
InterVideo WinDVD 8 (HKLM\...\InstallShield_{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}) (Version: 8.5.10.39 - InterVideo Inc.)
InterVideo WinDVD 8 (Version: 8.5.10.39 - InterVideo Inc.) Hidden
IrfanView (remove only) (HKLM\...\IrfanView) (Version:  - )
iTunes (HKLM\...\{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}) (Version: 9.0.3.15 - Apple Inc.)
JDownloader 0.9 (HKLM\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
Junk Mail filter update (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM\...\LManager) (Version: 3.0.04 - Acer Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.0.318.3 - McAfee, Inc.)
Mesh Runtime (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Client Profile DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended DEU Language Pack (HKLM\...\Microsoft .NET Framework 4 Extended DEU Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft IntelliPoint 8.0 (HKLM\...\{00F93853-D9D3-4795-A89E-84CCBA0205C9}) (Version: 8.0.225.0 - Microsoft)
Microsoft Office 2003 Web Components (HKLM\...\{90A40407-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8003.0 - Microsoft Corporation)
Microsoft Office 2007 Primary Interop Assemblies (HKLM\...\{50120000-1105-0000-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Groove MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2007 (HKLM\...\HOMESTUDENTR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Home and Student 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Language Pack 2007 - German/Deutsch (HKLM\...\OMUI.de-de) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (HKLM\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office O MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) (Version:  - Microsoft) Hidden
Microsoft Office SharePoint Designer MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Small Business Connectivity Components (HKLM\...\{A939D341-5A04-4E0A-BB55-3E65B386432D}) (Version: 2.0.7024.0 - Microsoft Corporation)
Microsoft Office Suite Activation Assistant (HKLM\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office X MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{7FB12670-0F93-4E1E-B2F5-4F339199A03A}) (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{849A32C3-E75A-4791-9B11-E568BA3525A4}) (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Mozilla Firefox 27.0.1 (x86 en-US) (HKLM\...\Mozilla Firefox 27.0.1 (x86 en-US)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
NC Launcher (GameForge) (HKLM\...\NCLauncher_GameForge) (Version:  - NCsoft)
NCsoft Launcher (HKLM\...\{5F8E2CBB-949D-4175-AC98-5ADE7F6C9697}) (Version: 1.5.19002 - NCsoft)
NTI Backup Now 5 (HKLM\...\InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}) (Version: 5.1.2.627 - NewTech Infosystems)
NTI Backup Now Standard (Version: 5.1.2.627 - NewTech Infosystems) Hidden
NTI Media Maker 8 (HKLM\...\InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC}) (Version: 8.0.12.6619 - NewTech Infosystems)
NTI Media Maker 8 (Version: 8.0.12.6619 - NewTech Infosystems) Hidden
NTI Shadow (HKLM\...\InstallShield_{6F7EA6CA-79F4-44A0-A370-8E82BB16534A}) (Version: 3.7.6.56 - NewTech Infosystems)
NTI Shadow (Version: 3.7.6.56 - NewTech Infosystems) Hidden
NVIDIA PhysX (HKLM\...\{B83FC356-B7C0-441F-8A4D-D71E088E7974}) (Version: 9.09.0428 - NVIDIA Corporation)
