Hallo,

Ich habe folgendes Problem:
Seit dem ich den AddBlocker ausgestellt habe, ist mir aufgefallen, dass Wörter blaue, doppelt unterstrichene Werbeverlinkungen aufzeigen. Desweiteren kam es ab und zu vor, dass, wenn ich herkömmliche Links öffnete, neben der Quelle des Links auch noch ungefragt ein anderer Tab geöffnet wurde, wo ich gebeten wurde doch den Videoplayer XY zu installieren, was ich natürlich nicht getan habe. Zwischenzeitlich installierte Google Chrome auch noch ungefragt Adons.
Leider habe ich schon den Fehler begangen, als absoluter Anfänger, was Viren und Maleware angeht auf, auf eigene Faust vorzugehen; mit bedingtem Erfolg: Das heißt: die Anfragen Werbeplayer Xy zu installieren sind weg, Google Chrome scheint auch keine Adons mehr zu installieren.
Ich habe mir ähnliche Fälle in diesem Forum und ähnlichen Foren angesehen und bin deshalb wie folgt vorgegangen:
Ich habe Google Chrome de- und reinstalliert.
Ich habe mir avast! Free Antivirus runtergeladen und mehrmals einen Scann durchgeführt.
Leider fand ich bei Avast nur die Fehlermeldungen, aber nicht die Logs. Da das Programm die Fehler sowieso nicht behoben hatte, habe ich auf Junkware Removal Tool zurückgegriffen.
Das war sehr viel einfacher zu bedienen und brachte folgende Ergebnisse:

JRT Logfile:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x86
Ran by Christoph on 28.02.2014 at 16:44:17,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\protector_dll.protectorbho.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\browserconnection.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\dnsbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\genericasktoolbar.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\iminent.webbooster.internetexplorer.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbcommonutils.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\tbhelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\1clickdownload
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\anchorfree
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\cr_installer
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminent
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\yahoopartnertoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\lyricscontainer
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\pricegong
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\searchqutoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\searchqumediabartb
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\browserconnection.loader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\browserconnection.loader.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\comobject.deskbarenabler.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\conduit.engine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnsbho.bho
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\dnsbho.bho.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\genericasktoolbar.toolbarwnd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.business.tinyfying.downloadargs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.business.tinyfying.linktopromoteargs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.business.tinyfying.rawdataargs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.business.tinyfying.tinyurlargs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.business.tinyfying.virallinkargs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.clientcallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.contractbase
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.addtousercontentcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.checkloginstatuscommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.cleancachecommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.gameovercallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getcreditcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getinstallationcontextcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getloginstatuscommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getloginstatusresult
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getvariablecommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.getvariableresult
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.installationcontextresult
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.loadcontentcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.loadcontentcommandresult
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.logincommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.loginstatuschangedcallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.logoutcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.mergeidentitycommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.myaccountcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.playcontentcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.postcontentcallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.recycleviewscommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.setvariablecommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.showbrowserwindowcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.showcontrolcentercommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.showpluginwindowcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.usercontentchangedcallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.variablechangedcallback
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.warmupcommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.datacontracts.welcomecommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.servercommand
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.communication.serverresult
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.lightcontent
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.lighturi
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminent.mediator.mediatorserviceproxy
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.activecontenthandle.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.activecontenthandler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.browserhelperobject
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.browserhelperobject.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.scriptextender
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.scriptextender.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.tinyurlhandler
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\iminentwebbooster.tinyurlhandler.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\430e8db44f0e90547a3564a7e858c48d
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\features\482aa67ad25e6e74e9f48bd5fbe8533c
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\430e8db44f0e90547a3564a7e858c48d
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\products\482aa67ad25e6e74e9f48bd5fbe8533c
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\searchquiehelper.dnsguard.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbcommonutils.commonutils.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbdownloadmanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbpropertymanager.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbrequest.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.tbtask.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\tbhelper.toolbarhelper.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.contextmenunotifier.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\toolbar3.custominternetsecurityimpl.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\urlsearchhook.toolbarurlsearchhook.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\appshat-distribution_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\appshat-distribution_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\babylon_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\conduitinstaller_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\datamngrui_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\datamngrui_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\iminent_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optprostart_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\optprostart_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\searchqumediabar_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\searchqumediabar_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\setupdatamngr_searchqu_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\setupdatamngr_searchqu_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\snapdo_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\snapdo_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\vid-saver_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\vid-saver_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wajam_install_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\wajam_install_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitengine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\regclean pro_is1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\searchthewebarp
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\specialsavings
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\windows searchqu toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4bd8e034-e0f4-4509-a753-467a8e854cd8}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{a76aa284-e52d-47e6-9e4f-b85dbf8e35c3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB01620.IEToolbar
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB01620.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB01620.TBSB01620
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TBSB01620.TBSB01620.3
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar3.TBSB01620
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Toolbar3.TBSB01620.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB01620.IEToolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB01620.IEToolbar.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB01620.TBSB01620
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TBSB01620.TBSB01620.3
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.TBSB01620
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar3.TBSB01620.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2269050
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2801937
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT2849855
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011341191}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011341191}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbar_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbar_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_fl-studio_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_fl-studio_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_aktiv-mp3-recorder_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_aktiv-mp3-recorder_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_arasan_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_arasan_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_audiosurf_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_audiosurf_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_cuttermaran_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_cuttermaran_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_free-screen-to-video_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_free-screen-to-video_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_free-youtube-to-mp3-converter_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_free-youtube-to-mp3-converter_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_librecad_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_librecad_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_readiris_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_readiris_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_stockfish_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_stockfish_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_ulead-videostudio_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_ulead-videostudio_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_vuescan_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_vuescan_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-movie-maker_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_windows-live-movie-maker_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_windows-movie-maker_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_fuer_windows-movie-maker_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{58124A0B-DC32-4180-9BFF-E0E21AE34026}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B106B661-3E1B-4015-AF5C-195E909F35C6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10AD2C61-0898-4348-8600-14A342F22AC3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{10AD2C61-0898-4348-8600-14A342F22AC3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{99079a25-328f-4bd4-be04-00955acaa0a7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079a25-328f-4bd4-be04-00955acaa0a7}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4f12-8568-69135F087DB0}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{9D717F81-9148-4f12-8568-69135F087DB0}



~~~ Files

Successfully deleted: [File] "C:\Windows\system32\roboot.exe"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\ibupdaterservice"
Successfully deleted: [Folder] "C:\ProgramData\iminent"
Successfully deleted: [Folder] "C:\Users\Christoph\AppData\Roaming\dvdvideosoftiehelpers"
Successfully deleted: [Folder] "C:\Users\Christoph\AppData\Roaming\iminent"
Successfully deleted: [Folder] "C:\Users\Christoph\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\local\apn"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\boost_interprocess"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\conduitengine"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\datamngr"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\searchquband"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\searchqutoolbar"
Successfully deleted: [Folder] "C:\Users\Christoph\appdata\locallow\toolbar4"
Successfully deleted: [Folder] "C:\Program Files\chatzum toolbar"
Successfully deleted: [Folder] "C:\Program Files\icq6toolbar"
Successfully deleted: [Folder] "C:\Program Files\iminent"
Successfully deleted: [Folder] "C:\Program Files\iminent toolbar"
Successfully deleted: [Folder] "C:\Program Files\pricegong"
Successfully deleted: [Folder] "C:\Program Files\specialsavings"
Successfully deleted: [Folder] "C:\Program Files\torntv.com"
Successfully deleted: [Folder] "C:\Program Files\windows searchqu toolbar"
Successfully deleted: [Folder] "C:\Users\Christoph\AppData\Roaming\microsoft\windows\start menu\programs\torntv.com"
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{0F1917EE-980D-47CB-9BF8-7502B2FA5CD2}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{0F46F162-025E-439B-AC28-6EF504A6B1A5}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{101254AE-C6E1-4285-98C8-684503DDAA3F}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{176F8E0A-DB71-4BCB-BE3E-74F73F18C96D}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{1AB89EA9-5090-44DD-85E2-FBEDA8F3BD96}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{22B344AA-717A-4714-BF2B-6BFCA9B9FCCC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{23378667-5945-4FCC-9278-3935318E3B19}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{24279979-F4E3-463B-BE3A-57D0D0E0EEF7}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{268A0A27-50A7-4A9B-A272-DEF64B719219}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{28F07E07-3497-404C-A3EF-B216AF89C120}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{2A37C52B-71E1-4FCB-88DF-F673E9D733B0}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{2A60648C-20B8-4D0E-8606-810298038C62}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{2AFE0CC4-D1A9-4BCE-887F-4BABF16229FC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{36B0CA6A-9A76-444D-9A50-71B35BAA4FE0}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{372037F9-7F6F-46D8-A434-1393AAA51625}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{372FC8E7-B460-498B-A566-AA116491B368}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{3E1A14A9-5A1A-4FC8-89CB-DF4ECBD749CF}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{3EC4C5F6-E72E-4144-9017-EC632EED5693}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{4C4225F0-1529-417C-88DC-00CAECDFC3F6}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{577BF816-DF14-4B04-804C-49627D611CCE}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{59399D1C-4E2C-4C04-94C3-99D117B8A538}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{60505D11-3176-49F4-95F2-DF1764F596BD}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{612CE7FB-970D-400C-B456-9D64C1EE25A7}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{614F9212-7B9A-4673-956E-FE1C65AD9A08}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{65A96A6B-4695-47CC-8EF3-FCB8D048DA9A}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{757FC34A-AA75-439C-8F8D-B921E7BDE443}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{7CC28752-7527-4731-8441-B34D376E31DB}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{7DD399E1-F9C2-4531-A813-04CDDBFB87DC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{7E58710C-EAFA-45A1-A6BA-CB56EA2D7CCA}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{7FF48FA9-F146-4464-AF44-5C80FE63F265}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{8D3E5B4B-2FB8-4B3A-A237-14B90E2573E0}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{950BC259-1355-4BE1-A3DB-B1EBD0BF31F6}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{A5950224-8040-4804-9FE0-8012EDF77E1D}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{A7DB275B-9A4A-4151-8799-DFE071FEB5BF}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{AAA1ADC8-48DD-4DAC-B421-2A968D48715F}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{ABFDCDCE-1402-4142-A7B4-30661A32B237}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{AFB5B21F-7E71-4032-805B-9B62EE240916}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{B507636D-D0D9-4250-84CD-C0400A1E37F5}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{B63B0500-0769-4198-9404-09818A798512}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{B9A2B513-8A1B-44C0-B40E-9DE0C27DBF92}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{BAAEA0ED-A3A9-4955-8529-A20C82B310E4}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{BAEFB38E-9B94-480D-A9B7-718E77580C88}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{BC1BDD65-3E21-47FE-8968-6A678C9220CC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{C1FA16A4-0BA4-4E34-BED9-6CFCE8DB643F}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{C6EE8DA6-3FCD-42D6-8B68-B3ED7B0876D7}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{C88185A7-E6DC-4B22-AB61-782EEF4F374B}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{CC3E8F7F-3F38-4AB5-ABE5-2D62E67849AC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{CD115982-3EFF-47F7-A4C3-0C4AA79940E5}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{CF28AFB6-B5FB-445F-B501-88562C4A4D5D}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{D1BA7459-D0AA-4F39-AD77-69ECD8D4C361}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{D808DA75-528F-4327-B98F-D80F199DCDB9}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{D90068CA-BD76-4624-9E30-40A2B7A8E228}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{D97AB0FB-C79D-499E-B929-FB2546A5BAFE}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{D9E1685D-7530-4B41-89FA-142EB5AB35D0}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{E1A4FF8C-3329-47E8-A49B-9A777300E9C8}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{E2E4B8FC-7E41-46B8-8354-C93B7EA6A9CE}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{E564BAAB-D441-4E55-B3DB-202131301F10}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{EB721075-507C-4A3B-8844-2BE48C2AF3F2}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F51F4AD7-82AF-42D1-BE2F-1C4F9F31D19F}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F5852020-2161-4679-9596-63DE603A5ADF}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F5CC4E9E-6D92-41C9-9822-D0804ED46DD0}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F73F625E-0F67-4070-A887-D072A059AFEC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F76174B1-6335-4945-95BA-ED31D18D6A52}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F7796298-DD6B-4424-AE22-25E999EA78DD}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F78A46B2-2E86-4C80-AE2A-1544F9AFCFAC}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F7DFCDC6-E9BA-44CA-95F8-E5B49EB99175}
Successfully deleted: [Empty Folder] C:\Users\Christoph\appdata\local\{F911864C-0FA8-4BF0-8017-009DE550078C}



~~~ FireFox

Successfully deleted: [File] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\user.js
Successfully deleted: [File] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\searchplugins\searchtheweb.xml
Failed to delete: [Folder] "C:\Program Files\Mozilla Firefox\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}"
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\conduitcommon
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\searchqutoolbar
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\smartbar
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\extensions\specialsavings@superfish.com
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\extensions\staged
Successfully deleted: [Folder] C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\ocr@babylon.com
Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions\\specialsavings@superfish.com
Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions\\{acaa314b-eeba-48e4-ad47-84e31c44796c}
Successfully deleted the following from C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\prefs.js

