Browser funktionieren nur im abgesicherten Modus

M-K-D-B · 06.06.2014, 17:28

Zitat:

Zitat von Honich

Eset möchte immer noch nicht...

Rechner neu starten, nochmal versuchen.

Wenns nicht klappt, FRST bitte nochmal:

Starte die FRST.exe erneut. Setze einen Haken vor Addition und drücke auf Scan.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Honich · 06.06.2014, 17:40

Nein auch nach dem Start immer noch das gleiche Kästchen mit der Proxy Frage.
Anbei die FRST logs.

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by Home at 2014-06-06 18:37:53
Running from C:\Users\Home\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

7-PDF Split & Merge Version 2.0.4 (Build 112) (HKLM-x32\...\7-PDF Split & Merge_is1) (Version: 7-PDF Split & Merge - Version 2.0.4 (Build 112) - 7-PDF, Germany - Thorsten Hodes)
Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.9.900.152 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Amazon MP3-Downloader 1.0.9 (HKLM-x32\...\Amazon MP3-Downloader) (Version:  - )
ArcSoft WebCam Companion 3 (HKLM-x32\...\{B3236C7B-455E-4CDB-B3E1-7A2190B054BC}) (Version: 3.0.33.183 - ArcSoft)
Assassin's Creed (HKLM-x32\...\{8CFA9151-6404-409A-AF22-4632D04582FD}) (Version: 1.02 - Ubisoft)
Atheros Wireless LAN Card (HKLM-x32\...\{28DA7D8B-F9A4-4F18-8AA0-551B1E084D0E}) (Version: 2.2.0.27 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{A3801BE1-5541-D0DE-18D0-136F8166BFA0}) (Version: 3.0.800.0 - ATI Technologies, Inc.)
AviSynth 2.6 (HKLM-x32\...\AviSynth) (Version: 2.6.0.2 - GPL Public release.)
AvsP (HKLM-x32\...\AvsP_is1) (Version:  - )
Canon MP Navigator EX 4.0 (HKLM-x32\...\MP Navigator EX 4.0) (Version:  - )
Canon Solution Menu EX (HKLM-x32\...\CanonSolutionMenuEX) (Version:  - )
CanoScan LiDE 110 Scanner Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_cnq2414) (Version:  - )
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - ATI) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.1026.2246.39002 - ATI) Hidden
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.1026.2246.39002 - ATI) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2010.1026.2246.39002 - ATI Technologies, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2010.1026.2246.39002 - ATI) Hidden
CCC Help English (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help French (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help German (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Greek (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Hungarian (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Italian (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Polish (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Portuguese (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
CCC Help Spanish (x32 Version: 2010.1026.2245.39002 - ATI) Hidden
ccc-core-static (x32 Version: 2010.1026.2246.39002 - Ihr Firmenname) Hidden
ccc-utility64 (Version: 2010.1026.2246.39002 - ATI) Hidden
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.2.4214 - CDBurnerXP)
CdCoverCreator 2.5.3 (HKLM-x32\...\CdCoverCreator) (Version: 2.5.3 - thyanté Software)
CDex extraction audio (HKLM-x32\...\CDex) (Version:  - )
Dropbox (HKCU\...\Dropbox) (Version: 2.4.11 - Dropbox, Inc.)
DVD slideshow GUI 0.9.5.2 (HKLM-x32\...\BE37E547-62DF-43C8-AE6A-D03E82BC67A2_is1) (Version: DVD slideshow GUI 0.9.5.2 - Tin2tin)
DVD-MovieAlbumSE 3 (HKLM-x32\...\{B7A9E601-0E82-11D5-AE91-444553540000}) (Version:  - )
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 5.4.5.114 - Foxit Corporation)
Free YouTube to DVD Converter version 3.0.28.1201 (HKLM-x32\...\Free YouTube to DVD Converter_is1) (Version: 3.0.28.1201 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.17.1125 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.17.1125 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 3.1.2 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 3.1.2 - Ellora Assets Corporation)
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Google Earth (HKLM-x32\...\{C768790F-04FB-11E0-9B2C-001AA037B01E}) (Version: 6.0.1.2032 - Google)
GUI for dvdauthor 1.07 (HKLM-x32\...\GUI for dvdauthor) (Version: 1.07 - Boraxsoft)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Helix YUV Codecs (remove only) (HKLM-x32\...\HelixYUVCodecs) (Version:  - )
Host OpenAL (ADI) (HKLM-x32\...\Host OpenAL (ADI)) (Version:  - )
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.5.0 - LIGHTNING UK!)
Kartei Plus für Windows (HKLM-x32\...\ST6UNST #1) (Version:  - )
Legend - Legacy Of The Dragons (with media and plugins), versio (HKLM-x32\...\Legend - Legacy Of The Dragons_is1) (Version:  - DwarClientEn)
LG MC USB U330 driver (HKLM-x32\...\{ABD7DBE3-E344-4BCA-B8AD-4360494DD1D9}) (Version: 1.0.0.0000 - LG Electronics)
LG USB Modem Drivers (HKLM-x32\...\{FA02ACAC-9E14-4878-A257-92A22A647C2C}) (Version: 4.9.4 - LG Electronics)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version:  - )
Malwarebytes Anti-Malware Version 1.70.0.1100 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.70.0.1100 - Malwarebytes Corporation)
Marvell Miniport Driver (HKLM-x32\...\Marvell Miniport Driver) (Version: 11.10.5.3 - Marvell)
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version:  - )
metaCrawler (HKLM-x32\...\metaCrawler) (Version:  - metaCrawler) <==== ATTENTION
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Professional 2007 (HKLM-x32\...\PROR) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Office Professional 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Mozilla Firefox 29.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 29.0.1 (x86 de)) (Version: 29.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton 360 (HKLM-x32\...\N360) (Version: 21.1.1.7 - Symantec Corporation)
OpenOffice.org 3.3 (HKLM-x32\...\{4286716B-1287-48E7-9078-3DC8248DBA96}) (Version: 3.3.9567 - OpenOffice.org)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
ScummVM 1.3.1 (HKLM-x32\...\ScummVM_is1) (Version:  - The ScummVM Team)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.6 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.6.106 - Skype Technologies S.A.)
Soda PDF 2012 (HKLM-x32\...\{633156BB-53DD-471A-ABF5-4DFD31127152}) (Version: 2.0.19.2604 - LULU Software)
SoundMAX (HKLM-x32\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 6.10.2.6585 - Analog Devices)

