Norton kann ich nicht deaktivieren, da es überhaupt nicht reagiert. Jedesmal wenn ich es anklicke oder irgendwas, was mit Norton zu tun hat (Quickscan, Support anforden, Updaten etc.) erscheint ein Fenster mit rotem Button das einen unbekannten Fehler mit einer der *.exe Dateien von Norton kundtut.
FRST habe ich nochmals ausgeführt. Datei folgt:

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Home (administrator) on HOME-PC on 09-06-2014 13:20:20
Running from C:\Users\Home\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Andrea Electronics Corporation) C:\Windows\System32\AEADISRV.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe
(LULU Software) C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Program Files (x86)\Lidl_Fotos\dd.exe
() C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
(Dropbox, Inc.) C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Analog Devices, Inc.) C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-26] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SoundMAXPnP] => C:\Program Files (x86)\Analog Devices\Core\smax4pnp.exe [1310720 2009-06-05] (Analog Devices, Inc.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [Device Detection] => C:\Program Files (x86)\Lidl_Fotos\dd.exe [857456 2013-02-13] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Run: [AmazonMP3DownloaderHelper] => C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe [400704 2013-05-22] ()
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-433733618-1293826757-3301219268-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
Startup: C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Home\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Paula\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicyUsers\S-1-5-21-433733618-1293826757-3301219268-1003\User: Group Policy restriction detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {1C067739-DD2E-4643-AE5C-78484BA54043} URL = hxxp://search.softonic.com/MOY00621/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=9e0acf560000000000000015af6505ba&r=616
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: Soda PDF 2012 Helper - {ebe8b562-cba0-40d8-b920-af7cfe0c9d94} - C:\Program Files (x86)\Soda PDF 2012\PDFIEHelper.dll (LULU Software)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Soda PDF 2012 Toolbar - {a8c9d542-fd91-4834-a2e8-adb9ae692b8b} - C:\Program Files (x86)\Soda PDF 2012\PDFIEPlugin.dll (LULU Software)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.1.1.7\coIEPlg.dll (Symantec Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 - C:\Windows\SysWOW64\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-03]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [FFSodaPDFConverter2012@sodapdf.com] - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012
FF Extension: Soda PDF 2012 Converter For Firefox - C:\Program Files (x86)\Soda PDF 2012\FFSodaExt2012 [2012-02-03]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.1.7\IPSFF [2014-02-28]

Chrome: 
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Multimedia Toolbar) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\bipiocmkdofpgpdebagkjpgcpbjmbgkn [2013-05-18]
CHR Extension: (No Name) - C:\Users\Home\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfkilfadjoneaheacgmkahfgcjchkpad [2014-05-19]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\Exts\Chrome.crx [2014-05-19]

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AEADIFilters; C:\Windows\system32\AEADISRV.EXE [111616 2009-06-05] (Andrea Electronics Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [100864 2012-09-07] (Freemake)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2014-06-08] (SurfRight B.V.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [398184 2012-12-14] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [682344 2012-12-14] (Malwarebytes Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.1.1.7\N360.exe [265040 2014-02-12] (Symantec Corporation)
S3 Soda PDF 2012 Helper Service; C:\Program Files (x86)\Soda PDF 2012\HelperService.exe [827224 2011-12-23] (LULU Software)
R2 Soda PDF 2012 Service; C:\Program Files (x86)\Soda PDF 2012\ConversionService.exe [901976 2011-12-23] (LULU Software)

==================== Drivers (Whitelisted) ====================

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2014-02-14] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1501010.007\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-02] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\IPSDefs\20140309.001\IDSvia64.sys [524504 2014-03-03] (Symantec Corporation)
S3 lgmdbus; C:\Windows\System32\DRIVERS\lgmdbus.sys [115200 2008-07-08] (MCCI Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24176 2012-12-14] (Malwarebytes Corporation)
R3 MicNgBas; C:\Windows\System32\DRIVERS\MicNgBas.sys [89120 2007-10-16] (Micronas GmbH)
R3 MicNgCap; C:\Windows\System32\DRIVERS\MicNgCap.sys [95776 2007-10-16] (Micronas GmbH)
R3 MicNgTun; C:\Windows\System32\DRIVERS\MicNgTun.sys [335392 2007-10-16] (Micronas GmbH)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
S3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\ENG64.SYS [126040 2014-03-02] (Symantec Corporation)
S3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.1.7\Definitions\VirusDefs\20140311.001\EX64.SYS [2099288 2014-03-02] (Symantec Corporation)
S3 SRTSP; C:\Windows\System32\Drivers\N360x64\1501010.007\SRTSP64.SYS [875736 2014-02-11] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1501010.007\SRTSPX64.SYS [36952 2014-02-11] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1501010.007\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1501010.007\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2014-02-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1501010.007\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1501010.007\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U4 wuaserv; 