user_pref("CT2269050..clientLogIsEnabled", false);
user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
user_pref("CT2269050.BrowserCompStateIsOpen_129853623028165512", true);
user_pref("CT2269050.BrowserCompStateIsOpen_129881141106886992", true);
user_pref("CT2269050.BrowserCompStateIsOpen_129977890572899945", true);
user_pref("CT2269050.BrowserCompStateIsOpen_130100683276316706", true);
user_pref("CT2269050.BrowserCompStateIsOpen_1359634297000", true);
user_pref("CT2269050.CT2269050.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=SB_CUI&S
user_pref("CT2269050.CTID", "CT2269050");
user_pref("CT2269050.CommunitiesChangesLastCheckTime", "0");
user_pref("CT2269050.ConfigurationLastCheckTime", "Sat Nov 16 2013 16:10:04 GMT+0100");
user_pref("CT2269050.CurrentServerDate", "16-11-2013");
user_pref("CT2269050.DialogsAlignMode", "LTR");
user_pref("CT2269050.DialogsGetterLastCheckTime", "Sat Nov 16 2013 16:10:06 GMT+0100");
user_pref("CT2269050.DownloadReferralCookieData", "");
user_pref("CT2269050.EMailNotifierPollDate", "Sun Jan 09 2011 19:50:23 GMT+0100");
user_pref("CT2269050.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":false}");
user_pref("CT2269050.EnableClickToSearchBox", false);
user_pref("CT2269050.EnableSearchHistory", false);
user_pref("CT2269050.EnableSearchSuggest", false);
user_pref("CT2269050.FirstServerDate", "17-12-2010");
user_pref("CT2269050.FirstTime", true);
user_pref("CT2269050.FirstTimeFF3", true);
user_pref("CT2269050.FirstTimeSettingsDone", true);
user_pref("CT2269050.FixPageNotFoundErrors", true);
user_pref("CT2269050.GroupingInvalidateCache", false);
user_pref("CT2269050.GroupingLastCheckTime", "0");
user_pref("CT2269050.GroupingLastServerUpdateTime", "0");
user_pref("CT2269050.GroupingServerCheckInterval", 1440);
user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2269050.HasUserGlobalKeys", true);
user_pref("CT2269050.Initialize", true);
user_pref("CT2269050.InitializeCommonPrefs", true);
user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
user_pref("CT2269050.InstallationType", "UnknownIntegration");
user_pref("CT2269050.InstalledDate", "Fri Dec 17 2010 17:19:10 GMT+0100");
user_pref("CT2269050.InvalidateCache", false);
user_pref("CT2269050.IsGrouping", false);
user_pref("CT2269050.IsMulticommunity", false);
user_pref("CT2269050.IsOpenThankYouPage", false);
user_pref("CT2269050.IsOpenUninstallPage", false);
user_pref("CT2269050.LanguagePackLastCheckTime", "Sat Nov 16 2013 16:10:06 GMT+0100");
user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2269050.LastLogin_2.7.0.14", "Sun Dec 26 2010 15:07:10 GMT+0100");
user_pref("CT2269050.LastLogin_2.7.2.0", "Fri Jan 07 2011 06:30:48 GMT+0100");
user_pref("CT2269050.LastLogin_3.12.0.7", "Thu Apr 26 2012 00:13:23 GMT+0200");
user_pref("CT2269050.LastLogin_3.12.2.3", "Wed May 30 2012 23:46:10 GMT+0200");
user_pref("CT2269050.LastLogin_3.13.0.6", "Wed Jun 27 2012 20:14:56 GMT+0200");
user_pref("CT2269050.LastLogin_3.14.1.0", "Wed Aug 22 2012 11:15:17 GMT+0200");
user_pref("CT2269050.LastLogin_3.15.1.0", "Tue Nov 13 2012 08:26:07 GMT+0100");
user_pref("CT2269050.LastLogin_3.16.0.100", "Sun Mar 17 2013 15:05:37 GMT+0100");
user_pref("CT2269050.LastLogin_3.16.0.3", "Tue Jan 01 2013 18:07:31 GMT+0100");
user_pref("CT2269050.LastLogin_3.18.0.7", "Thu Aug 08 2013 13:46:16 GMT+0200");
user_pref("CT2269050.LastLogin_3.19.0.3", "Thu Sep 12 2013 23:24:44 GMT+0200");
user_pref("CT2269050.LastLogin_3.2.5.2", "Wed Jan 19 2011 17:59:54 GMT+0100");
user_pref("CT2269050.LastLogin_3.20.0.4", "Sat Nov 16 2013 16:10:04 GMT+0100");
user_pref("CT2269050.LatestVersion", "3.20.0.4");
user_pref("CT2269050.Locale", "en");
user_pref("CT2269050.LoginCache", 4);
user_pref("CT2269050.MCDetectTooltipHeight", "83");
user_pref("CT2269050.MCDetectTooltipShow", false);
user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2269050.MCDetectTooltipWidth", "295");
user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
user_pref("CT2269050.RadioIsPodcast", false);
user_pref("CT2269050.RadioLastCheckTime", "Sun Jan 09 2011 14:25:02 GMT+0100");
user_pref("CT2269050.RadioLastUpdateIPServer", "3");
user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
user_pref("CT2269050.RadioMediaID", "12473383");
user_pref("CT2269050.RadioMediaType", "Media Player");
user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
user_pref("CT2269050.RadioStationName", "Hotmix%20108");
user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
user_pref("CT2269050.SHRINK_TOOLBAR", 1);
user_pref("CT2269050.SavedHomepage", "resource:/browserconfig.properties");
user_pref("CT2269050.SearchAPILastCheckTime", "Sat Nov 16 2013 16:10:04 GMT+0100");
user_pref("CT2269050.SearchBackToDefaultEngine", false);
user_pref("CT2269050.SearchBoxWidth", 361);
user_pref("CT2269050.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=CT2269050&octid=EB_ORIGINAL_CTID&SearchSource=1");
user_pref("CT2269050.SearchFromAddressBarIsInit", true);
user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=");
user_pref("CT2269050.SearchInNewTabEnabled", true);
user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
user_pref("CT2269050.SearchInNewTabLastCheckTime", "Thu Sep 12 2013 02:45:25 GMT+0200");
user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
user_pref("CT2269050.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2269050.SearchInNewTabUserEnabled", true);
user_pref("CT2269050.ServiceMapLastCheckTime", "Sat Nov 16 2013 16:10:03 GMT+0100");
user_pref("CT2269050.SettingsCheckIntervalMin", 120);
user_pref("CT2269050.SettingsLastCheckTime", "Sat Nov 16 2013 16:10:00 GMT+0100");
user_pref("CT2269050.SettingsLastUpdate", "1384592270");
user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Fri Jan 07 2011 19:22:19 GMT+0100");
user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246790578");
user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT2269050.UserID", "UN80869437140451570");
user_pref("CT2269050.ValidationData_Search", 2);
user_pref("CT2269050.ValidationData_Toolbar", 2);
user_pref("CT2269050.WeatherNetwork", "");
user_pref("CT2269050.WeatherPollDate", "Sun Jan 09 2011 19:35:24 GMT+0100");
user_pref("CT2269050.WeatherUnit", "C");
user_pref("CT2269050.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT2269050.alertChannelId", "666138");
user_pref("CT2269050.backendstorage.facebook_mode", "32");
user_pref("CT2269050.backendstorage.facebook_user_locale", "6465");
user_pref("CT2269050.backendstorage.youtubelang", "4445");
user_pref("CT2269050.clientLogIsEnabled", false);
user_pref("CT2269050.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2269050.components.1000034", false);
user_pref("CT2269050.components.1000080", false);
user_pref("CT2269050.components.1000082", false);
user_pref("CT2269050.components.1000234", false);
user_pref("CT2269050.components.1195972076538955800", false);
user_pref("CT2269050.components.129023235807856892", false);
user_pref("CT2269050.components.129121052374999726", false);
user_pref("CT2269050.components.129351672002618989", false);
user_pref("CT2269050.countryCode", "DE");
user_pref("CT2269050.enableAlerts", "never");
user_pref("CT2269050.facebook_mode.from_oldbar.enc", "Mg==");
user_pref("CT2269050.facebook_user_locale.from_oldbar.enc", "ZGU=");
user_pref("CT2269050.firstTimeDialogOpened", true);
user_pref("CT2269050.fixPageNotFoundErrorByUser", "TRUE");
user_pref("CT2269050.fixPageNotFoundErrorInHidden", "true");
user_pref("CT2269050.fullUserID", "UN80869437140451570.UP.2049071453");
user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT2269050.homepageProtectorEnableByLogin", true);
user_pref("CT2269050.initDone", true);
user_pref("CT2269050.installType", "DirectDownload");
user_pref("CT2269050.isCheckedStartAsHidden", true);
user_pref("CT2269050.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.isFirstTimeToolbarLoading", "false");
user_pref("CT2269050.isPerformedSmartBarTransition", "true");
user_pref("CT2269050.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2269050.keyword", true);
user_pref("CT2269050.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2269050&octid=CT2269050&SearchSource=15&CUI=UN8086943714045157
user_pref("CT2269050.lastVersion", "10.22.5.510");
user_pref("CT2269050.myStuffEnabled", true);
user_pref("CT2269050.myStuffPublihserMinWidth", 400);
user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2269050.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fsearch.iminent.com%2FSearchTheWeb%2Fv6%2F1031%2Fhomepage%2FDefault.
user_pref("CT2269050.originalHomepage", "hxxp://search.iminent.com/?appId=e40d8b7f-58fd-4e71-a5f8-28d904149063&lcid=1031&ref=homepage");
user_pref("CT2269050.originalSearchAddressUrl", "chrome://browser-region/locale/region.properties");
user_pref("CT2269050.originalSearchEngine", "Google");
user_pref("CT2269050.revertSettingsEnabled", true);
user_pref("CT2269050.search.searchCount", 2);
user_pref("CT2269050.searchFromAddressBarEnabledByUser", "false");
user_pref("CT2269050.searchInNewTabEnabledByUser", "true");
user_pref("CT2269050.searchInNewTabEnabledInHidden", "true");
user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
user_pref("CT2269050.searchProtectorEnableByLogin", true);
user_pref("CT2269050.searchSuggestEnabledByUser", "false");
user_pref("CT2269050.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2269050.selectToSearchBoxEnabledByUser", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT2269050.sendUsageEnabled", "false");
user_pref("CT2269050.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT2269050.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2269050\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTB.OurToolbar.com//xpi\"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB \"}");
user_pref("CT2269050.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT2269050.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT2269050.serviceLayer_services_Configuration_lastUpdate", "1393594871152");
user_pref("CT2269050.serviceLayer_services_login_10.20.101.5_lastUpdate", "1385791374437");
user_pref("CT2269050.serviceLayer_services_login_10.22.5.510_lastUpdate", "1393594865364");
user_pref("CT2269050.serviceLayer_services_searchAPI_lastUpdate", "1393594869549");
user_pref("CT2269050.serviceLayer_services_serviceMap_lastUpdate", "1393594867765");
user_pref("CT2269050.serviceLayer_services_toolbarSettings_lastUpdate", "1393594865587");
user_pref("CT2269050.serviceLayer_services_translation_lastUpdate", "1393594865558");
user_pref("CT2269050.settingsINI", true);
user_pref("CT2269050.showToolbarPermission", "false");
user_pref("CT2269050.smartbar.CTID", "CT2269050");
user_pref("CT2269050.smartbar.Uninstall", "0");
user_pref("CT2269050.smartbar.toolbarName", "DVDVideoSoftTB ");
user_pref("CT2269050.testingCtid", "");
user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Sat Nov 16 2013 16:10:06 GMT+0100");
user_pref("CT2269050.toolbarBornServerTime", "17-12-2010");
user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Fri Jan 07 2011 06:31:23 GMT+0100");
user_pref("CT2269050.toolbarCurrentServerTime", "28-2-2014");
user_pref("CT2269050.toolbarLoginClientTime", "Mon Nov 25 2013 07:15:03 GMT+0100");
user_pref("CT2269050.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2269050.upgradeFromOBVersion", true);
user_pref("CT2269050.usageEnabled", false);
user_pref("CT2269050.usagesFlag", 2);
user_pref("CT2269050.youtubelang.from_oldbar.enc", "REU=");
user_pref("CT2269050_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1393595911794,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("CT2849855..clientLogIsEnabled", true);
user_pref("CT2849855..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
user_pref("CT2849855..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
user_pref("CT2849855.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
user_pref("CT2849855.CT2849855", "CT2849855");
user_pref("CT2849855.CurrentServerDate", "13-9-2011");
user_pref("CT2849855.DialogsAlignMode", "LTR");
user_pref("CT2849855.DialogsGetterLastCheckTime", "Wed Sep 14 2011 14:43:57 GMT+0200");
user_pref("CT2849855.DownloadReferralCookieData", "");
user_pref("CT2849855.EMailNotifierPollDate", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.FeedLastCount129349796701375473", 497);
user_pref("CT2849855.FeedPollDate129313974171006416", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.FeedPollDate129313975698350231", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.FeedPollDate129313976370850190", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.FeedPollDate129313976648818968", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.FeedPollDate129313977444757117", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313980389131455", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313980655381977", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313980886163259", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313981234756535", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313983226631720", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedPollDate129313983607725691", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.FeedTTL129313974171006416", 10);
user_pref("CT2849855.FeedTTL129313977444757117", 15);
user_pref("CT2849855.FeedTTL129313980655381977", 5);
user_pref("CT2849855.FeedTTL129313981234756535", 5);
user_pref("CT2849855.FirstServerDate", "5-9-2011");
user_pref("CT2849855.FirstTime", true);
user_pref("CT2849855.FirstTimeFF3", true);
user_pref("CT2849855.FixPageNotFoundErrors", false);
user_pref("CT2849855.GroupingServerCheckInterval", 1440);
user_pref("CT2849855.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
user_pref("CT2849855.HasUserGlobalKeys", true);
user_pref("CT2849855.HomePageProtectorEnabled", false);
user_pref("CT2849855.Initialize", true);
user_pref("CT2849855.InitializeCommonPrefs", true);
user_pref("CT2849855.InstallationAndCookieDataSentCount", 3);
user_pref("CT2849855.InstallationType", "Unknown");
user_pref("CT2849855.InstalledDate", "Mon Sep 05 2011 09:47:55 GMT+0200");
user_pref("CT2849855.IsAlertDBUpdated", true);
user_pref("CT2849855.IsGrouping", false);
user_pref("CT2849855.IsInitSetupIni", true);
user_pref("CT2849855.IsMulticommunity", false);
user_pref("CT2849855.IsOpenThankYouPage", true);
user_pref("CT2849855.IsOpenUninstallPage", true);
user_pref("CT2849855.IsProtectorsInit", true);
user_pref("CT2849855.LanguagePackLastCheckTime", "Tue Sep 13 2011 18:36:54 GMT+0200");
user_pref("CT2849855.LanguagePackReloadIntervalMM", 1440);
user_pref("CT2849855.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
user_pref("CT2849855.LastLogin_3.6.0.10", "Wed Sep 14 2011 14:43:57 GMT+0200");
user_pref("CT2849855.LatestVersion", "3.6.0.10");
user_pref("CT2849855.Locale", "de");
user_pref("CT2849855.MCDetectTooltipHeight", "83");
user_pref("CT2849855.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
user_pref("CT2849855.MCDetectTooltipWidth", "295");
user_pref("CT2849855.MyStuffEnabledAtInstallation", true);
user_pref("CT2849855.OriginalFirstVersion", "3.6.0.10");
user_pref("CT2849855.SearchEngineBeforeUnload", "Google");
user_pref("CT2849855.SearchFromAddressBarIsInit", true);
user_pref("CT2849855.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849855&q=");
user_pref("CT2849855.SearchInNewTabEnabled", true);
user_pref("CT2849855.SearchInNewTabIntervalMM", 1440);
user_pref("CT2849855.SearchInNewTabLastCheckTime", "Tue Sep 13 2011 18:36:43 GMT+0200");
user_pref("CT2849855.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
user_pref("CT2849855.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
user_pref("CT2849855.SearchProtectorEnabled", false);
user_pref("CT2849855.SearchProtectorToolbarDisabled", false);
user_pref("CT2849855.ServiceMapLastCheckTime", "Tue Sep 13 2011 18:36:54 GMT+0200");
user_pref("CT2849855.SettingsLastCheckTime", "Wed Sep 14 2011 14:43:45 GMT+0200");
user_pref("CT2849855.SettingsLastUpdate", "1313478220");
user_pref("CT2849855.ThirdPartyComponentsInterval", 504);
user_pref("CT2849855.ThirdPartyComponentsLastCheck", "Mon Sep 05 2011 09:47:53 GMT+0200");
user_pref("CT2849855.ThirdPartyComponentsLastUpdate", "1255344657");
user_pref("CT2849855.ToolbarShrinkedFromSetup", false);
user_pref("CT2849855.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2849855");
user_pref("CT2849855.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com
user_pref("CT2849855.UserID", "UN84985091251405920");
user_pref("CT2849855.ValidationData_Search", 0);
user_pref("CT2849855.ValidationData_Toolbar", 2);
user_pref("CT2849855.WeatherNetwork", "");
user_pref("CT2849855.WeatherPollDate", "Wed Sep 14 2011 14:43:46 GMT+0200");
user_pref("CT2849855.WeatherUnit", "C");
user_pref("CT2849855.alertChannelId", "1241896");
user_pref("CT2849855.backendstorage.url_history", "687474703A2F2F7777772E66616365626F6F6B2E636F6D2F656469746163636F756E742E7068703F7265663D6D622664726F70");
user_pref("CT2849855.backendstorage.url_history_time", "31333135383436353337323237");
user_pref("CT2849855.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlP
user_pref("CT2849855.globalFirstTimeInfoLastCheckTime", "Wed Sep 14 2011 14:43:57 GMT+0200");
user_pref("CT2849855.homepageProtectorEnableByLogin", true);
user_pref("CT2849855.initDone", true);
user_pref("CT2849855.isAppTrackingManagerOn", true);
user_pref("CT2849855.myStuffEnabled", true);
user_pref("CT2849855.myStuffPublihserMinWidth", 400);
user_pref("CT2849855.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
user_pref("CT2849855.myStuffServiceIntervalMM", 1440);
user_pref("CT2849855.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
user_pref("CT2849855.oldAppsList", "129349796699187955,129349796699500456,111,1000234,129349796699656708,1000034,129431553514219224,129349796699969211,129349796701375473,12934
user_pref("CT2849855.searchProtectorDialogDelayInSec", 10);
user_pref("CT2849855.searchProtectorEnableByLogin", true);
user_pref("CT2849855.testingCtid", "");
user_pref("CT2849855.toolbarAppMetaDataLastCheckTime", "Tue Sep 13 2011 18:36:54 GMT+0200");
user_pref("CT2849855.toolbarContextMenuLastCheckTime", "Mon Sep 05 2011 09:47:55 GMT+0200");
user_pref("CT2849855.usagesFlag", 2);
user_pref("CommunityToolbar.ConduitSearchList", "BittorrentBar_DE Customized Web Search");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050", "\"be843704e88f3881ee926bd5120463663\"");
user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2990218/CT2990218", "\"e0030d6af18032bef5c6dd476ea5a5dd1\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1241896/1237569/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1381953/1377612/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/DE", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", "\"1365594729\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2849855", "\"0\"");
user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2990218", "\"1333617367\"");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=de", "oIwsta2spzadhjRgiY1Nhw==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "m4Df43NZ+9lr21ZNdyYrjA==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=de", "WiZSpHJzJ/uTUKvfHHyj/w==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "B8Px/Te74hi98N2hb9yOAQ==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=de", "9H/gICSaMqbmx+Gd+8W4Sg==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "bM8wQLfFAEKgVLVF/G5zig==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=de", "eJfMrdrGnhGHiiPiYjgAww==");
user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "cTVrc75U9YwdI74PAhUYFw==");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"80133a6b165cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.8", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13.0.6", "\"0d648794549cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14.1.0", "\"0e0a4327275cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15.1.0", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.100", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16.0.3", "\"0343677cfb1cd1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"97e416bb586ce1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"97e416bb586ce1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.20.0.4", "\"9f8d2729abc2ce1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"80ee9485875dcc1:0\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2849855", "\"634513415467470000\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2990218", "\"75babe825203d7a8eecb898dcf55bf17\"");
user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"634289840782570000\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "634293235860000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/2011 5:25:10 PM", "634335443890000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2010 4:33:06 PM", "634303635100000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/17/2011 12:59:49 PM", "634339976460000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=2/22/2011 6:54:06 PM", "634356118310000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/2011 11:17:11 AM", "634356118310000000");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2849855&octid=CT2849855", "\"1313478220\"");
user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2269050/CT2269050", "\"1294659279\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE", "\"f645aad069c12dabe3684790d0d07fc9\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=de", "\"634510680517330000\"");
user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"1f5851f12d58a6c6d5b555ddd5415b6a\"");
user_pref("CommunityToolbar.EngineOwner", "");
user_pref("CommunityToolbar.EngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
user_pref("CommunityToolbar.EngineOwnerToolbarId", "dvdvideosofttb");
user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\Christoph\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3css7o3i.default\\conduitCommon\\modules\\3.12.0.8");
user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.12.0.8");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://storage.conduit.com/50/226/CT2269050/Gadgets/8e084b7c-cf5c-4e6c-97f3-6ecd9cd4c13f.html", "800x708");
user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://youtube.conduitapps.com/v115/gadget.php?appMode=standard ", "483x534");
user_pref("CommunityToolbar.OriginalEngineOwner", "CT2269050");
user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{872b5b88-9db5-4310-bdd0-ac189557e5f5}");
user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "dvdvideosofttb");
user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("CommunityToolbar.ToolbarsList", "CT2269050,CT2849855");
user_pref("CommunityToolbar.ToolbarsList2", "CT2269050,CT2849855");
user_pref("CommunityToolbar.ToolbarsList4", "CT2849855");
user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Tue Jun 21 2011 17:24:27 GMT+0200");
user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
user_pref("CommunityToolbar.alert.locale", "en");
user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
user_pref("CommunityToolbar.alert.loginLastCheckTime", "Tue Jun 21 2011 17:24:27 GMT+0200");
user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.alert.showTrayIcon", false);
user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.alert.userId", "{0b0c22f5-551e-4ec0-91c3-f336bf296cee}");
user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Sep 13 2011 18:36:43 GMT+0200");
user_pref("CommunityToolbar.globalUserId", "8fea430b-9a0f-43c6-800b-6822f565da26");
user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2849855");
user_pref("CommunityToolbar.killedEngine", true);
user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Wed Apr 18 2012 21:23:25 GMT+0200");
user_pref("CommunityToolbar.notifications.alertEnabled", false);
user_pref("CommunityToolbar.notifications.alertInfoInterval", 60);
user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Wed Apr 18 2012 21:23:34 GMT+0200");
user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
user_pref("CommunityToolbar.notifications.locale", "en");
user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Wed Apr 18 2012 21:23:24 GMT+0200");
user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
user_pref("CommunityToolbar.notifications.showTrayIcon", false);
user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
user_pref("CommunityToolbar.notifications.userId", "bd75f1ce-7bc0-4b15-8acb-c1673b4ae9ff");
user_pref("CommunityToolbar.originalHomepage", "hxxp://search.iminent.com/?appId=e40d8b7f-58fd-4e71-a5f8-28d904149063&lcid=1031&ref=homepage");
user_pref("CommunityToolbar.originalSearchEngine", "Google");
user_pref("CommunityToolbar.undefined", "");
user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?CUI=UN80869437140451570&ctid=CT2849855&SearchSource=3&q={searchTerms}");
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.properties");
user_pref("Smartbar.keywordURLSelectedCTID", "CT2849855");
user_pref("browser.search.defaultthis.engineName", "BittorrentBar_DE Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849855&SearchSource=3&q={searchTerms}");
user_pref("browser.startup.homepage", "hxxp://search.iminent.com/?appId=e40d8b7f-58fd-4e71-a5f8-28d904149063&ref=homepage");
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849855&q=");
user_pref("plugin.state.npconduitfirefoxplugin", 2);
user_pref("smartbar.addressBarOwnerCTID", "CT2849855");
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&q=,hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2849855&q=");
user_pref("smartbar.machineId", "FUVGCAWG68H56NYHT0LYRVEMVHUYVAYDOPKFF9YRAJEOAGZN61EWDYODKWGWQFDUATI5R/KMUTXY4MCAJ0IL6A");
Emptied folder: C:\Users\Christoph\AppData\Roaming\mozilla\firefox\profiles\3css7o3i.default\minidumps [60 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 28.02.2014 at 16:48:50,55
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