==================== Restore Points  =========================

09-04-2014 16:17:35 Windows Update
10-04-2014 16:43:19 Windows Update
05-05-2014 09:36:18 Windows Update
06-05-2014 14:55:27 Windows Update
15-05-2014 01:01:22 Windows Update
27-05-2014 15:51:37 Windows Update
28-05-2014 15:51:11 Windows Update
28-05-2014 16:28:07 Windows Update
01-06-2014 17:04:34 Windows Update
02-06-2014 15:57:29 Windows Update
03-06-2014 13:01:50 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2014-06-04 19:52 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1       localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {0049BE6A-5C1B-4507-AF7D-84E704978700} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {08C36723-FEC2-4CF5-9351-8657C1A879C9} - \MetaCrawler No Task File <==== ATTENTION
Task: {7B4BA225-8B86-4AB2-8DDF-10BCD2DBBD60} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {C50325E5-3AD5-48EF-ABEC-0548BBEBBBBA} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\WSCStub.exe [2014-02-12] (Symantec Corporation)
Task: {E8C5137D-85FC-4111-94BE-1C75A035C472} - System32\Tasks\{2A92E7AF-8131-47A0-BCF9-380224815B7E} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)
Task: {F743D212-DD40-4BEF-8489-2FA0F8E1A4EF} - System32\Tasks\{0C1D78EC-0781-4FB1-8E72-6414D35F5384} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-06-21] (Skype Technologies S.A.)

==================== Loaded Modules (whitelisted) =============

2013-03-02 13:23 - 2013-02-13 10:31 - 00857456 _____ () C:\Program Files (x86)\Lidl_Fotos\dd.exe
2013-05-22 20:50 - 2013-05-22 20:50 - 00400704 _____ () C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
2010-10-26 23:45 - 2010-10-26 23:45 - 00270336 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll
2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\Home\AppData\Roaming\Dropbox\bin\libcef.dll
2014-06-03 17:08 - 2014-06-03 17:08 - 03839088 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Realtek RTL8169/8110-Familie-PCI-Gigabit-Ethernet-NIC (NDIS 6.20)
Description: Realtek RTL8169/8110-Familie-PCI-Gigabit-Ethernet-NIC (NDIS 6.20)
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8167
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: BHDrvx64
Description: BHDrvx64
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: BHDrvx64
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Standardtastatur (PS/2)
Description: Standardtastatur (PS/2)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/06/2014 06:36:42 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:36:39 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:36:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:36:05 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:29:52 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:29:49 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:29:14 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:29:11 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:24:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (06/06/2014 06:24:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.


System errors:
=============
Error: (06/06/2014 06:33:04 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
BHDrvx64

Error: (06/06/2014 05:51:06 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (06/06/2014 05:46:15 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 3

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (06/06/2014 05:46:15 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 2

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (06/06/2014 05:46:15 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 2

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (06/06/2014 05:46:11 PM) (Source: Microsoft-Windows-WHEA-Logger) (EventID: 18) (User: NT-AUTORITÄT)
Description: Schwerwiegender Hardwarefehler.

Gemeldet von Komponente: Prozessorkern
Fehlerquelle: 3
Fehlertyp: 10
Prozessor-ID: 0

Die Detailansicht dieses Eintrags beinhaltet weitere Informationen.

Error: (06/06/2014 05:46:10 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
BHDrvx64

Error: (06/06/2014 05:45:57 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x00000124 (0x0000000000000000, 0xfffffa80052d88f8, 0x0000000000000000, 0x0000000000000000)C:\Windows\Minidump\060614-38204-01.dmp060614-38204-01

Error: (06/05/2014 07:54:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068

Error: (06/05/2014 07:54:32 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1068


Microsoft Office Sessions:
=========================
Error: (07/15/2012 07:32:39 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 3, Application Name: Microsoft Office PowerPoint, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 726 seconds with 660 seconds of active time.  This session ended with a crash.

Error: (02/26/2012 03:29:33 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 1, Application Name: Microsoft Office Excel, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (08/07/2011 08:21:46 PM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 7 seconds with 0 seconds of active time.  This session ended with a crash.


CodeIntegrity Errors:
===================================
  Date: 2014-06-04 19:51:46.286
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-04 19:51:46.115
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-04 19:51:45.927
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2014-06-04 19:51:45.756
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-20 16:50:10.937
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-01-20 16:50:10.844
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 35%
Total physical RAM: 4095.12 MB
Available physical RAM: 2646.7 MB
Total Pagefile: 8188.41 MB
Available Pagefile: 6642.59 MB
Total Virtual: 8192 MB
Available Virtual: 8191.86 MB

==================== Drives ================================

Drive c: (HDD) (Fixed) (Total:931.41 GB) (Free:823.78 GB) NTFS
Drive e: (CD_ROM) (CDROM) (Total:0.28 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 69698E5F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

==================== End Of Log ============================

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Home (administrator) on HOME-PC on 06-06-2014 18:37:16
Running from C:\Users\Home\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\Program Files (x86)\Lidl_Fotos\dd.exe
() C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe
(Dropbox, Inc.) C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe
(LULU Software) C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [Device Detection] => C:\Program Files (x86)\Lidl_Fotos\dd.exe [857456 2013-02-13] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicyUsers\S-1-5-21-433733618-1293826757-3301219268-1003\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1C067739-DD2E-4643-AE5C-78484BA54043} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=9e0acf560000000000000015af6505ba&r=616
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Soda PDF 2012 Helper - {ebe8b562-cba0-40d8-b920-af7cfe0c9d94} - C:\Program Files (x86)\Soda PDF 2012\PDFIEHelper.dll (LULU Software)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Soda PDF 2012 Toolbar - {a8c9d542-fd91-4834-a2e8-adb9ae692b8b} - C:\Program Files (x86)\Soda PDF 2012\PDFIEPlugin.dll (LULU Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104
FF Homepage: www.google.de
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [FFSodaPDFConverter2012@sodapdf.com] - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012
FF Extension: Soda PDF 2012 Converter For Firefox - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012 [2012-02-03]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF [2014-02-28]

Chrome: 
=======
CHR HomePage: chrome://newtab
CHR RestoreOnStartup: "hxxp://search.softonic.com/MOY00621/tb_v1?SearchSource=48&cc=&mi=9e0acf560000000000000015af6505ba",
			"hxxp://www.giga.de/software/"
CHR DefaultSearchProvider: Search the web (Softonic)
CHR DefaultSearchURL: hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=49&cc=&mi=9e0acf560000000000000015af6505ba
CHR Extension: (ChromeToolbar) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\bipiocmkdofpgpdebagkjpgcpbjmbgkn [2013-05-18]
CHR Extension: (Securita Scout) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad [2014-05-19]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\Exts\Chrome.crx [2014-05-19]

