Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Install_11968\sense.exe Windows 7 x64

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 05.06.2014, 18:52   #1
wescat
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



hallo
ich scheine mir einen Virus/Trojaner eingefangen zu haben.
PC bleibt stecken und ist sehr langsam.
Regelmäßig öffnet sich ein Fenster, dass sense.exe nicht installiert werden konnte.
norton meldet sich dann auch und berichtet, dass er einen Trojaner erfolgreich gebannt hat.
Nach kurzer Zeit beginnt es von vorne.



Alt 05.06.2014, 18:54   #2
Machiavelli
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Hallo und willkommen an Board, wescat

Mein Name ist Machiavelli und werde bei Deinem Malware Problemen behilflich sein. Falls Du Dich im abgesicherten Modus befindest, würde ich Dir raten, alle Anweisungen von mir auszudrucken, um besseren Überblick auf die Gesamtsituation zu bekommen. Ich bin hier im Malwareteam und daher ist es mir möglich, Dir zu helfen.

Damit eine Bereinigung ermöglicht werden kann, musst Du ein paar Regeln/Tipps beachten:
  • Malware zu entfernen ist normalerweise recht schwierig
    Heutige Malware kann sich sehr gut verstecken, so kann es sein, dass es bestimmte Tools nicht sehen. Eine Neuinstallation ist daher oft das klügere.
  • Bitte folge meinen Anweisung bis in das kleinste Detail
    Falls Du was falsches machst, wie z.B. irgendwas fixt, was nicht durch mich genehmigt wurde, kann der PC dadurch beschädigt werden. Daher folge meinen Anweisungen ganz genau
  • Bleibe mit mir in Kontakt, bis Deine Probleme vollständig gelöst sind
    Themen, in welchen innerhalb von 4 Tagen keine Antwort gepostet wird, werden geschlossen.
  • Bitte lasse keine anderen Tools laufen, während ich bereinige
    Wenn Du Tools wie z.B. Malwarebytes etc. ohne meines Wissens laufen lässt, kann es unter Umständen Ergebnisse verfälschen.
  • Ließ meine Posts vollständig durch
    Falls nicht, kann das zu schwerwiegenden Problemen (z.B. PC bootet nicht mehr) führen oder der Prozess der Malwareentfernung wird länger


Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 05.06.2014, 19:26   #3
wescat
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64




FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-06-2014
Ran by Catharina (administrator) on CATHARINA-VAIOL on 05-06-2014 17:53:52
Running from C:\Users\Catharina\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
( ) C:\Windows\System32\lxdocoms.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dropbox, Inc.) C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\Admload.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SnippingTool.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Buhl Data Service GmbH) C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\MG.exe
() C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
() C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe
() C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe
() C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe
() C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\prevhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\prevhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
() C:\Windows\System32\spool\drivers\x64\3\ssy3cpi.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\EXCEL.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(TerraTec Electronic GmbH) C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16395880 2009-11-02] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8317472 2009-11-09] (Realtek Semiconductor)
HKLM\...\Run: [lxdomon.exe] => C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] ()
HKLM\...\Run: [lxdoamon] => C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] ()
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)
HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [lxdomon.exe] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [599328 2010-03-24] (Sony Corporation)
HKLM-x32\...\Run: [lxdoamon] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [208424 2013-10-17] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [GoogleChromeAutoLaunch_B4CDF8F4E62911CE9A125DF4A43B236A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Facebook Update] => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-12] (Facebook Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
IFEO\DatamngrCoordinator.exe: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://home.1und1.de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKCU - DefaultScope {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {11CC72E1-2D10-49F4-B49E-92CD470BCE21} URL = hxxp://www.zinio.com/search/index.jsp?s={searchTerms}&rf=sonyie8search
SearchScopes: HKCU - {13BCC6B8-59D7-43B9-9DDB-62AE5C0AB724} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
SearchScopes: HKCU - {1AE2289A-8F2D-43A7-9AB6-92415D2AC556} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
SearchScopes: HKCU - {349713D0-30F6-4262-AA35-D8971B8C53F4} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms}
SearchScopes: HKCU - {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {5BEC5B5A-3495-4CA2-8451-041981BD0C4A} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms}
SearchScopes: HKCU - {8A244612-A1F7-11E0-95C0-E71F4824019B} URL = hxxp://badoo.com/startpage/?source=bsb&q={searchTerms}
SearchScopes: HKCU - {B7796824-4748-432D-997F-77C593BAB177} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_DE&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^DE&apn_uid=DECA78BD-BBC2-461B-95B7-E21C736F662B&apn_sauid=7478988E-426D-4FE2-9A92-13FCA0E47904
SearchScopes: HKCU - {B89582FF-E4DA-4293-9936-4580DD265265} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {CAE19DBB-56F6-460B-B95F-96DB9A035F40} URL = hxxp://wa.ui-portal.de/1und1/1und1/s?produkte.browser.link.ebaysuche&s_brand=1und1&t_link=ebaysuche&ns_type=clickin&ns_url=hxxp://rover.ebay.com/rover/1/707-52222-30040-8/4?mpre=hxxp://shop.ebay.de/?_sacat=See-All-Categories&_nkw={searchTerms}
SearchScopes: HKCU - {FACB6060-7CA1-42A9-B786-E863873E6336} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro64.dll (Goobzo Ltd.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -  No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Asz.Citavi.IEPicker.IEPickerButton - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Shopper Pro - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll (Goobzo Ltd.)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default
FF SelectedSearchEngine: Ask.com
FF Homepage: about:home
FF Homepage: hxxp://start.iminent.com/?appId=0D3E7F63-F430-4D65-A1A5-E23277F9AF55
FF SelectedSearchEngine: StartWeb
FF Homepage: user_pref("browser.startup.homepage", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Catharina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Catharina\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Catharina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF user.js: detected! => C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\askcom.xml
FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\badoo.xml
FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\iminent.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\2020Player_IKEA@2020Technologies.com [2011-07-29]
FF Extension: Shopper-Pro - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\{746505DC-0E21-4667-97F8-72EA6BCF5EEF} [2014-06-04]
FF Extension: Facebook Chat History Manager - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\fbchathistory@firechm.com.xpi [2013-04-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2013-12-22]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-11-27]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC
CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC"
CHR Extension: (Floorplanner) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2014-01-06]
CHR Extension: (Bejeweled) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2014-01-06]
CHR Extension: (Turn Off the Lights) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2014-01-06]
CHR Extension: (Gliffy-Diagramme) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmicilclplefnflapjmnngmkkkkpfad [2014-01-06]
CHR Extension: (Strawberry Pal Regelkalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmeafmbadejchdjffdbdjdkcgfmlhjmh [2014-01-06]
CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-01-06]
CHR Extension: (Photo Zoom für Facebook) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhapiedbmffnpkahkcjdjpikmodjipmd [2014-01-06]
CHR Extension: (CinemaxX Trailer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dopcgojamofpmhidpadjjfilkiiehjea [2014-01-06]
CHR Extension: (Sketch Toy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb [2014-01-06]
CHR Extension: (Chromebleed) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2014-04-10]
CHR Extension: (Daily Calculators) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepfjbflaeefhecfkalmechpbdmklahp [2014-01-06]
CHR Extension: (Pixlr-o-matic) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2014-01-06]
CHR Extension: (Google Kalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-01-06]
CHR Extension: (Autodesk ForceEffect) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekbaidcchahkpedbhdenlmleimihkcim [2014-01-06]
CHR Extension: (Anwendungen iPhone en Förderung) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekckfmbgohljpbplohgkeoepmieffaef [2014-01-06]
CHR Extension: (Silver Bird) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\encaiiljifbdbjlphpgpiimidegddhic [2014-01-06]
CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2014-01-06]
CHR Extension: (MindMap) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdaeohpmcenmffofpikllphdhlkkocfa [2014-01-06]
CHR Extension: (Sketch Assistenten) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgcipaapohgnempegffkhmhbdloaoec [2014-01-06]
CHR Extension: (Magisto) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmngbmfdgknokcefmkbjlcjabdklnlk [2014-01-06]
CHR Extension: („Pin it“-Button) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-01-06]
CHR Extension: (PDF Mergy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2014-01-06]
CHR Extension: (This Exquisite Forest) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\illikembakcokcfifcbkneafjjjnckkd [2014-01-06]
CHR Extension: (Facebook Profil Finder) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imejfidcafbhpnppakocbdjbeifkgaga [2014-01-06]
CHR Extension: (Dropbox) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-01-06]
CHR Extension: (Clearly) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-01-06]
CHR Extension: (Google Formulare) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2014-01-06]
CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-01-06]
CHR Extension: (Autodesk Homestyler) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2014-01-06]
CHR Extension: (eBay-Erweiterung für Google Chrome™) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2014-01-06]
CHR Extension: (Little Alchemy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-01-06]
CHR Extension: (SPIEGEL ONLINE Extension) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcmhmkhlpcieakngfbhgjkdpgibbmboc [2014-01-06]
CHR Extension: (Numerics Calculator & Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2014-01-06]
CHR Extension: (Konjugation Vatefaireconjuguer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnpmoecabagognommankobjfmdfdppgp [2014-01-06]
CHR Extension: (Der Planer der Räume) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-01-06]
CHR Extension: (Video Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2014-01-06]
CHR Extension: (Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2014-01-06]
CHR Extension: (Calculator) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2014-01-06]
CHR Extension: (Spanish 2 English!) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmkabhkheikmcfieenfbfhikpigjldi [2014-01-06]
CHR Extension: (Save to Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-01-06]
CHR Extension: (Google Wallet) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Reversi) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhjkapjdlmmadkepnmlkpadnnnnoebm [2014-01-06]
CHR Extension: (Google Quick Scroll) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2014-01-06]
CHR Extension: (Goodgame Big Farm) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdjgjhkolgmkjjddmnjejjphhkdjdhc [2014-01-06]
CHR Extension: (Spring Mahjong) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohmgpjbkliggjliakneoaedilbaihhl [2014-01-06]
CHR Extension: (Spreadshirt Designer für Google Drive) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oomgjmhhemldplodpialfbafcidjaghm [2014-01-06]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2014-02-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-06]
CHR Extension: (Marqueed Screenshots) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkbfakcphdokdnbdhlndlpcehebmplab [2014-03-18]
CHR Extension: (Audio Cutter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2014-01-06]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-22] (Garmin Ltd or its subsidiaries)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [49664 2013-10-08] (Haufe-Lexware GmbH & Co. KG)
R2 lxdo_device; C:\Windows\system32\lxdocoms.exe [1039360 2007-09-20] ( )
R2 lxdo_device; C:\Windows\SysWOW64\lxdocoms.exe [589824 2007-09-20] ( )
R2 MSSQL$ACCUCHEK360; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [239616 2012-09-18] (Samsung Electronics Co., Ltd.)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880 2014-05-12] (ShopperPro)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-07] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140604.002\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
S4 LMIRfsClientNP; No ImagePath
R3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-04] (DiBcom SA)
R3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-04] (DiBcom S.A.)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140604.039\ENG64.SYS [126040 2014-05-06] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140604.039\EX64.SYS [2099288 2014-05-06] (Symantec Corporation)