--- --- ---

Alle Probleme scheine nur ausschließlich Google Chrome zu betreffen.
Da Trotz Allem immer noch diese nervigen Werbeverlinkungen auftreten, würde ich gerne mit eurer Hilfe das Problem angehen.

Mit besten Grüßen

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Hatte gar nicht gesehen, dass du geantwortet hast. Danke sehr. Ok habs gescannt und hier sind die Berichte. Hier die FRST Datei:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by Christoph (administrator) on FENSTER-PC on 28-02-2014 20:22:07
Running from C:\Users\Christoph\Downloads
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
(Hauppauge Computer Works) C:\Program Files\WinTV\EPG Services\System\EPGService.exe
() C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\system32\PnkBstrA.exe
() c:\Program Files\SavingsBullFilter\SavingsbullFilterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Caere Corporation) C:\Program Files\Caere\OmniPagePro90\OPware32.exe
(Microsoft Corporation) C:\Windows\system32\ntvdm.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDms.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [Family Tree Builder Update] - C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [229376 2011-12-21] (MyHeritage)
HKLM\...\Run: [PATHPILOT] - C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [OmniPage] - C:\Program Files\Caere\OmniPagePro90\opware32.exe [44032 1998-10-22] (Caere Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [PMBVolumeWatcher] - C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2367512 2013-12-18] (Sony Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-27] (AVAST Software)
HKLM\...\Runonce: [Register urlmon.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\urlmon.dll
HKLM\...\Runonce: [Register hlink.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\hlink.dll
HKLM\...\Runonce: [Register oleaut32.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\oleaut32.dll
HKLM\...\Runonce: [IE 3.0 RegSvr schannel.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\schannel.dll
HKLM\...\Runonce: [network_smb_bundesligagufm] - [X]
HKLM\...\RunOnce: [wextract_cleanup0] - rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\CHRIST~1\AppData\Local\Temp\IXP000.TMP\" [126464 2009-07-14] (Microsoft Corporation)
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM\...\Runonce: [InnoSetupRegFile.0000000001] - "C:\Windows\is-PG3H8.exe" /REG /REGSVRMODE
HKLM\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-08-19] (Google Inc.)
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Run: [MsgCenterExe] - "C:\Program Files\Real\RealPlayer\update\RealOneMessageCenter.exe"  -osboot
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Policies\Explorer: [_NoDriveTypeAutoRun] 0
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {483d575e-d0e5-11df-b7ce-806e6f6e6963} - H:\autorun.exe
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {a60e763c-50ee-11e2-bff4-0026182f8e70} - F:\PMCsetup.exe
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {b920e969-66a7-11e0-a45f-0026182f8e70} - F:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x08E51D5B153FCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} -  No File
URLSearchHook: HKLM - (No Name) - {b106b661-3e1b-4015-af5c-195e909f35c6} -  No File
SearchScopes: HKLM - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = 
SearchScopes: HKCU - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.bing.com/search?q={searchTerms}
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://www.bing.com/search?q={searchTerms}
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll No File
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: DVDVideoSoft WebPageAdjuster Class - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll No File
Toolbar: HKLM - IMinent Toolbar - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files\IMinent Toolbar\tbcore3.dll No File
Toolbar: HKLM - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {B106B661-3E1B-4015-AF5C-195E909F35C6} -  No File
Toolbar: HKCU - No Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} -  No File
Toolbar: HKCU - Avira SearchFree Toolbar plus Web Protection - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default
FF SearchEngineOrder.1: Ask.com Search
FF SelectedSearchEngine: Google
FF NetworkProxy: "autoconfig_url", "file:///C:\\Users\\CHRIST~1\\AppData\\Local\\Temp\\proxtube.pac"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christoph\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\conduit-search.xml
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\icqplugin.gif
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\icqplugin.src
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SavingsBull - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\SavingsBull@jetpack [2014-02-21]
FF Extension: ICQ Toolbar - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2012-07-30]
FF Extension: ICQ Sparberater - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\ciuvo-extension@icq.de.xpi [2012-07-10]
FF Extension: Better Battlelog (BBLog) - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi [2013-05-31]
FF Extension: Torntv - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\torntv@torntv.com.xpi [2012-11-03]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-29]
FF Extension: Greasemonkey - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-24]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-03-02]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-03-02]
FF HKLM\...\Firefox\Extensions: [{21EAF666-26B3-4a3c-ABD0-CA2F5A326744}] - C:\Program Files\V-bates\Firefox
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-27]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (AdBlock) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-02-27]
CHR HKLM\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\CHRIST~1\AppData\Local\Temp\crx622F.tmp [2014-02-27]
CHR HKLM\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - C:\Program Files\Iminent\Iminent.crx [2014-02-27]
CHR HKLM\...\Chrome\Extension: [jbpkiefagocgkmemidfngdkamloieekf] - C:\Program Files\TornTV.com\torn10.crx [2014-02-27]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2011-02-08]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-27] (AVAST Software)
R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
R2 EPGService; C:\Program Files\WinTV\EPG Services\System\EPGService.exe [437248 2008-05-30] (Hauppauge Computer Works)
R2 Level Quality Watcher; C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe [546112 2014-01-27] ()
R2 PMBDeviceInfoProvider; C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [481304 2013-12-18] (Sony Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-08-07] ()
R2 SavingsbullFilterService; c:\Program Files\SavingsBullFilter\SavingsbullFilterService.exe [144896 2014-02-14] ()
S3 HauppaugeTVServer; C:\PROGRA~1\WinTV\HCWTVS~1.EXE [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-02-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2014-02-27] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-02-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-02-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410784 2014-02-27] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [64168 2014-02-27] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-02-27] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-06-28] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
S1 CXAVSAUD; C:\Windows\System32\DRIVERS\pvavsaud.sys [11008 2005-10-25] (Conexant Systems, Inc.)
R1 HCW88AUD; C:\Windows\System32\drivers\hcw88aud.sys [12928 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88BDA; C:\Windows\System32\drivers\hcw88bda.sys [182400 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88TSE; C:\Windows\System32\drivers\hcw88tse.sys [320256 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88TUNE; C:\Windows\System32\drivers\hcw88tun.sys [74624 2008-04-19] (Hauppauge Computer Works, Inc.)
R3 hcw88vid; C:\Windows\System32\drivers\hcw88vid.sys [394880 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88XBAR; C:\Windows\System32\drivers\HCW88BAR.sys [17280 2008-04-19] (Hauppauge Computer Works, Inc.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-18] (Siliten)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-06-28] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2013-11-20] (NetFilterSDK.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [697328 2010-10-06] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-01-20] (Anchorfree Inc.)
S3 mdxgthkn; \??\C:\Users\CHRIST~1\AppData\Local\Temp\mdxgthkn.sys [X]
S3 XDva394; \??\C:\Windows\system32\XDva394.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-28 20:21 - 2014-02-28 20:21 - 00000162 ____H () C:\Users\Christoph\Downloads\~$FRST.txt
2014-02-28 18:11 - 2014-02-28 18:13 - 00037651 _____ () C:\Users\Christoph\Downloads\Addition.txt
2014-02-28 18:10 - 2014-02-28 20:22 - 00026664 _____ () C:\Users\Christoph\Downloads\FRST.txt
2014-02-28 18:09 - 2014-02-28 20:22 - 00000000 ____D () C:\FRST
2014-02-28 18:06 - 2014-02-28 18:06 - 01143808 _____ (Farbar) C:\Users\Christoph\Downloads\FRST.exe
2014-02-28 16:48 - 2014-02-28 16:48 - 00072608 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-02-28 16:38 - 2014-02-28 16:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 16:37 - 2014-02-28 16:38 - 01037734 _____ (Thisisu) C:\Users\Christoph\Downloads\JRT.exe
2014-02-28 16:36 - 2014-02-28 16:36 - 00000000 ____D () C:\Program Files\iMesh Applications
2014-02-28 16:34 - 2014-02-28 16:35 - 01431792 _____ (iMesh Inc) C:\Users\Christoph\Downloads\iMeshSetup-r1487-w-bc.exe
2014-02-28 14:57 - 2014-02-28 14:57 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 11:31 - 2014-02-28 11:31 - 00000162 ____H () C:\Users\Christoph\Downloads\~$T00001.txt
2014-02-28 11:31 - 2014-02-28 11:31 - 00000032 _____ () C:\Users\Christoph\Downloads\ATT00001.txt
2014-02-28 07:29 - 2014-02-28 07:29 - 00391144 _____ () C:\Users\Christoph\Downloads\Setup.exe
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\AVAST Software
2014-02-27 21:44 - 2014-02-27 21:44 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00410784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-27 21:44 - 2014-02-27 21:44 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-27 21:44 - 2014-02-27 21:44 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-27 21:43 - 2014-02-27 21:43 - 00000000 ____D () C:\Program Files\AVAST Software
2014-02-27 21:42 - 2014-02-27 21:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-02-27 21:38 - 2014-02-27 21:41 - 90578216 _____ (AVAST Software) C:\Users\Christoph\Downloads\avast_free_antivirus_setup.exe
2014-02-27 21:05 - 2014-02-27 21:33 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Nico Mak Computing
2014-02-27 21:04 - 2014-02-27 21:04 - 04892480 _____ (WinZip International LLC ) C:\Users\Christoph\Downloads\wzmp_8.exe
2014-02-26 17:47 - 2014-02-26 17:47 - 00001187 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\ProgramData\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-02-26 17:12 - 2014-02-26 17:12 - 00380160 _____ () C:\Users\Christoph\Downloads\E638.tmp
2014-02-26 05:09 - 2014-02-28 16:41 - 00079728 _____ () C:\Windows\PFRO.log
2014-02-25 09:25 - 2014-02-25 09:25 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (8).xlsx
2014-02-21 16:42 - 2014-02-21 16:45 - 77047096 _____ (Landesfinanzdirektion Thüringen) C:\Users\Christoph\Downloads\ElsterFormular-15.0.20140212p.exe
2014-02-21 16:14 - 2014-02-28 16:28 - 00000000 ____D () C:\Program Files\SavingsBull
2014-02-20 17:31 - 2014-02-20 17:31 - 00295504 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-20 17:30 - 2014-02-28 16:41 - 00001232 _____ () C:\Windows\setupact.log
2014-02-20 17:30 - 2014-02-20 17:30 - 00919728 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 13:13 - 2014-02-20 13:13 - 00009343 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (ultimo4).xlsx
2014-02-20 13:12 - 2014-02-20 13:12 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (7).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (6).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (5).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (4).xlsx
2014-02-20 13:10 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (3).xlsx
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAF4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAD4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA95.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA94.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA93.tmp
2014-02-19 20:24 - 2014-02-28 18:35 - 00000000 ____D () C:\Program Files\Steam
2014-02-19 20:24 - 2014-02-19 20:24 - 00000921 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-19 20:22 - 2014-02-19 20:23 - 01141680 _____ () C:\Users\Christoph\Downloads\SteamSetup.exe
2014-02-19 13:19 - 2014-02-19 13:19 - 00290557 _____ () C:\Users\Christoph\Downloads\BBE9.tmp
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\ProgramData\ATI
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD AVT
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD APP
2014-02-18 10:56 - 2014-02-18 10:56 - 00000000 ____D () C:\AMD
2014-02-18 10:54 - 2014-02-18 10:54 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\library_dir
2014-02-18 10:51 - 2014-02-18 10:51 - 01012920 _____ () C:\Users\Christoph\Downloads\amddriverdownloader.exe
2014-02-17 16:21 - 2014-02-12 14:04 - 00000426 _____ () C:\AVScanner.ini
2014-02-16 21:29 - 2009-09-14 20:20 - 00000944 _____ () C:\Users\Christoph\Desktop\Windows Media Player - Kopie.lnk
2014-02-16 19:12 - 2014-02-28 20:12 - 00000284 _____ () C:\Windows\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315}.job
2014-02-16 19:12 - 2014-02-16 19:12 - 01176064 _____ () C:\Windows\is-PG3H8.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 00022701 _____ () C:\Windows\is-PG3H8.msg
2014-02-16 19:12 - 2014-02-16 19:12 - 00000248 _____ () C:\Windows\is-PG3H8.lst
2014-02-16 19:11 - 2014-02-16 19:11 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\ BROTHER MFC-490CW user guide
2014-02-16 19:10 - 2014-02-16 19:10 - 00692880 _____ (LiveSoftAction) C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com (1).exe
2014-02-16 15:45 - 2014-02-16 15:45 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_Bluetooth-Drucker_Treiber_Update_02-2014.exe
2014-02-16 15:44 - 2014-02-16 15:44 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_MFC-490CW_Treiber_Update_02-2014.exe
2014-02-16 15:36 - 2014-02-16 15:36 - 00692880 _____ (LiveSoftAction) C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com.exe
2014-02-16 08:08 - 2014-02-16 08:08 - 00480694 _____ () C:\Users\Christoph\Downloads\Ölflyer 140215.pptx
2014-02-15 13:18 - 2014-02-15 13:18 - 00473035 _____ () C:\Users\Christoph\Downloads\Ölflyer 140214.pptx
2014-02-13 04:36 - 2009-09-14 20:20 - 00000944 _____ () C:\Users\Christoph\Desktop\Windows Media Player.lnk
2014-02-12 16:44 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 16:44 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 16:44 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 16:44 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 16:44 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 16:44 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 16:44 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 16:44 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 16:44 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 16:44 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 16:43 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 16:43 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 16:43 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 16:43 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 16:43 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 16:43 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 16:43 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 16:43 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 16:43 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 16:43 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 16:43 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 16:34 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 09:56 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 09:56 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 09:56 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 09:54 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 09:54 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 09:53 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 09:53 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-11 21:49 - 2014-02-11 21:49 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (2).xlsx
2014-02-10 21:50 - 2014-02-10 21:50 - 00599792 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202a.pptx
2014-02-10 15:04 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (1).xlsx
2014-02-10 15:03 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia.xlsx
2014-02-08 16:43 - 2014-02-10 09:04 - 00000000 ____D () C:\Users\Christoph\Desktop\niendorf ripetizione italiano
2014-02-07 04:44 - 2014-02-07 04:44 - 00005523 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-07 04:44 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-02-07 04:44 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-07 04:44 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-07 04:44 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-06 15:42 - 2014-02-06 15:42 - 13051643 _____ () C:\Users\Christoph\Downloads\EAC5.tmp
2014-02-05 12:52 - 2014-02-05 12:52 - 00073477 ____H () C:\Users\Christoph\Documents\~WRL3512.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\ACFD.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\AC8E.tmp
2014-02-03 19:48 - 2014-02-27 20:47 - 00000000 ____D () C:\Program Files\SavingsBullFilter
2014-02-03 19:48 - 2014-02-03 19:48 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-02-02 21:01 - 2014-02-02 21:01 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Corel
2014-02-02 20:50 - 2014-02-02 20:50 - 00000000 ____D () C:\Users\Christoph\Documents\Micrografx
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Corel
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-02 19:10 - 2014-02-02 20:03 - 00599794 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202.pptx
2014-02-02 18:39 - 2014-02-02 18:39 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2 (1).pptx
2014-02-02 18:13 - 2014-02-02 18:14 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044 (2).exe
2014-02-02 18:13 - 2014-02-02 18:13 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044.exe
2014-02-02 18:13 - 2014-02-02 18:13 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044 (1).exe
2014-02-02 18:10 - 2014-02-02 18:10 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2.pptx
2014-02-01 09:05 - 2014-02-01 09:05 - 00062976 _____ () C:\Users\Christoph\Downloads\Kollegiumsliste Mail 01-02-1014.xls

