Windows 7 System mit Internet-Trojaner infiziert

Bootsektor · 17.03.2014, 21:06

Hallo Steffen.

Hmm, ok. Nicht sehr aussagekräftig.
Bitte mach jetzt folgendes.

Schritt 1
Bitte lasse die Datei aus der Code-Box bei Virustotal überprüfen.

Klicke auf Wählen Sie eine
Kopiere nun folgendes in die Suchleiste
Code:
ATTFilter
```
C:\Users\Steffen\Desktop\MBR.dat
         
```
und klicke auf Öffnen.
Klicke auf Scannen!.
Warte bitte bis die Datei vollständig hochgeladen wurde. Solltest Du folgende Meldung bekommen

Zitat:

Diese Datei wurde bereits von VirusTotal analysiert...

klicke auf Neu analysieren.
Warte bis dir das Analysedatum angezeigt wird und der Scan abgeschlossen ist.
Kopiere den Link aus deiner Adresszeile und poste ihn hier.

Ischbins · 17.03.2014, 21:41

https://www.virustotal.com/de/file/a582b00ef5b4fa9a415688bd23dcf61cff61294221c0ab965d7b04cdefadbe13/analysis/1395088793/

Bootsektor · 17.03.2014, 22:22

Hallo Steffen,

das sieht gut aus.

Schritt 1
Combofix-Skript

WARNUNG für die MITLESER:
Folgendes ComboFix Skript ist ausschließlich für diesen User in dieser Situtation erstellt worden.
Auf keinen Fall auf anderen Rechnern anwenden, das kann andere Systeme nachhaltig schädigen!
Lösche die vorhandene Combofix.exe von deinem Desktop und lade das Programm von folgenden Download-Spiegel neu herunter: Link

Speichere es erneut auf dem Desktop (nicht woanders hin, das ist wichtig)!

Drücke die Windows + R Taste --> notepad (hinein schreiben) --> OK
Kopiere nun den Text aus der folgenden Codebox komplett in das leere Textdokument.
Code:
ATTFilter
DeQuarantine::
C:\Qoobox\Quarantine\C\WINDOWS\SysWow64\system32\muzapp.exe.vir
C:\Qoobox\Quarantine\C\WINDOWS\SysWow64\system32\MASetupCleaner.exe.vir
C:\Qoobox\Quarantine\C\WINDOWS\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}\SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe.vir
Quit::
         
Speichere dies als CFScript.txt auf deinem Desktop.

Wichtig: Stelle deine Anti Viren Software temporär ab. Dies kann ComboFix nämlich bei der Arbeit behindern.
Danach wieder anstellen nicht vergessen!

Schließe alle laufenden Programme damit ComboFix ungehindert arbeiten kann.

Ziehe CFScript.txt in die ComboFix.exe wie in diesem Bild:

Mache nichts am Computer, bewege nicht die Maus über das ComboFix-Fenster oder klicke in dieses hinein. Dies kann dazu führen, dass ComboFix sich aufhängt.

Wenn ComboFix fertig ist wird es ein Log erstellen: C:\ComboFix.txt
Bitte füge es hier als Antwort (in CODE-Tags mit dem #-Button des Editors) ein.
Hinweis:
Suspect:: und Collect::
Falls im Skript diese Anweisungen enthalten sind, sollen Dateien zur Analyse eingeschickt werden. Es erscheint eine Message-Box, nachdem Combofix fertig ist. Klicke OK und folge den Aufforderungen/Anweisungen, um die Dateien hochzuladen. Teile mir unbedingt mit, ob der Upload geklappt hat!

Schritt 2
Bitte deinstalliere folgende Programme (falls vorhanden) :

Ask Toolbar
Delta Chrome Toolbar
Delta toolbar
vShare.tv plugin 1.3
Java(TM) 6 Update 22
Java(TM) 6 Update 24

Dazu gehe auf:
den Windowsbutton in der Taskleiste --> Systemsteuerung --> Programme (Unterpunkt Programme deinstallieren) --> Programm auswählen --> entfernen

Schritt 3
Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 4
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.

Bitte lade Junkware Removal Tool auf Deinen Desktop.

Starte das Tool mit Doppelklick. Vista und 7 Nutzer bitte mit Rechtsklick "als Administrator ausführen" starten.
Das Tool wird sich öffnen und mit dem Scan beginnen.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Schritt 5
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Ischbins · 17.03.2014, 23:00

Hallo Sandra,
irgendwas funzt nicht. Es wird nicht combofix.txt sondern DeQuarantine.txt erstellt.
Diese hat jedoch keinen Inhalt.

Bootsektor · 17.03.2014, 23:33

Hallo Steffen,

das ist merkwürdig, der Name ist aber in Ordnung da ist wohl ein Fehler in meinem Baustein.
Du hast den Text exakt so kopiert, eingefügt und die restliche Anleitung so abgearbeitet?
Versuche es noch einmal, wenn es wieder nicht funktioniert mache folgendes:

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

cmd: dir C:\Qoobox\Quarantine /s

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Unabhängig vom Ergebnis kannst du schon die nächsten Schritte abarbeiten.

Ischbins · 18.03.2014, 00:20

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Steffen at 2014-03-17 23:50:20 Run:2
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
cmd: dir C:\Qoobox\Quarantine /s
         
*****************


=========  dir C:\Qoobox\Quarantine /s =========

 Datentr�ger in Laufwerk C: ist Boot
 Volumeseriennummer: 08FB-1EF0

 Verzeichnis von C:\Qoobox\Quarantine

17.03.2014  22:41    <DIR>          .
17.03.2014  22:41    <DIR>          ..
16.03.2014  23:42    <DIR>          C
17.03.2014  23:36               204 catchme.log
17.03.2014  23:37                 0 catchme.txt
16.03.2014  23:54                 0 MBR_HardDisk0.mbr
16.03.2014  23:53    <DIR>          Registry_backups
               3 Datei(en),            204 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
08.10.2011  19:03               402 prefs.js.vir
16.03.2014  23:53    <DIR>          ProgramData
16.03.2014  23:42    <DIR>          Users
16.03.2014  23:42    <DIR>          Windows
               1 Datei(en),            402 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53    <DIR>          Microsoft
16.03.2014  23:42    <DIR>          Roaming
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Microsoft

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53    <DIR>          Windows
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Microsoft\Windows

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53    <DIR>          Start Menu
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53    <DIR>          Programs
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53    <DIR>          Startup
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
02.12.2010  14:42             2.527 watchmi tray.lnk.vir
               1 Datei(en),          2.527 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\ProgramData\Roaming

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Users

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          Steffen
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Users\Steffen

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          AppData
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Users\Steffen\AppData

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          Roaming
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Users\Steffen\AppData\Roaming

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          .#
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Users\Steffen\AppData\Roaming\.#

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Windows

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          Installer
16.03.2014  23:42    <DIR>          SysWOW64
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Windows\Installer

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
16.03.2014  23:42    <DIR>          {AA4D1C5E-116A-4FF4-AA91-28F526868203}
               0 Datei(en),              0 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Windows\Installer\{AA4D1C5E-116A-4FF4-AA91-28F526868203}

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
05.05.2011  08:23           300.416 SHCT_TRAY_PROGRAMG_A10D8603999C4E9488776EF2533C58C9.exe.vir
               1 Datei(en),        300.416 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Windows\SysWOW64

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
02.08.2013  02:50         1.114.112 kernel32.dll.vir
16.03.2014  23:42    <DIR>          System32
               1 Datei(en),      1.114.112 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\C\Windows\SysWOW64\System32

16.03.2014  23:42    <DIR>          .
16.03.2014  23:42    <DIR>          ..
23.12.2011  12:58            24.576 MASetupCleaner.exe.vir
23.12.2011  12:58           172.032 muzapp.exe.vir
               2 Datei(en),        196.608 Bytes

 Verzeichnis von C:\Qoobox\Quarantine\Registry_backups

16.03.2014  23:53    <DIR>          .
16.03.2014  23:53    <DIR>          ..
16.03.2014  23:53                80 HKLM-Run-SynTPEnh.reg.dat
16.03.2014  23:53               377 HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47}.reg.dat
16.03.2014  23:39            11.654 tcpip.reg
16.03.2014  23:53               146 Wow6432Node-HKCU-Run-Vigeuni.reg.dat
16.03.2014  23:53               147 Wow6432Node-HKCU-Run-WA5H2V3YUCUB3EZZWMMQXFDNCF.reg.dat
16.03.2014  23:53               162 Wow6432Node-HKLM-Run-LMgrOSD.reg.dat
               6 Datei(en),         12.566 Bytes

     Anzahl der angezeigten Dateien:
              15 Datei(en),      1.626.835 Bytes
              59 Verzeichnis(se), 633.498.009.600 Bytes frei

========= End of CMD: =========


==== End of Fixlog ====

Code:

ATTFilter

# AdwCleaner v3.022 - Bericht erstellt am 18/03/2014 um 00:00:28
# Aktualisiert 13/03/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Steffen - MOBILNEU
# Gestartet von : C:\Users\Steffen\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\Partner
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Ordner Gelöscht : C:\Program Files (x86)\Ask.com
Ordner Gelöscht : C:\Program Files (x86)\ATDheNetTVApp.com
Ordner Gelöscht : C:\Program Files (x86)\FreeHDSport TV
Ordner Gelöscht : C:\Program Files (x86)\FreeHDSport.TV
Ordner Gelöscht : C:\Program Files (x86)\Iminent
Ordner Gelöscht : C:\Program Files (x86)\myfree codec
Ordner Gelöscht : C:\Windows\installer\{86d4b82a-abed-442a-be86-96357b70f4fe}
Ordner Gelöscht : C:\Program Files\DomaIQ Uninstaller
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\AskToolbar
Ordner Gelöscht : C:\Users\Steffen\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\BabSolution
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\file scout
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATDheNetTVApp.com
Ordner Gelöscht : C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
Ordner Gelöscht : C:\Users\SAHA\AppData\LocalLow\AskToolbar
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkfggacklibaabdomphfdpcodjgihgon
Ordner Gelöscht : C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn
Datei Gelöscht : C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\freehdsport@freehdsport.tv.xpi
Datei Gelöscht : C:\Users\Public\Desktop\eBay.lnk
Datei Gelöscht : C:\Users\Steffen\Desktop\ATDheNetTVApp.lnk
Datei Gelöscht : C:\Windows\System32\Tasks\EPUpdater
Datei Gelöscht : C:\Windows\Tasks\FreeHDSport TV-codedownloader.job
Datei Gelöscht : C:\Windows\System32\Tasks\FreeHDSport TV-codedownloader
Datei Gelöscht : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaabfjnbeinlpljodiajipidiompfl
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\kkfggacklibaabdomphfdpcodjgihgon
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\babylon.com
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\*\shell\filescout
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\ScriptHost.Tool.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnUpdater]
Schlüssel Gelöscht : HKCU\Software\5be888bb569ba41
Schlüssel Gelöscht : HKLM\SOFTWARE\5be888bb569ba41
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{05366194-3126-4601-AC1A-DDE573E093DC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{19D2F415-D58B-46BC-9390-C03DCBC21EB2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{26249267-15F4-4DA3-8247-C5A78E4FA918}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{39B217B4-8C69-4E45-A8DC-8CC4DAD3CF0A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3CB4CE45-8849-4638-9226-D6B615A15827}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{43AB7B5D-4C40-4103-A549-7002A116A7D5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E45F3E8-2683-4824-A6BE-08108022FB36}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{996ED20F-A740-47A2-A7EF-9620D422BB4E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9F0F16DD-4E76-4049-A9B1-7A91E48F0323}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F4288797-CB12-49CE-9DF8-7CDFA1143BEA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{061F450C-37B9-4330-9235-0F25D9F75B33}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{22FEB0F5-0BA0-4D4B-8A66-55A21667BC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2B79F7D-2D7D-4420-B2A9-ECE52C7C83A0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{1D55DAA5-04AC-4036-B0BE-DA81EE9676CD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{212C2C4F-C845-4FBC-9561-C833A13D8DCE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3C5D1D57-16C8-473C-A552-37B8D88596FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{4A115D8A-6A7B-4C72-92B1-2E2D01F36979}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{58CBF821-A0C7-4AE8-9430-77DD1AF38E99}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{72BCBFF7-2837-4CA0-B3B5-3DAED7F54601}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{824125FD-7732-4DA2-9277-3A7D0A0A0813}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{99DF8440-814E-497F-BDDD-FB93E9E9DF96}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8F97BFF8-488B-4107-BCEE-B161AB4E4183}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1B48071-416D-474E-A13B-BE5456E7FC31}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83CAD530-387D-40FD-82EA-B9E863D92A9B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C17DC5CF-54FF-4E63-8AC7-94335D6DA231}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D14D0EE2-2DD1-4230-BE70-3F3AD6172C40}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F994E0D9-8335-48F1-99C2-A712C21F8D5F}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3D782BB2-F2A5-11D3-BF4C-000000000000}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\Ask.com
Schlüssel Gelöscht : HKCU\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
[#] Schlüssel Gelöscht : HKCU\Software\DataMngr_Toolbar
Schlüssel Gelöscht : HKCU\Software\Iminent
Schlüssel Gelöscht : HKCU\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\StartSearch
Schlüssel Gelöscht : HKCU\Software\vShare.tv
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\AskToolbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\FreeHDSport TV
Schlüssel Gelöscht : HKLM\Software\AskToolbar
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\FreeHDSport TV
Schlüssel Gelöscht : HKLM\Software\Myfree Codec
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DomaIQ Uninstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLV Player
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeHDSport TV
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\DomaIQ
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
Schlüssel Gelöscht : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v