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe [265040 2014-02-12] (Symantec Corporation)
S3 Soda PDF 2012 Helper Service; C:\Program Files (x86)\Soda PDF 2012\HelperService.exe [827224 2011-12-23] (LULU Software)
R2 Soda PDF 2012 Service; C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe [901976 2011-12-23] (LULU Software)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2014-02-14] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501010.007\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-02] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\IPSDefs\20140309.001\IDSvia64.sys [524504 2014-03-03] (Symantec Corporation)
S3 lgmdbus; C:\Windows\System32\DRIVERS\lgmdbus.sys [115200 2008-07-08] (MCCI Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
R3 MicNgBas; C:\Windows\System32\DRIVERS\MicNgBas.sys [89120 2007-10-16] (Micronas GmbH)
R3 MicNgCap; C:\Windows\System32\DRIVERS\MicNgCap.sys [95776 2007-10-16] (Micronas GmbH)
R3 MicNgTun; C:\Windows\System32\DRIVERS\MicNgTun.sys [335392 2007-10-16] (Micronas GmbH)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\ENG64.SYS [126040 2014-03-02] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\EX64.SYS [2099288 2014-03-02] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501010.007\SRTSP64.SYS [875736 2014-02-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501010.007\SRTSPX64.SYS [36952 2014-02-11] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501010.007\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501010.007\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501010.007\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501010.007\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U4 wuaserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:40 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-04 19:40 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-04 19:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-04 19:39 - 2014-06-04 19:56 - 00000000 ____D () C:\Qoobox
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:48 - 2014-06-05 19:50 - 00022794 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-04 17:46 - 2014-06-06 18:37 - 00014384 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-04 17:46 - 2014-06-06 18:37 - 00000000 ____D () C:\FRST
2014-06-04 17:45 - 2014-06-04 17:46 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 15:02 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-03 15:02 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-03 15:02 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-03 15:02 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-02 17:59 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-02 17:59 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-02 17:59 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-02 17:59 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-02 17:58 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-02 17:58 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-02 17:58 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-02 17:58 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-02 17:58 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-02 17:58 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-02 17:58 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-02 17:58 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-02 17:58 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-02 17:58 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 16:55 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-01 16:55 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-01 16:55 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-01 16:55 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-01 16:55 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-01 16:55 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-01 16:55 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-06-01 16:54 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-01 16:54 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-05-28 17:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-28 17:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-28 17:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-28 17:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-28 17:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-28 17:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-28 17:58 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-05-28 17:58 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-05-28 17:58 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-05-28 17:57 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-28 17:57 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-28 17:56 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-28 17:56 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-28 17:56 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-28 17:56 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-28 17:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-19 17:41 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:25 - 2014-05-26 20:07 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-19 17:19 - 2014-05-19 17:20 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-19 17:15 - 2014-05-19 17:39 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster

==================== One Month Modified Files and Folders =======

2014-06-06 18:37 - 2014-06-04 17:46 - 00014384 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-06 18:37 - 2014-06-04 17:46 - 00000000 ____D () C:\FRST
2014-06-06 18:37 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp
2014-06-06 18:36 - 2010-12-20 16:11 - 01527431 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 18:33 - 2013-02-27 18:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Dropbox
2014-06-06 18:33 - 2012-02-03 19:12 - 00000000 ____D () C:\Users\Home\AppData\Roaming\PDF Software
2014-06-06 18:32 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-06 18:32 - 2009-07-14 06:51 - 00138799 _____ () C:\Windows\setupact.log
2014-06-06 18:26 - 2011-02-02 19:22 - 01193984 ___SH () C:\Users\Home\Desktop\Thumbs.db
2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:59 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-06 17:59 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-06 17:45 - 2011-01-29 18:02 - 00000000 ____D () C:\Windows\Minidump
2014-06-05 19:50 - 2014-06-04 17:48 - 00022794 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:09 - 2010-12-30 19:36 - 00449032 _____ () C:\Windows\PFRO.log
2014-06-05 18:08 - 2013-11-21 15:22 - 00000000 ____D () C:\AdwCleaner
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:39 - 00000000 ____D () C:\Qoobox
2014-06-04 19:52 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-04 19:39 - 2013-01-20 17:38 - 00000000 ____D () C:\Windows\erdnt
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:46 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-04 17:36 - 2013-01-20 22:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 14:55 - 2010-12-30 18:16 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Skype
2014-06-03 14:52 - 2013-01-24 18:44 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-03 14:52 - 2013-01-24 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ____D () C:\ProgramData\Skype
2014-06-03 14:45 - 2009-07-14 19:58 - 00702942 _____ () C:\Windows\system32\perfh007.dat
2014-06-03 14:45 - 2009-07-14 19:58 - 00150582 _____ () C:\Windows\system32\perfc007.dat
2014-06-03 14:45 - 2009-07-14 07:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 14:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-01 16:50 - 2010-12-30 19:56 - 00000680 __RSH () C:\Users\Home\ntuser.pol
2014-06-01 16:50 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home
2014-06-01 16:47 - 2009-07-14 06:45 - 00486432 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-28 17:52 - 2013-08-12 13:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-27 17:51 - 2011-04-09 16:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-26 20:07 - 2014-05-19 17:25 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-26 20:07 - 2014-02-28 06:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-26 20:07 - 2014-02-28 06:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-26 20:07 - 2013-10-01 00:34 - 00000000 ____D () C:\Users\Home\AppData\Local\FileViewPro
2014-05-26 20:07 - 2013-09-04 17:02 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-26 20:07 - 2013-08-17 13:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\mp3DirectCut
2014-05-26 20:07 - 2013-05-18 18:11 - 00000000 ____D () C:\Users\Home\AppData\Local\MediaZup
2014-05-26 20:07 - 2013-03-06 18:10 - 00000000 ____D () C:\Users\Honichbiene
2014-05-26 20:07 - 2013-02-27 18:46 - 00000000 ___RD () C:\Users\Home\Dropbox
2014-05-26 20:07 - 2013-02-27 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-26 20:07 - 2013-02-13 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\7-PDFSplitMerge
2014-05-26 20:07 - 2012-12-12 17:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-26 20:07 - 2012-12-02 13:07 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-05-26 20:07 - 2012-11-26 18:51 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DeepBurner
2014-05-26 20:07 - 2012-07-23 18:35 - 00000000 ____D () C:\Users\Home\.DVDslideshowGUI
2014-05-26 20:07 - 2012-07-15 16:12 - 00000000 ____D () C:\Users\Home\Desktop\Fahrt ins Blaue
2014-05-26 20:07 - 2012-05-19 11:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ArcSoft
2014-05-26 20:07 - 2012-05-07 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-26 20:07 - 2012-01-28 19:23 - 00000000 ____D () C:\Users\Home\Desktop\OpenOffice.org 3.3 (de) Installation Files
2014-05-26 20:07 - 2011-11-27 11:55 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DVDVideoSoft
2014-05-26 20:07 - 2011-08-28 15:50 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ScummVM
2014-05-26 20:07 - 2011-07-07 19:44 - 00000000 ____D () C:\Users\Home\Documents\LG_PC_Suite_III
2014-05-26 20:07 - 2011-04-16 19:18 - 00000000 ____D () C:\Users\Home\Documents\Eigene Diashows
2014-05-26 20:07 - 2011-04-09 16:43 - 00000000 ____D () C:\ProgramData\CanonIJ
2014-05-26 20:07 - 2011-01-06 14:06 - 00000000 ____D () C:\Users\Home\Desktop\Dokumentenkram
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-05-26 20:07 - 2010-12-30 20:21 - 00000000 ____D () C:\Users\Paula
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\ProgramData\Norton
2014-05-26 20:07 - 2010-12-20 16:18 - 00000000 ____D () C:\Users\Home\AppData\Local\VirtualStore
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool
2014-05-26 20:06 - 2014-05-19 17:41 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-26 20:06 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-26 20:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-26 20:02 - 2013-11-23 19:32 - 00000000 ____D () C:\Users\Home\Downloads\adt-bundle-windows-x86_64-20131030
2014-05-26 20:01 - 2013-09-19 14:16 - 00000000 ____D () C:\Users\Home\Downloads\3GP_Converter034
2014-05-26 20:01 - 2013-08-20 14:35 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canneverbe Limited
2014-05-26 20:01 - 2013-01-20 19:49 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Malwarebytes
2014-05-26 20:01 - 2013-01-05 16:36 - 00000000 ____D () C:\Users\Home\AppData\Roaming\elsterformular
2014-05-26 20:01 - 2012-08-26 14:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Ubisoft
2014-05-26 20:01 - 2011-04-16 19:25 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Anvsoft
2014-05-26 20:01 - 2011-04-09 16:39 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canon
2014-05-26 20:01 - 2011-01-03 16:53 - 00000000 ____D () C:\Users\Home\AppData\Local\Google
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Mozilla
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Local\Mozilla
2014-05-26 20:01 - 2010-12-30 15:38 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Adobe
2014-05-26 20:01 - 2010-12-26 20:59 - 00000000 ____D () C:\Users\Home\AppData\Local\Microsoft Games
2014-05-19 17:39 - 2014-05-19 17:15 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:20 - 2014-05-19 17:19 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-18 14:12 - 2014-04-11 17:42 - 00000000 ____D () C:\Users\Home\Desktop\QR
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster
2014-05-09 08:14 - 2014-06-01 16:55 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-06-01 16:55 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