==================== One Month Modified Files and Folders =======

2014-02-28 20:22 - 2014-02-28 18:10 - 00026664 _____ () C:\Users\Christoph\Downloads\FRST.txt
2014-02-28 20:22 - 2014-02-28 18:09 - 00000000 ____D () C:\FRST
2014-02-28 20:21 - 2014-02-28 20:21 - 00000162 ____H () C:\Users\Christoph\Downloads\~$FRST.txt
2014-02-28 20:12 - 2014-02-16 19:12 - 00000284 _____ () C:\Windows\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315}.job
2014-02-28 19:48 - 2012-06-23 17:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 19:34 - 2010-08-19 17:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 18:35 - 2014-02-19 20:24 - 00000000 ____D () C:\Program Files\Steam
2014-02-28 18:22 - 2014-01-24 16:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-28 18:14 - 2009-07-14 05:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:14 - 2009-07-14 05:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 18:13 - 2014-02-28 18:11 - 00037651 _____ () C:\Users\Christoph\Downloads\Addition.txt
2014-02-28 18:06 - 2014-02-28 18:06 - 01143808 _____ (Farbar) C:\Users\Christoph\Downloads\FRST.exe
2014-02-28 16:48 - 2014-02-28 16:48 - 00072608 _____ () C:\Users\Christoph\Desktop\JRT.txt
2014-02-28 16:47 - 2010-08-18 21:22 - 01085568 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 16:43 - 2011-09-13 22:12 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-02-28 16:41 - 2014-02-26 05:09 - 00079728 _____ () C:\Windows\PFRO.log
2014-02-28 16:41 - 2014-02-20 17:30 - 00001232 _____ () C:\Windows\setupact.log
2014-02-28 16:41 - 2010-08-19 17:33 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 16:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 16:38 - 2014-02-28 16:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 16:38 - 2014-02-28 16:37 - 01037734 _____ (Thisisu) C:\Users\Christoph\Downloads\JRT.exe
2014-02-28 16:36 - 2014-02-28 16:36 - 00000000 ____D () C:\Program Files\iMesh Applications
2014-02-28 16:35 - 2014-02-28 16:34 - 01431792 _____ (iMesh Inc) C:\Users\Christoph\Downloads\iMeshSetup-r1487-w-bc.exe
2014-02-28 16:28 - 2014-02-21 16:14 - 00000000 ____D () C:\Program Files\SavingsBull
2014-02-28 16:14 - 2010-08-31 09:44 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Mozilla
2014-02-28 14:57 - 2014-02-28 14:57 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 14:57 - 2010-08-19 17:28 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Google
2014-02-28 14:57 - 2010-08-19 17:24 - 00000000 ____D () C:\Program Files\Google
2014-02-28 11:35 - 2011-09-26 10:48 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Windows Live
2014-02-28 11:35 - 2011-09-07 19:47 - 02146304 ___SH () C:\Users\Christoph\Downloads\Thumbs.db
2014-02-28 11:31 - 2014-02-28 11:31 - 00000162 ____H () C:\Users\Christoph\Downloads\~$T00001.txt
2014-02-28 11:31 - 2014-02-28 11:31 - 00000032 _____ () C:\Users\Christoph\Downloads\ATT00001.txt
2014-02-28 07:29 - 2014-02-28 07:29 - 00391144 _____ () C:\Users\Christoph\Downloads\Setup.exe
2014-02-27 22:54 - 2010-08-18 21:31 - 01658092 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\AVAST Software
2014-02-27 21:44 - 2014-02-27 21:44 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00410784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-27 21:44 - 2014-02-27 21:44 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-27 21:44 - 2014-02-27 21:44 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-27 21:43 - 2014-02-27 21:43 - 00000000 ____D () C:\Program Files\AVAST Software
2014-02-27 21:42 - 2014-02-27 21:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-02-27 21:41 - 2014-02-27 21:38 - 90578216 _____ (AVAST Software) C:\Users\Christoph\Downloads\avast_free_antivirus_setup.exe
2014-02-27 21:33 - 2014-02-27 21:05 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Nico Mak Computing
2014-02-27 21:04 - 2014-02-27 21:04 - 04892480 _____ (WinZip International LLC ) C:\Users\Christoph\Downloads\wzmp_8.exe
2014-02-27 20:47 - 2014-02-03 19:48 - 00000000 ____D () C:\Program Files\SavingsBullFilter
2014-02-27 19:02 - 2012-10-17 21:04 - 08543232 ___SH () C:\Users\Christoph\Desktop\Thumbs.db
2014-02-27 16:16 - 2010-08-31 01:18 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-02-27 05:40 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-26 17:47 - 2014-02-26 17:47 - 00001187 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\ProgramData\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-02-26 17:12 - 2014-02-26 17:12 - 00380160 _____ () C:\Users\Christoph\Downloads\E638.tmp
2014-02-25 22:48 - 2011-03-07 19:23 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 22:48 - 2011-01-27 21:15 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 09:25 - 2014-02-25 09:25 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (8).xlsx
2014-02-21 16:45 - 2014-02-21 16:42 - 77047096 _____ (Landesfinanzdirektion Thüringen) C:\Users\Christoph\Downloads\ElsterFormular-15.0.20140212p.exe
2014-02-21 13:48 - 2012-06-23 20:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 13:48 - 2012-04-07 15:20 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-20 17:31 - 2014-02-20 17:31 - 00295504 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00919728 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 17:30 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-02-20 13:13 - 2014-02-20 13:13 - 00009343 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (ultimo4).xlsx
2014-02-20 13:12 - 2014-02-20 13:12 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (7).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (6).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (5).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (4).xlsx
2014-02-20 13:11 - 2014-02-20 13:10 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (3).xlsx
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAF4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAD4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA95.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA94.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA93.tmp
2014-02-19 20:24 - 2014-02-19 20:24 - 00000921 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-19 20:23 - 2014-02-19 20:22 - 01141680 _____ () C:\Users\Christoph\Downloads\SteamSetup.exe
2014-02-19 20:19 - 2010-08-18 21:30 - 00000000 ____D () C:\Users\Christoph
2014-02-19 16:01 - 2013-07-14 20:02 - 00043520 _____ () C:\Windows\system32\CmdLineExt03.dll
2014-02-19 13:19 - 2014-02-19 13:19 - 00290557 _____ () C:\Users\Christoph\Downloads\BBE9.tmp
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\ProgramData\ATI
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD AVT
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD APP
2014-02-18 11:02 - 2013-07-18 02:09 - 00000000 ____D () C:\ProgramData\AMD
2014-02-18 11:01 - 2013-07-18 02:08 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-02-18 10:56 - 2014-02-18 10:56 - 00000000 ____D () C:\AMD
2014-02-18 10:54 - 2014-02-18 10:54 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\library_dir
2014-02-18 10:51 - 2014-02-18 10:51 - 01012920 _____ () C:\Users\Christoph\Downloads\amddriverdownloader.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 01176064 _____ () C:\Windows\is-PG3H8.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 00022701 _____ () C:\Windows\is-PG3H8.msg
2014-02-16 19:12 - 2014-02-16 19:12 - 00000248 _____ () C:\Windows\is-PG3H8.lst
2014-02-16 19:11 - 2014-02-16 19:11 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\ BROTHER MFC-490CW user guide
2014-02-16 19:10 - 2014-02-16 19:10 - 00692880 _____ (LiveSoftAction) C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com (1).exe
2014-02-16 18:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-16 15:45 - 2014-02-16 15:45 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_Bluetooth-Drucker_Treiber_Update_02-2014.exe
2014-02-16 15:44 - 2014-02-16 15:44 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_MFC-490CW_Treiber_Update_02-2014.exe
2014-02-16 15:36 - 2014-02-16 15:36 - 00692880 _____ (LiveSoftAction) C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com.exe
2014-02-16 08:08 - 2014-02-16 08:08 - 00480694 _____ () C:\Users\Christoph\Downloads\Ölflyer 140215.pptx
2014-02-15 13:18 - 2014-02-15 13:18 - 00473035 _____ () C:\Users\Christoph\Downloads\Ölflyer 140214.pptx
2014-02-13 22:45 - 2014-01-09 20:48 - 00001612 _____ () C:\Users\Christoph\Desktop\Vorstellung der Italienisch Arbeitsgruppe Aug 2013 - Verknüpfung.lnk
2014-02-13 21:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-13 14:00 - 2013-11-27 12:51 - 00000000 ____D () C:\Users\Christoph\Desktop\mama musica
2014-02-12 16:45 - 2012-05-05 18:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-12 16:41 - 2013-07-22 13:50 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 16:38 - 2010-08-28 08:12 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 16:35 - 2009-07-14 03:04 - 00000621 _____ () C:\Windows\win.ini
2014-02-12 16:34 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-12 14:04 - 2014-02-17 16:21 - 00000426 _____ () C:\AVScanner.ini
2014-02-12 06:58 - 2013-08-01 15:11 - 00000000 ____D () C:\Users\Christoph\Desktop\Musica Emma
2014-02-11 21:49 - 2014-02-11 21:49 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (2).xlsx
2014-02-11 14:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-11 14:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-10 21:50 - 2014-02-10 21:50 - 00599792 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202a.pptx
2014-02-10 15:04 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (1).xlsx
2014-02-10 15:04 - 2014-02-10 15:03 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia.xlsx
2014-02-10 09:04 - 2014-02-08 16:43 - 00000000 ____D () C:\Users\Christoph\Desktop\niendorf ripetizione italiano
2014-02-08 17:09 - 2012-05-20 14:56 - 00000000 ____D () C:\Users\Christoph\Desktop\Emma
2014-02-08 15:17 - 2012-12-14 17:05 - 00000000 ____D () C:\Users\Christoph\Desktop\3sammlung
2014-02-07 16:28 - 2012-06-22 09:37 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Media Player Classic
2014-02-07 16:26 - 2011-09-30 20:45 - 00000000 ____D () C:\Windows\Minidump
2014-02-07 16:26 - 2010-08-18 22:19 - 00000000 ____D () C:\Windows\Panther
2014-02-07 06:45 - 2013-09-24 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-07 04:44 - 2014-02-07 04:44 - 00005523 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-07 04:44 - 2010-11-27 18:18 - 00000000 ____D () C:\Program Files\Java
2014-02-06 15:42 - 2014-02-06 15:42 - 13051643 _____ () C:\Users\Christoph\Downloads\EAC5.tmp
2014-02-06 11:38 - 2014-02-12 16:43 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-12 16:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-12 16:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-12 16:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-12 16:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 16:43 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-12 16:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 16:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-12 16:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-12 16:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-12 16:43 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-12 16:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-12 16:44 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-12 16:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:25 - 2014-02-12 16:43 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:13 - 2014-02-12 16:43 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 16:43 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 16:43 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-12 16:43 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-12 16:43 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-12 16:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-05 12:52 - 2014-02-05 12:52 - 00073477 ____H () C:\Users\Christoph\Documents\~WRL3512.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\ACFD.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\AC8E.tmp
2014-02-03 19:48 - 2014-02-03 19:48 - 00000000 ____D () C:\Program Files\Level Quality Watcher
2014-02-02 21:01 - 2014-02-02 21:01 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Corel
2014-02-02 20:50 - 2014-02-02 20:50 - 00000000 ____D () C:\Users\Christoph\Documents\Micrografx
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Corel
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-02 20:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system
2014-02-02 20:03 - 2014-02-02 19:10 - 00599794 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202.pptx
2014-02-02 18:39 - 2014-02-02 18:39 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2 (1).pptx
2014-02-02 18:14 - 2014-02-02 18:13 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044 (2).exe
2014-02-02 18:13 - 2014-02-02 18:13 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044.exe
2014-02-02 18:13 - 2014-02-02 18:13 - 04318040 _____ (Systweak Inc ) C:\Users\Christoph\Downloads\sysrc_trial_25044 (1).exe
2014-02-02 18:10 - 2014-02-02 18:10 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2.pptx
2014-02-01 09:05 - 2014-02-01 09:05 - 00062976 _____ () C:\Users\Christoph\Downloads\Kollegiumsliste Mail 01-02-1014.xls

Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\SIntf16.dll
C:\Users\Christoph\AppData\Local\Temp\SIntf32.dll
C:\Users\Christoph\AppData\Local\Temp\SIntfNT.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 05:44

==================== End Of Log ============================
         

--- --- ---

--- --- ---


und hier die Addition txt.

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 27-02-2014 02
Ran by Christoph at 2014-02-28 18:11:47
Running from C:\Users\Christoph\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 6.1.1 - Hewlett-Packard) Hidden
7-Zip 9.22beta (HKLM\...\7-Zip) (Version:  - )
Adobe AIR (HKLM\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM\...\Adobe Flash Player Plugin) (Version: 12.0.0.70 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.06) - Deutsch (HKLM\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.)
AMD Accelerated Video Transcoding (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{B448BC74-1CB7-7A57-3313-5E075AFB413E}) (Version: 8.0.877.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Fuel (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
AMD Media Foundation Decoders (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden
AMD VISION Engine Control Center (Version: 2013.0429.2313.39747 - Ihr Firmenname) Hidden
Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0592EF96-69D8-4E4B-9CC9-88F58EA86F01}) (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.10 - Michael Tippach)
Audiobook Cutter Free Edition (HKLM\...\{94EBEDE2-B6C1-4F7B-8E09-75F27396CABC}) (Version: 1.8.1 - Audiobook Software)
Audiograbber 1.83 SE  (HKLM\...\Audiograbber) (Version: 1.83 SE  - Audiograbber)
Audiosurf Beta (HKLM\...\Audiosurf_is1) (Version:  - Dylan Fitterer)
avast! Free Antivirus (HKLM\...\Avast) (Version: 9.0.2013 - Avast Software)
Avira Free Antivirus (HKLM\...\Avira AntiVir Desktop) (Version: 14.0.3.338 - Avira)
Blue Byte Game Channel (HKLM\...\Blue Byte Game Channel) (Version:  - UbiSoft)
Bonjour (HKLM\...\{79155F2B-9895-49D7-8612-D92580E0DE5B}) (Version: 3.0.0.10 - Apple Inc.)
BookScan&Whiteboard Suite (HKLM\...\{F4933D9F-89CC-4CA9-B5B0-CF32968890C7}) (Version: 1.0 - Reallusion)
Brother MFL-Pro Suite MFC-490CW (HKLM\...\{48D082B9-18F6-4426-AFAC-8B6A3E7021B1}) (Version: 1.0.1.0 - Brother Industries, Ltd.)
Caere Scan Manager 4.0 (HKLM\...\ScMgr30Uninstall) (Version:  - )
Catalyst Control Center - Branding (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Graphics Previews Common (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (Version: 2013.0429.2312.39747 - Advanced Micro Devices, Inc.) Hidden
ccc-utility (Version: 2013.0429.2313.39747 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 3.20 - Piriform)
Chiaro A1 Interaktives Lehrerhandbuch (HKLM\...\de.hueber.chiaroa1elh.025B0E9ECB6C2A3224C932B080E6A9F956392295.1) (Version: 1.0 - Hueber Verlag GmbH & Co KG)
Chiaro A1 Interaktives Lehrerhandbuch (Version: 1.0 - Hueber Verlag GmbH & Co KG) Hidden
Compatibility Pack for the 2007 Office system (HKLM\...\{90120000-0020-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
CorelDRAW ESSENTIALS (HKLM\...\{CFE78643-3CDB-46EF-9677-795415937ABB}) (Version: 2.00 - Corel Corporation)
Counter-Strike 1.6 (HKLM\...\{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}) (Version: 1.6 - )
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{81FB7C60-565A-4869-9D90-3BE1D270E8B7}) (Version:  - Microsoft)
DivX-Setup (HKLM\...\DivX Setup) (Version: 2.6.0.34 - DivX, LLC)
Doxillion Document Converter (HKLM\...\Doxillion) (Version:  - NCH Software)
ElsterFormular (HKLM\...\ElsterFormular) (Version: 15.0.20140212 - Landesfinanzdirektion Thüringen)
Express Burn CD DVD Blu-Ray Brenner (HKLM\...\ExpressBurn) (Version:  - NCH Software)
Express Rip (HKLM\...\ExpressRip) (Version:  - NCH Software)
Express Zip (HKLM\...\ExpressZip) (Version: 2.17 - NCH Software)
FaceFilter Studio Brother Edition (HKLM\...\{F59205C8-E5FB-43F5-AAB2-16C1760D4F59}) (Version: 1.0 - )
ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - )
Fischer Weltalmanach 2006 (HKLM\...\InstallShield_{45E55CFF-A44A-4DD1-8BD4-D87026D3E480}) (Version: 1.00.0000 - Systhema)
Fischer Weltalmanach 2006 (Version: 1.00.0000 - Systhema) Hidden
Fraps (HKLM\...\Fraps) (Version:  - )
Free M4a to MP3 Converter 7.2 (HKLM\...\Free M4a to MP3 Converter_is1) (Version:  - ManiacTools.com)
Free PDF to Word Doc Converter v1.1 (HKLM\...\Free PDF to Word Doc Converter_is1) (Version: 1.1 - www.hellopdf.com)
Free Video to MP3 Converter version 5.0.22.128 (HKLM\...\Free Video to MP3 Converter_is1) (Version: 5.0.22.128 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.2.430 (HKLM\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.2.430 - DVDVideoSoft Ltd.)
Google Chrome (HKLM\...\Google Chrome) (Version: 33.0.1750.117 - Google Inc.)
Google Earth Plug-in (HKLM\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.)
Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.22.5 - Google Inc.) Hidden
GTA2 (HKLM\...\{2987EE84-C4EE-4FF5-8160-32DE00D6ABC6}) (Version: 1.00.001 - )
Haali Media Splitter (HKLM\...\HaaliMkx) (Version:  - )
Hauppauge German Help Files and Resources (HKLM\...\Hauppauge German Help Files and Resources) (Version:  - )
Hauppauge WinTV (HKLM\...\Hauppauge WinTV) (Version:  - )
Hauppauge WinTV DVB-T EPG Service (HKLM\...\Hauppauge WinTV DVB-T EPG Service) (Version:  - )
Hauppauge WinTV Infrared Remote (HKLM\...\Hauppauge WinTV Infrared Remote) (Version:  - )
Hauppauge WinTV IR Blaster (HKLM\...\Hauppauge WinTV IR Blaster) (Version:  - )
Hauppauge WinTV Radio (HKLM\...\Hauppauge WinTV Radio) (Version:  - )
Hauppauge WinTV Scheduler (HKLM\...\Hauppauge WinTV Scheduler) (Version:  - )
Hauppauge WinTV TV Services (HKLM\...\Hauppauge WinTV TV Services) (Version:  - )
Iminent (HKLM\...\IMBoosterARP) (Version: 4.52.52.0 - Iminent) <==== ATTENTION
InterActual Player (HKLM\...\InterActual Player) (Version:  - )
InterVideo DeviceService (HKLM\...\{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}) (Version: 1.0.0 - InterVideo)
InterVideo FilterSDK for Hauppauge (HKLM\...\{2227E1FA-01F5-483C-AB0E-2A308E900B3D}) (Version:  - InterVideo Inc.)
IsoBuster 2.8.5 (HKLM\...\IsoBuster_is1) (Version: 2.8.5 - Smart Projects)
iTunes (HKLM\...\{C197BC08-3D82-4651-8886-E68C21578A38}) (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 51 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 31 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
K-Lite Codec Pack 8.9.2 (Full) (HKLM\...\KLiteCodecPack_is1) (Version: 8.9.2 - )
Knights Of Honor (HKLM\...\{7911C404-9AFA-4BB2-B9B7-E47423D87528}) (Version: 1.00 - )
Medieval II Total War : Kingdoms : Americas (HKLM\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Teutonic (HKLM\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA)
Microsoft .NET Framework 1.1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office XP Professional mit FrontPage (HKLM\...\{90280407-6000-11D3-8CFE-0050048383C9}) (Version: 10.0.6626.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 26.0 (x86 de) (HKLM\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MSVCRT (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT Redists (Version: 1.0 - Sony Creative Software Inc.) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML4 Parser (HKLM\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
MyHeritage Family Tree Builder (HKLM\...\Family Tree Builder) (Version: 6.0.0.5634 - MyHeritage.com)
NCH DE Toolbar (HKLM\...\NCH_DE Toolbar) (Version: 6.3.3.3 - NCH DE)
NVIDIA PhysX (HKLM\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
OmniPage Pro 9.0 (HKLM\...\OmniPagePro9.0DeinstKey) (Version:  - )
PaperPort Image Printer (HKLM\...\{2BC2781A-F7F6-452E-95EB-018A522F1B2C}) (Version: 1.00.0000 - Nuance Communications, Inc.)
PDF zu Word 3 (HKLM\...\PDF zu Word 3) (Version:  - )
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Plants vs. Zombies (HKLM\...\Plants vs. Zombies) (Version:  - PopCap Games)
PlayMemories Home (HKLM\...\{35831FDB-25FF-4DD6-9670-31D12CE2B37E}) (Version: 8.0.30.12182 - Sony Corporation)
Prism Video File Converter (HKLM\...\Prism) (Version:  - NCH Software)
PunkBuster Services (HKLM\...\PunkBusterSvc) (Version: 0.992 - Even Balance, Inc.)
Quake Live Mozilla Plugin (HKLM\...\{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}) (Version: 1.0.520 - id Software)
QuickTime (HKLM\...\{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}) (Version: 7.73.80.64 - Apple Inc.)
SAMSUNG Mobile Composite Device Software (HKLM\...\SAMSUNG Mobile Composite Device) (Version:  - )
SAMSUNG Mobile Modem Driver Set (HKLM\...\SAMSUNG Mobile Modem) (Version:  - )
Samsung Mobile phone USB driver Drive Software (HKLM\...\Samsung Mobile phone USB driver Drive) (Version:  - )
SAMSUNG Mobile USB Modem 1.0 Software (HKLM\...\SAMSUNG Mobile USB Modem 1.0) (Version:  - )
SAMSUNG Mobile USB Modem Software (HKLM\...\SAMSUNG Mobile USB Modem) (Version:  - )
SavingsBull (Version: 1.0.0.0 - SavingsBull) Hidden
SavingsBullFilter (Version: 1.0.0.0 - SavingsBull Filter) Hidden <==== ATTENTION
ScanSoft PaperPort 11 (HKLM\...\{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}) (Version: 11.2.0000 - Nuance Communications, Inc.)
Screen Recording Suite V2.5.0 (HKLM\...\{EB9F3F92-4857-4121-AA6F-1C424AC6C266}_is1) (Version: 2.5.0 - Apowersoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Sierra-Dienstprogramme (HKLM\...\Sierra-Dienstprogramme) (Version:  - )
SimCity 4 (HKLM\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version:  - )
Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)
SOHLib for PlayMemories Home (Version: 1.0.2.12040 - Sony Corporation) Hidden
SopCast 3.5.0 (HKLM\...\SopCast) (Version: 3.5.0 - www.sopcast.com)
Steam (HKLM\...\Steam) (Version:  - Valve Corporation)
Switch Audiodatei-Konverter (HKLM\...\Switch) (Version:  - NCH Software)
swMSM (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TIPP10 Version 2.1.0 (HKLM\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
Tunatic (HKLM\...\Tunatic) (Version:  - )
Ulead VideoStudio 11 (HKLM\...\InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}) (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation)
Uninstall 1.0.0.1 (HKLM\...\Uninstall_is1) (Version:  - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{001E8BF3-EDC3-4D5E-9C11-1D0E599B6497}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2837583) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E21274CE-CA0C-49FA-93F4-DC292A052264}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{B5C70C99-B109-42FD-B219-FF12CA543F19}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (HKLM\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{81812245-FC84-426A-BC02-6659C88CC7B2}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2775360) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{80F56E3F-1D47-4E45-B6E0-FEF4E919F4F9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{8C55AA83-54C2-4236-A622-78440A411DC5}) (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (HKLM\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{E78E2B68-8FD1-42EE-BB74-99A4D9E6222D}) (Version:  - Microsoft)
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0 - DivX, Inc) Hidden
VideoPad Video Editor (HKLM\...\VideoPad) (Version:  - NCH Software)
VideoStudio (Version: 11.0.0.0000 - InterVideo Digital Technology Corporation) Hidden
VTPlus32 für WinTV (German) (HKLM\...\VTPlus32 für WinTV (German)) (Version:  - )
VueScan (HKLM\...\VueScan) (Version:  - )
WavePad Audiobearbeitungs-Software (HKLM\...\WavePad) (Version:  - NCH Software)
Windows Live Communications Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live Movie Maker (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live SOXE (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Movie Maker 2.6 (HKLM\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation)
WinRAR (HKLM\...\WinRAR archiver) (Version:  - )
Xvid 1.1.3 final uninstall (HKLM\...\Xvid_is1) (Version: 1.1 - Xvid team (Koepi))