O2Micro Flash Memory Card Reader Driver (HKLM\...\{C631FB9D-81D2-4E4E-A688-901AC748322D}) (Version: 3.31.02 - O2Micro)
QuickTime (HKLM\...\{0E64B098-8018-4256-BA23-C316A43AD9B0}) (Version: 7.72.80.56 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5643 - Realtek Semiconductor Corp.)
Skype™ 5.10 (HKLM\...\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}) (Version: 5.10.116 - Skype Technologies S.A.)
SPBA 5.8 (HKLM\...\{ECCD28B2-8798-4D16-8126-625D728294A1}) (Version: 5.8.2.5652 - UPEK Inc.)
SweetIM for Messenger 3.3 (HKLM\...\{795288DC-2652-44A5-99FD-2ECDF3C633BF}) (Version: 3.3.0006 - SweetIM Technologies Ltd.) <==== ATTENTION
SweetIM Toolbar for Internet Explorer 3.9 (HKLM\...\{F93D2591-8201-4692-BD8D-67A0BFAC9C14}) (Version: 3.9.0009 - SweetIM Technologies Ltd.) <==== ATTENTION
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.11.1 - TeamSpeak Systems GmbH)
Trend Micro Internet Security Pro (Version: 17.50 - Trend Micro Inc.) Hidden
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.4035.00 - Microsoft Corporation)
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2473228) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM\...\{3C3901C5-3455-3E0A-A214-0B093A5070A6}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM\...\{0A0CADCF-78DA-33C4-A350-CD51849B9702}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{90120000-0100-0407-0000-0000000FF1CE}_OMUI.de-de_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM\...\{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{EA54F104-79D2-48CC-9ABC-91A63C43D353}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0407-0000-0000000FF1CE}_OMUI.de-de_{BEC163EC-7A83-48A1-BFB6-3BF47CC2F8CF}) (Version:  - Microsoft)
Update für Microsoft Office Outlook 2007 Help (KB963677) (HKLM\...\{90120000-001A-0407-0000-0000000FF1CE}_OMUI.de-de_{F6828576-6F79-470D-AB50-69D1BBADBD30}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0407-0000-0000000FF1CE}_OMUI.de-de_{EA160DA3-E9B5-4D03-A518-21D306665B96}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
Update für Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0407-0000-0000000FF1CE}_OMUI.de-de_{38472199-D7B6-4833-A949-10E4EE6365A1}) (Version:  - Microsoft)
VAFPlayer (HKLM\...\{EBE677C0-CBCB-4EBF-8098-E27E1B5271CF}) (Version: 1.6.8 - Tuguu SL)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VIS (HKLM\...\VIS) (Version:  - ) <==== ATTENTION
VLC media player 1.1.11 (HKLM\...\VLC media player) (Version: 1.1.11 - VideoLAN)
Web Check (HKLM\...\Web Check) (Version:  - )
Welcome Center (HKLM\...\Acer Welcome Center) (Version: 1.00.3005 - Acer Incorporated)
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.0.9700 - Broadcom Corporation)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mail (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (HKLM\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Messenger Companion Core (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live OneCare safety scanner (HKLM\...\Windows Live OneCare safety scanner) (Version:  - Microsoft Corporation)
Windows Live OneCare safety scanner (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM\...\{586509F0-350D-48B5-B763-9CC2F8D96C4C}) (Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
WinZip 14.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BB}) (Version: 14.0.8708 - WinZip Computing, S.L. )
Xvid Video Codec (HKLM\...\Xvid Video Codec 1.3.1) (Version: 1.3.1 - Xvid Team)