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-08 16:13 - 2014-06-08 16:13 - 00001908 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\Program Files\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:11 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-08 16:10 - 2014-06-08 16:11 - 10971424 _____ (SurfRight B.V.) C:\Users\Home\Desktop\HitmanPro_x64.exe
2014-06-08 16:04 - 2014-06-08 16:06 - 00009440 _____ () C:\zoek-results.log
2014-06-08 16:03 - 2014-06-08 16:03 - 00000000 ____D () C:\zoek_backup
2014-06-08 15:58 - 2014-06-08 15:58 - 01285120 _____ () C:\Users\Home\Desktop\zoek.exe
2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:40 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-04 19:40 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-04 19:40 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-04 19:40 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-04 19:39 - 2014-06-04 19:56 - 00000000 ____D () C:\Qoobox
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:48 - 2014-06-06 18:38 - 00032154 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-04 17:46 - 2014-06-09 13:20 - 00014637 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-04 17:46 - 2014-06-09 13:20 - 00000000 ____D () C:\FRST
2014-06-04 17:45 - 2014-06-04 17:46 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 15:02 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-03 15:02 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-03 15:02 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-03 15:02 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-03 15:02 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-02 17:59 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-02 17:59 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-02 17:59 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-02 17:59 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-02 17:58 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-02 17:58 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-02 17:58 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-02 17:58 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-02 17:58 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-02 17:58 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-02 17:58 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-02 17:58 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-02 17:58 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-02 17:58 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-02 17:58 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-02 17:58 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-02 17:58 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-02 17:58 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-02 17:58 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-02 17:58 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-02 17:58 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-02 17:58 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-02 17:58 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-02 17:58 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-02 17:58 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-02 17:58 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-02 17:58 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-02 17:58 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-02 17:58 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 16:55 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-01 16:55 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-01 16:55 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-06-01 16:55 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-06-01 16:55 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-06-01 16:55 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-06-01 16:55 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-06-01 16:54 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-06-01 16:54 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-05-28 17:59 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-28 17:59 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-28 17:59 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-28 17:59 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-28 17:59 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-28 17:59 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-28 17:59 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-28 17:59 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-28 17:58 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-28 17:58 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-28 17:58 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-28 17:58 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-28 17:58 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-28 17:58 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-28 17:58 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-28 17:58 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-05-28 17:58 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-05-28 17:58 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-05-28 17:58 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll
2014-05-28 17:57 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-05-28 17:57 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-28 17:56 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-28 17:56 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-28 17:56 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-28 17:56 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-28 17:56 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-28 17:54 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-19 17:41 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-19 17:40 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-19 17:39 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:25 - 2014-05-26 20:07 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-19 17:19 - 2014-05-19 17:20 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-26 20:06 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-19 17:15 - 2014-05-19 17:39 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster

==================== One Month Modified Files and Folders =======

2014-06-09 13:21 - 2014-06-04 17:46 - 00014637 _____ () C:\Users\Home\Desktop\FRST.txt
2014-06-09 13:21 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp
2014-06-09 13:20 - 2014-06-04 17:46 - 00000000 ____D () C:\FRST
2014-06-09 13:17 - 2013-02-27 18:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Dropbox
2014-06-09 10:04 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-09 10:04 - 2009-07-14 06:45 - 00015136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-09 10:01 - 2010-12-20 16:11 - 01561431 _____ () C:\Windows\WindowsUpdate.log
2014-06-09 09:56 - 2010-12-30 19:36 - 00449354 _____ () C:\Windows\PFRO.log
2014-06-09 09:56 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-09 09:56 - 2009-07-14 06:51 - 00138967 _____ () C:\Windows\setupact.log
2014-06-08 16:13 - 2014-06-08 16:13 - 00001908 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-06-08 16:13 - 2014-06-08 16:13 - 00000000 ____D () C:\Program Files\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:11 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-08 16:11 - 2014-06-08 16:10 - 10971424 _____ (SurfRight B.V.) C:\Users\Home\Desktop\HitmanPro_x64.exe
2014-06-08 16:06 - 2014-06-08 16:04 - 00009440 _____ () C:\zoek-results.log
2014-06-08 16:03 - 2014-06-08 16:03 - 00000000 ____D () C:\zoek_backup
2014-06-08 16:01 - 2012-02-03 19:12 - 00000000 ____D () C:\Users\Home\AppData\Roaming\PDF Software
2014-06-08 15:58 - 2014-06-08 15:58 - 01285120 _____ () C:\Users\Home\Desktop\zoek.exe
2014-06-06 18:38 - 2014-06-04 17:48 - 00032154 _____ () C:\Users\Home\Desktop\Addition.txt
2014-06-06 18:26 - 2011-02-02 19:22 - 01193984 ___SH () C:\Users\Home\Desktop\Thumbs.db
2014-06-06 18:24 - 2014-06-06 18:24 - 00000586 _____ () C:\Users\Home\Desktop\Result.txt
2014-06-06 18:23 - 2014-06-06 18:23 - 00982016 _____ (Farbar) C:\Users\Home\Desktop\MiniToolBox.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 02347384 _____ (ESET) C:\Users\Home\Desktop\esetsmartinstaller_deu.exe
2014-06-06 18:10 - 2014-06-06 18:10 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-06-06 17:45 - 2014-06-06 17:45 - 00262144 ____N () C:\Windows\Minidump\060614-38204-01.dmp
2014-06-06 17:45 - 2011-01-29 18:02 - 00000000 ____D () C:\Windows\Minidump
2014-06-05 18:15 - 2014-06-05 18:15 - 01016261 _____ (Thisisu) C:\Users\Home\Desktop\JRT.exe
2014-06-05 18:08 - 2013-11-21 15:22 - 00000000 ____D () C:\AdwCleaner
2014-06-05 18:07 - 2014-06-05 18:07 - 01333465 _____ () C:\Users\Home\Downloads\adwcleaner_3.212.exe
2014-06-04 19:56 - 2014-06-04 19:56 - 00017648 _____ () C:\ComboFix.txt
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Public\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Paula\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Honichbiene\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:56 - 00000000 ____D () C:\Users\Default User\AppData\Local\temp
2014-06-04 19:56 - 2014-06-04 19:39 - 00000000 ____D () C:\Qoobox
2014-06-04 19:52 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini
2014-06-04 19:39 - 2013-01-20 17:38 - 00000000 ____D () C:\Windows\erdnt
2014-06-04 19:35 - 2014-06-04 19:35 - 05205146 ____R (Swearware) C:\Users\Home\Desktop\ComboFix.exe
2014-06-04 18:10 - 2014-06-04 18:10 - 00000000 _____ () C:\Users\Home\Desktop\gmer.log
2014-06-04 17:54 - 2014-06-04 17:54 - 00380416 _____ () C:\Users\Home\Desktop\Gmer-19357.exe
2014-06-04 17:46 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Downloads\FRST64.exe
2014-06-04 17:45 - 2014-06-04 17:45 - 02068992 _____ (Farbar) C:\Users\Home\Desktop\FRST64.exe
2014-06-04 17:44 - 2014-06-04 17:44 - 00000470 _____ () C:\Users\Home\Desktop\defogger_disable.log
2014-06-04 17:42 - 2014-06-04 17:42 - 00050477 _____ () C:\Users\Home\Desktop\Defogger.exe
2014-06-04 17:36 - 2013-01-20 22:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-03 17:08 - 2014-06-03 17:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-03 14:55 - 2010-12-30 18:16 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Skype
2014-06-03 14:52 - 2013-01-24 18:44 - 00002517 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-06-03 14:52 - 2013-01-24 18:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-03 14:52 - 2010-12-30 18:16 - 00000000 ____D () C:\ProgramData\Skype
2014-06-03 14:45 - 2009-07-14 19:58 - 00702942 _____ () C:\Windows\system32\perfh007.dat
2014-06-03 14:45 - 2009-07-14 19:58 - 00150582 _____ () C:\Windows\system32\perfc007.dat
2014-06-03 14:45 - 2009-07-14 07:13 - 01629284 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-03 14:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 17:19 - 2010-12-20 16:18 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-06-02 17:16 - 2014-06-02 17:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-01 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-06-01 16:50 - 2010-12-30 19:56 - 00000680 __RSH () C:\Users\Home\ntuser.pol
2014-06-01 16:50 - 2010-12-20 16:17 - 00000000 ____D () C:\Users\Home
2014-06-01 16:47 - 2009-07-14 06:45 - 00486432 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-05-28 17:52 - 2013-08-12 13:49 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-27 20:35 - 2014-05-27 20:35 - 00000000 ____D () C:\Users\Home\Desktop\Alte Firefox-Daten
2014-05-27 17:51 - 2011-04-09 16:40 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-05-26 20:07 - 2014-05-19 17:25 - 00000000 ____D () C:\Program Files (x86)\7-Zip