R3 NW1950; C:\Windows\system32\drivers\NW1950.sys [25080 2009-10-23] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [41856 2014-05-12] ()
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-05 17:53 - 2014-06-05 17:55 - 00039096 _____ () C:\Users\Catharina\Downloads\FRST.txt
2014-06-05 17:49 - 2014-06-05 17:54 - 00000000 ____D () C:\FRST
2014-06-05 17:38 - 2014-06-05 17:39 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip
2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport
2014-06-04 17:17 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc
2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 17:15 - 2014-06-04 17:15 - 00004532 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45
2014-06-04 17:14 - 2014-06-04 17:15 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe
2014-06-04 17:14 - 2014-06-04 17:15 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2014-06-04 17:14 - 2014-06-04 17:14 - 00003590 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83}
2014-06-04 16:15 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-06-04 16:14 - 2014-06-04 16:50 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog
2014-06-04 16:14 - 2014-06-04 16:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\IminentToolbar
2014-06-04 16:13 - 2014-06-04 16:50 - 00000000 ____D () C:\Program Files (x86)\Iminent
2014-06-04 16:12 - 2014-06-04 16:24 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv
2014-06-04 15:58 - 2014-06-04 16:10 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv
2014-06-04 15:54 - 2014-06-04 17:23 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-06-04 15:54 - 2014-06-04 17:22 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-06-04 15:53 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2014-06-04 15:53 - 2014-06-04 17:19 - 00004078 _____ () C:\Windows\System32\Tasks\Installer_sense
2014-06-04 15:53 - 2014-06-04 17:15 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-06-04 15:53 - 2014-06-04 15:53 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe
2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files\iTunes
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods
2014-05-21 15:46 - 2014-05-21 18:07 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls
2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt
2014-05-15 03:18 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 03:18 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 03:18 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 03:18 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 03:18 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 03:18 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 16:28 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 16:28 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 16:27 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 16:27 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 16:27 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 16:27 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 16:27 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 16:27 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 16:27 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 16:27 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 16:27 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 16:27 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 16:27 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 16:27 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 16:26 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 16:26 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 16:26 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 16:26 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 16:26 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 16:26 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 16:26 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 16:26 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 16:26 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-07 03:05 - 2014-05-15 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-06-05 17:57 - 2010-05-14 12:00 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Temp
2014-06-05 17:56 - 2010-06-02 21:59 - 00000000 ____D () C:\Users\Catharina\Documents\Outlook-Dateien
2014-06-05 17:55 - 2014-06-05 17:53 - 00039096 _____ () C:\Users\Catharina\Downloads\FRST.txt
2014-06-05 17:54 - 2014-06-05 17:49 - 00000000 ____D () C:\FRST
2014-06-05 17:45 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-05 17:45 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-05 17:39 - 2014-06-05 17:38 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe
2014-06-05 17:38 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-06-05 17:31 - 2009-12-20 04:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-05 17:23 - 2012-04-12 09:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-05 17:09 - 2013-12-02 00:36 - 00000000 ____D () C:\Users\Catharina\Documents\Scan
2014-06-05 15:50 - 2011-12-19 23:34 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job
2014-06-05 15:50 - 2011-12-19 23:34 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job
2014-06-05 11:53 - 2010-05-14 12:03 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{872AFF91-85D3-4336-B789-768301523E02}
2014-06-05 10:03 - 2013-12-02 00:25 - 00000099 _____ () C:\Users\Public\LMDebug.log
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe
2014-06-05 05:44 - 2010-05-14 11:59 - 02051970 _____ () C:\Windows\WindowsUpdate.log
2014-06-04 23:45 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Dropbox
2014-06-04 23:31 - 2009-12-20 04:43 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-04 20:32 - 2010-11-07 16:31 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Skype
2014-06-04 18:59 - 2010-07-05 14:05 - 00000000 ___RD () C:\Users\Catharina\Documents\My Dropbox
2014-06-04 18:58 - 2014-05-03 08:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\DropboxMaster
2014-06-04 18:58 - 2012-03-29 08:58 - 00000000 ____D () C:\Users\Catharina\AppData\Local\ADD8F28E-876C-4338-9012-223367612529.aplzod
2014-06-04 18:53 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-04 18:52 - 2009-07-14 06:51 - 00084484 _____ () C:\Windows\setupact.log
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip
2014-06-04 17:58 - 2012-04-12 09:27 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-04 17:58 - 2012-04-12 09:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-06-04 17:58 - 2011-06-20 14:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-04 17:26 - 2014-06-04 16:15 - 00000000 ____D () C:\Program Files (x86)\IminentToolbar
2014-06-04 17:26 - 2014-06-04 15:53 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2014-06-04 17:26 - 2009-12-08 20:38 - 02026232 _____ () C:\Windows\PFRO.log
2014-06-04 17:23 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-06-04 17:22 - 2014-06-04 15:54 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-04 17:19 - 2014-06-04 15:53 - 00004078 _____ () C:\Windows\System32\Tasks\Installer_sense
2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport
2014-06-04 17:18 - 2014-06-04 17:17 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc
2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 17:15 - 2014-06-04 17:15 - 00004532 _____ () C:\Windows\System32\Tasks\ShopperPro
2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45
2014-06-04 17:15 - 2014-06-04 17:14 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe
2014-06-04 17:15 - 2014-06-04 17:14 - 00000000 ____D () C:\Program Files (x86)\ShopperPro
2014-06-04 17:15 - 2014-06-04 15:53 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-06-04 17:14 - 2014-06-04 17:14 - 00003590 _____ () C:\Windows\System32\Tasks\ShopperProJSUpd
2014-06-04 17:01 - 2010-11-27 12:13 - 00000000 ____D () C:\Users\Catharina\AppData\Local\CrashDumps
2014-06-04 17:00 - 2010-05-14 13:15 - 00000000 ____D () C:\ProgramData\Lexware
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:14 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog
2014-06-04 16:50 - 2014-06-04 16:13 - 00000000 ____D () C:\Program Files (x86)\Iminent
2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83}
2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-06-04 16:24 - 2014-06-04 16:12 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv
2014-06-04 16:14 - 2014-06-04 16:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\IminentToolbar
2014-06-04 16:10 - 2014-06-04 15:58 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv
2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-06-04 15:53 - 2014-06-04 15:53 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe
2014-06-02 16:57 - 2014-01-31 16:49 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\apsec
2014-06-02 16:57 - 2010-07-28 19:09 - 00000000 ____D () C:\Users\Catharina\Documents\dakota_s
2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-06-02 15:49 - 2010-11-07 18:18 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-06-02 15:45 - 2013-11-27 07:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 Premier Edition
2014-06-02 15:45 - 2013-06-29 11:03 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-06-02 15:27 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 15:26 - 2010-07-05 14:05 - 00001036 _____ () C:\Users\Catharina\Desktop\Dropbox.lnk
2014-06-02 15:26 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files\iTunes
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod
2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods
2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ____D () C:\ProgramData\Skype
2014-05-21 18:07 - 2014-05-21 15:46 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls
2014-05-20 12:42 - 2011-06-20 19:01 - 00000000 ____D () C:\Users\Catharina\Documents\Sarah Brand
2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt
2014-05-15 22:20 - 2011-06-21 08:11 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-15 08:30 - 2010-12-23 14:52 - 00000000 ____D () C:\Users\Catharina\Documents\Mein Steuer-Sparbuch Heute
2014-05-15 08:26 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 04:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 03:41 - 2014-05-07 03:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 03:20 - 2009-12-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 03:15 - 2013-08-15 03:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 03:06 - 2010-05-18 09:01 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-09 20:55 - 2009-12-20 13:35 - 00750280 _____ () C:\Windows\system32\perfh007.dat
2014-05-09 20:55 - 2009-12-20 13:35 - 00168914 _____ () C:\Windows\system32\perfc007.dat
2014-05-09 20:55 - 2009-07-14 07:13 - 01763416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-09 08:14 - 2014-05-14 16:27 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 16:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 11:52 - 2013-01-02 11:10 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk
2014-05-06 23:26 - 2009-12-20 04:43 - 00004120 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-06 23:26 - 2009-12-20 04:43 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-06 06:40 - 2014-05-15 03:18 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 03:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 03:18 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 03:18 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 03:18 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 03:18 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Catharina\fbchathistory.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat
C:\Users\Catharina\jagex_runescape_preferences.dat
C:\Users\Catharina\jagex_runescape_preferences2.dat