==================== Restore Points  =========================

23-02-2014 18:00:13 Windows-Sicherung
25-02-2014 21:43:08 Windows Update
26-02-2014 16:17:55 Windows Update
27-02-2014 20:43:08 avast! antivirus system restore point

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00D7A3D6-2094-44E4-ADA6-80F25DBB6FD8} - System32\Tasks\{841CD838-8C2A-4B34-AD79-7BFD98D2F4A2} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/de/abandoninstall?source=lightinstaller&amp;page=tsProblems&amp;LastError=-3&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {00F268CD-45BF-4860-A96A-518AFF25CAC1} - System32\Tasks\{545CBA9C-E365-4A4C-9CCF-2BE907F9CB39} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.1.0.104.259&amp;LastError=-3
Task: {012441B6-2DCF-4139-B680-4CA050D951D4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-06-22] (Piriform Ltd)
Task: {08340262-CB0B-4DDC-A1D1-7C5B589B817A} - System32\Tasks\{DEE03AAB-EE7F-493D-BA1B-AD0DC291FBF6} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/de/abandoninstall?source=lightinstaller&amp;page=tsProblems&amp;LastError=-3&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-notinstalled
Task: {10A748DA-9A73-42F2-AC54-6555A7AA1403} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-19] (Google Inc.)
Task: {10B6D38B-1846-4731-A1D9-185DCAFA3E2D} - System32\Tasks\NCH Swift Sound\switchShakeIcon => C:\Program Files\NCH Swift Sound\Switch\Switch.exe [2011-05-06] (NCH Software)
Task: {279237C5-4411-41C2-B60E-79958A232D0A} - System32\Tasks\Start Registry Reviver => C:\Program Files\Reviversoft\Registry Reviver\RegistryReviver.exe
Task: {30452F43-FFAA-408D-9684-919DEDA75FA2} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {377C1819-1A2D-4786-BE62-D2AFE9E1EB67} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {3E949AE3-60A4-4CA3-8DB3-D5E4F343F396} - System32\Tasks\{08956A9E-5492-45D3-B9D9-F9D611459288} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/de/abandoninstall?source=lightinstaller&amp;page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {43063DBA-DF4F-404A-A549-D721ABFE9B5A} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files\TuneUp Utilities 2012\OneClick.exe
Task: {5B54D98F-2494-4246-9488-2B66E7B401CA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-19] (Google Inc.)
Task: {5E478E01-DB9E-4753-83EE-EFA123738886} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-27] (AVAST Software)
Task: {821536CF-C657-44B9-95FC-A52B222A522A} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3275157694-1737037856-612558311-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {87DCFE00-0586-4ACD-B72C-9BC9C63B4C4B} - System32\Tasks\{F79BC409-7891-4075-99A4-6782FF0FFE2A} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.104.259/de/abandoninstall?source=lightinstaller&amp;page=tsDownload&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {9256C04B-EFEB-447E-ADD8-E27278531C83} - System32\Tasks\{F8D1750B-EE65-45DD-89EB-350FECC9E0A0} => C:\Program Files\Skype\\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {B1AD6DF3-70F3-4200-8159-0DA449E248CC} - System32\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315} => C:\Program Files\V-bates\PrefHelper.exe
Task: {B355B5F9-380F-4204-B33A-FE2674AA4768} - System32\Tasks\{CCAAA896-169A-44F3-AB08-D5B7950F9DB8} => Firefox.exe hxxp://ui.skype.com/ui/0/5.1.0.112/de/abandoninstall?page=tsMain&amp;installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;alreadyoffered
Task: {B4A37996-D04B-4E5F-BF7D-6959AB3B4A83} - System32\Tasks\NCH Software\ExpressZipDowngrade => C:\Program Files\NCH Software\ExpressZip\expresszip.exe [2013-08-06] (NCH Software)
Task: {CE9E20C5-C419-4496-A6DA-23EC6786A5AF} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3275157694-1737037856-612558311-1001 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe
Task: {CEE1BA37-1A19-41D2-AE85-8F4C902A76ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-21] (Adobe Systems Incorporated)
Task: {D01BCED3-F7B3-44C7-8592-A6F64E239B56} - System32\Tasks\RegClean Prosch => C:\Program Files\RegClean Pro\RegCleanPro.exe <==== ATTENTION
Task: {F0440D9E-FC37-42AB-87CB-E4B62A3F09BB} - System32\Tasks\NCH Swift Sound\switchDowngrade => C:\Program Files\NCH Swift Sound\Switch\switch.exe [2011-05-06] (NCH Software)
Task: {F2E22B74-9A4D-4456-AB41-B926AC6FB270} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDms.exe [2013-11-07] (Sony Corporation)
Task: {F314D86B-866F-4476-9A85-CD0378FDF7A6} - System32\Tasks\NCH Software\videopadShakeIcon => C:\Program Files\NCH Software\VideoPad\VideoPad.exe [2012-03-28] (NCH Software)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315}.job => C:\Program Files\V-bates\PrefHelper.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2014-02-28 12:47 - 2014-02-28 10:29 - 02186240 _____ () C:\Program Files\AVAST Software\Avast\defs\14022800\algo.dll
2013-04-06 16:36 - 2013-04-06 16:31 - 00397704 _____ () C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 00087328 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2011-06-24 21:56 - 2011-06-24 21:56 - 01241888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-01-27 21:45 - 2014-01-27 21:45 - 00546112 _____ () C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe
2012-08-07 22:09 - 2012-08-07 22:38 - 00076888 _____ () C:\Windows\system32\PnkBstrA.exe
2014-02-14 10:27 - 2014-02-14 10:27 - 00144896 _____ () c:\Program Files\SavingsBullFilter\SavingsbullFilterService.exe
2014-02-13 15:35 - 2014-02-13 15:35 - 00233472 _____ () c:\Program Files\SavingsBullFilter\ProtocolFilters.dll
2014-02-14 10:20 - 2014-02-14 10:20 - 00102400 _____ () c:\Program Files\SavingsBullFilter\nfapi.dll
2010-08-28 16:19 - 2009-02-27 15:38 - 00139264 ____R () C:\Program Files\Brother\BrUtilities\BrLogAPI.dll
2014-02-27 21:44 - 2014-02-27 21:44 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-06-18 15:49 - 2013-06-18 15:49 - 00016384 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll
2013-04-29 23:24 - 2013-04-29 23:24 - 00095232 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll
2013-04-29 23:08 - 2013-04-29 23:08 - 00369152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2010-09-12 12:50 - 2010-03-15 10:28 - 00141824 _____ () C:\Program Files\WinRAR\rarext.dll
2013-12-15 20:22 - 2013-12-15 20:22 - 00083456 _____ () C:\Program Files\NCH Software\ExpressZip\ezcm.dll
2014-02-28 14:57 - 2014-02-20 02:02 - 00051016 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll
2014-02-28 14:57 - 2014-02-20 02:03 - 04060488 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\pdf.dll
2014-02-28 14:57 - 2014-02-20 02:03 - 00394568 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll
2014-02-28 14:57 - 2014-02-20 02:02 - 01647432 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll
2014-02-28 14:57 - 2014-02-20 02:03 - 13632840 _____ () C:\Program Files\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll
2014-02-28 16:22 - 2014-02-28 16:22 - 04591616 _____ () C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libglesv2.dll
2014-02-28 16:22 - 2014-02-28 16:22 - 00112128 _____ () C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\SwiftShader\1.0.5.0\libegl.dll
2014-01-24 16:36 - 2014-01-24 16:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AutoStart IR.lnk => C:\Windows\pss\AutoStart IR.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
MSCONFIG\startupreg: APSDaemon => "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: avgnt => "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
MSCONFIG\startupreg: BrMfcWnd => C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
MSCONFIG\startupreg: ControlCenter3 => C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: EPGServiceTool => C:\PROGRA~1\WinTV\EPG Services\System\EPGClient.exe
MSCONFIG\startupreg: IndexSearch => "C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: PaperPort PTD => "C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe"
MSCONFIG\startupreg: PPort11reminder => "C:\Program Files\ScanSoft\PaperPort\Ereg\Ereg.exe" -r "C:\ProgramData\ScanSoft\PaperPort\11\Config\Ereg\Ereg.ini"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SSBkgdUpdate => "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: UVS11 Preload => C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe

==================== Faulty Device Manager Devices =============

Name: Microsoft-Teredo-Tunneling-Adapter
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

==================== Memory info =========================== 

Percentage of memory in use: 71%
Total physical RAM: 3327.18 MB
Available physical RAM: 960.59 MB
Total Pagefile: 6652.65 MB
Available Pagefile: 3783.81 MB
Total Virtual: 2047.88 MB
Available Virtual: 1896.99 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:357.42 GB) (Free:246.54 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:108.34 GB) (Free:51.89 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 4926CB27)
Partition 1: (Active) - (Size=357 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=108 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Ich hoffe, dass es dir nichts ausmacht, wenn ich die Dateien bei Downloads gespeichert habe und darüber laufen lassen hab. Hab versucht das Programm zu deinstallieren und wie du geschrieben hast auf dem Desktop zu reinstallieren, aber leider wurde keine Addition Datei mehr erstellt. Nächstes Mal lese ich mir deine Anweisungen dreimal durch bevor ich irgendwas mache .

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

und ein frisches FRST log bitte.

Toll, dass du dir auch heute wieder die Zeit für mein Problem nimmst.
Also hier die Log Daten von Malewarebytes Anti-Maleware

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.01.04

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16518
Christoph :: FENSTER-PC [Administrator]

01.03.2014 17:46:33
mbam-log-2014-03-01 (17-46-33).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 223846
Laufzeit: 13 Minute(n), 6 Sekunde(n)

Infizierte Speicherprozesse: 2
C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe (PUP.Optional.Savingsbull) -> 2228 -> Löschen bei Neustart.
C:\Program Files\SavingsBullFilter\SavingsbullFilterService.exe (PUP.Optional.SavingsBull.A) -> 2476 -> Löschen bei Neustart.

Infizierte Speichermodule: 2
C:\Program Files\SavingsBullFilter\nfapi.dll (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.
C:\Program Files\SavingsBullFilter\ProtocolFilters.dll (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.

Infizierte Registrierungsschlüssel: 32
HKLM\SYSTEM\CurrentControlSet\Services\Level Quality Watcher (PUP.Optional.Savingsbull) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{EC4085F2-8DB3-45a6-AD0B-CA289F3C5D7E} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{2A42D13C-D427-4787-821B-CF6973855778} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Typelib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{10AD2C61-0898-4348-8600-14A342F22AC3} (PUP.Optional.ScorpionSaver) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7} (PUP.Optional.SearchQu) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7} (PUP.Optional.SearchQu) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0} (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0} (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0af350d9-3916-454b-ac53-0b0b65f41301} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB} (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SYSTEM\CurrentControlSet\Services\SavingsbullFilterService (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\SavingsBull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\AppDataLow\Software\Savings Bull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\Software\AppDataLow\Software\SavingsBull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Savings Bull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\SavingsBull Filter (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\SavingsbullFilter (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 6
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Daten: Ìéz—ƒ¯èEžây‚âÕ -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Daten:  -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{21EAF666-26B3-4a3c-ABD0-CA2F5A326744} (PUP.Optional.VBates) -> Daten: C:\Program Files\V-bates\Firefox -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 4
C:\Program Files\SavingsBullFilter (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Level Quality Watcher\v1.01 (PUP.Optional.Adpeak) -> Löschen bei Neustart.
C:\Program Files\SavingsBull (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 48
C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher32.exe (PUP.Optional.Savingsbull) -> Löschen bei Neustart.
C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com (1).exe (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\nw_27201_softonicdownloaderfo.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\BROTHER MFC-490CW user guide provided through bedienungsanleitung-pdf.com.exe (PUP.Optional.LiveSoftAction.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\jZipSetup-r110-w-bc.exe (PUP.Optional.Bandoo.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\agsetup183se.exe (PUP.Funmoods) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\sysrc_trial_25044 (1).exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\sysrc_trial_25044 (2).exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\sysrc_trial_25044.exe (PUP.Optional.RegCleanerPro) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\FLVPlayerSetup-64b43Mk.exe (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\FLVPlayerSetup-aNx7GQZ.exe (PUP.Optional.Somoto) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\Setup.exe (PUP.Optional.DomalQ) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\Downloads\SoftonicDownloader_fuer_mp3directcut.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\sample.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\Installbat.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\Microsoft.Deployment.WindowsInstaller.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\Microsoft.Deployment.WindowsInstaller.xml (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\netfilter.sys (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\nfapi.dll (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.
C:\Program Files\SavingsBullFilter\nfregdrv.exe (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBullFilter\ProtocolFilters.dll (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.
C:\Program Files\SavingsBullFilter\SavingsbullFilterService.exe (PUP.Optional.SavingsBull.A) -> Löschen bei Neustart.
C:\Program Files\Mozilla Firefox\defaults\pref\all-iminent.js (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\SearchTheWeb.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Blog.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\FAQ.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Help.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent\Iminent.lnk (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Christoph\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Level Quality Watcher\v1.01\levelqualitywatcher64.exe (PUP.Optional.Adpeak) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\background.js (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\bootstrap.js (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\bootstrap.js.old (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\CustomActionInstall (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\CustomActionUninstall (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\ff_main.js.old (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon128.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon16.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon32.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon48.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon64.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\icon8.png (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\IEOptimizer.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\manifest.json (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\marcopolo.js (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\Microsoft.Deployment.WindowsInstaller.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\Microsoft.Deployment.WindowsInstaller.xml (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\SavingsBull\SendJson.dll (PUP.Optional.SavingsBull.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Hier ist die Log S0 Datei vom AdwCleaner

%20Italia%20foto||hvv%20plan|[...]
Zeile gelöscht : user_pref("icqtoolbar.icqgeo", 49);
Zeile gelöscht : user_pref("icqtoolbar.installTime", "1343671135");
Zeile gelöscht : user_pref("icqtoolbar.newtab_most_visited_state", "1");
Zeile gelöscht : user_pref("icqtoolbar.newtab_recently_closed_state", "1");
Zeile gelöscht : user_pref("icqtoolbar.numberOfSearches", 0);
Zeile gelöscht : user_pref("icqtoolbar.previousFFVersion", "26.0");
Zeile gelöscht : user_pref("icqtoolbar.showPc", false);
Zeile gelöscht : user_pref("icqtoolbar.skip_default_search", "no");
Zeile gelöscht : user_pref("icqtoolbar.suggestions", false);
Zeile gelöscht : user_pref("icqtoolbar.uniqueID", "134162799413416281141341771023237");
Zeile gelöscht : user_pref("icqtoolbar.usageStatstTimestamp", 1393594864);
Zeile gelöscht : user_pref("icqtoolbar.version", "1.5.3");
Zeile gelöscht : user_pref("icqtoolbar.voucherHideClicks", 0);
Zeile gelöscht : user_pref("icqtoolbar.voucherMoreLinkClicks", 0);
Zeile gelöscht : user_pref("icqtoolbar.voucherRedeemClicks", 0);
Zeile gelöscht : user_pref("icqtoolbar.voucherWasShown", 0);
Zeile gelöscht : user_pref("icqtoolbar.xmlEnableSuggestions", false);
Zeile gelöscht : user_pref("icqtoolbar.xmlLanguage", "de");
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_currentVersion", "312E31332E302E3137");
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_currentVersion.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_globalKeysMigratedToLocalStorage", "31");
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_globalKeysMigratedToLocalStorage.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_migrated_from_ls", "31");
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_migrated_from_ls.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_userBornDate", "4E2F41");
Zeile gelöscht : user_pref("valueApps.CT2269050.mam_gk_userBornDate.storedInFile", false);