2014-05-26 20:07 - 2014-02-28 06:29 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-05-26 20:07 - 2014-02-28 06:22 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360
2014-05-26 20:07 - 2013-10-01 00:34 - 00000000 ____D () C:\Users\Home\AppData\Local\FileViewPro
2014-05-26 20:07 - 2013-09-04 17:02 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon
2014-05-26 20:07 - 2013-08-17 13:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\mp3DirectCut
2014-05-26 20:07 - 2013-05-18 18:11 - 00000000 ____D () C:\Users\Home\AppData\Local\MediaZup
2014-05-26 20:07 - 2013-03-06 18:10 - 00000000 ____D () C:\Users\Honichbiene
2014-05-26 20:07 - 2013-02-27 18:46 - 00000000 ___RD () C:\Users\Home\Dropbox
2014-05-26 20:07 - 2013-02-27 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-26 20:07 - 2013-02-13 18:44 - 00000000 ____D () C:\Users\Home\AppData\Roaming\7-PDFSplitMerge
2014-05-26 20:07 - 2012-12-12 17:32 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-05-26 20:07 - 2012-12-02 13:07 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-05-26 20:07 - 2012-11-26 18:51 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DeepBurner
2014-05-26 20:07 - 2012-07-23 18:35 - 00000000 ____D () C:\Users\Home\.DVDslideshowGUI
2014-05-26 20:07 - 2012-07-15 16:12 - 00000000 ____D () C:\Users\Home\Desktop\Fahrt ins Blaue
2014-05-26 20:07 - 2012-05-19 11:42 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ArcSoft
2014-05-26 20:07 - 2012-05-07 18:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-05-26 20:07 - 2012-01-28 19:23 - 00000000 ____D () C:\Users\Home\Desktop\OpenOffice.org 3.3 (de) Installation Files
2014-05-26 20:07 - 2011-11-27 11:55 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DVDVideoSoft
2014-05-26 20:07 - 2011-08-28 15:50 - 00000000 ____D () C:\Users\Home\AppData\Roaming\ScummVM
2014-05-26 20:07 - 2011-07-07 19:44 - 00000000 ____D () C:\Users\Home\Documents\LG_PC_Suite_III
2014-05-26 20:07 - 2011-04-16 19:18 - 00000000 ____D () C:\Users\Home\Documents\Eigene Diashows
2014-05-26 20:07 - 2011-04-09 16:43 - 00000000 ____D () C:\ProgramData\CanonIJ
2014-05-26 20:07 - 2011-01-06 14:06 - 00000000 ____D () C:\Users\Home\Desktop\Dokumentenkram
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Public\Downloads\Norton
2014-05-26 20:07 - 2011-01-01 22:01 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton
2014-05-26 20:07 - 2010-12-30 20:21 - 00000000 ____D () C:\Users\Paula
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-05-26 20:07 - 2010-12-30 15:41 - 00000000 ____D () C:\ProgramData\Norton
2014-05-26 20:07 - 2010-12-20 16:18 - 00000000 ____D () C:\Users\Home\AppData\Local\VirtualStore
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-05-26 20:07 - 2010-12-20 16:17 - 00000000 ___RD () C:\Users\Home\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-05-26 20:07 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\spool
2014-05-26 20:06 - 2014-05-19 17:41 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempf5f4f50b18053e4957ce338650a97011
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Security System 2
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp80e64e090e3eb58e9f2ead87f01d3295
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11_
2014-05-26 20:06 - 2014-05-19 17:40 - 00000000 ____D () C:\Users\Home\AppData\Local\Temp6081bf91e3c29f4490a509b7bb9d2b11
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\Desktop\YDKJ
2014-05-26 20:06 - 2014-05-19 17:39 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54_
2014-05-26 20:06 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\AppData\Local\Tempcc88ec6d1fb33686032b1fb6f845af54
2014-05-26 20:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-05-26 20:02 - 2013-11-23 19:32 - 00000000 ____D () C:\Users\Home\Downloads\adt-bundle-windows-x86_64-20131030
2014-05-26 20:01 - 2013-09-19 14:16 - 00000000 ____D () C:\Users\Home\Downloads\3GP_Converter034
2014-05-26 20:01 - 2013-08-20 14:35 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canneverbe Limited
2014-05-26 20:01 - 2013-01-20 19:49 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Malwarebytes
2014-05-26 20:01 - 2013-01-05 16:36 - 00000000 ____D () C:\Users\Home\AppData\Roaming\elsterformular
2014-05-26 20:01 - 2012-08-26 14:27 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Ubisoft
2014-05-26 20:01 - 2011-04-16 19:25 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Anvsoft
2014-05-26 20:01 - 2011-04-09 16:39 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Canon
2014-05-26 20:01 - 2011-01-03 16:53 - 00000000 ____D () C:\Users\Home\AppData\Local\Google
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Mozilla
2014-05-26 20:01 - 2010-12-30 19:45 - 00000000 ____D () C:\Users\Home\AppData\Local\Mozilla
2014-05-26 20:01 - 2010-12-30 15:38 - 00000000 ____D () C:\Users\Home\AppData\Roaming\Adobe
2014-05-26 20:01 - 2010-12-26 20:59 - 00000000 ____D () C:\Users\Home\AppData\Local\Microsoft Games
2014-05-19 17:39 - 2014-05-19 17:15 - 00000184 _____ () C:\Users\Home\Desktop\Amazon.de.url
2014-05-19 17:26 - 2014-05-19 17:26 - 15432435 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.7z
2014-05-19 17:20 - 2014-05-19 17:19 - 15257439 _____ () C:\Users\Home\Downloads\YDKJ_Win7_Patch.rar
2014-05-19 17:15 - 2014-05-19 17:15 - 00000000 ____D () C:\Users\Home\ChromeExtensions
2014-05-19 17:14 - 2014-05-19 17:14 - 00000000 ____D () C:\Users\Home\Downloads\You-Don't-Know-Jack
2014-05-18 14:12 - 2014-04-11 17:42 - 00000000 ____D () C:\Users\Home\Desktop\QR
2014-05-16 01:22 - 2014-05-16 01:22 - 00000000 ____D () C:\Users\Home\AppData\Roaming\DropboxMaster