[ Datei : C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ]


[ Datei : C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\[ofr2][opt]rs0\prefs.js ]


-\\ Google Chrome v33.0.1750.154

[ Datei : C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ Datei : C:\Users\SAHA\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [25258 octets] - [17/03/2014 23:59:28]
AdwCleaner[S0].txt - [24310 octets] - [18/03/2014 00:00:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [24371 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by Steffen on 18.03.2014 at  0:08:57,64
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1780270799-433894887-2031553249-1000\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbar_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskToolbar_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskToolbar_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskToolbar_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C5CBF984-A095-47F1-8C3D-1CABB239D568}



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho412A.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho499D.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho83A3.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho985F.tmp
Successfully deleted: [File] C:\Windows\syswow64\sho9C8F.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoA9AF.tmp
Successfully deleted: [File] C:\Windows\syswow64\shoE34F.tmp



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Steffen\appdata\local\apn"
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{00DBC73A-3B89-4F17-9465-E0F8971320CA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{00F67F90-2740-4C7D-90D6-9CA21E4E3D1F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{01764AFD-8EF7-4AE6-9861-72E10752F8E6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{017A6F65-4B99-4C1F-A2F6-3BAC0445FC5D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{01B1B458-2A9F-4555-A17C-E2BF6BCF9B34}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{01D72A47-B311-4D03-8D1C-8A388A2D2487}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{024EB941-82E2-4574-A05A-372E841CD308}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{02793C27-879D-49F2-AF81-535947007698}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{02B168A5-8DAA-4C75-BC8B-43E6FD9EDBC3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0357269B-8CE1-4D65-AF3E-3BDAE180C72D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{046F7875-AEE2-49DD-9050-FFAF9C03AA7B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{049715A7-D3B1-4622-87C7-E1D28CD883AD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{04FAF460-0D1E-4A10-A28E-3D0CC1AD1AEC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{052B4E82-C6F9-44A1-9849-BE55EBBE56F3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{05B33FB5-D5D0-48CC-BFC8-898191E227E1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0652D069-8D28-4A61-B29C-7E108E70543C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{07F1EA41-8C65-4BF5-BA15-7127BA188F40}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0F08AAFC-0C8B-4C56-A3D6-426F247F5E0B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0F389B4A-5EB3-44E7-AA57-2D457A644DF7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0FA83EFA-2EBD-4455-AD1B-4A01943836CA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{0FA8932E-3050-44DD-B92B-B010B2A3CEEE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{130C2BB1-FECB-49CB-A77A-3172CB4374B8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{140BF1A1-E4EE-44AF-9E08-91B3E43842A1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1431C4AD-5E14-452A-B6CA-D3D54AF37E85}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{143F9D2A-F110-4207-A980-7B8BD688FFF3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{14584DCE-A0BD-47DA-879E-C0EDE019649E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{14C6F2D1-58A2-456E-97B6-0FF006A03C3C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{14D80ECB-634B-4E35-ABC0-D8ADD2BC4CCB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{14F44AE7-4FAF-40EE-AD4E-1A989D5926D8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{15E8E318-4418-4906-A920-A4101D55679A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{16E148D8-91D5-46AD-9AD0-C887D54B5014}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{17F26DE3-FDB2-442E-ADBC-F89AAFE5CCB8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1A842704-1B6E-4173-AA52-5A59DD53970D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1A93B346-1EA3-4558-AB1E-B2BA43BFDBB5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1AA3E6A8-52EB-4382-BEFF-55091CA411AF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1AB4B13B-EA44-4381-B055-C4B4ECF201C7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1B02B03C-205E-40C3-A37D-FACE71534A6C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1B14E1BE-BF82-403E-904E-7987E92C6F4B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1BB14D16-D040-465A-B8F4-326F63D0F3E2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1DAC87C9-E639-44A6-9057-CBF9B989893A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1F139D52-04D9-46B8-856D-E488C5DB10FD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{1F60010C-94BF-4FAB-ADE0-A9676730E370}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{21D161D1-8155-4350-8B48-8F612FB3FF20}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{21FF6F82-BCBC-4E93-AB62-0541AAFEBD64}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{23911ECA-3BF3-4504-8FA3-32271D746891}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{23DAA29F-6B98-4F36-BE81-1CEF0A2A3087}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{241792E7-1B0D-4E87-8A1B-E363211265C3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{24A535EC-CA5E-4E85-91AE-AF107806894F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{25037487-4F92-4299-9337-94EDB4B4A38D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{25053B05-8932-4DB1-B997-83A6E7A63E65}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{253D0ED7-CFF9-41F1-9147-F6EA8B77AF17}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{256AEA45-0DDB-4524-824C-2A8174C5337A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2779F4FD-0F42-4A3C-849F-A8EAC114ADA6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{28F52785-C639-4715-8692-8B5419880EB9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{297FF262-DF4C-475A-9002-5C2999FEBF2F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{29C402E4-E5E7-483F-914D-FDE214493BE1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{29DEE8E7-FB49-4C47-9E90-88A907AC5237}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2A87B53D-789F-4305-94D0-58800776A5B0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2AFF0847-5A63-424C-A343-4BFD30E25342}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2B6EF2EF-6B67-4F6C-9F26-2BC7A734269E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2BF431A0-A485-40B9-9747-DAFE5364CDE1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2E730B1A-7C64-478B-A623-C72C26035822}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2EAF803E-8F5D-41B3-A5F7-5D87A9C162BD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2F1241C7-FF80-4FDB-AB3E-53EF43DA0FC2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2F36573B-A997-4FF1-B16E-F5ACF96B700F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2FAAFD61-A456-46ED-84B9-7380E37D94C9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{2FC0F0AB-4ACA-425B-93C4-773679E3A17B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{32473295-97AB-4517-B767-93546C54D708}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{327344E2-CD4E-4691-87C0-BE81408B49A7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3284719E-F983-4229-B3F8-E73E1C8CD4F4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{328D658A-E538-41E4-897B-64DCDF62A565}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{32D5F4BF-D8B0-4B44-AD9D-DB2F4F939D97}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{32E69FB9-8392-4ADC-887D-93AF4EEBCBAD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{35C4BA4F-7536-45D3-9A4F-4A8BD0259F30}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{364FD0EF-C029-49E1-9111-4A8FA9139DEA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{368CB9FE-48FD-49DC-8376-BE90013D98EA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3726DC09-A2C2-46AA-9F80-E6D0C981F10F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{37757BF0-B0FF-49CA-85AD-1676248491AE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{379FE411-0658-4303-BAF6-F2DCD51E1A42}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{37FD97B7-03CC-47B1-A686-97475705DE36}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{380C83AF-A34F-41DC-AC43-2660AC660FDA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{394D509C-E3B5-4776-B07D-4405B584F80D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3969CE28-7119-471B-974C-9278CC646757}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3A5685E1-14F7-40E5-94E9-72FE632290F6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3A613C4B-5920-43BC-A562-28756A2F0343}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3A7FAA18-92D5-4B52-9F61-81736CF05124}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3B7A5CE0-2501-4CB7-B4DC-7B85765D0024}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3BE6ADF5-C081-414F-BD8A-F12BB87D2915}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3C2D36D6-5227-4AD8-8C72-5F18E84F4D86}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3CF560C3-DD23-45E7-BE2F-4F3A607ABCCE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3DBDF5C4-5CAE-4572-9EDD-A37FA947DD32}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3E85B160-B3F7-46B8-A1DA-0092C4DB32FB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3F45A7A6-E22B-4A2B-BCCD-FA87AF8FC571}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3F97757A-AA73-401E-9A61-5C7AA09C35AD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{3F9F868C-7B1D-4D5A-90D6-4826A4541398}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4129C879-A5DD-4878-8FA4-920AEAF8BB75}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{41A1CB95-205F-492A-9F79-E8DEFE6E9841}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{41C73AEE-FCD5-4E9C-A04F-DC980BECDB91}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{42617568-8848-4DD7-BCA4-CA2439FCAAEF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{42EA289F-71C4-44C4-A5CB-170865ADBEFC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4391AF65-BD44-45D2-8F46-F65DBA7B053B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{43A0CD6C-7C96-4E23-A88F-FA1EE1B74AB0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{44686D1E-C185-45D8-9D90-A17971D30E39}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4549E4F3-53D3-4156-9578-809BAE39E0C3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4560C172-7D7F-456A-A064-775212ACD3D7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{45937D02-EB84-4B15-ABBC-4D128F6106B7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{460E3935-7C4B-43C3-A1AD-9C1492FB098C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{46D4737D-535E-4CA9-A303-D5DA6FBC7999}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{47AE5A8A-7A4F-4082-A802-95AD880DC9EA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{47D3603E-557A-42C6-A774-02D56622FF16}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{47F889DB-1B8A-4827-93DD-23487AC48A6A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{48426544-0AEB-4B33-B93E-64053421D1B2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{486C73D7-91B4-46D1-AE85-B7C7EACC9B32}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4882D355-CB21-4F69-944E-44D24E34A95E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{48871873-8207-4DB0-8A60-CED12AE0E8AE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4911EB7E-BF63-47AB-8047-1AAE5AA3BA81}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4A0D4B78-D30A-423B-B13E-930BFFD16C3B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4ACEDAC6-0C4F-4205-A1FE-C3218B558227}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{4C415CE6-FD65-42F6-949D-8E746E1B2F0A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{508561F1-B84E-4F9A-8C94-AFF27296E90A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{50F9B05E-6025-4E24-A2F4-300FBC2719C1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{51439CCA-A07B-480D-BC17-EA157B5362F8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{51502D79-049A-4220-8271-0EF28BE06C15}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5230972F-F1F3-4D19-A4DD-1A7FDBD93C40}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{526C5E13-9D02-49D9-9873-DFDD50E70570}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{530D88E0-1217-483D-B4A2-1D8C81E4853A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{53C11E08-9789-441A-8E07-6BBFA001FF9F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{54C59326-D9C6-4E00-8D03-16BA42D0DD06}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5525845E-F44D-4650-8579-AFF81087CEE6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{557FDE7F-6763-41E0-9E60-662493B460D5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5591A213-8D8F-4C12-9790-D6304A592FCB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{55E08384-A614-4355-969E-485608F668EC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{56A898EE-9913-46C8-9DA0-58457F4FACBF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{56C16215-D9BF-4C86-BC27-85B32F14D476}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{57220D97-65D5-4EA1-ABA8-2AD8322704D2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{57593951-CB81-4DD4-BB1F-16C57280D64D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{577AFCD1-6807-4BF9-B42F-DA3A1085390C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{588DD32F-402E-46E8-BF63-A80153136B17}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{58DFB196-109B-481A-8356-6DEEE00355DA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5BF0D481-9F44-43D6-9DF9-506C84F3A43C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5C4BDFBB-EB21-4910-8550-063AAF315773}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5D67AD0D-B7E2-4C14-8D88-57237BA5E5B4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5D6C0802-408E-4C58-ACF2-AFE95FE6323D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5DDD4B55-123C-4435-B7F1-91B2C028FA96}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5E3F617A-BA95-44EC-B32F-98AD9D3F92AC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5E6DB3FE-85F2-4C94-9288-AF6E425106CE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5EB5396A-77F3-4E18-AF43-7D91799012B5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{5FF05A25-0BDB-46D3-88CD-D9896F3D46BC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{63854CB7-8C22-4C64-9C8A-964CF969C39A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{63AD28C3-6EE1-4873-80AC-A4A9FD4FBAA9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{645F8E5A-F323-468A-8886-3ADCF1999FE3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6498CE82-C906-4B5A-984E-8F726A1A931D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{64AA18A2-4B84-479C-ADD8-81D0E88B2D95}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{65F29605-18A0-4A25-93BF-467A4640EDFE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6618BA9E-8738-4DAA-920B-E10FB7BF976D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{66C2E586-C6A8-456B-ABEC-87C89C13704B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{678B913A-D3DC-4E95-8584-23DE08D4DF7D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{67AED8C1-3FAF-4D10-86A2-A5ADA16C543F