Some content of TEMP:
====================
C:\Users\Catharina\AppData\Local\Temp\cabex.dll
C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrzj_0.dll
C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe
C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe
C:\Users\Catharina\AppData\Local\Temp\unelevate.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-06-03 03:08

==================== End Of Log ============================
         
--- --- ---
__________________

Alt 05.06.2014, 19:27   #4
wescat
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-06-2014
Ran by Catharina at 2014-06-05 17:57:54
Running from C:\Users\Catharina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
ACCU-CHEK 360 (x32 Version: 0.9.26 - Roche) Hidden
ACCU-CHEK 360 Continua Manager (HKLM-x32\...\InstallShield_{4EEF9985-417C-4892-B63F-747F8F09F20F}) (Version: 0.9.26 - Roche)
ACCU-CHEK 360° (HKLM-x32\...\InstallShield_{81395935-58B5-4E55-AF3E-6C97390FA01A}) (Version: 2.0.0 - Roche Diagnostics Corporation)
ACCU-CHEK 360° (x32 Version: 2.0.0 - Roche Diagnostics Corporation) Hidden
ADAC Auto 2011 (HKLM-x32\...\{147D7D66-DB73-40A7-BF98-220C5454C1B1}) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.98 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.278 - ArcSoft)
ArcSoft WebCam Message Board (HKLM-x32\...\{6ACF0A95-340A-46D6-B1AC-F22CDB51F475}) (Version: 1.0.1.56 - ArcSoft)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland Data Engine (HKLM-x32\...\{3AF6EF15-5841-4FF8-A3FC-5B2400AB9145}) (Version: 5.2.0 - Roche Diagnostics)
Citavi 2.5 (HKLM-x32\...\Citavi) (Version: 2.5.2.0 - Academic Software Zurich)
Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 2.2.1.9986 - Harman Becker Automotive Systems)
dakota.ag (HKLM-x32\...\dakota.ag) (Version: 6.0 - ITSG GmbH)
dakota.ag (x32 Version: 6.0 - ITSG GmbH) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Elevated Installer (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.3.1964 - Evernote Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FormatFactory 2.70 (HKLM-x32\...\FormatFactory) (Version: 2.70 - Free Time)
Franzis Führerschein Trainer (HKLM-x32\...\ffs2010_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{bd9bc494-8cd2-4ae2-92fe-6a3dda9c3ee9}) (Version: 2.2.17 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.7 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version:  - )
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Management Engine Interface (HKLM\...\HECI) (Version:  - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 16 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Lexmark 9500 Series (HKLM\...\Lexmark 9500 Series) (Version:  - Lexmark International, Inc.)
Lexmark 9500 Series (HKLM-x32\...\Lexmark 9500 Series) (Version:  - Lexmark International, Inc.)
Lexware Elster (HKLM-x32\...\{9CCD2A54-3AC9-4675-82A9-71BFC32004C4}) (Version: 14.04.00.0014 - Haufe-Lexware GmbH & Co.KG)
Lexware financial office 2014 (x32 Version: 18.05.00.0028 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware financial office plus 2014 (HKLM-x32\...\{cceb5f5e-fa2f-4632-aa50-1dffce083c79}) (Version: 18.0.0.98 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 4.01.00.0077 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 3.01.00.0011 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (HKLM-x32\...\{7F603892-89C9-4EC4-9236-7AD4A798EA41}) (Version: 21.00.00.0039 - Haufe-Lexware GmbH & Co.KG)
Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.1.0.10210 - Sony Corporation)
Media Gallery (x32 Version: 1.1.0.10210 - Sony Corporation) Hidden
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version:  - Microsoft)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Visio MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio Professional 2007 Trial (HKLM-x32\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (ACCUCHEK360) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Management Objects Collection  (HKLM\...\{5677B005-B609-4B5B-9F3C-132BB085D3CF}) (Version: 9.00.1399.06 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Touch Pack for Windows 7 (HKLM-x32\...\{8FF90DB8-6DED-44A3-B182-244FEC09012F}) (Version: 1.0.40517.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Minicontrol 3.0.9 (HKLM-x32\...\2795-3221-8656-0055) (Version:  - LucaNet AG)
Minicontrol 3.1.6 (HKLM-x32\...\9356-3409-2235-7426) (Version: 3.1.6 - LucaNet AG)
Miniplan 3.0.9 (HKLM-x32\...\2476-8030-0924-5048) (Version:  - LucaNet AG)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox 26.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 26.0 (x86 de)) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
myphotobook.de (HKLM-x32\...\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1) (Version: 1.2.7 - myphotobook GmbH)
myphotobook.de (x32 Version: 1.2.7 - myphotobook GmbH) Hidden
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.)
Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
Opera 10.60 (HKLM-x32\...\{1D2C96C3-A3F3-49E7-B839-95279DED837F}) (Version: 10.60 - Opera Software ASA)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.2.00.03250 - Sony Corporation)
PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.0.00.09250 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.0.00.09250 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.2.00.16060 - Sony Corporation)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.2.00.16060 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.0.00.10150 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.0.00.10150 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.2.00.15250 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.2.00.15250 - Sony Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5973 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Roxio Easy Media Creator Home (x32 Version: 10.3.183 - Roxio) Hidden
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.75.0 - Samsung Electronics Co., Ltd.)
Samsung CLX-6260 Series (HKLM-x32\...\Samsung CLX-6260 Series) (Version: 1.07 (07.01.2013) - Samsung Electronics Co., Ltd.)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.04.21 (10.12.2012) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.71.00(12.09.2013) - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.06.34 (04.09.2012) - Samsung Electronics Co., Ltd.)
Samsung OCR Software (HKLM-x32\...\Samsung OCR Software) (Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (x32 Version: 1.00.20.03 - Samsung Electronics Co., Ltd.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
Shopper-Pro (HKLM-x32\...\ShopperPro) (Version:  - )
SimCity 4 (HKLM-x32\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version:  - )
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)
Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden
StreamTransport version: 1.1.3.0 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
sv.net (HKLM-x32\...\sv.net) (Version: 13.1 - ITSG GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.2.11150 - Sony Corporation)
VAIO Care (x32 Version: 6.4.2.11150 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Analyzing Manager (HKLM-x32\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM-x32\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM-x32\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (x32 Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM-x32\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (x32 Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.15050 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation)
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.2.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden
VAIO Original Function Settings (x32 Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Personalization Manager (HKLM-x32\...\{A95187EF-BCF4-4468-B501-C0BAB976ADD1}) (Version: 2.0.0.06220 - Sony Corporation)
VAIO Personalization Manager (x32 Version: 2.0.0.06220 - Sony Corporation) Hidden
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.11250 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.1.1.10250 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation)
VAIO Window Organizer (HKLM-x32\...\{6D320CE8-79EB-4D45-8C6D-DEF74D84B49A}) (Version: 2.0.0.08280 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.2.06030 - Sony Corporation)
Vegas Movie Studio HD Platinum 10.0 (HKLM-x32\...\{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}) (Version: 10.0.179 - Sony)
Videora iPod Converter 5.04 (HKLM-x32\...\Videora iPod Converter) (Version: 5.04 - Red Kawa)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Driver Package - Roche (WinUSB) PHDC  (07/08/2010 1.0.0.1) (HKLM\...\3EFB02FCACC5E5822B28C77FB14D8D696391F5D7) (Version: 07/08/2010 1.0.0.1 - Roche)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8093.805 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.2.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WISO Mein Geld 2010 Professional (HKLM-x32\...\WISO Mein Geld 2010 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2010 Professional (x32 Version: 11.01.00.0045 - Buhl Data Service GmbH) Hidden
WISO Mein Geld 2014 Professional (HKLM-x32\...\WISO Mein Geld 2014 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2014 Professional (x32 Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.08.8317 - Buhl Data Service GmbH)