Some content of TEMP:
====================
C:\Users\Home\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2012-07-23 11:11

==================== End Of Log ============================
         

--- --- ---

--- --- ---

--- --- ---

--- --- ---


Weder ESET noch Hitman funktionieren. Gleiche Fehlermeldungen.
Ich probiere jetzt den Code von Dir.

Und hier noch einmal FRST mit dem Code ausgeführt. Dsa Ergebnis der Log Datei:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-06-2014
Ran by Home at 2014-06-09 13:27:14 Run:1
Running from C:\Users\Home\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
start
FF NetworkProxy: "type", 4
end
         
*****************

Firefox Proxy settings were reset.

==== End of Fixlog ====
         

Nochmals jetzt ESET und Hitman probiert. Immer noch die gleichen Fehlermeldungen.
Habe mir jetzt das Norton Recovery Tool runtergeladen mit dem man Norton entfernen kann. Soll ich das probieren und Norton versuchen komplett runter zu werfen?

Servus,




Norton zuerst über die Systemsteuerung deinstallieren, dann folgendes Tool noch durchlaufen lassen:
Norton Removal Tool

Moin!
Norton ist nicht über die Sysstemstuerung zu deinstallieren. Ich kann zwar auf das Programm klicken und deinstallieren wählen, aber der PC reagiert igrendwie nicht darauf. Heisst es passiert nichts. Werde daher erstmal das Removal Toll starten.