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{68908874-70DF-435E-8D62-56A5CF9065FB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6A05A8E6-4DB3-4A8B-93B4-7D98662BB4B9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6B70CBD9-3EA8-4CEB-A7FE-F198A2E8E8BB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6B90E04E-7B29-4C88-8099-9497C48CBDB8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6BAD3A62-6C90-4DDB-AD7C-EEFF931E6CDF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6D2B7A57-F918-45D9-8F97-00D97DBC2252}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6E1E5CB9-CD72-4754-8235-3C254ED878E3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6E3619BE-75CF-4975-8374-5A9CDAB0FEBF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6E440836-AFE2-43DD-A2E3-DDC124B0BEFB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6E672B15-7BA7-4BF7-A1DF-6925DF744F3A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6ED7E497-7E84-4B02-AC4F-5C13402ABD01}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{6F6E9BB8-1DA7-4F1A-8DD0-6E1F0E3529F2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{703338A0-D973-4A83-91EE-BF4C5ECB1530}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{70D43933-F432-4316-8EB8-CCD85BD3D262}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{713987F8-E947-4C80-B351-76A6AB68A4D0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7239121B-33D6-4D48-9C34-6A92A33D2F6A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{72EDF20C-CB35-410D-BC85-ACCCA9FB4FEA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{733D0E67-F2DD-46FE-9E1A-B374D7988567}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7341F233-A0BB-4266-A60F-3497BC992997}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{74355124-2A00-4C8F-ABCB-BA0954C3F5FE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{751BD069-A2B8-4AD2-BAC0-B0059665F963}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{75A59160-9B69-4FCB-82CE-AA338237FE02}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{765D9215-974F-4D1A-A3C1-773430F8362A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{770BD5AD-EFE9-4A82-88C2-A01B91D37CBC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7768DBDD-7381-4016-8CCF-E150E31277E5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{777C58EF-20FB-47F7-AFA0-D23CF8471FAD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{77FACC32-DB7A-4CA9-A1D8-5F6E94D2C618}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{788A16D2-2940-4200-8CEA-4A139DDAF5D2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{788BF1FA-0026-4477-ADDA-1F51A5DE6360}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{78B813AD-5CFB-4A94-829B-FF3E2E131ACE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{799F1096-C03A-4BBD-9E43-F21C862A1FFD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7A365B07-0CE3-42CF-9DB1-CE54346C8F10}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7A3C9B98-B38A-4A0D-9566-E4669E2F6BC9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7BCCD454-AA73-494C-ACB9-E5D802A50252}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7CBF7E7A-CD54-45ED-A28E-DAE87A7C46BC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7CC0C2A0-A143-4591-853A-5A37233732EE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{7F4CDE3A-A539-4283-8102-CE77CD8267F4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{806DA570-1609-47FF-AE0D-A11FAAE7D7B6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8113CF4F-7BCD-4B1A-A140-A576F41029FB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{81B89CE4-3332-4BA6-8266-C2C067D672BA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{825889B8-708B-4441-9AF5-83F67E2FC9B7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{826028FE-F81E-4370-820D-E259C1F0D970}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{82BD36D5-F287-47B6-A0FF-7D3069975AAE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{82FE2300-DE05-431D-8687-385B2257C29D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{84EFEA96-FFFA-4116-8E60-BBD1F0C88494}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8572CDBE-0AB7-499A-84AC-C00FE1BFB306}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{85A6875A-9F98-44CE-9EA7-ABD9CAF2FBF8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8627A247-7131-4CDC-A1DF-3E3D852177D6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{876544E9-5E97-4717-A122-DBDAFE249647}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{881D297C-7455-49DA-A5B7-C9E845D4C62C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{88833BD3-0D0A-4838-80A0-CC4397C9FADB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{889134B0-BF60-4D1E-8A79-5F094296010C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{89DDBB99-1376-4ABC-B57F-A4B1459C917B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{89E99F95-4CB8-49BC-B2F9-97B24AB244BC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8AF4E99E-FC9A-4FE4-90A2-6B7028012144}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8AF6798B-7099-47B7-9AC3-029A79F31FE2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8B0DB65D-3192-401E-B687-93CB82E94DEC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8B10FC69-A7DC-4CB5-868B-9DCB7138CA9D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8B24A3C4-B375-4D1B-AAC4-4C7009121F25}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8B3954BB-BBBE-4737-B4F5-AC3CC8836244}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8B535525-EAF6-495B-916A-255D707FE727}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8C072B09-04E1-4865-8B3A-EEE055CA5F89}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8C515EB3-50BD-482D-8A66-CF7F9F808494}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8C8C4C36-0618-476C-9B15-DC3FB3BF56C4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8E0FAF1F-B7F1-4E73-9707-7EA0804224DB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8EA9BDAD-72D0-49E2-AF05-09CF22051680}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8F56DF15-7066-435D-A83E-A23DFE087D28}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{8FCA3AA3-3BA6-4285-B54E-34ADC11A5AB6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{90717DAC-7255-4BB6-9DEC-344D075B652E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{90774310-D7FC-4AF9-B72F-86C10033CDBA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9115817E-71A6-41DF-ADE0-01FA5DBC236E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{91266B15-E4C6-482F-9E32-9F7CA9C04522}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{913F1547-C8B8-4FDB-A69F-332747945C97}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{91635DBF-8309-470C-B76E-4D94A361ECF1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{91B89525-7D29-47CA-A897-283C0629E04A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{922F1E07-D07C-4133-87F8-B5220E4D966B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{927BB43E-F2C2-4D62-BB2A-32BFF91A9BBE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{927D4760-85B7-460B-AC5D-8D274E4867C6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9323AA69-0973-4833-97B4-0B4B30D8F611}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9343AAE0-514B-4AE7-8A72-BBBA790EA34D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9364F697-B2DD-4782-8353-CC6E0F9384C1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{93722370-6D0F-4D6D-9B06-E857A4E657B2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{93AA4DD2-88FF-4003-A762-EA6FE337C887}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9498AEE2-7E1F-42BF-831F-2EA53AF08604}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9683F0B6-FDC5-4E5D-A98F-8F997DEECBA8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{97295FF1-5161-42E4-AC37-493BD4B2A7FD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{974B414C-D0C2-4FA9-9396-F481509DF9AE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{98821D29-5640-40B7-9F02-D11ED2626831}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{98E7C827-B458-4C3E-A302-AAB5EF4CF38A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{99980CF5-EEAA-448B-8CD7-44B896D84D5C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9A72C0E5-C728-4F76-8717-62957D8966EA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9AC1B7D2-2D76-4075-8C1B-8B87DF8590B5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9AECB089-D0A1-4917-B19E-BEF005E82E61}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9B159B5B-2354-4348-9519-A9D6182E63F3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9B62571C-D4B4-422A-B3B0-B9B6CFEB24B7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9CF08E96-C781-445B-BBB4-CC5BB1F0A40D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9D601552-C937-4D2F-B3CE-E5A032A93106}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9DC4AAE1-D7F0-4CBE-945C-12EB6B6484D2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9E8538BE-B4D0-4376-861B-CD85DFC9F5A6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{9FCC6503-E04C-4ED5-97C2-4CF40EDABEAD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A044C8E5-D09C-44D2-8201-6612A940A3A1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A1C249FB-E9C7-4492-B9F5-BF2E0A7D3BBA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A3ABF915-3B10-4617-AF52-433D3AB5DDD2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A4183B44-B9BA-4595-9DEC-804F7C4E93D9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A49CB6C6-4065-4992-961D-FEE8DB2B525A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A4CD27DF-5AAF-44A7-844F-863180E0A762}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A6F073C8-1840-4ECE-A724-5FF46A5117FB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A6F0DC68-6CDB-404D-8647-2C6D5FFB5D70}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A8482095-BBC7-4692-B4E7-F9D36D86E60D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{A8C48A13-85DD-43E2-9188-87DFE7407B76}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AAFE2822-3500-4DA3-AF4E-8A711CD269F0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AC14655F-696C-42C6-9748-2359D49477C0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AC37B0C0-4D59-4D98-A0E5-5A13FBF4173C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AC57FCA6-2308-415D-B0A8-971320564907}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{ACD19D3F-E905-4676-B935-8FD8CADAF24F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{ADEA1AE8-63D3-4B64-BCA1-309035E94452}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AEA1B219-27D1-4B14-B5AB-CE0617A04E40}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AF98FFF3-C52C-45CD-828E-653B5408AE87}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{AFCF2E64-3B1F-4581-89C4-292D0AED6833}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B0B61E25-DBCE-4BDA-A727-F0DEB317267D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B11191E3-AF41-4589-A969-69994E67CA43}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B2C80E39-AAE4-4A58-8184-35A4124186BD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B2FBED14-897C-4528-8408-2CED59B22491}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B57B21F0-065E-4991-B9D3-B7D5A9F085BB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B660683F-E0A5-47B7-8EAE-BCD3B1CD8382}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B67F834F-2384-43E3-A40E-54736491F20A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B7184D03-C5C2-46A1-867D-D16D66A72E8D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B7EB7954-DF76-43DF-B637-B992CF09962C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B818946D-BF06-4CE2-B424-2CE273AFEA0D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{B96F02F0-38F1-4544-8206-6BFA3C2B9A36}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BA337CAB-B495-430D-8EDD-34845200BA89}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BA9E4FAF-23FD-4182-A2DE-22E4516B9EC2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BB7D1D83-6462-4F0B-82A6-C836F461A3E9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BC9C5985-4E59-48A3-99D0-D7F365D2A099}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BCC41839-3891-47C2-8330-C4D0D68C0568}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BCE0DA96-1B0D-4743-A753-CFE47000F8A3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BD3BE012-B325-4126-931B-F7E727BBD72F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BD46E847-6947-42C5-94E0-11E55FD6342A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BE6B1616-4F67-44E2-8740-02A73DB73997}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BEB47994-AEFA-455C-8B6A-B6F4F06582B6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BED5F684-6BF7-47E2-95AC-92B5F5F4DDCC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{BFE67DDF-E1A7-481D-8415-955123668DB7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C0A6D2EB-91A8-47FC-8B65-832EF6EF206D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C107C782-36C2-4B21-AE63-8B349C5A9FA6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C1BED7F2-0F61-4B84-981F-A5EEF7339001}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C2B5E66B-4180-46B6-98B1-4E0D18AFBFFF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C35A5F58-20A6-4E27-A250-416E3A0EC282}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C4B59A82-34CE-41AA-AE12-D91F715E7F4F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C59E8CFA-9640-4E1E-8F8B-F4292EFA1D57}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C5D6B017-3926-4341-B561-9E2265BD7B61}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C6057458-A426-497A-B4E9-E6443718786B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C66D1D7E-1AF7-419E-9678-E46C7E09D026}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C67EDD63-8771-4962-BECF-9DCD0413570F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C7997226-E5A5-4EB7-90F3-D96205FCAA68}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C8428C64-F43C-4BA6-A375-0D57285722E0}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C84D184E-2F3D-4D54-9719-AEB515CF02D5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C8870CBB-D8BF-4826-A023-A9A7564E584F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{C8AC77E4-E80D-4BE5-A461-0696E4F7F88D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CA212319-E088-4E40-AF74-A3AB2FAE68F4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CAB8ADAA-58A5-456E-98D6-2290642032A9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CAEE08CB-B306-4D11-B39B-EED62AAA25A9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CB355BA9-9D5A-46E1-80D4-A10C2FC24719}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CB3DA95E-8AE9-494E-AEE4-D00CD3414EF5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CB561DDC-9AB5-4210-904D-A3642D2348C7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CBFB0259-E2CD-48F1-99BA-1C3E6C842F12}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CC3CF452-2C08-4C86-A111-6151C6E906A4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CC785EF6-2548-47B8-B2B4-3ADAD0CC3B77}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CCAC807A-84EA-462C-A1A5-63F8B0657129}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CCD524E7-37C2-408F-B29A-12FB79957B0E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CCDF334D-29EE-44B7-8510-B419EF21FDB3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CD05F2A7-EFCD-404A-B1E3-B5B4D3198DEB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CD17FC28-8D37-4110-8573-00BF47839E08}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CD9A520C-1C91-4597-805A-9B62F7C68E1C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CE3DA92E-99E5-49EB-8FDA-D8DCE1A3861B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CF140991-71E7-4B3B-8824-CF64C87B9EEE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CF276294-3AD2-41E1-