Some content of TEMP:
====================
C:\Users\Home\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-07-23 11:11

==================== End Of Log ============================

--- --- ---

--- --- ---

Ich bin für heute Abend jetzt erst einmal raus. Vielen Dank bis hierhin. Ich hoffe den Rest bekommen wir auch noch wieder hin.
Einen schönen Abend erst einmal!

M-K-D-B · 07.06.2014, 14:56

Bitte Zoek nochmal mit folgenden Befehlen versuchen zu starten:

Schritt 1
Bitte deaktiviere dein Anti-Viren-Programm, da es das Ergebnis beeinflussen oder ggf. die Bereinigung stören kann.
Bitte lade dir zoek.exe von hier: http://hijackthis.nl/smeenk/ und speichere die Datei auf deinem Desktop.

Starte Zoek.exe mit einem Doppelklick.
Achtung: Das folgende Skript wurde nur für diesen speziellen Fall geschrieben und könnte andere Computer beschädigen.
Kopiere den Text der folgenden Box in das Skriptfenster von zoek:
Code:
ATTFilter
```
iedefaults;
resetIEproxy;
resethosts;
FFdefaults;
CHRdefaults;
         
```
Nun klicke auf "Run script" und sei geduldig bis das Skript durchgelaufen ist.
Wenn das Tool fertig ist, wird sich Notepad mit der Logdatei öffnen (ggf. erst nach einem Neustart). Das Log befindet sich aber auch noch unter c:\ .
Bitte poste mir das ZOEK-Log (möglichst in CODE-Tags - #-Symbol im Antwortfenster klicken).

Danach HitmanPro:

Schritt 1
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.

Starte die HitmanPro.exe
Klicke auf
Entferne den Haken bei
Klicke auf
und
Akzeptiere die Lizenzbedingungen und klicke auf
Klicke auf

und auf
Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
und speichere die Logdatei auf Deinem Desktop.
Schließe HitmanPro und poste mir das Log.

Honich · 08.06.2014, 15:16

Hallo Mathais und frohe Pfingsten erst einmal!
Danke für deine Hilfe weiterhin...meine Waschmaschine hat auch gerade den Geist aufgegeben..scheinen sich abzusprechen..nunja.
Hier das Protokoll von Zoek.
Hitmann folgt.

Code:

ATTFilter

Zoek.exe v5.0.0.0 Updated 21-05-2014
Tool run by Home on 08.06.2014 at 16:03:42,60.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode No Internet Access Detected
Launched: C:\Users\Home\Desktop\zoek.exe [Scan all users] [Script inserted] 

==== System Restore Info ======================

08.06.2014 16:05:27 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp. 
# 
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 
# 
# This file contains the mappings of IP addresses to host names. Each 
# entry should be kept on an individual line. The IP address should 
# be placed in the first column followed by the corresponding host name. 
# The IP address and the host name should be separated by at least one 
# space. 
# 
# Additionally, comments (such as these) may be inserted on individual 
# lines or following the machine name denoted by a '#' symbol. 
# 
# For example: 
# 
#      102.54.94.97     rhino.acme.com          # source server 
#       38.25.63.10     x.acme.com              # x client host 
 
# localhost name resolution is handle within DNS itself. 
127.0.0.1       localhost 
::1             localhost 

==== FireFox Fix ======================

Deleted from C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\prefs.js:
user_pref("browser.startup.homepage", "www.google.de");

Added to C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\HONICH~1\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\prefs.js:
user_pref("keyword.URL", "");

Added to C:\Users\HONICH~1\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\HONICH~1\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\prefs.js:

Added to C:\Users\HONICH~1\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\prefs.js:
user_pref("keyword.URL", "");

Added to C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\prefs.js:
user_pref("browser.startup.homepage", "hxxp://www.google.com");
user_pref("browser.search.defaulturl", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "hxxp://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "hxxp://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF" [26.05.2014 20:07]