==================== Restore Points  =========================

Could not list Restore Points. Check "winmgmt" service or repair WMI.


==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {531542BA-F604-4BE5-AB8C-24F682666B06} - System32\Tasks\Recovery Management\Burn Notification => C:\Program Files\Acer\Acer eRecovery Management\NotificationCenter\Notification.exe [2009-07-09] (Acer)
Task: {65D261F3-18E2-4CCA-99AD-A6F81C3BC27E} - System32\Tasks\{0B89C370-0B2C-4F15-B975-DF8FFB7A4FBE} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {6FBF1C44-0059-4401-884A-B839F62AD6E9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06] (Google Inc.)
Task: {767C88FA-F349-4DBA-9B9F-89822DB4BCBF} - System32\Tasks\{3D7D099C-3E63-4763-BF11-7C20B09F6D9D} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.179.217&amp;LastError=407
Task: {8A56E523-4406-4402-9C69-EF5F6B98377B} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: {A22E3E75-F072-4D29-A9B4-739D9D0A801C} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
Task: {A35D9F46-4D38-4739-B7F5-7273A920124D} - System32\Tasks\EPUpdater => C:\Users\Anwender\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe <==== ATTENTION
Task: {A560FA6E-E98D-4666-87BA-A9E3A315179D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => c:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {BFCCECEB-9F2E-4B58-9CDE-BC0A19F9FCE4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {C66B5E97-8190-4A8A-8202-9455D01A118A} - System32\Tasks\{67A04714-5F19-4077-98F1-4E1BBFE6D752} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=4.1.0.179.217&amp;LastError=407
Task: {D0C4629D-510C-4B90-9BD4-DD1C9131A3E3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06] (Google Inc.)
Task: {DB623519-C776-45DA-8D30-A05DB7A17506} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-26] (Adobe Systems Incorporated)
Task: {DEA93315-68C8-4818-96E3-0EEACD20E4A8} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\system32\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf331a52a5f946.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2008-10-09 15:31 - 2008-10-09 15:31 - 00192512 _____ () C:\Program Files\Common Files\BitDefender\BitDefender Update Service\txmlutil.dll
2013-08-14 10:33 - 2013-07-18 07:02 - 00394824 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2009-09-19 01:09 - 2009-08-12 00:29 - 00024576 _____ () C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
2009-09-19 01:09 - 2009-09-19 01:09 - 00032768 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.Controller\3.0.3016.0__14bcaafdb44b5951\Framework.Model.Controller.dll
2009-09-19 01:09 - 2009-09-19 01:09 - 00020480 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Model.ControllerInterface\3.0.3016.0__d842b71b4d6ed079\Framework.Model.ControllerInterface.dll
2009-09-19 01:09 - 2009-09-19 01:09 - 00061440 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Library\3.0.3016.0__3036420f80dd6947\Framework.Library.dll
2009-09-19 01:09 - 2009-09-19 01:09 - 00028672 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Host\3.0.3016.0__672b450de5a7e94a\Framework.Host.dll
2009-09-19 01:09 - 2009-09-19 01:09 - 00016384 _____ () C:\Windows\assembly\GAC_MSIL\Framework.PluginInterface\3.0.3016.0__9ecdf03bb2054f94\Framework.PluginInterface.dll
2008-10-09 15:31 - 2008-10-09 15:31 - 00192512 _____ () C:\Windows\system32\txmlutil.dll
2009-03-27 13:07 - 2009-03-27 13:07 - 00009728 _____ () C:\Program Files\BitDefender\BitDefender 2009\DEU\bdshelxt.ui
2010-04-09 14:24 - 2010-03-15 10:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2009-11-07 07:05 - 2008-07-29 19:29 - 00200704 _____ () C:\Windows\PLFSetI.exe
2009-09-19 01:09 - 2009-09-19 01:09 - 00036864 _____ () C:\Windows\assembly\GAC_MSIL\Framework.Utility\3.0.3016.0__4df5dcab8860d239\Framework.Utility.dll
2013-04-26 15:35 - 2014-02-26 22:49 - 00013600 _____ () C:\Users\Anwender\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll
2011-07-12 12:09 - 2011-07-12 12:09 - 00442368 _____ () C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
2011-07-12 12:09 - 2011-07-12 12:09 - 00241664 _____ () C:\Program Files\BitDefender\BitDefender 2009\DEU\seccenter.ui
2009-02-23 10:30 - 2009-02-23 10:30 - 00126976 _____ () C:\Program Files\BitDefender\BitDefender 2009\hmcore.dll
2009-02-23 09:44 - 2009-02-23 09:44 - 00045056 _____ () C:\Program Files\BitDefender\BitDefender 2009\actxcont.dll
2011-03-14 13:21 - 2011-03-14 13:21 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2011-05-24 22:50 - 2011-05-24 22:50 - 00243712 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2014-02-15 15:39 - 2014-02-13 01:36 - 03578992 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acer VCM.lnk => C:\Windows\pss\Acer VCM.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Anwender^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: ICQ => ~"C:\Program Files\ICQ7.2\ICQ.exe" silent loginmode=4
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: MobileConnect => %programfiles%\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe /silent
MSCONFIG\startupreg: msnmsgr => ~"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: NCsoft Launcher => C:\Program Files\NCSoft\Launcher\NCLauncher.exe /Minimized
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVCpl => RtHDVCpl.exe
MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: uTorrent => "C:\Program Files\uTorrent\uTorrent.exe"