9F95-FCFA153C1D7D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CF845F2E-2EE6-4151-B105-369D4CD1165C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{CFA59804-6D33-4975-A8CD-F6F826DE57EA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D0873F5D-CE99-40FE-A5A3-6FE2C6E31DB9}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D0BDB29F-C022-4FE4-8859-F908E7D7B838}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D175164F-C958-4118-8810-62D6580595BA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D1B56CF4-B2D3-48E1-948F-50408E0E944D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D31953C4-7C3B-460D-B238-0F5A142C33BD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D3235553-AFFB-473E-90F8-12C0AE281115}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D32E226A-9E7E-4ADC-B446-F4B0CAC6FA45}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D33D41E9-60DD-42AC-977B-4DBF13DCB184}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D3825A6A-BE6B-498E-A158-87070816A2F6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D3A0418D-8C4C-4379-A4BA-077F03D103F1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D3D9CCDB-4330-43F1-97F2-C0043C8C4AA7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D3FFB72B-F50A-43FA-ACBB-DA7CAECBC03B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D451355F-4153-403F-B1E0-AEB202D324C3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D46894AD-B356-4585-A791-DC52863F764D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D565D5DA-9875-4728-90AA-D92A8AA5870D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D61E0568-F5D4-41BB-AB40-451B5CD73FAC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D689D490-0257-4A18-8B87-2F4EF2ED7D65}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D68D7C12-2F65-40D8-A45D-D1FF5F10A338}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D6D901ED-8D2D-4855-A34A-E8B1223775BF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D6FCA5E3-B184-4977-AB8C-4EF005801F7E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D8A307AE-91EA-4712-BAC8-C16C74E62089}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D92A0245-A78A-434A-BC31-365D7BCD3400}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{D9E5D1CB-A380-4C63-9854-4DB50B42F6CA}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DA64216D-5A5C-487F-9B39-F88F9B50B295}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DB49BC51-4906-4C7C-8DBC-76F773A59E3B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DBB6768E-AB36-4CCE-9CB1-02629D248963}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DD11092D-320F-4DB9-9F87-BC6F3F15A4BB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DD182899-6A84-4D52-B805-C47D4D8C66DE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DD8614BC-4025-43F9-8A77-BFEAEEC8F04D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DDCC61FE-1E98-4043-AA47-0C0DBA5331BD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{DF647224-3F8C-4C99-AD13-2663FECD307F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E01A45CA-1EB9-438E-ACE6-5EE3EC734CC4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E04F183D-427D-480E-876D-3BBC40CA963E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E508F0AA-200C-4EB0-BE0B-5C2547623E32}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E5264545-65A3-4338-B715-9E94FA41D1C3}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E6FD38B3-5505-438B-B604-D05563CC0714}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E7AC250E-8343-4855-A684-B073C73D1837}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E86BA6A6-F80A-45ED-ACDE-FB669908CDD2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E89AFE2F-124F-40E1-8635-D3D1ACA89B82}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E8A03331-DE1E-43BA-9404-36B22DCD2AB5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E8CB3AAA-21E0-40EC-B969-3238B40C5716}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E8D6B230-D951-4EDE-ACD1-B08139EE37BE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E8DAD0C5-A3FB-4D76-9FF6-278013F91D0B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E96DF201-DF9C-4512-8B5B-AA7ED6A22F8C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{E9A5FA63-B7B9-473C-A9E1-1BD83A014059}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EA14AA37-E853-4B2F-99F4-E7DE2206C992}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EA24670B-783E-4D1F-BCC6-B9DDC6A8F689}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EA759FCC-72AD-45F7-BF3A-E54BB86F5FC1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EB95DCA7-36CF-4910-AAC7-5F00E39D21AC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EBBCE5C4-5759-484B-A1B2-A858A0F18372}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EBE74EDE-107A-4A45-94AB-ACE49EFF1357}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{ECCB6348-B890-45CC-AEE6-2BA68C253587}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{ECFF0424-6829-444F-AF9C-63EE4FB947DF}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{ED5E733B-D127-4578-A2CF-652BC301C949}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EDBCC244-CADB-4703-93D2-62898D352CEC}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EE1567E3-A87C-43D7-B13A-B3F1EFE6B0E2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{EFE2D417-AEB1-4998-9C0C-5A325BF766B2}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F09F92E3-E9F0-4C52-9D2A-B130D05A60BD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F0AB67D5-BB12-4A8A-A5B1-6BBFE488F19A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F0BFDEBD-F868-490D-B879-C044D660C89D}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F0C834F1-1875-405B-95D6-1ADDBF140DBD}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F0F718BE-F4E5-4746-BD88-B37C21933D12}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F125DE23-7E83-42DB-A70C-63865C2C1094}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F156CD06-FF6B-47E3-8939-2C6F3AEC4CD5}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F1CFAA80-913F-4905-9F11-34002E69C126}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F1F92FF6-5945-4EB8-9316-0E8A4D305A0F}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F21594FD-8527-4268-A4DD-5D78D825E535}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F23FBCA6-139E-43D4-97A4-0FD0ED1B38E6}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F2F03932-4566-409E-B576-9D80F7F1107E}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F368B0FA-7A01-46E0-80EA-27A58F992DA8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F3EB04A5-4FD0-402A-A859-091000C66DBB}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F4000A2B-465D-4572-A64C-E9497248B732}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F4F3F6C6-1C47-4A40-A207-E0C9750E52C7}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F5AEB85D-3DD6-4F78-9858-1F69AC2D2506}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F6A42C77-98F3-4316-827F-77256D479668}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F7C7A787-97D4-437B-87ED-19437E594197}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F8045724-29ED-4E1D-A42B-050E68A4F437}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F8212BE4-6F5C-41E1-8BE5-3180E8D97535}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{F90985B4-2BAA-42AC-A011-FAA57A818CE8}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FAEBFFD0-DAE2-4058-A2DA-A22086499C2B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FB3E89DE-61D0-4D6D-BFCB-E46335681556}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FB544ABA-D047-41A0-9B43-8ED0E4B62F35}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FC128BA7-A855-497A-B8F7-6310D5519E0A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FC2362CF-BAF0-4E87-9C82-1F2D4E62B16C}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FCAEE362-5E47-43EE-B0BB-4283A78620A4}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FCDD6A76-37A1-41BA-BC73-2603FDDE42A1}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FD9A87EA-3D1A-4D50-A9E5-57756CD1E263}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FDC75CB9-446A-4C8A-8FFB-B75C5F41D47B}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FDC7A723-550B-499C-A333-E36CEF31DF38}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FDDB6991-0FAF-4588-B27F-6A053548FD29}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FE126827-5581-430F-AD27-C394C33EB3EE}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FEA6DC00-29A1-4B78-B764-3FE5D9AD6060}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FEC9FE00-1BF9-4FE2-9753-13A02DEEBB4A}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FF6A2532-3EFF-42C9-80B2-C16A576BC312}
Successfully deleted: [Empty Folder] C:\Users\Steffen\appdata\local\{FFFB63DD-0AA7-4BF1-82F7-DEE644AE30B0}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 18.03.2014 at  0:15:41,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Steffen (administrator) on MOBILNEU on 18-03-2014 00:17:54
Running from C:\Users\Steffen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_77_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10361616 2011-02-11] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM-x32\...\Run: [HotkeyApp] - C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [207400 2010-12-15] (Wistron)
HKLM-x32\...\Run: [LMgrVolOSD] - C:\Program Files (x86)\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM-x32\...\Run: [Wbutton] - C:\Program Files (x86)\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3508624 2012-01-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [KiesHelper] - C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [937872 2012-01-04] (Samsung)
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2012-01-04] ()
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-05-05] (Google Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {E55FD215-A32E-43FE-A777-A7E8F165F561} hxxp://download.flatcast.net/objects/NpFv530.dll
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Windows\DOWNLO~1\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Steffen\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Extension: FreeHDSport TV 3 - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\profiles\extensions\fhdp3@freehdsp.tv.xpi [2013-06-30]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl [2013-05-04]
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkfggacklibaabdomphfdpcodjgihgon [2013-05-04]
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn [2013-10-19]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-05] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] ()
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2009-10-23] (Wistron Corp.)
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [1077416 2010-09-16] (DiBcom SA)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [32792 2009-05-13] (X10 Wireless Technology, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-18 00:17 - 2014-03-18 00:18 - 00014714 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-03-18 00:15 - 2014-03-18 00:15 - 00048957 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-03-18 00:08 - 2014-03-18 00:08 - 00000000 ____D () C:\Windows\ERUNT
2014-03-18 00:07 - 2014-03-18 00:07 - 01037734 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-03-17 23:59 - 2014-03-18 00:00 - 00000000 ____D () C:\AdwCleaner
2014-03-17 23:58 - 2014-03-17 23:58 - 01950720 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-03-17 23:48 - 2014-03-17 23:48 - 02157056 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-03-17 23:37 - 2014-03-17 23:37 - 00000000 _____ () C:\DeQuarantine.txt
2014-03-17 23:36 - 2014-03-17 23:38 - 00000000 ___SD () C:\ComboFix
2014-03-17 23:34 - 2014-03-17 23:34 - 05190594 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-03-16 23:31 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-16 23:31 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-16 23:30 - 2014-03-17 23:37 - 00000000 ____D () C:\Qoobox
2014-03-16 23:30 - 2014-03-16 23:51 - 00000000 ____D () C:\Windows\erdnt
2014-03-16 20:11 - 2014-03-18 00:17 - 00000000 ____D () C:\FRST
2014-03-15 19:39 - 2014-03-15 19:39 - 00000000 ____D () C:\Users\SAHA\AppData\Local\{179CC049-CDB6-4D41-B91C-3DD483DBE416}
2014-03-14 23:24 - 2014-03-14 23:24 - 00735680 _____ () C:\Windows\Minidump\031414-22214-01.dmp
2014-03-14 17:56 - 2014-03-14 17:57 - 00737472 _____ () C:\Windows\Minidump\031414-44943-01.dmp
2014-03-14 05:23 - 2014-03-14 05:23 - 00779824 _____ () C:\Windows\Minidump\031414-45879-01.dmp
2014-03-13 23:09 - 2014-03-13 23:10 - 00762464 _____ () C:\Windows\Minidump\031314-51885-01.dmp
2014-03-12 07:12 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 07:12 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 07:12 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:12 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 07:12 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 07:12 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:12 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 07:12 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 07:12 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 07:12 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 07:12 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:12 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 07:12 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 07:12 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:12 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 07:12 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 07:12 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 07:12 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 07:12 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 07:12 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 07:12 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 07:12 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 07:12 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 07:12 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 07:12 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 07:12 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 07:12 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 07:12 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 07:12 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 07:12 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 07:12 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 07:12 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 07:12 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 07:12 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 07:12 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 07:12 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 07:12 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 07:12 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 07:12 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 07:12 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 07:12 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 07:12 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 07:12 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 07:12 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 07:09 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 07:09 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 07:09 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 07:09 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-02-25 21:53 - 2014-02-25 21:54 - 00754056 _____ () C:\Windows\Minidump\022514-26192-01.dmp
2014-02-21 22:40 - 2014-02-21 22:41 - 00762768 _____ () C:\Windows\Minidump\022114-50279-01.dmp
2014-02-18 07:29 - 2014-02-18 07:29 - 00754056 _____ () C:\Windows\Minidump\021814-78889-01.dmp