==================== Restore Points  =========================

31-05-2014 13:10:48 Geplanter Prüfpunkt
02-06-2014 14:50:12 Removed Lexware Elster.
02-06-2014 14:54:09 Installed Lexware Elster.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02E42E2F-750B-41AD-BD24-378CE004BA31} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {0342F8A1-1F8E-470A-8FF3-D556C07041D5} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {09227B91-18C7-498F-9B08-89F8C0E5C38C} - System32\Tasks\{F663F6CC-8633-4EB1-9EBB-D35793A6D4DC} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.)
Task: {0E6005BE-874F-4764-90A2-CB9838F3DD29} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {37B4B864-FEA5-4298-9526-986DDA7AA254} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {3FBD3373-8DF2-4E2A-8EA5-7B1BF22C5B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {44EA5550-A815-4BE9-B03E-3B2AC395E186} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)
Task: {47EDDE22-E698-4FFF-8E4A-C7814D67E4A7} - System32\Tasks\Installer_sense => C:\Users\Catharina\AppData\Local\Installer\Install_16944\ytaib.exe [2014-06-04] () <==== ATTENTION
Task: {4FD8B431-AE07-4555-BA2A-D2713ECFE9F2} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)
Task: {547A6082-5E08-4FE3-A7EA-0A7C89226909} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {57DB0C18-E080-4D5D-B0B9-69496D969D75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.)
Task: {6BB2F7B3-B0E1-4D1F-91A4-AAA0B8FD63D6} - System32\Tasks\{DBB42591-4FC3-4383-A35B-B65C66E0AE67} => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe [2010-06-09] (TerraTec Electronic GmbH)
Task: {6BFA0EEF-66DD-4942-9991-894C67E57604} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.)
Task: {70473A5C-9235-4DA4-A51B-F2AACB4759E9} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {748B2E4D-61F9-41AE-AAA0-D79AA667095D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.)
Task: {789F957C-4299-4E3A-B1F2-13EA94263726} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {85169C0D-79D7-45E7-A88C-CBA5578C6256} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {8AD31540-EA7D-4C81-AF82-2F3D8E103064} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {9BF3B828-103A-4AF9-B35C-9838C703B772} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.)
Task: {9DEEF3DB-6FDB-44D1-887F-2258B057CE14} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {A6478610-2EF4-4C3C-9D3B-1D638E281D0D} - System32\Tasks\ShopperProJSUpd => C:\Program Files (x86)\ShopperPro\updater.exe [2014-05-12] (Goobzo) <==== ATTENTION
Task: {B1BC1A11-48D8-49DB-B91B-1FEE13925C2B} - System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0
Task: {B2C54784-0AC2-45D5-98FE-C4D567DC01B2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated)
Task: {C6DCD793-70D4-4905-8AD8-A30A6201AB15} - System32\Tasks\ShopperPro => C:\Program Files (x86)\ShopperPro\ShopperPro.exe [2014-05-12] (Goobzo LTD) <==== ATTENTION
Task: {CF3A5ABF-555A-4220-A669-C9133467AF91} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-25] (Sony Corporation)
Task: {CFD9DC64-7BCD-40AA-8892-9D008589A84D} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-20] (Sun Microsystems, Inc.)
Task: {EC0371B4-51CC-4E40-8709-E5C3D8C59D0A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {FFD7821B-741F-4880-B7CE-3F3341AE8D0A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-06-27 13:06 - 2009-04-13 08:21 - 00045568 _____ () C:\Windows\System32\LXDOPMON.DLL
2010-06-27 13:06 - 2007-05-22 10:07 - 00069632 _____ () C:\Windows\System32\LXDOOEM.DLL
2010-06-27 13:06 - 2009-04-13 09:19 - 00081408 _____ () C:\Program Files (x86)\Lexmark 9500 Series\ipcmt64.dll
2010-05-21 16:17 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\redmonnt.dll
2013-12-01 23:58 - 2012-01-10 06:15 - 00034304 _____ () C:\Windows\System32\ssy3clm.dll
2010-06-27 12:56 - 2007-07-18 05:45 - 00138240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdodrpp.dll
2013-12-01 23:58 - 2012-03-16 10:29 - 00325120 _____ () C:\Windows\system32\SaMinDrv.dll
2013-06-28 13:08 - 2013-06-28 13:08 - 00091136 _____ () C:\Windows\system32\ssdevm64.dll
2012-03-09 10:58 - 2012-03-09 10:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 10:58 - 2012-03-09 10:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-06-29 13:47 - 2013-09-06 14:11 - 01397840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
2010-06-20 10:16 - 2010-02-10 05:22 - 00025256 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe
2011-11-27 07:08 - 2011-02-25 18:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll
2013-12-01 23:58 - 2013-05-30 12:52 - 01371648 _____ () C:\Windows\system32\spool\DRIVERS\x64\3\ssy3cdu.dll
2013-12-01 23:58 - 2013-05-30 12:52 - 01385472 _____ () C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\X64\3\SSY3CUM.DLL
2012-12-10 11:34 - 2012-12-10 11:34 - 00661112 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe
2012-08-16 08:32 - 2012-08-16 08:32 - 00056320 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\ImageEng.exe
2013-05-30 12:52 - 2013-05-30 12:52 - 00295984 _____ () C:\windows\system32\spool\drivers\x64\3\ssy3cpi.exe
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-12-20 05:23 - 2009-11-30 20:20 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2009-12-20 05:23 - 2009-11-30 20:20 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libglesv2.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\libegl.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 08929360 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll
2013-06-29 13:43 - 2013-09-06 14:11 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll
2013-06-29 13:43 - 2013-09-06 14:10 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll
2013-06-29 13:43 - 2013-09-06 14:10 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 03464784 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll
2013-06-29 13:43 - 2013-09-06 14:11 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 02196048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll
2013-06-29 13:42 - 2013-09-06 14:10 - 01610320 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 01732176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll
2013-06-29 13:42 - 2013-09-04 23:48 - 04157520 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 01041408 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 00094208 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 00251392 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01499728 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 04967504 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01368656 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01748048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01577552 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01146960 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01229904 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01307216 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 06773328 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01249792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01314384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ffmpegsumo.dll
2014-06-04 18:57 - 2014-06-04 18:57 - 00043008 _____ () C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfrzj_0.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Catharina\AppData\Roaming\Dropbox\bin\libcef.dll
2010-06-20 10:16 - 2010-02-09 07:41 - 00028672 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Common.dll
2010-06-20 10:16 - 2010-02-09 07:41 - 00036864 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Core.dll
2010-06-20 10:16 - 2010-02-09 07:40 - 00057344 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\app4r.devmons.mcmdevmon.dll
2010-06-20 10:16 - 2008-06-06 06:45 - 00011776 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