==================== Faulty Device Manager Devices =============

Could not list Devices. Check "winmgmt" service or repair WMI.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/26/2014 11:13:52 PM) (Source: MsiInstaller) (User: Anwender-PC)
Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (02/26/2014 11:01:41 PM) (Source: MsiInstaller) (User: Anwender-PC)
Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (02/26/2014 10:17:04 PM) (Source: MsiInstaller) (User: Anwender-PC)
Description: Producto: VAFPlayer -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files\Tuguu SL\VAFPlayer\VAFPlayer.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (02/26/2014 10:06:43 PM) (Source: MsiInstaller) (User: Anwender-PC)
Description: Producto: VAFPlayer -- Error 1706. No se encuentra ningún paquete de instalación para el producto VAFPlayer. Vuelva a intentar la instalación usando una copia válida del paquete de instalación 'Installer.msi'.

Error: (02/26/2014 10:06:35 PM) (Source: MsiInstaller) (User: Anwender-PC)
Description: Producto: VAFPlayer -- Error 1706. No se encuentra ningún paquete de instalación para el producto VAFPlayer. Vuelva a intentar la instalación usando una copia válida del paquete de instalación 'Installer.msi'.

Error: (02/26/2014 09:44:28 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue

Error: (02/26/2014 08:44:19 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: PCSUQuickScan.exe, Version: 0.0.0.0, Zeitstempel: 0x529f1e2b
Name des fehlerhaften Moduls: PCSUQuickScan.exe, Version: 0.0.0.0, Zeitstempel: 0x529f1e2b
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000067a0
ID des fehlerhaften Prozesses: 0x14c4
Startzeit der fehlerhaften Anwendung: 0xPCSUQuickScan.exe0
Pfad der fehlerhaften Anwendung: PCSUQuickScan.exe1
Pfad des fehlerhaften Moduls: PCSUQuickScan.exe2
Berichtskennung: PCSUQuickScan.exe3

Error: (02/26/2014 08:32:05 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue

Error: (02/26/2014 08:29:04 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue

Error: (02/26/2014 08:27:30 PM) (Source: VMCService) (User: )
Description: conflictManagerTypeValue


System errors:
=============
Error: (02/26/2014 10:48:37 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
bdftdif
ntiomin
tmlwf
tmtdi

Error: (02/26/2014 10:48:37 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SQL Server VSS Writer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (02/26/2014 10:48:00 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Trend Micro WFP Callout Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/26/2014 10:47:59 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Trend Micro Central Control Component" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/26/2014 10:47:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BrowserProtect" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/26/2014 10:47:53 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "tmcomm" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (02/26/2014 10:47:29 PM) (Source: Application Popup) (User: )
Description: Treiber bdftdif.sys konnte nicht geladen werden.