==================== One Month Modified Files and Folders =======

2014-03-18 00:18 - 2014-03-18 00:17 - 00014714 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-03-18 00:17 - 2014-03-16 20:11 - 00000000 ____D () C:\FRST
2014-03-18 00:15 - 2014-03-18 00:15 - 00048957 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-03-18 00:13 - 2012-03-28 21:22 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-18 00:11 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-18 00:11 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-18 00:08 - 2014-03-18 00:08 - 00000000 ____D () C:\Windows\ERUNT
2014-03-18 00:07 - 2014-03-18 00:07 - 01037734 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-03-18 00:07 - 2011-05-05 08:18 - 01219900 _____ () C:\Windows\WindowsUpdate.log
2014-03-18 00:02 - 2011-05-05 08:20 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-18 00:01 - 2010-11-21 04:47 - 00377712 _____ () C:\Windows\PFRO.log
2014-03-18 00:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-18 00:01 - 2009-07-14 05:51 - 00122247 _____ () C:\Windows\setupact.log
2014-03-18 00:00 - 2014-03-17 23:59 - 00000000 ____D () C:\AdwCleaner
2014-03-17 23:58 - 2014-03-17 23:58 - 01950720 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-03-17 23:48 - 2014-03-17 23:48 - 02157056 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-03-17 23:48 - 2011-03-12 19:22 - 00714926 _____ () C:\Windows\system32\perfh007.dat
2014-03-17 23:48 - 2011-03-12 19:22 - 00154720 _____ () C:\Windows\system32\perfc007.dat
2014-03-17 23:48 - 2009-07-14 06:13 - 01651216 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-17 23:43 - 2011-05-05 08:20 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-17 23:38 - 2014-03-17 23:36 - 00000000 ___SD () C:\ComboFix
2014-03-17 23:37 - 2014-03-17 23:37 - 00000000 _____ () C:\DeQuarantine.txt
2014-03-17 23:37 - 2014-03-16 23:30 - 00000000 ____D () C:\Qoobox
2014-03-17 23:34 - 2014-03-17 23:34 - 05190594 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-03-17 23:05 - 2013-07-22 19:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-17 23:02 - 2011-03-12 20:24 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 22:47 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-17 07:31 - 2011-05-06 06:59 - 00000000 ___RD () C:\Users\SAHA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-17 07:31 - 2011-05-05 08:28 - 00000000 ___RD () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-16 23:54 - 2011-05-06 08:43 - 00000000 ____D () C:\Users\.wh..wh.plnk
2014-03-16 23:54 - 2011-05-06 08:43 - 00000000 ____D () C:\Users\.wh..wh.orph
2014-03-16 23:54 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-03-16 23:51 - 2014-03-16 23:30 - 00000000 ____D () C:\Windows\erdnt
2014-03-16 23:45 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-03-16 23:06 - 2011-05-06 09:17 - 00000000 ____D () C:\Users\Steffen\Tracing
2014-03-15 19:39 - 2014-03-15 19:39 - 00000000 ____D () C:\Users\SAHA\AppData\Local\{179CC049-CDB6-4D41-B91C-3DD483DBE416}
2014-03-15 19:38 - 2013-09-05 07:35 - 00000000 ____D () C:\Users\SAHA\Tracing
2014-03-15 19:37 - 2011-05-06 06:58 - 00000000 ____D () C:\Users\SAHA\AppData\Local\VirtualStore
2014-03-15 19:37 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-03-15 19:36 - 2011-05-06 06:59 - 00001425 _____ () C:\Users\SAHA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 19:22 - 2011-05-06 06:27 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\SoftGrid Client
2014-03-14 23:24 - 2014-03-14 23:24 - 00735680 _____ () C:\Windows\Minidump\031414-22214-01.dmp
2014-03-14 23:24 - 2013-11-23 08:59 - 545006726 _____ () C:\Windows\MEMORY.DMP
2014-03-14 23:24 - 2013-11-23 08:59 - 00000000 ____D () C:\Windows\Minidump
2014-03-14 18:00 - 2011-05-05 08:28 - 00099752 _____ () C:\Users\Steffen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-14 17:57 - 2014-03-14 17:56 - 00737472 _____ () C:\Windows\Minidump\031414-44943-01.dmp
2014-03-14 05:23 - 2014-03-14 05:23 - 00779824 _____ () C:\Windows\Minidump\031414-45879-01.dmp
2014-03-13 23:38 - 2009-07-14 05:45 - 00394640 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 23:37 - 2013-03-22 19:22 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 23:37 - 2013-03-22 19:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 23:10 - 2014-03-13 23:09 - 00762464 _____ () C:\Windows\Minidump\031314-51885-01.dmp
2014-03-11 22:13 - 2012-03-28 21:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 22:13 - 2012-03-28 21:22 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 22:13 - 2011-05-20 06:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-05 17:01 - 2011-05-06 06:26 - 01625496 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-01 07:05 - 2014-03-12 07:12 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-12 07:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-12 07:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-12 07:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-12 07:12 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-12 07:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-12 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-12 07:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-12 07:12 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-12 07:12 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-12 07:12 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-12 07:12 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-12 07:12 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-12 07:12 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-12 07:12 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-12 07:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-12 07:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-12 07:12 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-12 07:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-12 07:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-12 07:12 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-12 07:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-12 07:12 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-12 07:12 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-12 07:12 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-12 07:12 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-12 07:12 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-12 07:12 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-12 07:12 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-12 07:12 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-12 07:12 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-12 07:12 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-12 07:12 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-12 07:12 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-12 07:12 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-12 07:12 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-12 07:12 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-12 07:12 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-12 07:12 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-12 07:12 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-25 21:54 - 2014-02-25 21:53 - 00754056 _____ () C:\Windows\Minidump\022514-26192-01.dmp
2014-02-22 10:57 - 2011-08-14 11:53 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Windows Live
2014-02-21 22:41 - 2014-02-21 22:40 - 00762768 _____ () C:\Windows\Minidump\022114-50279-01.dmp
2014-02-18 07:29 - 2014-02-18 07:29 - 00754056 _____ () C:\Windows\Minidump\021814-78889-01.dmp
2014-02-16 20:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\avgnt.exe
C:\Users\Steffen\AppData\Local\Temp\Quarantine.exe
C:\Users\Steffen\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-11 22:36

==================== End Of Log ============================

--- --- ---

--- --- ---

Ischbins · 18.03.2014, 00:20

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Steffen at 2014-03-18 00:18:56
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AMI VR-pulse OS Switcher (HKLM\...\{EC1369CF-15BD-4FAF-BA84-65E4788C682E}) (Version: 1.1 - American Megatrends Inc.)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio (HKLM-x32\...\Ashampoo Burning Studio_is1) (Version: 9.23.0 - ashampoo GmbH & Co. KG)
Ashampoo Photo Commander (HKLM-x32\...\Ashampoo Photo Commander_is1) (Version: 8.3.2 - ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer (HKLM-x32\...\Ashampoo Photo Optimizer_is1) (Version: 3.12.0 - ashampoo GmbH & Co. KG)
Ashampoo Snap (HKLM-x32\...\Ashampoo Snap_is1) (Version: 3.4.1 - ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.39 - Atheros Communications Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.0.0.15 - concept/design GmbH)
concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}) (Version: 15.2.0.686 - Corel Corporation)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Common (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - DE (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - EN (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - ES (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version:  - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - FR (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (x32 Version: 15.3 -  Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.2.0.686 - Corel Corporation)
CorelDRAW Essentials X5 (x32 Version: 15.3 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1508_36229 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.1.2414 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.1.2414 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.0.6904 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.0.6904 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4813 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.4813 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3224a - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.3224a - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.2225.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.2225.02 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.3503 - CyberLink Corp.)
CyberLink PowerProducer (x32 Version: 5.0.2.3503 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3428 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.3428 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
FRANZIS onlineTV 8 (HKLM-x32\...\{CBC88F0E-1960-4AC3-8C38-8BAD44E3F6E3}_is1) (Version: 8.4.0.0 - FRANZIS Verlag GmbH)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{821B4CA1-D404-4CCA-AEA4-C7D3F40841B1}) (Version: 1.0.0.0135 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{C7B40C35-85AE-4303-9EEA-1A1EA779664D}) (Version: 1.0.2.0518 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel(R) Wireless Display (HKLM-x32\...\{5B46CEC7-DAD0-46A2-BCD6-B46A3CFD9B61}) (Version: 2.0.30.0 - Intel Corporation)
iTunes (HKLM\...\{76FF0F03-B707-4332-B5D1-A56C8303514E}) (Version: 11.0.4.4 - Apple Inc.)
Java(TM) 6 Update 24 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416024FF}) (Version: 6.0.240 - Oracle)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.3 - Wistron Corp.)
Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2608 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.2608 - CyberLink Corp.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
RCS-Auftrag Client/Server (HKLM-x32\...\RCS-Auftrag 2000_is1) (Version:  - RCS Richter Computer Systemhaus GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6321 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10003 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.1.0.11112_41 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.1.0.11112_41 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.4.103.0 - SAMSUNG Electronics Co., Ltd.)
SopCast 3.5.0 (HKLM-x32\...\SopCast) (Version: 3.5.0 - www.sopcast.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.12.0 - Synaptics Incorporated)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Versandhelfer (HKLM-x32\...\dpdhl.versandhelfer.medionlap.CDA82DC3FEDD13302C6424313D9A2999F162D21A.1) (Version: 0.9.511 - Deutsche Post AG)
Versandhelfer (x32 Version: 0.9.511 - Deutsche Post AG) Hidden
VLC media player 1.1.10 (HKLM-x32\...\VLC media player) (Version: 1.1.10 - VideoLAN)
VR-pulse Installer (HKLM\...\{CB3A3CAD-1083-4952-B3A6-E231359DE244}) (Version: 1.2.0 - American Megatrends Inc.)
watchmi (HKLM-x32\...\{AA4D1C5E-116A-4FF4-AA91-28F526868203}) (Version: 2.5.0 - Axel Springer Digital TV Guide GmbH)
Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
X10 Hardware(TM) (HKLM-x32\...\X10Hardware) (Version:  - )
Zattoo4 4.0.5 (HKLM-x32\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Restore Points  =========================

18-02-2014 07:41:14 Windows Update
25-02-2014 17:38:10 Windows Update
01-03-2014 07:59:13 Windows Update
05-03-2014 15:55:26 Windows Update
13-03-2014 22:15:26 Windows Update
16-03-2014 22:31:29 ComboFix created restore point
17-03-2014 22:01:45 Windows Update
17-03-2014 22:55:20 Removed Java(TM) 6 Update 22
17-03-2014 22:56:18 Removed Java(TM) 6 Update 24

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-03-16 23:43 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03B59304-2418-4D42-A0E3-16BCB85766B0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {162BDF62-DE61-48AF-A9E0-335212BF1D80} - \FreeHDSport TV-codedownloader No Task File
Task: {46532976-85EE-4DB5-AA35-D94517F60201} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-05] (Google Inc.)
Task: {537063D6-B608-4F23-A2B2-52AD532A5C93} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {88A2EACE-E486-4A9E-9B5E-7DA69F9DE52C} - \EPUpdater No Task File
Task: {DA33E9E3-CCC8-4EB8-866E-C6A74FF941C2} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {DB1EF607-DB73-40FA-90CC-824398C0F51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-05] (Google Inc.)
Task: {E486D06D-7E81-41A1-8EC7-7439382C8BD9} - \Scheduled Update for Ask Toolbar No Task File
Task: {EDBD8554-2796-4669-BB32-9ECFF44B902B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-02-04 23:42 - 2011-02-04 23:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 12:38 - 2011-01-27 08:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-03-14 04:32 - 2010-12-14 11:39 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2010-12-06 11:52 - 2010-12-06 11:52 - 00062464 _____ () C:\Program Files (x86)\watchmi\TvdService.exe
2011-05-05 08:23 - 2011-05-05 08:23 - 00061952 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\2.5.0.5__f722db7bec59a14b\Tvd.Remote.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\FingerPrint\1.0.0.0__a62e68e935d72fa6\FingerPrint.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00078848 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Reporting\2.5.0.5__f722db7bec59a14b\Tvd.Reporting.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00148480 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Aprico\2.5.0.5__f722db7bec59a14b\Tvd.Aprico.dll
2013-04-30 14:49 - 2013-04-30 14:41 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2014-02-16 16:32 - 2014-02-16 16:32 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\0a0467413a424068d1471448ff6ca6cc\IsdiInterop.ni.dll
2011-03-13 01:02 - 2010-11-06 08:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
  Date: 2014-03-16 23:42:20.119
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-16 23:42:20.041
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 37%
Total physical RAM: 4003.07 MB
Available physical RAM: 2513.49 MB
Total Pagefile: 8004.32 MB
Available Pagefile: 6274.88 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:657.54 GB) (Free:589.67 GB) NTFS
Drive d: (Recover) (Fixed) (Total:38 GB) (Free:16.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: D3AF660C)

Partition: GPT Partition Type.