2013-09-26 13:20 - 2013-09-26 13:20 - 00176168 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll
2013-09-26 13:20 - 2013-09-26 13:20 - 00043048 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\office14\Cultures\office.odf
2013-02-14 16:46 - 2013-02-14 16:46 - 01044048 _____ () C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\UmOutlookAddin.dll
2014-05-21 14:22 - 2014-05-14 01:40 - 13695816 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll
2008-05-06 10:35 - 2008-05-06 10:35 - 00028456 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\On4u3\bdrmf.dll
2013-09-16 14:36 - 2014-05-28 09:36 - 00372552 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\LetsTradeAdapter.dll
2013-09-16 14:36 - 2014-05-28 09:36 - 00021320 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\LetsTradeDB.dll
2013-09-16 14:36 - 2014-05-28 09:36 - 00046408 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\EPaymentAdapter.dll
2013-09-16 14:36 - 2014-05-28 09:36 - 00356168 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\ExternalAPIAdapter.dll
2013-09-16 14:36 - 2014-05-28 09:36 - 00275272 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\ServerAdapter.XmlSerializers.dll
2013-09-16 14:36 - 2014-05-26 10:15 - 01394312 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\LetsTrade\DDBAC.Net.FinTS.dll
2012-01-05 18:25 - 2014-03-11 09:05 - 00073544 _____ () C:\Program Files (x86)\Buhl\WISO Mein Geld 2014\Buhl.BuhlRegelEngine.dll
2012-12-10 11:32 - 2012-12-10 11:32 - 00140800 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEngine.dll
2012-07-10 11:39 - 2012-07-10 11:39 - 00153600 _____ () C:\Program Files (x86)\Common Files\Samsung OCR Software\wrapBSTPOCR.dll
2012-07-10 11:39 - 2012-07-10 11:39 - 03342336 _____ () C:\Program Files (x86)\Common Files\Samsung OCR Software\POCR_DLL.dll
2012-12-10 11:32 - 2012-12-10 11:32 - 00064000 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCFaxEngine.dll
2012-12-10 11:32 - 2012-12-10 11:32 - 00677376 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSkin.dll
2012-12-10 11:30 - 2012-12-10 11:30 - 00934912 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.cjstyles
2012-12-10 11:32 - 2012-12-10 11:32 - 00505344 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSwitch.dll
2012-12-10 11:31 - 2012-12-10 11:31 - 00342016 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCScaner.dll
2012-12-10 11:31 - 2012-12-10 11:31 - 00452096 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCScan.dll
2012-12-10 11:30 - 2012-12-10 11:30 - 00153088 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCProp.dll
2012-12-10 11:31 - 2012-12-10 11:31 - 00327680 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEditor.dll
2012-12-10 11:32 - 2012-12-10 11:32 - 00122880 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCEdit.dll
2012-12-10 11:31 - 2012-12-10 11:31 - 00159232 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCList.dll
2012-12-10 11:30 - 2012-12-10 11:30 - 00142848 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCSave.dll
2012-12-10 11:33 - 2012-12-10 11:33 - 00103936 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCInfo.dll
2012-08-16 08:31 - 2012-08-16 08:31 - 00122368 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\lua5.dll
2012-08-16 08:32 - 2012-08-16 08:32 - 00671232 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\BitmapBuffer.dll
2012-08-16 08:31 - 2012-08-16 08:31 - 00310272 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sslog.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00079872 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Adjustment.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00167936 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_AutoCrop.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00092160 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_AutoRotate.dll
2012-08-16 08:34 - 2012-08-16 08:34 - 00072192 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BkgRemoval.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00057344 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BlankPageDetection.dll
2012-08-16 08:34 - 2012-08-16 08:34 - 00082432 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BMP.dll
2012-08-16 08:35 - 2012-08-16 08:35 - 00127488 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_BookScan.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00064000 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ColorCorrection.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00093184 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Descreen.dll
2012-08-16 08:37 - 2012-08-16 08:37 - 02172928 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ePub.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00078336 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Filter.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00073728 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_FringeRemoval.dll
2012-08-16 08:35 - 2012-08-16 08:35 - 00340992 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_ImageStitching.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00130560 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_J2K.dll
2012-08-16 08:32 - 2012-08-16 08:32 - 00246784 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_JPEG.dll
2012-08-16 08:32 - 2012-08-16 08:32 - 00869888 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_LSSIP.dll
2012-08-16 08:38 - 2012-08-16 08:38 - 01664512 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_PDF.dll
2012-08-16 08:34 - 2012-08-16 08:34 - 00251904 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_PNG.dll
2012-08-16 08:35 - 2012-08-16 08:35 - 00161280 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Segment.dll
2012-08-16 08:35 - 2012-08-16 08:35 - 01869312 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_SF.dll
2012-08-16 08:34 - 2012-08-16 08:34 - 00740352 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_TIFF.dll
2012-08-16 08:34 - 2012-08-16 08:34 - 00049664 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Transform.dll
2012-08-16 08:36 - 2012-08-16 08:36 - 00068096 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_Watermark.dll
2012-08-16 08:33 - 2012-08-16 08:33 - 00166400 _____ () C:\Program Files (x86)\Common Files\Scan Process Machine\sie_XPS.dll
2014-05-08 13:21 - 2014-05-08 13:21 - 00057344 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_de\brdlang32.DEU
2014-06-05 09:50 - 2014-06-05 09:50 - 09496576 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_rdlang32.deu
2014-05-08 13:21 - 2014-05-08 13:21 - 00305520 _____ () C:\Program Files (x86)\Adobe\Reader 10.0\Reader\sqlite.dll
2012-12-10 11:33 - 2012-12-10 11:33 - 00536576 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCAddin.dll
2012-12-10 11:33 - 2012-12-10 11:33 - 00614912 _____ () C:\Program Files (x86)\Samsung\Easy Document Creator\EDCOffice.dll
2010-05-22 13:58 - 2010-03-08 11:16 - 00039936 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\LiteZip.dll
2010-05-22 13:58 - 2010-03-08 11:16 - 00047616 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\LiteUnzip.dll
2010-05-22 13:58 - 2010-03-08 11:16 - 00307200 _____ () C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\sqlite3.dll
2011-06-13 05:48 - 2011-06-13 05:48 - 03715584 _____ () C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\ffdshow\ffdshow.ax
2009-08-11 15:19 - 2009-08-11 15:19 - 00797184 _____ () C:\Program Files (x86)\FreeTime\FormatFactory\FFModules\Filters\ac3filter.ax
2014-06-05 09:50 - 2014-06-05 09:50 - 00075264 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_Accessibility.DEU
2014-06-05 09:50 - 2014-06-05 09:50 - 00014336 _____ () C:\Users\Catharina\AppData\Local\Adobe\Acrobat\10.0\Cache\RdLang_Updater.DEU

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: MarketingTools => C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe

==================== Faulty Device Manager Devices =============

Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (06/05/2014 05:23:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: N360.exe, Version: 12.11.2.9, Zeitstempel: 0x5355938e
Name des fehlerhaften Moduls: MSVCR100.dll, Version: 10.0.40219.325, Zeitstempel: 0x4df2be1e
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00068b40
ID des fehlerhaften Prozesses: 0x1648
Startzeit der fehlerhaften Anwendung: 0xN360.exe0
Pfad der fehlerhaften Anwendung: N360.exe1
Pfad des fehlerhaften Moduls: N360.exe2
Berichtskennung: N360.exe3

Error: (06/04/2014 05:00:41 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: loge32.exe, Version: 18.5.0.247, Zeitstempel: 0x5343d8a2
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a86
Ausnahmecode: 0xe06d7363
Fehleroffset: 0x0000c42d
ID des fehlerhaften Prozesses: 0x110c
Startzeit der fehlerhaften Anwendung: 0xloge32.exe0
Pfad der fehlerhaften Anwendung: loge32.exe1
Pfad des fehlerhaften Moduls: loge32.exe2
Berichtskennung: loge32.exe3

Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 21934

Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 21934

Error: (06/04/2014 11:28:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 20920

Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 20920

Error: (06/04/2014 11:28:11 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/04/2014 11:28:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 19922

Error: (06/04/2014 11:28:10 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 19922


System errors:
=============
Error: (06/04/2014 07:00:36 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/04/2014 06:53:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (06/04/2014 06:53:26 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/04/2014 05:58:29 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.

Error: (06/04/2014 05:49:24 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Roxio Upnp Server 10 erreicht.

Error: (06/04/2014 05:48:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "lxdo_device" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (06/04/2014 05:48:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst lxdo_device erreicht.

Error: (06/04/2014 05:47:49 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LogMeIn Kernel Information Provider" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (06/04/2014 05:35:20 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.

Error: (06/04/2014 05:32:47 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "VAIO Care Performance Service" wurde nicht richtig gestartet.


Microsoft Office Sessions:
=========================
Error: (06/04/2010 11:27:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/17/2010 09:21:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 93%
Total physical RAM: 4031.18 MB
Available physical RAM: 268.21 MB
Total Pagefile: 8988.54 MB
Available Pagefile: 738.98 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:921.47 GB) (Free:118.68 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: C95B288F)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=921 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 05.06.2014, 19:29   #5
Machiavelli
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Schritt 1
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Schritt 4
Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Bitte poste mir die Inhalte der Logs von Adwarecleaner, MBAM, JRT und FRST hier in den Thread.

__________________
Proud member of Unite

Alt 06.06.2014, 21:58   #6
wescat
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Code:
ATTFilter
# AdwCleaner v3.212 - Bericht erstellt am 06/06/2014 um 20:44:11
# Aktualisiert 05/06/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Catharina - CATHARINA-VAIOL
# Gestartet von : C:\Users\Catharina\Downloads\adwcleaner_3.212.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\ShopperPro
Ordner Gelöscht : C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\prefs.js ]


[ Datei : C:\Users\Gast\AppData\Roaming\Mozilla\Firefox\Profiles\836dksbp.default\prefs.js ]


-\\ Google Chrome v35.0.1916.114

[ Datei : C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Search Provider] : hxxp://sweetlifedemo.wordpress.com/?s={searchTerms}
Gelöscht [Search Provider] : hxxp://start.iminent.com/?appId=0D3E7F63-F430-4D65-A1A5-E23277F9AF55&ref=toolbox&q={searchTerms}
Gelöscht [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
Gelöscht [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=ORJ&o=&locale=&apn_uid=DECA78BD-BBC2-461B-95B7-E21C736F662B&apn_ptnrs=U3&apn_sauid=7478988E-426D-4FE2-9A92-13FCA0E47904&apn_dtid=OSJ000YYDE&q={searchTerms}
Gelöscht [Search Provider] : hxxp://www.softonic.de/s/{searchTerms}
Gelöscht [Extension] : adpkifcfcacgmnggcbpbjbkdijciiigm

*************************

AdwCleaner[R0].txt - [15092 octets] - [05/06/2014 19:54:58]
AdwCleaner[R1].txt - [6074 octets] - [05/06/2014 23:28:00]
AdwCleaner[R2].txt - [1532 octets] - [06/06/2014 20:40:32]
AdwCleaner[S0].txt - [15306 octets] - [05/06/2014 20:01:17]
AdwCleaner[S1].txt - [5723 octets] - [05/06/2014 23:45:41]
AdwCleaner[S2].txt - [2040 octets] - [06/06/2014 20:44:11]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [2100 octets] ##########
         
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Scan Date: 06.06.2014
Scan Time: 20:59:15
Logfile: mbam 0606 2136.txt
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.06.06.04
Rootkit Database: v2014.06.02.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Catharina

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 375232
Time Elapsed: 27 min, 1 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)
         