So Norton ist weg. ESET funktioniert jetzt.
Hier die Log Datei:

ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7587
# api_version=3.0.2
# EOSSerial=8e10a23149dbb94eaa4c2a6878bce3c7
# engine=18648
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-06-10 12:08:27
# local_time=2014-06-10 02:08:27 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 26658603 154031957 0 0
# scanned=82850
# found=5
# cleaned=0
# scan_time=1085
sh=8992F72873D09212597E582A16F8D9BC60E6A22A ft=1 fh=e21391a34e842ffc vn="Win32/Toolbar.Conduit evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe.vir"
sh=C60A7F65B55FF089C5AB2EC2C6E9D6629314A9D8 ft=1 fh=c71c001174b731d0 vn="möglicherweise Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlerEng.dll.vir"
sh=B7132AC57753BA910A2A449B424D90F3DC26E25F ft=1 fh=c71c0011fec1b59e vn="Variante von Win32/Toolbar.Montiera.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\MetaCrawler\1.8.19.0\metacrawlersrv.exe.vir"
sh=9F82BB5DC8D4EC6B8B2BB47CB6C329B8AF1C14CE ft=1 fh=c92ed1f3ca58c043 vn="Win32/InstallCore.AZ evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Home\AppData\Roaming\0D0S1L2Z1P1B\Zip Extractor Packages\uninstaller.exe.vir"
sh=B440276E183DBAC6788EF3A0E6082C55E571170D ft=1 fh=62c0c4858bcf9d29 vn="Variante von Win32/DealPly.M evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Home\AppData\Roaming\MetaCrawler\UpdateProc\UpdateTask.exe.vir"
         

Hitman funktioniert nun auch.
Hier die Log Datei:

	
	
HitmanPro 3.7.9.216
www.hitmanpro.com

   Computer name . . . . : HOME-PC
   Windows . . . . . . . : 6.1.1.7601.X64/4
   User name . . . . . . : Home-PC\Home
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Trial (30 days left)

   Scan date . . . . . . : 2014-06-10 14:13:24
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 5m 12s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 1
   Traces  . . . . . . . : 162

   Objects scanned . . . : 1.451.982
   Files scanned . . . . : 45.570
   Remnants scanned  . . : 429.441 files / 976.971 keys

Suspicious files ____________________________________________________________

   C:\Users\Home\AppData\Local\Program Files\Amazon\MP3 Downloader\AmazonMP3DownloaderHelper.exe
      Size . . . . . . . : 400.704 bytes
      Age  . . . . . . . : 383.7 days (2013-05-22 20:50:40)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : C82171BEDBFE593A04D09C2E20B0528AA3CEC722D6919F8A5C70C6EFFB9EFEAE
      RSA Key Size . . . : 2048
      Parent Name  . . . : C:\Windows\Explorer.EXE
      Authenticode . . . : Self-signed
      Running processes  : 2436
      Fuzzy  . . . . . . : 24.0
         Program is code self-signed.
         This program is actively listening for inbound network connections.
         Uses the Windows Registry to run each time the user logs on.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Program starts automatically without user intervention.
         The file is in use by one or more active processes.
      Startup
         HKU\S-1-5-21-433733618-1293826757-3301219268-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AmazonMP3DownloaderHelper
      Network Ports
         0.0.0.0:4618	


Malware remnants ____________________________________________________________

   HKLM\SOFTWARE\Classes\m\ (MySearchDial) -> Deleted

Potential Unwanted Programs _________________________________________________

   HKLM\SOFTWARE\Classes\Record\{2009AF2F-5786-3067-8799-B97F7832FDD6}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{425E7597-03A2-338D-B72A-0E51FFE77A7E}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{915BB7D5-082E-3B91-B1E0-45B5FDE01F24}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Classes\Record\{FB2E65F4-5687-33EF-9BBF-4E3C9C98D3B9}\ (FLV Player) -> Deleted
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467\ (FLV Player) -> Deleted
   HKU\S-1-5-21-433733618-1293826757-3301219268-1000\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{AE07101B-46D4-4A98-AF68-0333EA26E113} (FLV Player) -> Deleted