==================== End Of Log ============================

Bootsektor · 18.03.2014, 13:27

Hallo Steffen,

ok, da sind nur noch Reste. In den addition wird noch ein Java 6 Update 24 angezeigt. Falls du es in der Uninstalllist noch finden solltest, entferne es dort bitte.

Wie läuft der Rechner denn jetzt, gibt es noch Probleme?

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
Task: {162BDF62-DE61-48AF-A9E0-335212BF1D80} - \FreeHDSport TV-codedownloader No Task File
Task: {88A2EACE-E486-4A9E-9B5E-7DA69F9DE52C} - \EPUpdater No Task File
Task: {E486D06D-7E81-41A1-8EC7-7439382C8BD9} - \Scheduled Update for Ask Toolbar No Task File

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Schritt 2
Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 3
Da der Scan mit Eset sehr gründlich ist, kann er unter Umständen mehrere Stunden dauern

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Schritt 4
Starte noch einmal FRST.

Setze den Haken bei addition.txt und drücke auf Scan.
Wenn der Scan abgeschlossen ist, werden zwei neue Logfiles FRST.txt und addition.txt erstellt und auf dem Desktop (oder in dem Verzeichnis in dem FRST liegt) gespeichert.
Poste den Inhalt dieser Logfiles bitte hier in deinen Thread.

Ischbins · 18.03.2014, 16:40

Hallo Sandra,
das Java update hatte ich übersehen. Ist jetzt aber erledigt.
Der Rechner macht inzwischen schon manchmal das, was er machen soll.
Spaaaaaß. Er läuft stabil.

Dann wird ich mich mal an den Rest machen.

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Steffen at 2014-03-18 14:16:58 Run:3
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
URLSearchHook: HKCU - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll No File
Task: {162BDF62-DE61-48AF-A9E0-335212BF1D80} - \FreeHDSport TV-codedownloader No Task File
Task: {88A2EACE-E486-4A9E-9B5E-7DA69F9DE52C} - \EPUpdater No Task File
Task: {E486D06D-7E81-41A1-8EC7-7439382C8BD9} - \Scheduled Update for Ask Toolbar No Task File
         
*****************

HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{00000000-6E41-4FD3-8538-502F5495E5FC} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{162BDF62-DE61-48AF-A9E0-335212BF1D80} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{162BDF62-DE61-48AF-A9E0-335212BF1D80} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FreeHDSport TV-codedownloader => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{88A2EACE-E486-4A9E-9B5E-7DA69F9DE52C} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{88A2EACE-E486-4A9E-9B5E-7DA69F9DE52C} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E486D06D-7E81-41A1-8EC7-7439382C8BD9} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E486D06D-7E81-41A1-8EC7-7439382C8BD9} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar => Key deleted successfully.

==== End of Fixlog ====

Code:

ATTFilter

 Malwarebytes Anti-Malware  (Test) 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.03.18.05

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
Steffen :: MOBILNEU [Administrator]

Schutz: Aktiviert

18.03.2014 14:22:10
mbam-log-2014-03-18 (14-22-10).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 269781
Laufzeit: 3 Minute(n), 58 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 0
(Keine bösartigen Objekte gefunden)

(Ende)

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=77c19b9318f25040a2ef906d060cd000
# engine=17492
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-03-18 03:26:00
# local_time=2014-03-18 04:26:00 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1799 16775165 100 96 20406 165827665 13174 0
# compatibility_mode=5893 16776574 100 94 21718518 146786210 0 0
# scanned=200805
# found=2
# cleaned=0
# scan_time=6905
sh=952B91221FDACF89FEB57E4B384D79272F734AF9 ft=0 fh=0000000000000000 vn="Win32/Spy.SpyEye.CFG.A trojan" ac=I fn="C:\4gEJsVyiA73\722EBDBD22F5870"
sh=4602C6C92ADAB72A8CF4FC14901DFFC984557170 ft=1 fh=be7ecbba513d6336 vn="a variant of Win64/Kryptik.FT trojan" ac=I fn="C:\FRST\Quarantine\C\ProgramData\rjzj9o7t8.zvv.xBAD"

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Steffen (administrator) on MOBILNEU on 18-03-2014 16:35:33
Running from C:\Users\Steffen\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Wistron) C:\Program Files (x86)\Launch Manager\HotkeyApp.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\OSD.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WButton.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Protexis Inc.) c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
() C:\Program Files (x86)\watchmi\TvdService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(X10) C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Wistron Corp.) C:\Program Files (x86)\Launch Manager\WisLMSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11780712 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2189416 2011-03-09] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10361616 2011-02-11] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2294568 2010-09-03] (Synaptics Incorporated)
HKLM-x32\...\Run: [HotkeyApp] - C:\Program Files (x86)\Launch Manager\HotkeyApp.exe [207400 2010-12-15] (Wistron)
HKLM-x32\...\Run: [LMgrVolOSD] - C:\Program Files (x86)\Launch Manager\OSD.exe [348960 2009-12-11] (Wistron Corp.)
HKLM-x32\...\Run: [Wbutton] - C:\Program Files (x86)\Launch Manager\Wbutton.exe [436264 2010-06-21] (Wistron Corp.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [CLMLServer] - C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [103720 2009-11-02] (CyberLink)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [KiesTrayAgent] - C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [3508624 2012-01-04] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [689744 2014-02-20] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-05-31] (Apple Inc.)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware ] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [KiesHelper] - C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe [937872 2012-01-04] (Samsung)
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [KiesPDLR] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21392 2012-01-04] ()
HKU\S-1-5-21-1780270799-433894887-2031553249-1000\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-05-05] (Google Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
DPF: HKLM-x32 {E55FD215-A32E-43FE-A777-A7E8F165F561} hxxp://download.flatcast.net/objects/NpFv530.dll
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @www.flatcast.com/FlatViewer 5.2 - C:\Windows\DOWNLO~1\NpFv530.dll (1 mal 1 Software GmbH)
FF Plugin ProgramFiles/Appdata: C:\Users\Steffen\AppData\Roaming\mozilla\plugins\NpFv530.dll (1 mal 1 Software GmbH)
FF Extension: FreeHDSport TV 3 - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\profiles\extensions\fhdp3@freehdsp.tv.xpi [2013-06-30]
FF HKLM-x32\...\Firefox\Extensions: [virtualKeyboard@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\virtualKeyboard@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [KavAntiBanner@Kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\KavAntiBanner@kaspersky.ru
FF HKLM-x32\...\Firefox\Extensions: [linkfilter@kaspersky.ru] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaabfjnbeinlpljodiajipidiompfl [2013-05-04]
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkfggacklibaabdomphfdpcodjgihgon [2013-05-04]
CHR Extension: (No Name) - C:\Users\Steffen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbdbmopeebalgaeghmjoegpkngglikgn [2013-10-19]

==================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440400 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1017424 2014-02-20] (Avira Operations GmbH & Co. KG)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-02-05] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-12-14] ()
R2 watchmi; C:\Program Files (x86)\watchmi\TvdService.exe [62464 2010-12-06] ()
R3 WisLMSvc; C:\Program Files (x86)\Launch Manager\WisLMSvc.exe [118560 2009-10-23] (Wistron Corp.)
R2 x10nets; C:\Program Files (x86)\Common Files\X10\Common\X10nets.exe [20480 2009-11-07] (X10)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 mod7764; C:\Windows\System32\DRIVERS\mod77-64.sys [1077416 2010-09-16] (DiBcom SA)
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [15896 2009-05-13] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [32792 2009-05-13] (X10 Wireless Technology, Inc.)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-18 14:18 - 2014-03-18 14:18 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Malwarebytes
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 14:18 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-18 00:18 - 2014-03-18 00:19 - 00027289 _____ () C:\Users\Steffen\Desktop\Addition.txt
2014-03-18 00:17 - 2014-03-18 16:35 - 00015087 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-03-18 00:15 - 2014-03-18 00:15 - 00048957 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-03-18 00:08 - 2014-03-18 00:08 - 00000000 ____D () C:\Windows\ERUNT
2014-03-18 00:07 - 2014-03-18 00:07 - 01037734 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-03-17 23:59 - 2014-03-18 00:00 - 00000000 ____D () C:\AdwCleaner
2014-03-17 23:58 - 2014-03-17 23:58 - 01950720 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-03-17 23:48 - 2014-03-17 23:48 - 02157056 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-03-17 23:37 - 2014-03-17 23:37 - 00000000 _____ () C:\DeQuarantine.txt
2014-03-17 23:36 - 2014-03-17 23:38 - 00000000 ___SD () C:\ComboFix
2014-03-17 23:34 - 2014-03-17 23:34 - 05190594 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-03-16 23:31 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-03-16 23:31 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-03-16 23:31 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-03-16 23:30 - 2014-03-17 23:37 - 00000000 ____D () C:\Qoobox
2014-03-16 23:30 - 2014-03-16 23:51 - 00000000 ____D () C:\Windows\erdnt
2014-03-16 20:11 - 2014-03-18 16:35 - 00000000 ____D () C:\FRST
2014-03-15 19:39 - 2014-03-15 19:39 - 00000000 ____D () C:\Users\SAHA\AppData\Local\{179CC049-CDB6-4D41-B91C-3DD483DBE416}
2014-03-14 23:24 - 2014-03-14 23:24 - 00735680 _____ () C:\Windows\Minidump\031414-22214-01.dmp
2014-03-14 17:56 - 2014-03-14 17:57 - 00737472 _____ () C:\Windows\Minidump\031414-44943-01.dmp
2014-03-14 05:23 - 2014-03-14 05:23 - 00779824 _____ () C:\Windows\Minidump\031414-45879-01.dmp
2014-03-13 23:09 - 2014-03-13 23:10 - 00762464 _____ () C:\Windows\Minidump\031314-51885-01.dmp
2014-03-12 07:12 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 07:12 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 07:12 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 07:12 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 07:12 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 07:12 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 07:12 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 07:12 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 07:12 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 07:12 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 07:12 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 07:12 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 07:12 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 07:12 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 07:12 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 07:12 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 07:12 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 07:12 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 07:12 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 07:12 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 07:12 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 07:12 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 07:12 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 07:12 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 07:12 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 07:12 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 07:12 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 07:12 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 07:12 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 07:12 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 07:12 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 07:12 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 07:12 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 07:12 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 07:12 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 07:12 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 07:12 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 07:12 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 07:12 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 07:12 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 07:12 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 07:12 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 07:12 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 07:12 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 07:09 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 07:09 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 07:09 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 07:09 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-02-25 21:53 - 2014-02-25 21:54 - 00754056 _____ () C:\Windows\Minidump\022514-26192-01.dmp
2014-02-21 22:40 - 2014-02-21 22:41 - 00762768 _____ () C:\Windows\Minidump\022114-50279-01.dmp
2014-02-18 07:29 - 2014-02-18 07:29 - 00754056 _____ () C:\Windows\Minidump\021814-78889-01.dmp