==== Firefox Extensions ======================

ProfilePath: C:\Users\HONICH~1\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default
- Undetermined - %ProfilePath%\extensions\staged
- Multimedia Toolbar - %ProfilePath%\extensions\{198FE6C6-89A1-42F7-8639-2986D28D4AF6}

ProfilePath: C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default
- Soda PDF 2012 Converter For Firefox - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012
- Undetermined - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.1.1.2\IPSFF
- metacrawler.com - %ProfilePath%\extensions\ffxtlbr@metacrawler.com
- Multimedia Toolbar - %ProfilePath%\extensions\{198FE6C6-89A1-42F7-8639-2986D28D4AF6}
- Undetermined - %ProfilePath%\extensions\{60364604-8b4c-42f4-a2ca-a76ca7b61b37}
- MetaCrawler New Tab - %ProfilePath%\extensions\{60364604-8b4c-42f4-a2ca-a76ca7b61b37}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104
EE8D96E7899D12FC3AA5DB2034C0853C	- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll -	Shockwave Flash
E09A55AB513C4D5145F1C318ED024747	- C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll -	AmazonMP3DownloaderPlugin
ED3D850C960401B9CBF0AFC3A066073D	- C:\Windows\SysWOW64\npdeployJava1.dll -	Java Deployment Toolkit 6.0.330.3
15E298B5EC5B89C5994A59863969D9FF	- C:\Windows\SysWOW64\npmproxy.dll -	Microsoft® Windows® Operating System


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://www.google.de/"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="hxxp://www.google.com"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://www.google.com"
"SearchAssistant"="hxxp://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="hxxp://go.microsoft.com/fwlink/?LinkId=69157"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="hxxp://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]
"Default_Search_URL"="hxxp://go.microsoft.com/fwlink/?LinkId=54896"
"SearchAssistant"="hxxp://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"
{1C067739-DD2E-4643-AE5C-78484BA54043} Search the web (Softonic) Url="hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=9e0acf560000000000000015af6505ba&r=616"

==== Reset Google Chrome ======================

C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Reset IE Proxy ======================

Value(s) before fix:
"ProxyEnable"=dword:00000000

Value(s) after fix:
"ProxyEnable"=dword:00000000

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== EOF on 08.06.2014 at 16:06:06,90 ======================

Bei Hitman ergibt sich das Problem das er keine Internetverbindung findet?
Er wartet auf Interner, zählt von 5 Minuten runter, aber es kommt nichts.
Hmm...merkwürdig. Bin eindeutig im Netz..

M-K-D-B · 08.06.2014, 18:19

FRST-Fix ausführen, Norton deaktivieren, dann nochmal ESET und HitmanPro versuchen:

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

ATTFilter

start
FF NetworkProxy: "type", 4
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Honich · 09.06.2014, 12:33

Norton kann ich nicht deaktivieren, da es überhaupt nicht reagiert. Jedesmal wenn ich es anklicke oder irgendwas, was mit Norton zu tun hat (Quickscan, Support anforden, Updaten etc.) erscheint ein Fenster mit rotem Button das einen unbekannten Fehler mit einer der *.exe Dateien von Norton kundtut.
FRST habe ich nochmals ausgeführt. Datei folgt:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Home (administrator) on HOME-PC on 09-06-2014 13:20:20
Running from C:\Users\Home\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe
(LULU Software) C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\Lidl_Fotos\dd.exe
() C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Dropbox, Inc.) C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [Device Detection] => C:\Program Files (x86)\Lidl_Fotos\dd.exe [857456 2013-02-13] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicyUsers\S-1-5-21-433733618-1293826757-3301219268-1003\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1C067739-DD2E-4643-AE5C-78484BA54043} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=9e0acf560000000000000015af6505ba&r=616
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Soda PDF 2012 Helper - {ebe8b562-cba0-40d8-b920-af7cfe0c9d94} - C:\Program Files (x86)\Soda PDF 2012\PDFIEHelper.dll (LULU Software)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Soda PDF 2012 Toolbar - {a8c9d542-fd91-4834-a2e8-adb9ae692b8b} - C:\Program Files (x86)\Soda PDF 2012\PDFIEPlugin.dll (LULU Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [FFSodaPDFConverter2012@sodapdf.com] - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012
FF Extension: Soda PDF 2012 Converter For Firefox - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012 [2012-02-03]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF [2014-02-28]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Multimedia Toolbar) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\bipiocmkdofpgpdebagkjpgcpbjmbgkn [2013-05-18]
CHR Extension: (No Name) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad [2014-05-19]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\Exts\Chrome.crx [2014-05-19]

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2014-06-08] (SurfRight B.V.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe [265040 2014-02-12] (Symantec Corporation)
S3 Soda PDF 2012 Helper Service; C:\Program Files (x86)\Soda PDF 2012\HelperService.exe [827224 2011-12-23] (LULU Software)
R2 Soda PDF 2012 Service; C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe [901976 2011-12-23] (LULU Software)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2014-02-14] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501010.007\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-02] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\IPSDefs\20140309.001\IDSvia64.sys [524504 2014-03-03] (Symantec Corporation)
S3 lgmdbus; C:\Windows\System32\DRIVERS\lgmdbus.sys [115200 2008-07-08] (MCCI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
R3 MicNgBas; C:\Windows\System32\DRIVERS\MicNgBas.sys [89120 2007-10-16] (Micronas GmbH)
R3 MicNgCap; C:\Windows\System32\DRIVERS\MicNgCap.sys [95776 2007-10-16] (Micronas GmbH)
R3 MicNgTun; C:\Windows\System32\DRIVERS\MicNgTun.sys [335392 2007-10-16] (Micronas GmbH)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\ENG64.SYS [126040 2014-03-02] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\EX64.SYS [2099288 2014-03-02] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501010.007\SRTSP64.SYS [875736 2014-02-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501010.007\SRTSPX64.SYS [36952 2014-02-11] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501010.007\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501010.007\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501010.007\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501010.007\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U4 wuaserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-08 16:13 - 2014-06-08 16:13 - 00001908 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\Program Files\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:11 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-08 16:10 - 2014-06-08 16:11 - 10971424 _____ (SurfRight B.V.) C:\Users\Home\Desktop\HitmanPro_x64.exe
2014-06-08 16:04 - 2014-06-08 16:06 - 00009440 _____ () C:\zoek-results.log
2014-06-08 16:03 - 2014-06-08 16:03 - 00000000 ____D () C:\zoek_backup
2014-06-08 15:58 - 2014-06-08 15:58 - 01285120 _____ () C:\Users\Home\Desktop\zoek.exe
2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:40 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-04 19:40 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-04 19:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-04 19:39 - 2014-06-04 19:56 - 00000000 ____D () C:\Qoobox
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:48 - 2014-06-06 18:38 - 00032154 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-04 17:46 - 2014-06-09 13:20 - 00014637 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-04 17:46 - 2014-06-09 13:20 - 00000000 ____D () C:\FRST
2014-06-04 17:45 - 2014-06-04 17:46 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 15:02 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-03 15:02 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-03 15:02 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-03 15:02 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-02 17:59 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-02 17:59 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-02 17:59 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-02 17:59 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-02 17:58 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-02 17:58 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-02 17:58 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-02 17:58 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-02 17:58 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-02 17:58 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-02 17:58 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-02 17:58 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-02 17:58 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-02 17:58 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 16:55 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-01 16:55 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-01 16:55 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-01 16:55 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-01 16:55 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-01 16:55 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-01 16:55 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-06-01 16:54 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-01 16:54 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-05-28 17:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-28 17:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-28 17:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-28 17:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-28 17:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-28 17:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-28 17:58 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-05-28 17:58 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-05-28 17:58 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-05-28 17:57 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-28 17:57 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-28 17:56 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-28 17:56 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-28 17:56 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-28 17:56 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-28 17:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-19 17:41 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:25 - 2014-05-26 20:07 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-19 17:19 - 2014-05-19 17:20 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-19 17:15 - 2014-05-19 17:39 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster

==================== One Month Modified Files and Folders =======

2014-06-09 13:21 - 2014-06-04 17:46 - 00014637 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-09 13:21 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp
2014-06-09 13:20 - 2014-06-04 17:46 - 00000000 ____D () C:\FRST
2014-06-09 13:17 - 2013-02-27 18:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Dropbox
2014-06-09 10:04 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-09 10:04 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-09 10:01 - 2010-12-20 16:11 - 01561431 _____ () C:\Windows\WindowsUpdate.log
2014-06-09 09:56 - 2010-12-30 19:36 - 00449354 _____ () C:\Windows\PFRO.log
2014-06-09 09:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-09 09:56 - 2009-07-14 06:51 - 00138967 _____ () C:\Windows\setupact.log
2014-06-08 16:13 - 2014-06-08 16:13 - 00001908 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\Program Files\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:11 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:10 - 10971424 _____ (SurfRight B.V.) C:\Users\Home\Desktop\HitmanPro_x64.exe
2014-06-08 16:06 - 2014-06-08 16:04 - 00009440 _____ () C:\zoek-results.log
2014-06-08 16:03 - 2014-06-08 16:03 - 00000000 ____D () C:\zoek_backup
2014-06-08 16:01 - 2012-02-03 19:12 - 00000000 ____D () C:\Users\Home\AppData\Roaming\PDF Software
2014-06-08 15:58 - 2014-06-08 15:58 - 01285120 _____ () C:\Users\Home\Desktop\zoek.exe
2014-06-06 18:38 - 2014-06-04 17:48 - 00032154 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-06 18:26 - 2011-02-02 19:22 - 01193984 ___SH () C:\Users\Home\Desktop\Thumbs.db
2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-06 17:45 - 2011-01-29 18:02 - 00000000 ____D () C:\Windows\Minidump
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:08 - 2013-11-21 15:22 - 00000000 ____D () C:\AdwCleaner
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:39 - 00000000 ____D () C:\Qoobox
2014-06-04 19:52 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-04 19:39 - 2013-01-20 17:38 - 00000000 ____D () C:\Windows\erdnt
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:46 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-04 17:36 - 2013-01-20 22:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 14:55 - 2010-12-30 18:16 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Skype
2014-06-03 14:52 - 2013-01-24 18:44 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-03 14:52 - 2013-01-24 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ____D () C:\ProgramData\Skype
2014-06-03 14:45 - 2009-07-14 19:58 - 00702942 _____ () C:\Windows\system32\perfh007.dat
2014-06-03 14:45 - 2009-07-14 19:58 - 00150582 _____ () C:\Windows\system32\perfc007.dat
2014-06-03 14:45 - 2009-07-14 07:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 14:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-01 16:50 - 2010-12-30 19:56 - 00000680 __RSH () C:\Users\Home\ntuser.pol
2014-06-01 16:50 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home
2014-06-01 16:47 - 2009-07-14 06:45 - 00486432 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-28 17:52 - 2013-08-12 13:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-27 17:51 - 2011-04-09 16:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-26 20:07 - 2014-05-19 17:25 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-26 20:07 - 2014-02-28 06:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-26 20:07 - 2014-02-28 06:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-26 20:07 - 2013-10-01 00:34 - 00000000 ____D () C:\Users\Home\AppData\Local\FileViewPro
2014-05-26 20:07 - 2013-09-04 17:02 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-26 20:07 - 2013-08-17 13:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\mp3DirectCut
2014-05-26 20:07 - 2013-05-18 18:11 - 00000000 ____D () C:\Users\Home\AppData\Local\MediaZup
2014-05-26 20:07 - 2013-03-06 18:10 - 00000000 ____D () C:\Users\Honichbiene
2014-05-26 20:07 - 2013-02-27 18:46 - 00000000 ___RD () C:\Users\Home\Dropbox
2014-05-26 20:07 - 2013-02-27 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-26 20:07 - 2013-02-13 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\7-PDFSplitMerge
2014-05-26 20:07 - 2012-12-12 17:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-26 20:07 - 2012-12-02 13:07 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-05-26 20:07 - 2012-11-26 18:51 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DeepBurner
2014-05-26 20:07 - 2012-07-23 18:35 - 00000000 ____D () C:\Users\Home\.DVDslideshowGUI
2014-05-26 20:07 - 2012-07-15 16:12 - 00000000 ____D () C:\Users\Home\Desktop\Fahrt ins Blaue
2014-05-26 20:07 - 2012-05-19 11:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ArcSoft
2014-05-26 20:07 - 2012-05-07 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-26 20:07 - 2012-01-28 19:23 - 00000000 ____D () C:\Users\Home\Desktop\OpenOffice.org 3.3 (de) Installation Files
2014-05-26 20:07 - 2011-11-27 11:55 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DVDVideoSoft
2014-05-26 20:07 - 2011-08-28 15:50 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ScummVM
2014-05-26 20:07 - 2011-07-07 19:44 - 00000000 ____D () C:\Users\Home\Documents\LG_PC_Suite_III
2014-05-26 20:07 - 2011-04-16 19:18 - 00000000 ____D () C:\Users\Home\Documents\Eigene Diashows
2014-05-26 20:07 - 2011-04-09 16:43 - 00000000 ____D () C:\ProgramData\CanonIJ
2014-05-26 20:07 - 2011-01-06 14:06 - 00000000 ____D () C:\Users\Home\Desktop\Dokumentenkram
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-05-26 20:07 - 2010-12-30 20:21 - 00000000 ____D () C:\Users\Paula
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\ProgramData\Norton
2014-05-26 20:07 - 2010-12-20 16:18 - 00000000 ____D () C:\Users\Home\AppData\Local\VirtualStore
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool
2014-05-26 20:06 - 2014-05-19 17:41 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-26 20:06 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-26 20:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-26 20:02 - 2013-11-23 19:32 - 00000000 ____D () C:\Users\Home\Downloads\adt-bundle-windows-x86_64-20131030
2014-05-26 20:01 - 2013-09-19 14:16 - 00000000 ____D () C:\Users\Home\Downloads\3GP_Converter034
2014-05-26 20:01 - 2013-08-20 14:35 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canneverbe Limited
2014-05-26 20:01 - 2013-01-20 19:49 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Malwarebytes
2014-05-26 20:01 - 2013-01-05 16:36 - 00000000 ____D () C:\Users\Home\AppData\Roaming\elsterformular
2014-05-26 20:01 - 2012-08-26 14:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Ubisoft
2014-05-26 20:01 - 2011-04-16 19:25 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Anvsoft
2014-05-26 20:01 - 2011-04-09 16:39 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canon
2014-05-26 20:01 - 2011-01-03 16:53 - 00000000 ____D () C:\Users\Home\AppData\Local\Google
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Mozilla
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Local\Mozilla
2014-05-26 20:01 - 2010-12-30 15:38 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Adobe
2014-05-26 20:01 - 2010-12-26 20:59 - 00000000 ____D () C:\Users\Home\AppData\Local\Microsoft Games
2014-05-19 17:39 - 2014-05-19 17:15 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:20 - 2014-05-19 17:19 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-18 14:12 - 2014-04-11 17:42 - 00000000 ____D () C:\Users\Home\Desktop\QR
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster

Some content of TEMP:
====================
C:\Users\Home\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-07-23 11:11

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

Weder ESET noch Hitman funktionieren. Gleiche Fehlermeldungen.
Ich probiere jetzt den Code von Dir.

Und hier noch einmal FRST mit dem Code ausgeführt. Dsa Ergebnis der Log Datei:

Code:

ATTFilter

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-06-2014
Ran by Home at 2014-06-09 13:27:14 Run:1
Running from C:\Users\Home\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
FF NetworkProxy: "type", 4
end
         
*****************

Firefox Proxy settings were reset.

==== End of Fixlog ====

Nochmals jetzt ESET und Hitman probiert. Immer noch die gleichen Fehlermeldungen.
Habe mir jetzt das Norton Recovery Tool runtergeladen mit dem man Norton entfernen kann. Soll ich das probieren und Norton versuchen komplett runter zu werfen?

M-K-D-B · 09.06.2014, 14:00

Servus,

Norton zuerst über die Systemsteuerung deinstallieren, dann folgendes Tool noch durchlaufen lassen:
Norton Removal Tool

Honich · 10.06.2014, 13:28

Moin!
Norton ist nicht über die Sysstemstuerung zu deinstallieren. Ich kann zwar auf das Programm klicken und deinstallieren wählen, aber der PC reagiert igrendwie nicht darauf. Heisst es passiert nichts. Werde daher erstmal das Removal Toll starten.

So Norton ist weg. ESET funktioniert jetzt.
Hier die Log Datei:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=8e10a23149dbb94eaa4c2a6878bce3c7
# engine=18648
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-10 12:08:27
# local_time=2014-06-10 02:08:27 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 26658603 154031957 0 0
# scanned=82850
# found=5
# cleaned=0
# scan_time=1085
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=C60A7F65B55FF089C5AB2EC2C6E9D6629314A9D8 ft=1 fh=c71c001174b731d0 vn="möglicherweise Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlerEng.dll.vir"
sh=B7132AC57753BA910A2A449B424D90F3DC26E25F ft=1 fh=c71c0011fec1b59e vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlersrv.exe.vir"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Home\AppData\Roaming\0D0S1L2Z1P1B\Zip Extractor Packages\uninstaller.exe.vir"
sh=B440276E183DBAC6788EF3A0E6082C55E571170D ft=1 fh=62c0c4858bcf9d29 vn="Variante von Win32/DealPly.M evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Home\AppData\Roaming\MetaCrawler\UpdateProc\UpdateTask.exe.vir"

Hitman funktioniert nun auch.
Hier die Log Datei:

Code:

ATTFilter


	Code: 

 ATTFilter

  
	HitmanPro 3.7.9.216
www.hitmanpro.com

   Computer name . . . . : HOME-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Home-PC\Home
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Trial (30 days left)

   Scan date . . . . . . : 2014-06-10 14:13:24
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 5m 12s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 1
   Traces  . . . . . . . : 162

   Objects scanned . . . : 1.451.982
   Files scanned . . . . : 45.570
   Remnants scanned  . . : 429.441 files / 976.971 keys

Suspicious files ____________________________________________________________

   C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
      Size . . . . . . . : 400.704 bytes
      Age  . . . . . . . : 383.7 days (2013-05-22 20:50:40)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : C82171BEDBFE593A04D09C2E20B0528AA3CEC722D6919F8A5C70C6EFFB9EFEAE
      RSA Key Size . . . : 2048
      Parent Name  . . . : C:\Windows\Explorer.EXE
      Authenticode . . . : Self-signed
      Running processes  : 2436
      Fuzzy  . . . . . . : 24.0
         Program is code self-signed.
         This program is actively listening for inbound network connections.
         Uses the Windows Registry to run each time the user logs on.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program starts automatically without user intervention.
         The file is in use by one or more active processes.
      Startup
         HKU\S-1-5-21-433733618-1293826757-3301219268-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AmazonMP3DownloaderHelper
      Network Ports
         0.0.0.0:4618	


Malware remnants ____________________________________________________________

   HKLM\SOFTWARE\Classes\m\ (MySearchDial) -> Deleted

Potential Unwanted Programs _________________________________________________

   HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467\ (FLV Player) -> Deleted
   HKU\S-1-5-21-433733618-1293826757-3301219268-1000\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113} (FLV Player) -> Deleted