Cookies _____________________________________________________________________

   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad-emea.doubleclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.123-template.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.12mnkys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.360yield.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.ad-srv.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adc-serv.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adnet.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.adserver01.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.dyntracker.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.movad.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.yieldmanager.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ad.zanox.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.aftonbladet.se
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.creative-serving.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.escinteractive.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.p161.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.pubmatic.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.travelaudience.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ads.yahoo.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.advertisingbox.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.doccheck.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.gb5.motorpresse.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.mediscope.ch
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adserver.twitpic.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:adtech.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:advertising.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:apmebf.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:atdmt.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:bs.serving-sys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:burstnet.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:c.atdmt.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:casalemedia.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:de.sitestat.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:deutschepostag.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:doubleclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:emjcd.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:fastclick.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:getclicky.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:googleadservices.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:in.getclicky.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:invitemedia.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:media6degrees.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:mediaplex.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:overture.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:paypal.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:pool-eu-ie.creative-serving.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:revsci.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ru4.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:se.sitestat.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:serving-sys.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:smartadserver.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stat.dealtime.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stat.novasol.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:statcounter.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:stats.paypal.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:statse.webtrendslive.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.adform.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.effiliation.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.webtrekk.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:track.zalando.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:tradedoubler.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:tribalfusion.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:uk.at.atwola.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:warnerbros.112.2o7.net
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:ww251.smartadserver.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:www.etracker.de
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:www.googleadservices.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:xiti.com
   C:\Users\Home\AppData\Roaming\Mozilla\Firefox\Profiles\239ymr5l.default-1401215718104\cookies.sqlite:zedo.com
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\cookies.sqlite:doubleclick.net
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\8ak1f4by.default\cookies.sqlite:serving-sys.com
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\cookies.sqlite:doubleclick.net
   C:\Users\Honichbiene\AppData\Roaming\Mozilla\Firefox\Profiles\ong6k873.default\cookies.sqlite:www.googleadservices.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:3276817.fls.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.124-template.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.12mnkys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.360yield.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.ad-srv.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.adc-serv.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.adnet.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.dyntracker.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.movad.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.yieldmanager.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ad.zanox.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adbrite.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.as4x.tmcs.ticketmaster.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.creative-serving.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.escinteractive.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.gamersmedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.p161.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.pubmatic.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.storn.es
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.worddictionary.co.uk
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ads.yahoo.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adserv.me
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adserver.adreactor.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adtech.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:advertise.admarket.me
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:advertising.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:adviva.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:aka-cdn-ns.adtech.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:apmebf.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:at.atwola.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:atdmt.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:bs.serving-sys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:burstnet.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:c.atdmt.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:casalemedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:collective-media.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:de.sitestat.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:eas4.emediate.eu
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:emjcd.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:fastclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:googleads.g.doubleclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:guj.122.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:invitemedia.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:media6degrees.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:mediaplex.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:pool-eu-ie.creative-serving.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:questionmarket.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:revsci.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ru4.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:serving-sys.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:sexpartnerclub.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:smartadserver.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:specificclick.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stat.dealtime.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:statcounter.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stats.dechema.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stats.o2more.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:statse.webtrendslive.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:stepstone.112.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ticketmaster.122.2o7.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.adform.net
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.effiliation.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:track.zalando.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:tradedoubler.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:uk.at.atwola.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:weborama.fr
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:ww251.smartadserver.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:www.etracker.de
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:www.googleadservices.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:xiti.com
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:yadro.ru
   C:\Users\Paula\AppData\Roaming\Mozilla\Firefox\Profiles\ydzqhsxw.default\cookies.sqlite:yieldmanager.net
         
 
 

Schon "komisch", dass ESET und HitmanPro erst funktionieren, wenn Norton weg ist... empfehlen kann ich Norton daher nicht, dagegen zwei kostenlose Alternativen... mehr dazu in meiner nächsten Antwort...


als (hoffentlich) letztes bitte noch SC ausführen:


Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

Ja. merkwürdig. Aber ich denke es leigt v.a. daran das Norton eben defekt war. Es reagierte ja gar nicht mehr. Auf nichts. Konnte da ja auch keine Firewall mehr deaktivieren oder sonstiges.
Habe erst im März die neue Lizenz für Norton gekauft, aber für bessere Antiviren Programme bin ich immer dankbar.