==================== One Month Modified Files and Folders =======

2014-03-18 16:35 - 2014-03-18 00:17 - 00015087 _____ () C:\Users\Steffen\Desktop\FRST.txt
2014-03-18 16:35 - 2014-03-16 20:11 - 00000000 ____D () C:\FRST
2014-03-18 16:13 - 2012-03-28 21:22 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-18 16:04 - 2011-05-05 08:18 - 01230797 _____ () C:\Windows\WindowsUpdate.log
2014-03-18 15:43 - 2011-05-05 08:20 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-18 14:18 - 2014-03-18 14:18 - 00001113 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\Malwarebytes
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-18 14:18 - 2014-03-18 14:18 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-18 07:40 - 2011-03-12 19:22 - 00714926 _____ () C:\Windows\system32\perfh007.dat
2014-03-18 07:40 - 2011-03-12 19:22 - 00154720 _____ () C:\Windows\system32\perfc007.dat
2014-03-18 07:40 - 2009-07-14 06:13 - 01651216 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-18 00:19 - 2014-03-18 00:18 - 00027289 _____ () C:\Users\Steffen\Desktop\Addition.txt
2014-03-18 00:15 - 2014-03-18 00:15 - 00048957 _____ () C:\Users\Steffen\Desktop\JRT.txt
2014-03-18 00:11 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-18 00:11 - 2009-07-14 05:45 - 00016976 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-18 00:08 - 2014-03-18 00:08 - 00000000 ____D () C:\Windows\ERUNT
2014-03-18 00:07 - 2014-03-18 00:07 - 01037734 _____ (Thisisu) C:\Users\Steffen\Desktop\JRT.exe
2014-03-18 00:02 - 2011-05-05 08:20 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-18 00:01 - 2010-11-21 04:47 - 00377712 _____ () C:\Windows\PFRO.log
2014-03-18 00:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-18 00:01 - 2009-07-14 05:51 - 00122247 _____ () C:\Windows\setupact.log
2014-03-18 00:00 - 2014-03-17 23:59 - 00000000 ____D () C:\AdwCleaner
2014-03-17 23:58 - 2014-03-17 23:58 - 01950720 _____ () C:\Users\Steffen\Desktop\adwcleaner.exe
2014-03-17 23:48 - 2014-03-17 23:48 - 02157056 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2014-03-17 23:38 - 2014-03-17 23:36 - 00000000 ___SD () C:\ComboFix
2014-03-17 23:37 - 2014-03-17 23:37 - 00000000 _____ () C:\DeQuarantine.txt
2014-03-17 23:37 - 2014-03-16 23:30 - 00000000 ____D () C:\Qoobox
2014-03-17 23:34 - 2014-03-17 23:34 - 05190594 ____R (Swearware) C:\Users\Steffen\Desktop\ComboFix.exe
2014-03-17 23:05 - 2013-07-22 19:18 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-17 23:02 - 2011-03-12 20:24 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-17 22:47 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-03-17 07:31 - 2011-05-06 06:59 - 00000000 ___RD () C:\Users\SAHA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-17 07:31 - 2011-05-05 08:28 - 00000000 ___RD () C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-16 23:54 - 2011-05-06 08:43 - 00000000 ____D () C:\Users\.wh..wh.plnk
2014-03-16 23:54 - 2011-05-06 08:43 - 00000000 ____D () C:\Users\.wh..wh.orph
2014-03-16 23:54 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-03-16 23:51 - 2014-03-16 23:30 - 00000000 ____D () C:\Windows\erdnt
2014-03-16 23:45 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-03-16 23:06 - 2011-05-06 09:17 - 00000000 ____D () C:\Users\Steffen\Tracing
2014-03-15 19:39 - 2014-03-15 19:39 - 00000000 ____D () C:\Users\SAHA\AppData\Local\{179CC049-CDB6-4D41-B91C-3DD483DBE416}
2014-03-15 19:38 - 2013-09-05 07:35 - 00000000 ____D () C:\Users\SAHA\Tracing
2014-03-15 19:37 - 2011-05-06 06:58 - 00000000 ____D () C:\Users\SAHA\AppData\Local\VirtualStore
2014-03-15 19:37 - 2009-07-14 06:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-03-15 19:36 - 2011-05-06 06:59 - 00001425 _____ () C:\Users\SAHA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-15 19:22 - 2011-05-06 06:27 - 00000000 ____D () C:\Users\Steffen\AppData\Roaming\SoftGrid Client
2014-03-14 23:24 - 2014-03-14 23:24 - 00735680 _____ () C:\Windows\Minidump\031414-22214-01.dmp
2014-03-14 23:24 - 2013-11-23 08:59 - 545006726 _____ () C:\Windows\MEMORY.DMP
2014-03-14 23:24 - 2013-11-23 08:59 - 00000000 ____D () C:\Windows\Minidump
2014-03-14 18:00 - 2011-05-05 08:28 - 00099752 _____ () C:\Users\Steffen\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-14 17:57 - 2014-03-14 17:56 - 00737472 _____ () C:\Windows\Minidump\031414-44943-01.dmp
2014-03-14 05:23 - 2014-03-14 05:23 - 00779824 _____ () C:\Windows\Minidump\031414-45879-01.dmp
2014-03-13 23:38 - 2009-07-14 05:45 - 00394640 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 23:37 - 2013-03-22 19:22 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 23:37 - 2013-03-22 19:22 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 23:10 - 2014-03-13 23:09 - 00762464 _____ () C:\Windows\Minidump\031314-51885-01.dmp
2014-03-11 22:13 - 2012-03-28 21:22 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-11 22:13 - 2012-03-28 21:22 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 22:13 - 2011-05-20 06:14 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-05 17:01 - 2011-05-06 06:26 - 01625496 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-01 07:05 - 2014-03-12 07:12 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-12 07:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-12 07:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-12 07:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-12 07:12 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-12 07:12 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-12 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-12 07:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-12 07:12 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-12 07:12 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-12 07:12 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-12 07:12 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-12 07:12 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-12 07:12 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-12 07:12 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-12 07:12 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-12 07:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-12 07:12 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-12 07:12 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-12 07:12 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-12 07:12 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-12 07:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-12 07:12 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-12 07:12 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-12 07:12 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-12 07:12 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-12 07:12 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-12 07:12 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-12 07:12 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-12 07:12 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-12 07:12 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-12 07:12 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-12 07:12 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-12 07:12 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-12 07:12 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-12 07:12 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-12 07:12 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-12 07:12 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-12 07:12 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-12 07:12 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-25 21:54 - 2014-02-25 21:53 - 00754056 _____ () C:\Windows\Minidump\022514-26192-01.dmp
2014-02-22 10:57 - 2011-08-14 11:53 - 00000000 ____D () C:\Users\Steffen\AppData\Local\Windows Live
2014-02-21 22:41 - 2014-02-21 22:40 - 00762768 _____ () C:\Windows\Minidump\022114-50279-01.dmp
2014-02-18 07:29 - 2014-02-18 07:29 - 00754056 _____ () C:\Windows\Minidump\021814-78889-01.dmp
2014-02-16 20:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

Some content of TEMP:
====================
C:\Users\Steffen\AppData\Local\Temp\avgnt.exe
C:\Users\Steffen\AppData\Local\Temp\Quarantine.exe
C:\Users\Steffen\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-11 22:36

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by Steffen at 2014-03-18 16:36:08
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Avira Desktop (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 2.5.1.17730 - Adobe Systems Inc.) Hidden
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
AMI VR-pulse OS Switcher (HKLM\...\{EC1369CF-15BD-4FAF-BA84-65E4788C682E}) (Version: 1.1 - American Megatrends Inc.)
Apple Application Support (HKLM-x32\...\{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}) (Version: 2.3.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{2F72F540-1F60-4266-9506-952B21D6640D}) (Version: 6.1.0.13 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio (HKLM-x32\...\Ashampoo Burning Studio_is1) (Version: 9.23.0 - ashampoo GmbH & Co. KG)
Ashampoo Photo Commander (HKLM-x32\...\Ashampoo Photo Commander_is1) (Version: 8.3.2 - ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer (HKLM-x32\...\Ashampoo Photo Optimizer_is1) (Version: 3.12.0 - ashampoo GmbH & Co. KG)
Ashampoo Snap (HKLM-x32\...\Ashampoo Snap_is1) (Version: 3.4.1 - ashampoo GmbH & Co. KG)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.39 - Atheros Communications Inc.)
Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.3.350 - Avira)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
concept/design onlineTV 10 (HKLM-x32\...\{DCAB9AAC-1D1C-4B94-99B7-AA7D2617BD64}_is1) (Version: 10.0.0.15 - concept/design GmbH)
concept/design Video Jukebox (HKLM-x32\...\{37569A10-CB38-4615-8B32-0BF9FF5D887D}_is1) (Version: 1.3.0.0 - concept/design GmbH)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Corel Graphics - Windows Shell Extension (HKLM-x32\...\_{B6BFCD02-BA0E-41A9-9C9C-6624C4BB475F}) (Version: 15.2.0.686 - Corel Corporation)
Corel Graphics - Windows Shell Extension (x32 Version: 15.2.686 - Corel Corporation) Hidden
Corel Graphics - Windows Shell Extension 64 Bit (Version: 15.2.686 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Common (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Connect (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Custom Data (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - DE (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Draw (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - EN (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - ES (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Extra Content (HKLM-x32\...\_{5A10CFDA-FA2B-453C-B561-AE864E62EAC8}) (Version:  - Corel Corporation)
CorelDRAW Essentials X5 - Extra Content (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Filters (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - FR (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IPM (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - IT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - PHOTO-PAINT (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Redist (x32 Version: 15.0 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - Setup Files (x32 Version: 15.3 - Corel Corporation) Hidden
CorelDRAW Essentials X5 - WT (x32 Version: 15.3 -  Corel Corporation) Hidden
CorelDRAW Essentials X5 (HKLM-x32\...\_{EDBEBF07-F880-48FB-9AA5-0E8E71E02D83}) (Version: 15.2.0.686 - Corel Corporation)
CorelDRAW Essentials X5 (x32 Version: 15.3 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3624 - CyberLink Corp.)
CyberLink LabelPrint (x32 Version: 2.5.3624 - CyberLink Corp.) Hidden
CyberLink MediaEspresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.1508_36229 - CyberLink Corp.)
CyberLink MediaEspresso (x32 Version: 6.5.1508_36229 - CyberLink Corp.) Hidden
CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.1.2414 - CyberLink Corp.)
CyberLink MediaShow (x32 Version: 5.1.2414 - CyberLink Corp.) Hidden
CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.0.6904 - CyberLink Corp.)
CyberLink PhotoNow (x32 Version: 1.1.0.6904 - CyberLink Corp.) Hidden
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4813 - CyberLink Corp.)
CyberLink Power2Go (x32 Version: 6.1.4813 - CyberLink Corp.) Hidden
CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3224a - CyberLink Corp.)
CyberLink PowerDirector (x32 Version: 8.0.3224a - CyberLink Corp.) Hidden
CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.2225.02 - CyberLink Corp.)
CyberLink PowerDVD 10 (x32 Version: 10.0.2225.02 - CyberLink Corp.) Hidden
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
CyberLink PowerDVD Copy (x32 Version: 1.5.1306 - CyberLink Corp.) Hidden
CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.3503 - CyberLink Corp.)
CyberLink PowerProducer (x32 Version: 5.0.2.3503 - CyberLink Corp.) Hidden
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3428 - CyberLink Corp.)
CyberLink YouCam (x32 Version: 3.1.3428 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
FRANZIS onlineTV 8 (HKLM-x32\...\{CBC88F0E-1960-4AC3-8C38-8BAD44E3F6E3}_is1) (Version: 8.4.0.0 - FRANZIS Verlag GmbH)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 33.0.1750.154 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.4805.320 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel PROSet Wireless (Version:  - ) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{821B4CA1-D404-4CCA-AEA4-C7D3F40841B1}) (Version: 1.0.0.0135 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{C7B40C35-85AE-4303-9EEA-1A1EA779664D}) (Version: 1.0.2.0518 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{794E5C90-96E5-4413-B3F5-C803205AE30C}) (Version: 14.0.3000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.0.1008 - Intel Corporation)
Intel(R) Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version:  - )
Intel(R) Wireless Display (HKLM-x32\...\{5B46CEC7-DAD0-46A2-BCD6-B46A3CFD9B61}) (Version: 2.0.30.0 - Intel Corporation)
iTunes (HKLM\...\{76FF0F03-B707-4332-B5D1-A56C8303514E}) (Version: 11.0.4.4 - Apple Inc.)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.3 - Wistron Corp.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2608 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 8.0.2608 - CyberLink Corp.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
RCS-Auftrag Client/Server (HKLM-x32\...\RCS-Auftrag 2000_is1) (Version:  - RCS Richter Computer Systemhaus GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6321 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Reader Driver (HKLM-x32\...\{62BBB2F0-E220-4821-A564-730807D2C34D}) (Version: 6.1.7600.10003 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.34.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.34.0 - Renesas Electronics Corporation) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.1.0.11112_41 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.1.0.11112_41 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.4.103.0 - SAMSUNG Electronics Co., Ltd.)
SopCast 3.5.0 (HKLM-x32\...\SopCast) (Version: 3.5.0 - www.sopcast.com)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.12.0 - Synaptics Incorporated)
Uninstall 1.0.0.1 (HKLM-x32\...\Uninstall_is1) (Version:  - )
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Versandhelfer (HKLM-x32\...\dpdhl.versandhelfer.medionlap.CDA82DC3FEDD13302C6424313D9A2999F162D21A.1) (Version: 0.9.511 - Deutsche Post AG)
Versandhelfer (x32 Version: 0.9.511 - Deutsche Post AG) Hidden
VLC media player 1.1.10 (HKLM-x32\...\VLC media player) (Version: 1.1.10 - VideoLAN)
VR-pulse Installer (HKLM\...\{CB3A3CAD-1083-4952-B3A6-E231359DE244}) (Version: 1.2.0 - American Megatrends Inc.)
watchmi (HKLM-x32\...\{AA4D1C5E-116A-4FF4-AA91-28F526868203}) (Version: 2.5.0 - Axel Springer Digital TV Guide GmbH)
Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Fotogalleri (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 15.4.3538.0513 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Movie Maker (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven asennustyökalu (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven sähköposti (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Liven valokuvavalikoima (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows Media Encoder 9 Series (x32 Version: 9.00.2980 - Microsoft Corporation) Hidden
X10 Hardware(TM) (HKLM-x32\...\X10Hardware) (Version:  - )
Zattoo4 4.0.5 (HKLM-x32\...\Zattoo4) (Version: 4.0.5 - Zattoo Inc.)