-\\ Google Chrome v33.0.1750.117

[ Datei : C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [45349 octets] - [01/03/2014 18:09:17]
AdwCleaner[S0].txt - [45247 octets] - [01/03/2014 18:11:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [45308 octets] ##########
         

und hier die neue vom FRST
FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-03-2014
Ran by Christoph (administrator) on FENSTER-PC on 01-03-2014 18:24:32
Running from C:\Users\Christoph\Desktop
Microsoft Windows 7 Home Premium  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(InterVideo Inc.) C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
(Hauppauge Computer Works) C:\Program Files\WinTV\EPG Services\System\EPGService.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe
() C:\Windows\system32\PnkBstrA.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Caere Corporation) C:\Program Files\Caere\OmniPagePro90\OPware32.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\system32\ntvdm.exe
(Sony Corporation) C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\SOHLib\SOHDms.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\system32\prevhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [Family Tree Builder Update] - C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [229376 2011-12-21] (MyHeritage)
HKLM\...\Run: [PATHPILOT] - C:\Program Files\Aktiv MP3 Recorder\Aktiv MP3 Recorder.lnk
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [OmniPage] - C:\Program Files\Caere\OmniPagePro90\opware32.exe [44032 1998-10-22] (Caere Corporation)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [PMBVolumeWatcher] - C:\Program Files\Sony\PlayMemories Home\PMBVolumeWatcher.exe [2367512 2013-12-18] (Sony Corporation)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] - C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-27] (AVAST Software)
HKLM\...\Runonce: [Register urlmon.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\urlmon.dll
HKLM\...\Runonce: [Register hlink.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\hlink.dll
HKLM\...\Runonce: [Register oleaut32.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\oleaut32.dll
HKLM\...\Runonce: [IE 3.0 RegSvr schannel.dll] - C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\schannel.dll
HKLM\...\Runonce: [network_smb_bundesligagufm] - [X]
HKLM\...\RunOnce: [wextract_cleanup0] - rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Users\CHRIST~1\AppData\Local\Temp\IXP000.TMP\" [126464 2009-07-14] (Microsoft Corporation)
HKLM\...\Runonce: [MSPCLOCK] - rundll32.exe streamci,StreamingDeviceSetup {97ebaacc-95bd-11d0-a3ea-00a0c9223196},{53172480-4791-11D0-A5D6-28DB04C10000},{53172480-4791-11D0-A5D6-28DB04C10000}
HKLM\...\Runonce: [MSPQM] - rundll32.exe streamci,StreamingDeviceSetup {DDF4358E-BB2C-11D0-A42F-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196},{97EBAACB-95BD-11D0-A3EA-00A0C9223196}
HKLM\...\Runonce: [MSKSSRV] - rundll32.exe streamci,StreamingDeviceSetup {96E080C7-143C-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196},{3C0D501A-140B-11D1-B40F-00A0C9223196}
HKLM\...\Runonce: [MSTEE.CxTransform] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},{CF1DDA2C-9743-11D0-A3EE-00A0C9223196},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [MSTEE.Splitter] - rundll32.exe streamci,StreamingDeviceSetup {cfd669f1-9bc2-11d0-8299-0000f822fe8a},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},{0A4252A0-7E70-11D0-A5D6-28DB04C10000},C:\Windows\inf\ksfilter.inf,MSTEE.Interface.Install
HKLM\...\Runonce: [WDM_DRMKAUD] - rundll32.exe streamci,StreamingDeviceSetup {EEC12DB6-AD9C-4168-8658-B03DAEF417FE},{ABD61E00-9350-47e2-A632-4438B90C6641},{FFBB6E3F-CCFE-4D84-90D9-421418B03A8E},C:\Windows\inf\WDMAUDIO.inf,WDM_DRMKAUD.Interface.Install
HKLM\...\Runonce: [InnoSetupRegFile.0000000001] - "C:\Windows\is-PG3H8.exe" /REG /REGSVRMODE
HKLM\...\Runonce: [SpUninstallCleanUp] - REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKLM\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-08-19] (Google Inc.)
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Run: [MsgCenterExe] - "C:\Program Files\Real\RealPlayer\update\RealOneMessageCenter.exe"  -osboot
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\Policies\Explorer: [_NoDriveTypeAutoRun] 0
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {483d575e-d0e5-11df-b7ce-806e6f6e6963} - H:\autorun.exe
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {a60e763c-50ee-11e2-bff4-0026182f8e70} - F:\PMCsetup.exe
HKU\S-1-5-21-3275157694-1737037856-612558311-1001\...\MountPoints2: {b920e969-66a7-11e0-a45f-0026182f8e70} - F:\LaunchU3.exe -a

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x08E51D5B153FCB01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.bing.com/search?q={searchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
SearchScopes: HKLM - DefaultScope value is missing.
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: DivX HiQ - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.dll No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 09 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default
FF SearchEngineOrder.1: Ask.com Search
FF SelectedSearchEngine: Google
FF NetworkProxy: "autoconfig_url", "file:///C:\\Users\\CHRIST~1\\AppData\\Local\\Temp\\proxtube.pac"
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @idsoftware.com/QuakeLive - C:\ProgramData\id Software\QuakeLive\npquakezero.dll (id Software Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Christoph\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: SavingsBull - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\SavingsBull@jetpack [2014-02-21]
FF Extension: ICQ Sparberater - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\ciuvo-extension@icq.de.xpi [2012-07-10]
FF Extension: Better Battlelog (BBLog) - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi [2013-05-31]
FF Extension: Torntv - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\torntv@torntv.com.xpi [2012-11-03]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi [2012-11-20]
FF Extension: Adblock Plus - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-02-29]
FF Extension: Greasemonkey - C:\Users\Christoph\AppData\Roaming\Mozilla\Firefox\Profiles\3css7o3i.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-24]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011-03-02]
FF HKLM\...\Firefox\Extensions: [{6904342A-8307-11DF-A508-4AE2DFD72085}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa
FF Extension: DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011-03-02]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-27]

Chrome: 
=======
CHR Extension: (Google Docs) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google-Suche) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (AdBlock) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-02-28]
CHR Extension: (Google Wallet) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-28]
CHR Extension: (Google Mail) - C:\Users\Christoph\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]
CHR HKLM\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2011-02-08]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-02-27]
CHR HKLM\...\Chrome\Extension: [hempmfkijmahkaddljkmchcmjbojoedl] - C:\Users\CHRIST~1\AppData\Local\Temp\crx622F.tmp [2014-02-27]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2011-02-08]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2011-02-08]

========================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-18] (Avira Operations GmbH & Co. KG)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-27] (AVAST Software)
R2 Capture Device Service; C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
R2 EPGService; C:\Program Files\WinTV\EPG Services\System\EPGService.exe [437248 2008-05-30] (Hauppauge Computer Works)
R2 PMBDeviceInfoProvider; C:\Program Files\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [481304 2013-12-18] (Sony Corporation)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76888 2012-08-07] ()
S3 HauppaugeTVServer; C:\PROGRA~1\WinTV\HCWTVS~1.EXE [X]

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-02-27] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2014-02-27] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-02-27] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2014-02-27] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410784 2014-02-27] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [64168 2014-02-27] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180248 2014-02-27] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-06-28] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
S1 CXAVSAUD; C:\Windows\System32\DRIVERS\pvavsaud.sys [11008 2005-10-25] (Conexant Systems, Inc.)
R1 HCW88AUD; C:\Windows\System32\drivers\hcw88aud.sys [12928 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88BDA; C:\Windows\System32\drivers\hcw88bda.sys [182400 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88TSE; C:\Windows\System32\drivers\hcw88tse.sys [320256 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88TUNE; C:\Windows\System32\drivers\hcw88tun.sys [74624 2008-04-19] (Hauppauge Computer Works, Inc.)
R3 hcw88vid; C:\Windows\System32\drivers\hcw88vid.sys [394880 2008-04-19] (Hauppauge Computer Works, Inc)
R3 HCW88XBAR; C:\Windows\System32\drivers\HCW88BAR.sys [17280 2008-04-19] (Hauppauge Computer Works, Inc.)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-18] (Siliten)
R3 L1E; C:\Windows\System32\DRIVERS\L1E62x86.sys [48640 2009-08-23] (Atheros Communications, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-06-28] ()
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R1 netfilter; C:\Windows\System32\drivers\netfilter.sys [47488 2013-11-20] (NetFilterSDK.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [697328 2010-10-06] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-04-06] (Avira GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14848 2009-09-19] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [123648 2009-09-19] (MCCI Corporation)
R1 StarOpen; C:\Windows\system32\Drivers\StarOpen.sys [5632 2006-07-24] ()
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [37064 2013-01-20] (Anchorfree Inc.)
S3 mdxgthkn; \??\C:\Users\CHRIST~1\AppData\Local\Temp\mdxgthkn.sys [X]
S3 XDva394; \??\C:\Windows\system32\XDva394.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-01 18:24 - 2014-03-01 18:24 - 00000000 ____D () C:\Users\Christoph\Desktop\FRST-OlderVersion
2014-03-01 18:08 - 2014-03-01 18:17 - 00000000 ____D () C:\AdwCleaner
2014-03-01 18:08 - 2014-03-01 18:08 - 01244192 _____ () C:\Users\Christoph\Downloads\adwcleaner.exe
2014-03-01 17:43 - 2014-03-01 17:43 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-01 17:43 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-01 17:42 - 2014-03-01 17:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christoph\Downloads\mbam-setup-1.75.0.1300.exe
2014-02-28 20:59 - 2014-03-01 18:24 - 00024286 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-02-28 20:58 - 2014-03-01 18:24 - 01144320 _____ (Farbar) C:\Users\Christoph\Desktop\FRST.exe
2014-02-28 20:26 - 2014-02-28 20:26 - 00000162 ____H () C:\Users\Christoph\Downloads\~$dition.txt
2014-02-28 20:21 - 2014-02-28 20:21 - 00000162 ____H () C:\Users\Christoph\Downloads\~$FRST.txt
2014-02-28 18:09 - 2014-03-01 18:24 - 00000000 ____D () C:\FRST
2014-02-28 16:38 - 2014-02-28 16:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 16:37 - 2014-02-28 16:38 - 01037734 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-02-28 14:57 - 2014-02-28 14:57 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 11:31 - 2014-02-28 11:31 - 00000162 ____H () C:\Users\Christoph\Downloads\~$T00001.txt
2014-02-28 11:31 - 2014-02-28 11:31 - 00000032 _____ () C:\Users\Christoph\Downloads\ATT00001.txt
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\AVAST Software
2014-02-27 21:44 - 2014-02-27 21:44 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00410784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-27 21:44 - 2014-02-27 21:44 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-27 21:44 - 2014-02-27 21:44 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-27 21:43 - 2014-02-27 21:43 - 00000000 ____D () C:\Program Files\AVAST Software
2014-02-27 21:42 - 2014-02-27 21:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-02-27 21:38 - 2014-02-27 21:41 - 90578216 _____ (AVAST Software) C:\Users\Christoph\Downloads\avast_free_antivirus_setup.exe
2014-02-27 21:05 - 2014-02-27 21:33 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Nico Mak Computing
2014-02-27 21:04 - 2014-02-27 21:04 - 04892480 _____ (WinZip International LLC ) C:\Users\Christoph\Downloads\wzmp_8.exe
2014-02-26 17:47 - 2014-02-26 17:47 - 00001187 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\ProgramData\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-02-26 17:12 - 2014-02-26 17:12 - 00380160 _____ () C:\Users\Christoph\Downloads\E638.tmp
2014-02-26 05:09 - 2014-03-01 18:01 - 00092760 _____ () C:\Windows\PFRO.log
2014-02-25 09:25 - 2014-02-25 09:25 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (8).xlsx
2014-02-21 16:42 - 2014-02-21 16:45 - 77047096 _____ (Landesfinanzdirektion Thüringen) C:\Users\Christoph\Downloads\ElsterFormular-15.0.20140212p.exe
2014-02-20 17:31 - 2014-02-20 17:31 - 00295504 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-20 17:30 - 2014-03-01 18:13 - 00001736 _____ () C:\Windows\setupact.log
2014-02-20 17:30 - 2014-02-20 17:30 - 00919728 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 13:13 - 2014-02-20 13:13 - 00009343 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (ultimo4).xlsx
2014-02-20 13:12 - 2014-02-20 13:12 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (7).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (6).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (5).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (4).xlsx
2014-02-20 13:10 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (3).xlsx
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAF4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAD4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA95.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA94.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA93.tmp
2014-02-19 20:24 - 2014-02-28 18:35 - 00000000 ____D () C:\Program Files\Steam
2014-02-19 20:24 - 2014-02-19 20:24 - 00000921 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-19 20:22 - 2014-02-19 20:23 - 01141680 _____ () C:\Users\Christoph\Downloads\SteamSetup.exe
2014-02-19 13:19 - 2014-02-19 13:19 - 00290557 _____ () C:\Users\Christoph\Downloads\BBE9.tmp
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\ProgramData\ATI
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD AVT
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD APP
2014-02-18 10:56 - 2014-02-18 10:56 - 00000000 ____D () C:\AMD
2014-02-18 10:54 - 2014-02-18 10:54 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\library_dir
2014-02-18 10:51 - 2014-02-18 10:51 - 01012920 _____ () C:\Users\Christoph\Downloads\amddriverdownloader.exe
2014-02-17 16:21 - 2014-02-12 14:04 - 00000426 _____ () C:\AVScanner.ini
2014-02-16 21:29 - 2009-09-14 20:20 - 00000944 _____ () C:\Users\Christoph\Desktop\Windows Media Player - Kopie.lnk
2014-02-16 19:12 - 2014-03-01 18:13 - 00000284 _____ () C:\Windows\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315}.job
2014-02-16 19:12 - 2014-02-16 19:12 - 01176064 _____ () C:\Windows\is-PG3H8.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 00022701 _____ () C:\Windows\is-PG3H8.msg
2014-02-16 19:12 - 2014-02-16 19:12 - 00000248 _____ () C:\Windows\is-PG3H8.lst
2014-02-16 19:11 - 2014-02-16 19:11 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\ BROTHER MFC-490CW user guide
2014-02-16 15:45 - 2014-02-16 15:45 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_Bluetooth-Drucker_Treiber_Update_02-2014.exe
2014-02-16 15:44 - 2014-02-16 15:44 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_MFC-490CW_Treiber_Update_02-2014.exe
2014-02-16 08:08 - 2014-02-16 08:08 - 00480694 _____ () C:\Users\Christoph\Downloads\Ölflyer 140215.pptx
2014-02-15 13:18 - 2014-02-15 13:18 - 00473035 _____ () C:\Users\Christoph\Downloads\Ölflyer 140214.pptx
2014-02-13 04:36 - 2009-09-14 20:20 - 00000944 _____ () C:\Users\Christoph\Desktop\Windows Media Player.lnk
2014-02-12 16:44 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 16:44 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 16:44 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 16:44 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 16:44 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 16:44 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 16:44 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 16:44 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 16:44 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 16:44 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 16:43 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 16:43 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 16:43 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 16:43 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 16:43 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 16:43 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 16:43 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 16:43 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 16:43 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 16:43 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 16:43 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 16:34 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 09:56 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 09:56 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 09:56 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 09:54 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 09:54 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 09:53 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 09:53 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 09:53 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 09:53 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-11 21:49 - 2014-02-11 21:49 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (2).xlsx
2014-02-10 21:50 - 2014-02-10 21:50 - 00599792 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202a.pptx
2014-02-10 15:04 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (1).xlsx
2014-02-10 15:03 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia.xlsx
2014-02-08 16:43 - 2014-02-10 09:04 - 00000000 ____D () C:\Users\Christoph\Desktop\niendorf ripetizione italiano
2014-02-07 04:44 - 2014-02-07 04:44 - 00005523 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-07 04:44 - 2013-12-18 21:10 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-02-07 04:44 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-02-07 04:44 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-07 04:44 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-06 15:42 - 2014-02-06 15:42 - 13051643 _____ () C:\Users\Christoph\Downloads\EAC5.tmp
2014-02-05 12:52 - 2014-02-05 12:52 - 00073477 ____H () C:\Users\Christoph\Documents\~WRL3512.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\ACFD.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\AC8E.tmp
2014-02-02 21:01 - 2014-02-02 21:01 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Corel
2014-02-02 20:50 - 2014-02-02 20:50 - 00000000 ____D () C:\Users\Christoph\Documents\Micrografx
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Corel
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-02 19:10 - 2014-02-02 20:03 - 00599794 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202.pptx
2014-02-02 18:39 - 2014-02-02 18:39 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2 (1).pptx
2014-02-02 18:10 - 2014-02-02 18:10 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2.pptx
2014-02-01 09:05 - 2014-02-01 09:05 - 00062976 _____ () C:\Users\Christoph\Downloads\Kollegiumsliste Mail 01-02-1014.xls