 Results of screen317's Security Check version 0.99.83  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
 WMI entry may not exist for antivirus; attempting automatic update. 
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.70.0.1100  
 Out of date Malwarebytes Anti-Malware installed! 
  Adobe Flash Player 11.9.900.152 Flash Player out of Date!  
 Mozilla Firefox (29.0.1) 
````````Process Check: objlist.exe by Laurent````````  
 Malwarebytes Anti-Malware mbamservice.exe  
 Malwarebytes Anti-Malware mbamgui.exe  
 Malwarebytes' Anti-Malware mbamscheduler.exe   
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

Zitat von Honich

Ja. merkwürdig. Aber ich denke es leigt v.a. daran das Norton eben defekt war. Es reagierte ja gar nicht mehr. Auf nichts. Konnte da ja auch keine Firewall mehr deaktivieren oder sonstiges.

Ja, kann auch sein, dass es defekt war. Du kannst es ja nochmal installieren und schauen, wie es geht.

Zitat von Honich

Habe erst im März die neue Lizenz für Norton gekauft, aber für bessere Antiviren Programme bin ich immer dankbar.

"Bessere" ist relativ... ein Tool erkennt Schädling x, aber Schädling y nicht... beim nächsten AV-Tool ist es anders... egal, 100% Erkennung gibt es nicht.

wenn du Geld in die Hand nehmen willst, dann empfehle ich Kaspersky Antivirus oder ESET Antivirus (keine Security Suiten!), bei kostenlosen reicht auch Avast! Free Antivirus oder Microsoft Security Essentials...







Wenn du keine Probleme mehr hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.




Schritt 1
Du verwendest veraltete Software auf deinem Rechner, was ein Sicherheitsrisiko darstellt. Daher solltest du veraltete Software deinstallieren und anschließend die aktuellste Version installieren.
Folge dem Pfad Start > Systemsteuerung > Sofware / Programme deinstallieren.
Deinstalliere die folgenden Programme von deinem Rechner:

• Adobe Flash Player 11

Starte deinen Rechner nach der Deinstallation neu auf.
Downloade und installiere dir bitte nun:

• Adobe Flash Player

Starte deinen Rechner nach der Installation neu auf.





Schritt 2
Die Reihenfolge ist hier entscheidend.

1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
   • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
   • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
   • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
3. Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
   • Schließe alle offenen Programme.
   • Starte die delfix.exe mit einem Doppelklick.
   • Setze vor jede Funktion ein Häkchen.
   • Klicke auf Start.
   • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
   • Starte deinen Rechner abschließend neu.
4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Schritt 3
Abschließend habe ich noch ein paar Tipps zur Absicherung deines Systems.


Ich kann gar nicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

• Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
• Windows Updates
  • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
  • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
• Gehe sicher das die automatischen Updates aktiviert sind.
• Software Updates
  Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
  Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti-Viren-Programm und zusätzlicher Schutz

• Gehe sicher, dass du immer nur eine Anti-Viren Software installiert hast und dass diese auch up to date ist! Ein kostenloses Anti-Viren Programm, das wir empfehlen, wäre z. B. Avast! Free Antivirus oder Microsoft Security Essentials.
• MalwareBytes Anti Malware
  Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt. Du kannst es zusätzlich zu deinem Anti-Viren Programm verwenden.
  Update das Tool und lasse es einmal in der Woche laufen. Die Kaufversion bietet zudem noch einen Hintergrundwächter.
  Ein Tutorial zur Verwendung findest Du hier.
• AdwCleaner
  Dieses Tool erkennt eine Vielzahl von Werbeprogrammen (Adware) und unerwümschten Programmen (PUPs).
  Starte das Tool einmal die Woche und lass es laufen. Sollte eine neue Version verfügbar sein, so wird dies angezeigt und du kannst dir die neueste Version direkt von der Herstellerseite auf den Desktop herunterladen. Auch dieses Programm kann parallel zu deinem Anti-Viren Programm verwendet werden.
• SpywareBlaster
  Eine kurze Einführung findest du Hier

Alternative Browser
Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Mozilla Firefox

• Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
• NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt, wenn Du es bestätigst.
• AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzuzufügen reicht und dieser wird nicht mehr geladen.
  Es spart außerdem Downloadkapazität.

Performance

• Halte dich fern von Registry Cleanern.
  Diese Schaden deinem System mehr als dass sie helfen. Hier ein englischer Link:
  Miekemoes Blogspot ( MVP )

Was du vermeiden solltest:

• Klicke nicht auf alles, nur weil es dich dazu auffordert und schön bunt ist.
• Verwende keine P2P oder Filesharing Software (Emule, uTorrent,..).
• Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
• Öffne keine Anhänge von dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie z.B. deinFoto.jpg.exe.
• Lade keine Software von Softonic oder Chip herunter, da diese Installer oft mit Adware oder unerünschter Software versehen sind!

Nun bleibt mir nur noch dir viel Spaß beim sicheren Surfen zu wünschen... ... und vielleicht möchtest du ja das Trojaner-Board unterstützen?

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Hallo Matthias!
Habe jetzt soweit alles erledigt und auch keine Fragen mehr!
Gaaannnnz vielen Dank für Deine Hilfe!

Ich werde mich an Deine Tipps halten! Malwarebyte hab ich sowieso drauf und den ADWcleaner werde ich auch regelmäßig nutzen jetzt!
Viele Grüße und noch eine schöne Woche!
Nadine