==================== Restore Points  =========================

25-02-2014 17:38:10 Windows Update
01-03-2014 07:59:13 Windows Update
05-03-2014 15:55:26 Windows Update
13-03-2014 22:15:26 Windows Update
16-03-2014 22:31:29 ComboFix created restore point
17-03-2014 22:01:45 Windows Update
17-03-2014 22:55:20 Removed Java(TM) 6 Update 22
17-03-2014 22:56:18 Removed Java(TM) 6 Update 24
18-03-2014 13:11:28 Removed Java(TM) 6 Update 24 (64-bit)

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-03-16 23:43 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {03B59304-2418-4D42-A0E3-16BCB85766B0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {46532976-85EE-4DB5-AA35-D94517F60201} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-05] (Google Inc.)
Task: {537063D6-B608-4F23-A2B2-52AD532A5C93} - System32\Tasks\AdobeFlashPlayerUpdate 2 => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {DA33E9E3-CCC8-4EB8-866E-C6A74FF941C2} - System32\Tasks\AdobeFlashPlayerUpdate => C:\Windows\SysWOW64\FlashPlayerUpdateService.exe
Task: {DB1EF607-DB73-40FA-90CC-824398C0F51C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-05-05] (Google Inc.)
Task: {EDBD8554-2796-4669-BB32-9ECFF44B902B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11] (Adobe Systems Incorporated)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-02-04 23:42 - 2011-02-04 23:42 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2011-02-04 12:38 - 2011-01-27 08:11 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-03-14 04:32 - 2010-12-14 11:39 - 00244904 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2010-12-06 11:52 - 2010-12-06 11:52 - 00062464 _____ () C:\Program Files (x86)\watchmi\TvdService.exe
2011-05-05 08:23 - 2011-05-05 08:23 - 00061952 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Remote\2.5.0.5__f722db7bec59a14b\Tvd.Remote.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00009216 _____ () C:\Windows\assembly\GAC_MSIL\FingerPrint\1.0.0.0__a62e68e935d72fa6\FingerPrint.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00078848 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Reporting\2.5.0.5__f722db7bec59a14b\Tvd.Reporting.dll
2011-05-05 08:23 - 2011-05-05 08:23 - 00148480 _____ () C:\Windows\assembly\GAC_MSIL\Tvd.Aprico\2.5.0.5__f722db7bec59a14b\Tvd.Aprico.dll
2013-04-30 14:49 - 2013-04-30 14:41 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2013-04-21 20:44 - 2013-04-21 20:44 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-11-02 22:20 - 2009-11-02 22:20 - 00619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
2009-11-02 22:23 - 2009-11-02 22:23 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
2014-02-16 16:32 - 2014-02-16 16:32 - 00169472 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\0a0467413a424068d1471448ff6ca6cc\IsdiInterop.ni.dll
2011-03-13 01:02 - 2010-11-06 08:50 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (03/18/2014 04:32:27 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4498523

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4498523

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


System errors:
=============
Error: (03/18/2014 05:45:45 AM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}


Microsoft Office Sessions:
=========================
Error: (03/18/2014 04:32:27 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4498523

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4498523

Error: (03/18/2014 07:38:15 AM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity Errors:
===================================
  Date: 2014-03-16 23:42:20.119
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-03-16 23:42:20.041
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 45%
Total physical RAM: 4003.07 MB
Available physical RAM: 2178.18 MB
Total Pagefile: 8004.32 MB
Available Pagefile: 5852.44 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: (Boot) (Fixed) (Total:657.54 GB) (Free:588.87 GB) NTFS
Drive d: (Recover) (Fixed) (Total:38 GB) (Free:16.16 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 699 GB) (Disk ID: D3AF660C)

Bootsektor · 18.03.2014, 22:27

Hallo Steffen,

bitte ändere unbedingt deine Passwörter, wenn wir mit der Bereinigung fertig sind.

Schritt 1

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

C:\4gEJsVyiA73
C:\Users\Steffen\AppData\Local\Temp\*.exe
C:\Users\Steffen\AppData\Local\Temp\*.dll

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

der andere Fund von ESET ist in unserer Quarantäne, den entfernen wir gleich.

>OK<

So wie ich es sehe, haben wir damit alles Schadhafte entfernt. Deine Logs sind sauber.
Abschließend räumen wir noch etwas auf, führen Updates durch und dann bekommst du noch etwas Lesestoff von mir.

Schritt 1
Falls Du Malwarebytes-Antimalware und den ESET-Onlinescan nicht mehr benötigst, kannst Du beide Programme einfach über die Programmdeinstallation deinstallieren.
Ich empfehle Dir aber zumindest Malwarebytes zu behalten, und damit einmal die Woche einen Kontrollscan zu machen.

Schritt 2

Bitte vor der folgenden Aktion wieder temporär Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.

Windows-Taste + R drücke. Kopiere nun folgende Zeile in die Kommandozeile und klicke OK.

Code:

ATTFilter

Combofix /Uninstall

Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert, damit auch aus dieser die Schädlinge verschwinden.

Nun die eben deaktivierten Programme wieder aktivieren.

Schritt 3
Downloade dir bitte delfix auf deinen Desktop.

Schließe alle offenen Programme.
Starte die delfix.exe mit einem Doppelklick.
Setze vor jede Funktion ein Häkchen.
Klicke auf Start.
DelFix entfernt u. a. alle verwendeten Programme und löscht sich abschließend selbst.

Updates / Programme aktualisieren

Adobe Reader

Deinstalliere Deinen Reader und lade Dir die neueste Version von hier herunter. Entferne den Haken bei McAfee Security Plus

Nun zum Schluss noch ein paar Tipps zur Absicherung deines Systems.

Aktualität des Systems
Es ist extrem wichtig, dass sowohl dein System als auch die darauf installierte sicherheitsrelevante Software (Flash Player, PDF-Reader und besonders Java, sofern vorhanden) aktuell sind.

Bitte überprüfe, ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.

Java

Java ist eine große Sicherheitslücke auf deinem System, es werden immer wieder neue Schwachstellen entdeckt, die ausgenutzt werden um Rechner zu infizieren.
Falls du Java unbedingt benötigst, dann

Downloade dir bitte die neueste Java-Version von hier
Speichere die jxpiinstall.exe
Schließe alle laufenden Programme. Speziell deinen Browser.
Starte die jxpiinstall.exe. Diese wird den Installer für die neueste Java Version ( Java 7 Update 51 ) herunter laden.
Entferne den Haken bei "Installieren Sie die Ask-Toolbar ..." während der Installation.

und sorge dafür, dass Java automatisch updated.
Dazu:

öffne Java
klicke auf den Reiter Update
klicke auf: Benachrichtung ausgeben: Vor dem Download setze den Haken bei Automatisch nach Updates suchen
klicke auf Erweitert
ändere das Intervall mindestens auf wöchentlich

und schalte das Browser-Plugin aus.
Hier findest du eine Anleitung dazu.

Antivirensoftware

Gehe sicher immer eine Antiviren Software installiert zu haben und halte diese unbedingt aktuell.

Zusätzlicher Schutz

MalwareBytes Anti-Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On-Demand Scantool welches viele aktuelle Malware erkennt und auch entfernt.
Aktualisiere das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der Internet Explorer, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf einen Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Systemleistung
Lösche regelmäßig deine temporären Dateien. Ich empfehle hierzu TFC
Halte dich fern von jeglichen Registry Cleanern.
Diese schaden deinem System mehr als dass sie es schneller machen.

Verhaltensregeln zum sichereren Surfen

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Achte besonders bei der Installation von Programmen darauf, ob sich weitere Software mitinstallieren möchte, wähle wo immer es geht die benutzerdefinierte Installation und wähle alles ab, was nichts mit dem Programm zu tun hat, welches du dir installieren möchtest.

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Falls Du Lob oder Kritik abgeben möchtest, kannst Du das sehr gerne hier tun.

Wenn Du etwas für das Forum und unsere Arbeit spenden möchtest, so kannst Du das hier tun.

Ischbins · 18.03.2014, 23:19

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by Steffen at 2014-03-18 22:35:52 Run:4
Running from C:\Users\Steffen\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\4gEJsVyiA73
C:\Users\Steffen\AppData\Local\Temp\*.exe
C:\Users\Steffen\AppData\Local\Temp\*.dll
         
*****************

C:\4gEJsVyiA73 => Moved successfully.

"C:\Users\Steffen\AppData\Local\Temp\*.exe" directory move:

Could not move "C:\Users\Steffen\AppData\Local\Temp\*.exe" directory. => Scheduled to move on reboot.

"C:\Users\Steffen\AppData\Local\Temp\*.dll" => File/Directory not found.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-03-18 22:39:54)<=

"C:\Users\Steffen\AppData\Local\Temp\*.exe" => Directory could not move.

==== End of Fixlog ====

Hallo Sandra,
alles erledigt. Vielen Dank!
Gruß Steffen

Bootsektor · 19.03.2014, 23:11

Gern geschehen.

19.03.2014, 23:11	#27
Bootsektor Ruhe in Frieden † 2019	Windows 7 System mit Internet-Trojaner infiziert Gern geschehen. __________________ Grüße stolzes Mitglied von UNITE Du hast Lob oder Verbesserungsvorschläge? Du findest unsere Arbeit gut und möchtest uns finanziell unterstützen? -> Spende

Windows 7 System mit Internet-Trojaner infiziert

Log-Analyse und Auswertung: Windows 7 System mit Internet-Trojaner infiziert