Error: (02/26/2014 10:46:39 PM) (Source: DCOM) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (02/26/2014 09:45:02 PM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
bdftdif
ntiomin
tcpipBM
tmlwf
tmtdi

Error: (02/26/2014 09:45:02 PM) (Source: Service Control Manager) (User: )
Description: Dienst "SQL Server VSS Writer" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office Sessions:
=========================
Error: (07/23/2012 04:43:35 PM) (Source: Microsoft Office 12 Sessions)(User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 49%
Total physical RAM: 3066.95 MB
Available physical RAM: 1533.5 MB
Total Pagefile: 6132.2 MB
Available Pagefile: 4096.75 MB
Total Virtual: 2047.88 MB
Available Virtual: 1901.16 MB

==================== Drives ================================

Drive c: (ACER) (Fixed) (Total:453.94 GB) (Free:177.99 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Vodafone EasyBox 803) (CDROM) (Total:0.02 GB) (Free:0 GB) UDF
Drive f: (Sims3) (CDROM) (Total:5.56 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 466 GB) (Disk ID: 53735373)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=454 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
Bezüglich der Pop-ups habe ich im Internet nachgeguckt und bin auf eine Anleitung gestoßen welche dieses erscheinen beheben soll.
hxxp://nurpaste.de/static_icmapp_com_entfernen

Ich weiss nicht ob das mit dem VAFPlayer zusammenhängt oder n ganz anderes Problem ist. (denke nicht, da die pop-ups recht neu auftreten und der Player schon länger da zu sein scheint)
Ich dachte ich poste es trotzdem mal...vielleicht könnt ihr zusammenhänge erkennen.
(ich werde natürlich ohne eine Aufforderung von euch, diese Anleitung nicht durchführen)
Danke Lilly
__________________

Geändert von Lillly (27.02.2014 um 11:02 Uhr)

Alt 28.02.2014, 07:54   #4
schrauber
/// the machine
/// TB-Ausbilder
 

VAF Player lässt sich nicht deinstallieren - Standard

VAF Player lässt sich nicht deinstallieren



Bitte keinen anderen Anleitungen folgen

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu VAF Player lässt sich nicht deinstallieren
deinstallation, pop-ups, problem, programm, vaf player, werbung



Ähnliche Themen: VAF Player lässt sich nicht deinstallieren


  1. Spiel lässt sich nicht deinstallieren.
    Alles rund um Windows - 02.10.2015 (2)
  2. Treiber lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 10.02.2015 (17)
  3. Spyhunter 4 lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 09.02.2015 (16)
  4. snapdo lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 30.09.2014 (3)
  5. Skype lässt sich nicht deinstallieren.
    Plagegeister aller Art und deren Bekämpfung - 14.08.2014 (5)
  6. Savingsbull lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 07.04.2014 (1)
  7. RegClean Pro lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 09.02.2014 (8)
  8. yontoo 2.052 lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 07.02.2014 (5)
  9. Lookinglink lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 05.02.2014 (11)
  10. Spyhunter lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 06.12.2013 (7)
  11. Iminent lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 07.11.2013 (11)
  12. HDvid Codec V1 eingefangen, lässt sich nicht deinstallieren, Rechner hängt sich bei Beutzerwechsel auf
    Log-Analyse und Auswertung - 28.09.2013 (15)
  13. VAF Player lässt sich nicht deinstallieren!
    Log-Analyse und Auswertung - 07.09.2013 (19)
  14. AntiVir lässt sich nicht deinstallieren
    Antiviren-, Firewall- und andere Schutzprogramme - 28.07.2011 (3)
  15. AVG lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 24.05.2011 (3)
  16. Antivir lässt sich nicht deinstallieren
    Antiviren-, Firewall- und andere Schutzprogramme - 22.02.2009 (7)
  17. AntiVir lässt sich nicht deinstallieren!
    Antiviren-, Firewall- und andere Schutzprogramme - 09.02.2006 (11)

Zum Thema VAF Player lässt sich nicht deinstallieren - Hallo Da in lezter Zeit leider öfter Pop-Ups wie (Casinoseiten/ Werbung usw.) beim surfen auftauchen, habe ich mal im PC rumgestöbert. Zwar sagt mir Avira das ich frei von allem - VAF Player lässt sich nicht deinstallieren...
Archiv
Du betrachtest: VAF Player lässt sich nicht deinstallieren auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.