Cookies _____________________________________________________________________

   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad-emea.doubleclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.123-template.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.12mnkys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.360yield.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.ad-srv.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adc-serv.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adnet.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adserver01.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.dyntracker.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.movad.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.yieldmanager.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.zanox.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.aftonbladet.se
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.creative-serving.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.escinteractive.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.p161.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.pubmatic.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.travelaudience.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.yahoo.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.advertisingbox.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.doccheck.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.gb5.motorpresse.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.mediscope.ch
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.twitpic.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adtech.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:advertising.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:apmebf.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:atdmt.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:bs.serving-sys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:burstnet.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:c.atdmt.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:casalemedia.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:de.sitestat.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:deutschepostag.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:doubleclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:emjcd.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:fastclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:getclicky.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:googleadservices.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:in.getclicky.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:invitemedia.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:media6degrees.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:mediaplex.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:overture.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:paypal.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:pool-eu-ie.creative-serving.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:revsci.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ru4.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:se.sitestat.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:serving-sys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:smartadserver.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stat.dealtime.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stat.novasol.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:statcounter.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stats.paypal.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:statse.webtrendslive.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.adform.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.effiliation.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.webtrekk.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.zalando.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:tradedoubler.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:tribalfusion.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:uk.at.atwola.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:warnerbros.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ww251.smartadserver.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:www.etracker.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:www.googleadservices.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:xiti.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:zedo.com
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\cookies.sqlite:doubleclick.net
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\cookies.sqlite:serving-sys.com
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\cookies.sqlite:doubleclick.net
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\cookies.sqlite:www.googleadservices.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:3276817.fls.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.124-template.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.12mnkys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.360yield.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.ad-srv.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.adc-serv.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.adnet.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.dyntracker.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.movad.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.yieldmanager.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.zanox.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adbrite.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.as4x.tmcs.ticketmaster.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.creative-serving.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.escinteractive.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.gamersmedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.p161.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.pubmatic.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.storn.es
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.worddictionary.co.uk
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.yahoo.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adserv.me
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adserver.adreactor.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adtech.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:advertise.admarket.me
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:advertising.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adviva.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:aka-cdn-ns.adtech.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:apmebf.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:at.atwola.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:atdmt.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:bs.serving-sys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:burstnet.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:c.atdmt.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:casalemedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:collective-media.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:de.sitestat.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:eas4.emediate.eu
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:emjcd.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:fastclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:googleads.g.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:guj.122.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:invitemedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:media6degrees.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:mediaplex.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:pool-eu-ie.creative-serving.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:questionmarket.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:revsci.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ru4.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:serving-sys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:sexpartnerclub.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:smartadserver.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:specificclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stat.dealtime.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:statcounter.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stats.dechema.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stats.o2more.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:statse.webtrendslive.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stepstone.112.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ticketmaster.122.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.adform.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.effiliation.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.zalando.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:tradedoubler.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:uk.at.atwola.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:weborama.fr
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ww251.smartadserver.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:www.etracker.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:www.googleadservices.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:xiti.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:yadro.ru
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:yieldmanager.net

M-K-D-B · 10.06.2014, 13:44

Schon "komisch", dass ESET und HitmanPro erst funktionieren, wenn Norton weg ist... empfehlen kann ich Norton daher nicht, dagegen zwei kostenlose Alternativen... mehr dazu in meiner nächsten Antwort...

als (hoffentlich) letztes bitte noch SC ausführen:

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Honich · 10.06.2014, 13:49

Ja. merkwürdig. Aber ich denke es leigt v.a. daran das Norton eben defekt war. Es reagierte ja gar nicht mehr. Auf nichts. Konnte da ja auch keine Firewall mehr deaktivieren oder sonstiges.
Habe erst im März die neue Lizenz für Norton gekauft, aber für bessere Antiviren Programme bin ich immer dankbar.

Code:

ATTFilter

 Results of screen317's Security Check version 0.99.83  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.70.0.1100  
 Out of date Malwarebytes Anti-Malware installed! 
  Adobe Flash Player 11.9.900.152 Flash Player out of Date!  
 Mozilla Firefox (29.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````

M-K-D-B · 11.06.2014, 10:39

Zitat:

Zitat von Honich

Ja. merkwürdig. Aber ich denke es leigt v.a. daran das Norton eben defekt war. Es reagierte ja gar nicht mehr. Auf nichts. Konnte da ja auch keine Firewall mehr deaktivieren oder sonstiges.

Ja, kann auch sein, dass es defekt war. Du kannst es ja nochmal installieren und schauen, wie es geht.

Zitat:

Zitat von Honich

Habe erst im März die neue Lizenz für Norton gekauft, aber für bessere Antiviren Programme bin ich immer dankbar.

"Bessere" ist relativ... ein Tool erkennt Schädling x, aber Schädling y nicht... beim nächsten AV-Tool ist es anders... egal, 100% Erkennung gibt es nicht.

wenn du Geld in die Hand nehmen willst, dann empfehle ich Kaspersky Antivirus oder ESET Antivirus (keine Security Suiten!), bei kostenlosen reicht auch Avast! Free Antivirus oder Microsoft Security Essentials...

Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.

Schritt 1
Du verwendest veraltete Software auf deinem Rechner, was ein Sicherheitsrisiko darstellt. Daher solltest du veraltete Software deinstallieren und anschließend die aktuellste Version installieren.
Folge dem Pfad Start > Systemsteuerung > Sofware / Programme deinstallieren.
Deinstalliere die folgenden Programme von deinem Rechner:

Adobe Flash Player 11

Starte deinen Rechner nach der Deinstallation neu auf.
Downloade und installiere dir bitte nun:

Adobe Flash Player

Starte deinen Rechner nach der Installation neu auf.

Schritt 2
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 3
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.

Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
AdwCleaner
Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
SpywareBlaster
Eine kurze Einführung findest du Hier

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
NoScript
Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
AdblockPlus
Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
Es spart außerdem Downloadkapazität.

Performance

Halte dich fern von Registry Cleanern.
Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Honich · 11.06.2014, 17:42

Hallo Matthias!

Habe jetzt soweit alles erledigt und auch keine Fragen mehr!

Gaaannnnz vielen Dank für Deine Hilfe!

Ich werde mich an Deine Tipps halten! Malwarebyte hab ich sowieso drauf und den ADWcleaner werde ich auch regelmäßig nutzen jetzt!
Viele Grüße und noch eine schöne Woche!

Nadine

M-K-D-B · 12.06.2014, 09:31

Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

09.06.2014, 14:00	#22
M-K-D-B /// TB-Ausbilder	Browser funktionieren nur im abgesicherten Modus Servus, Norton zuerst über die Systemsteuerung deinstallieren, dann folgendes Tool noch durchlaufen lassen: Norton Removal Tool

Browser funktionieren nur im abgesicherten Modus

Log-Analyse und Auswertung: Browser funktionieren nur im abgesicherten Modus