==================== One Month Modified Files and Folders =======

2014-03-01 18:24 - 2014-03-01 18:24 - 00000000 ____D () C:\Users\Christoph\Desktop\FRST-OlderVersion
2014-03-01 18:24 - 2014-02-28 20:59 - 00024286 _____ () C:\Users\Christoph\Desktop\FRST.txt
2014-03-01 18:24 - 2014-02-28 20:58 - 01144320 _____ (Farbar) C:\Users\Christoph\Desktop\FRST.exe
2014-03-01 18:24 - 2014-02-28 18:09 - 00000000 ____D () C:\FRST
2014-03-01 18:21 - 2009-07-14 05:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-01 18:21 - 2009-07-14 05:34 - 00014944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-01 18:17 - 2014-03-01 18:08 - 00000000 ____D () C:\AdwCleaner
2014-03-01 18:14 - 2011-09-13 22:12 - 00000438 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-03-01 18:13 - 2014-02-20 17:30 - 00001736 _____ () C:\Windows\setupact.log
2014-03-01 18:13 - 2014-02-16 19:12 - 00000284 _____ () C:\Windows\Tasks\FF Watcher {3C5CE15A-5F1D-4BA8-B2A2-00CBB8159315}.job
2014-03-01 18:13 - 2010-08-19 17:33 - 00001094 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-01 18:13 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-01 18:12 - 2010-08-18 21:22 - 01145083 _____ () C:\Windows\WindowsUpdate.log
2014-03-01 18:08 - 2014-03-01 18:08 - 01244192 _____ () C:\Users\Christoph\Downloads\adwcleaner.exe
2014-03-01 18:01 - 2014-02-26 05:09 - 00092760 _____ () C:\Windows\PFRO.log
2014-03-01 18:01 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2014-03-01 17:48 - 2012-06-23 17:56 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-01 17:43 - 2014-03-01 17:43 - 00001067 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Malwarebytes
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-01 17:43 - 2014-03-01 17:43 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-03-01 17:42 - 2014-03-01 17:42 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Christoph\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-01 17:34 - 2010-08-19 17:33 - 00001098 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-01 17:25 - 2009-07-14 05:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-01 16:42 - 2012-10-17 21:04 - 08543232 ___SH () C:\Users\Christoph\Desktop\Thumbs.db
2014-03-01 15:40 - 2011-09-07 19:47 - 02237952 ___SH () C:\Users\Christoph\Downloads\Thumbs.db
2014-03-01 12:37 - 2012-06-22 09:37 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Media Player Classic
2014-03-01 01:47 - 2012-12-14 17:05 - 00000000 ____D () C:\Users\Christoph\Desktop\3sammlung
2014-02-28 20:26 - 2014-02-28 20:26 - 00000162 ____H () C:\Users\Christoph\Downloads\~$dition.txt
2014-02-28 20:21 - 2014-02-28 20:21 - 00000162 ____H () C:\Users\Christoph\Downloads\~$FRST.txt
2014-02-28 18:35 - 2014-02-19 20:24 - 00000000 ____D () C:\Program Files\Steam
2014-02-28 18:22 - 2014-01-24 16:36 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-28 16:38 - 2014-02-28 16:38 - 00000000 ____D () C:\Windows\ERUNT
2014-02-28 16:38 - 2014-02-28 16:37 - 01037734 _____ (Thisisu) C:\Users\Christoph\Desktop\JRT.exe
2014-02-28 16:14 - 2010-08-31 09:44 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Mozilla
2014-02-28 14:57 - 2014-02-28 14:57 - 00002193 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-28 14:57 - 2010-08-19 17:28 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Google
2014-02-28 14:57 - 2010-08-19 17:24 - 00000000 ____D () C:\Program Files\Google
2014-02-28 11:35 - 2011-09-26 10:48 - 00000000 ____D () C:\Users\Christoph\AppData\Local\Windows Live
2014-02-28 11:31 - 2014-02-28 11:31 - 00000162 ____H () C:\Users\Christoph\Downloads\~$T00001.txt
2014-02-28 11:31 - 2014-02-28 11:31 - 00000032 _____ () C:\Users\Christoph\Downloads\ATT00001.txt
2014-02-27 22:54 - 2010-08-18 21:31 - 01658092 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 21:45 - 2014-02-27 21:45 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\AVAST Software
2014-02-27 21:44 - 2014-02-27 21:44 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00410784 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-27 21:44 - 2014-02-27 21:44 - 00180248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00079720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-02-27 21:44 - 2014-02-27 21:44 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-27 21:44 - 2014-02-27 21:44 - 00002119 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-27 21:43 - 2014-02-27 21:43 - 00000000 ____D () C:\Program Files\AVAST Software
2014-02-27 21:42 - 2014-02-27 21:42 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-02-27 21:41 - 2014-02-27 21:38 - 90578216 _____ (AVAST Software) C:\Users\Christoph\Downloads\avast_free_antivirus_setup.exe
2014-02-27 21:33 - 2014-02-27 21:05 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Nico Mak Computing
2014-02-27 21:04 - 2014-02-27 21:04 - 04892480 _____ (WinZip International LLC ) C:\Users\Christoph\Downloads\wzmp_8.exe
2014-02-27 16:16 - 2010-08-31 01:18 - 00000000 ____D () C:\Program Files\Common Files\Steam
2014-02-27 05:40 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-26 17:47 - 2014-02-26 17:47 - 00001187 _____ () C:\Users\Public\Desktop\ElsterFormular.lnk
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\ProgramData\elsterformular
2014-02-26 17:47 - 2014-02-26 17:47 - 00000000 ____D () C:\Program Files\ElsterFormular
2014-02-26 17:12 - 2014-02-26 17:12 - 00380160 _____ () C:\Users\Christoph\Downloads\E638.tmp
2014-02-25 22:48 - 2011-03-07 19:23 - 00000000 ___RD () C:\Program Files\Skype
2014-02-25 22:48 - 2011-01-27 21:15 - 00000000 ____D () C:\ProgramData\Skype
2014-02-25 09:25 - 2014-02-25 09:25 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (8).xlsx
2014-02-21 16:45 - 2014-02-21 16:42 - 77047096 _____ (Landesfinanzdirektion Thüringen) C:\Users\Christoph\Downloads\ElsterFormular-15.0.20140212p.exe
2014-02-21 13:48 - 2012-06-23 20:45 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-21 13:48 - 2012-04-07 15:20 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-20 17:31 - 2014-02-20 17:31 - 00295504 _____ () C:\Users\Christoph\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00919728 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-20 17:30 - 2014-02-20 17:30 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-20 17:30 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-02-20 13:13 - 2014-02-20 13:13 - 00009343 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (ultimo4).xlsx
2014-02-20 13:12 - 2014-02-20 13:12 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (7).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (6).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (5).xlsx
2014-02-20 13:11 - 2014-02-20 13:11 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (4).xlsx
2014-02-20 13:11 - 2014-02-20 13:10 - 00009264 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (3).xlsx
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAF4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AAD4.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA95.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA94.tmp
2014-02-20 12:56 - 2014-02-20 12:56 - 00086256 _____ () C:\Users\Christoph\Downloads\AA93.tmp
2014-02-19 20:24 - 2014-02-19 20:24 - 00000921 _____ () C:\Users\Public\Desktop\Steam.lnk
2014-02-19 20:23 - 2014-02-19 20:22 - 01141680 _____ () C:\Users\Christoph\Downloads\SteamSetup.exe
2014-02-19 20:19 - 2010-08-18 21:30 - 00000000 ____D () C:\Users\Christoph
2014-02-19 16:01 - 2013-07-14 20:02 - 00043520 _____ () C:\Windows\system32\CmdLineExt03.dll
2014-02-19 13:19 - 2014-02-19 13:19 - 00290557 _____ () C:\Users\Christoph\Downloads\BBE9.tmp
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\ProgramData\ATI
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD AVT
2014-02-18 11:02 - 2014-02-18 11:02 - 00000000 ____D () C:\Program Files\AMD APP
2014-02-18 11:02 - 2013-07-18 02:09 - 00000000 ____D () C:\ProgramData\AMD
2014-02-18 11:01 - 2013-07-18 02:08 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-02-18 10:56 - 2014-02-18 10:56 - 00000000 ____D () C:\AMD
2014-02-18 10:54 - 2014-02-18 10:54 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\library_dir
2014-02-18 10:51 - 2014-02-18 10:51 - 01012920 _____ () C:\Users\Christoph\Downloads\amddriverdownloader.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 01176064 _____ () C:\Windows\is-PG3H8.exe
2014-02-16 19:12 - 2014-02-16 19:12 - 00022701 _____ () C:\Windows\is-PG3H8.msg
2014-02-16 19:12 - 2014-02-16 19:12 - 00000248 _____ () C:\Windows\is-PG3H8.lst
2014-02-16 19:11 - 2014-02-16 19:11 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\ BROTHER MFC-490CW user guide
2014-02-16 18:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-16 15:45 - 2014-02-16 15:45 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_Bluetooth-Drucker_Treiber_Update_02-2014.exe
2014-02-16 15:44 - 2014-02-16 15:44 - 03441528 _____ (Solvusoft Corporation ) C:\Users\Christoph\Downloads\Brother_MFC-490CW_Treiber_Update_02-2014.exe
2014-02-16 08:08 - 2014-02-16 08:08 - 00480694 _____ () C:\Users\Christoph\Downloads\Ölflyer 140215.pptx
2014-02-15 13:18 - 2014-02-15 13:18 - 00473035 _____ () C:\Users\Christoph\Downloads\Ölflyer 140214.pptx
2014-02-13 22:45 - 2014-01-09 20:48 - 00001612 _____ () C:\Users\Christoph\Desktop\Vorstellung der Italienisch Arbeitsgruppe Aug 2013 - Verknüpfung.lnk
2014-02-13 21:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-02-13 14:00 - 2013-11-27 12:51 - 00000000 ____D () C:\Users\Christoph\Desktop\mama musica
2014-02-12 16:45 - 2012-05-05 18:26 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-12 16:41 - 2013-07-22 13:50 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 16:38 - 2010-08-28 08:12 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 16:35 - 2009-07-14 03:04 - 00000621 _____ () C:\Windows\win.ini
2014-02-12 16:34 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\de-DE
2014-02-12 14:04 - 2014-02-17 16:21 - 00000426 _____ () C:\AVScanner.ini
2014-02-12 06:58 - 2013-08-01 15:11 - 00000000 ____D () C:\Users\Christoph\Desktop\Musica Emma
2014-02-11 21:49 - 2014-02-11 21:49 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (2).xlsx
2014-02-11 14:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\wfp
2014-02-11 14:51 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\registration
2014-02-10 21:50 - 2014-02-10 21:50 - 00599792 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202a.pptx
2014-02-10 15:04 - 2014-02-10 15:04 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia (1).xlsx
2014-02-10 15:04 - 2014-02-10 15:03 - 00009038 _____ () C:\Users\Christoph\Downloads\costi x tedeschi a ischia.xlsx
2014-02-10 09:04 - 2014-02-08 16:43 - 00000000 ____D () C:\Users\Christoph\Desktop\niendorf ripetizione italiano
2014-02-08 17:09 - 2012-05-20 14:56 - 00000000 ____D () C:\Users\Christoph\Desktop\Emma
2014-02-07 16:26 - 2011-09-30 20:45 - 00000000 ____D () C:\Windows\Minidump
2014-02-07 16:26 - 2010-08-18 22:19 - 00000000 ____D () C:\Windows\Panther
2014-02-07 06:45 - 2013-09-24 23:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-07 04:44 - 2014-02-07 04:44 - 00005523 _____ () C:\Windows\system32\jupdate-1.7.0_51-b13.log
2014-02-07 04:44 - 2010-11-27 18:18 - 00000000 ____D () C:\Program Files\Java
2014-02-06 15:42 - 2014-02-06 15:42 - 13051643 _____ () C:\Users\Christoph\Downloads\EAC5.tmp
2014-02-06 11:38 - 2014-02-12 16:43 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-12 16:44 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-12 16:44 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-12 16:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-12 16:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 16:43 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-12 16:44 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 16:44 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-12 16:44 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-12 16:44 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-12 16:43 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-12 16:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-12 16:44 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-12 16:44 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:25 - 2014-02-12 16:43 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:13 - 2014-02-12 16:43 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 16:43 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 16:43 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-12 16:43 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-12 16:43 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-12 16:43 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-05 12:52 - 2014-02-05 12:52 - 00073477 ____H () C:\Users\Christoph\Documents\~WRL3512.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\ACFD.tmp
2014-02-04 19:01 - 2014-02-04 19:01 - 00040960 _____ () C:\Users\Christoph\Downloads\AC8E.tmp
2014-02-02 21:01 - 2014-02-02 21:01 - 00000000 ____D () C:\Users\Christoph\AppData\Roaming\Corel
2014-02-02 20:50 - 2014-02-02 20:50 - 00000000 ____D () C:\Users\Christoph\Documents\Micrografx
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Corel
2014-02-02 20:49 - 2014-02-02 20:49 - 00000000 ____D () C:\Program Files\Common Files\Corel
2014-02-02 20:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system
2014-02-02 20:03 - 2014-02-02 19:10 - 00599794 _____ () C:\Users\Christoph\Downloads\Ölflyer 140202.pptx
2014-02-02 18:39 - 2014-02-02 18:39 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2 (1).pptx
2014-02-02 18:10 - 2014-02-02 18:10 - 00356376 _____ () C:\Users\Christoph\Downloads\Ölflyer 140127 2.pptx
2014-02-01 09:05 - 2014-02-01 09:05 - 00062976 _____ () C:\Users\Christoph\Downloads\Kollegiumsliste Mail 01-02-1014.xls

Some content of TEMP:
====================
C:\Users\Christoph\AppData\Local\Temp\avgnt.exe
C:\Users\Christoph\AppData\Local\Temp\Quarantine.exe
C:\Users\Christoph\AppData\Local\Temp\SIntf16.dll
C:\Users\Christoph\AppData\Local\Temp\SIntf32.dll
C:\Users\Christoph\AppData\Local\Temp\SIntfNT.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-28 05:44

==================== End Of Log ============================
         

--- --- ---

--- --- ---


Dass Problem mit den Werbeverlinkungen scheint behoben zu sein und dafür danke ich dir sehr .Gibt es noch was, was ich tun sollte?

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?