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Home Premium x64
Ran by Catharina on 06.06.2014 at 21:38:23,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 06.06.2014 at 21:46:47,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 06-06-2014
Ran by Catharina (administrator) on CATHARINA-VAIOL on 06-06-2014 21:52:27
Running from C:\Users\Catharina\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
( ) C:\Windows\System32\lxdocoms.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBDeviceInfoProvider.exe
(Samsung Electronics Co., Ltd.) C:\Windows\System32\spool\drivers\x64\3\NetFaxServer64.exe
(ShopperPro) C:\Program Files\Common Files\ShopperPro\spbiu.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(ArcSoft, Inc.) C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Smart Network\VSNClient.exe
(Symantec Corporation) C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\n360.exe
(Sony Corporation) C:\Program Files (x86)\SONY\VAIO Event Service\VESMgrSub.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Elgato Systems) C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(shbox.de) C:\Program Files (x86)\FreePDF_XP\fpassist.exe
(Sony Corporation) C:\Program Files (x86)\SONY\PMB\PMBVolumeWatcher.exe
() C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Dropbox, Inc.) C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ink\InputPersonalization.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\APSDaemon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCPerfService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCsystray.exe
(Sony of America Corporation) C:\Program Files\Sony\VAIO Care\listener.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [16395880 2009-11-02] (NVIDIA Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8317472 2009-11-09] (Realtek Semiconductor)
HKLM\...\Run: [lxdomon.exe] => C:\Program Files (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] ()
HKLM\...\Run: [lxdoamon] => C:\Program Files (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] ()
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [462712 2012-03-09] ()
HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [385024 2009-09-05] (shbox.de)
HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2011-09-27] (Apple Inc.)
HKLM-x32\...\Run: [lxdomon.exe] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdomon.exe [455336 2010-02-10] ()
HKLM-x32\...\Run: [NortonOnlineBackupReminder] => C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe [538472 2009-06-17] (Symantec Corporation)
HKLM-x32\...\Run: [PMBVolumeWatcher] => C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [599328 2010-03-24] (Sony Corporation)
HKLM-x32\...\Run: [lxdoamon] => C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe [25256 2010-02-10] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [208424 2013-10-17] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-05-26] (Apple Inc.)
Winlogon\Notify\VESWinlogon-x32: VESWinlogon.dll [X]
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [GoogleChromeAutoLaunch_B4CDF8F4E62911CE9A125DF4A43B236A] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [860488 2014-05-14] (Google Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Remote Control Editor] => C:\Program Files (x86)\Common Files\TerraTec\Remote\TTTvRc.exe [1689088 2010-06-09] (Elgato Systems)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [Facebook Update] => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-09-12] (Facebook Inc.)
HKU\S-1-5-21-2674396101-735356166-3434830305-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-11-20] (Apple Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WISO Mein Steuer-Sparbuch heute.lnk
ShortcutTarget: WISO Mein Steuer-Sparbuch heute.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe ()
Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Catharina\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://home.1und1.de
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie
SearchScopes: HKCU - {13BCC6B8-59D7-43B9-9DDB-62AE5C0AB724} URL = hxxp://go.web.de/suchbox/ebay?query={searchTerms}
SearchScopes: HKCU - {1AE2289A-8F2D-43A7-9AB6-92415D2AC556} URL = hxxp://go.1und1.de/suchbox/amazon?tag=1und1icon-21&field-keywords={searchTerms}
SearchScopes: HKCU - {349713D0-30F6-4262-AA35-D8971B8C53F4} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms}
SearchScopes: HKCU - {47405742-4DD4-4C8C-97BB-E066DCCC5E61} URL = hxxp://go.web.de/suchbox/google?q={searchTerms}
SearchScopes: HKCU - {5BEC5B5A-3495-4CA2-8451-041981BD0C4A} URL = hxxp://go.1und1.de/suchbox/ie_amazon/?keywords={searchTerms}
SearchScopes: HKCU - {B89582FF-E4DA-4293-9936-4580DD265265} URL = hxxp://go.1und1.de/suchbox/1und1suche?su={searchTerms}
SearchScopes: HKCU - {CAE19DBB-56F6-460B-B95F-96DB9A035F40} URL = hxxp://wa.ui-portal.de/1und1/1und1/s?produkte.browser.link.ebaysuche&s_brand=1und1&t_link=ebaysuche&ns_type=clickin&ns_url=hxxp://rover.ebay.com/rover/1/707-52222-30040-8/4?mpre=hxxp://shop.ebay.de/?_sacat=See-All-Categories&_nkw={searchTerms}
SearchScopes: HKCU - {FACB6060-7CA1-42A9-B786-E863873E6336} URL = hxxp://de.shopping.com/?linkin_id=8056363
BHO: Windows Live Family Safety Browser Helper Class - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -  No File
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
BHO-x32: Asz.Citavi.IEPicker.IEPickerButton - {609D670F-B735-4da7-AC6D-F3BD358E325E} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Samsung BHO Class - {AA609D72-8482-4076-8991-8CDAE5B93BCB} - C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll ()
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - TerraTec Home Cinema - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default
FF DefaultSearchEngine: user_pref("browser.search.defaultenginename", "");
FF SelectedSearchEngine: user_pref("browser.search.selectedEngine", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/VirtualEarth3D,version=4.0 - C:\Program Files (x86)\Virtual Earth 3D\ No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Catharina\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Catharina\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\Catharina\AppData\Local\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin10181.dll (Amazon.com, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\searchplugins\badoo.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\2020Player_IKEA@2020Technologies.com [2011-07-29]
FF Extension: Facebook Chat History Manager - C:\Users\Catharina\AppData\Roaming\Mozilla\Firefox\Profiles\znepkhxq.default\Extensions\fbchathistory@firechm.com.xpi [2013-04-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2013-12-22]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2013-12-22]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2013-11-27]

Chrome: 
=======
CHR HomePage: hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC
CHR StartupUrls: "hxxp://www.google.com/ig/redirectdomain?brand=SVEC&bmod=SVEC"
CHR Extension: (Floorplanner) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\abopacaefhbognnmeigicfpgnmpideag [2014-01-06]
CHR Extension: (Bejeweled) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2014-06-06]
CHR Extension: (Turn Off the Lights) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbmjmiodbnnpllbbbfblcplfjjepjdn [2014-01-06]
CHR Extension: (Gliffy-Diagramme) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmicilclplefnflapjmnngmkkkkpfad [2014-01-06]
CHR Extension: (Strawberry Pal Regelkalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmeafmbadejchdjffdbdjdkcgfmlhjmh [2014-01-06]
CHR Extension: (Auf den Amazon-Wunschzettel) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced [2014-01-06]
CHR Extension: (Photo Zoom für Facebook) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhapiedbmffnpkahkcjdjpikmodjipmd [2014-01-06]
CHR Extension: (CinemaxX Trailer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\dopcgojamofpmhidpadjjfilkiiehjea [2014-01-06]
CHR Extension: (Sketch Toy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb [2014-01-06]
CHR Extension: (Chromebleed) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eeoekjnjgppnaegdjbcafdggilajhpic [2014-04-10]
CHR Extension: (Daily Calculators) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\eepfjbflaeefhecfkalmechpbdmklahp [2014-01-06]
CHR Extension: (Pixlr-o-matic) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj [2014-01-06]
CHR Extension: (Google Kalender) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2014-01-06]
CHR Extension: (Autodesk ForceEffect) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekbaidcchahkpedbhdenlmleimihkcim [2014-01-06]
CHR Extension: (Anwendungen iPhone en Förderung) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekckfmbgohljpbplohgkeoepmieffaef [2014-01-06]
CHR Extension: (Silver Bird) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\encaiiljifbdbjlphpgpiimidegddhic [2014-01-06]
CHR Extension: (Wunderlist - To-do and Task list) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjliknjliaohjgjajlgolhijphojjdkc [2014-01-06]
CHR Extension: (MindMap) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdaeohpmcenmffofpikllphdhlkkocfa [2014-01-06]
CHR Extension: (Sketch Assistenten) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghgcipaapohgnempegffkhmhbdloaoec [2014-01-06]
CHR Extension: (Magisto) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmngbmfdgknokcefmkbjlcjabdklnlk [2014-01-06]
CHR Extension: („Pin it“-Button) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2014-01-06]
CHR Extension: (PDF Mergy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2014-01-06]
CHR Extension: (This Exquisite Forest) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\illikembakcokcfifcbkneafjjjnckkd [2014-01-06]
CHR Extension: (Facebook Profil Finder) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\imejfidcafbhpnppakocbdjbeifkgaga [2014-01-06]
CHR Extension: (Dropbox) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2014-01-06]
CHR Extension: (Clearly) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\iooicodkiihhpojmmeghjclgihfjdjhj [2014-01-06]
CHR Extension: (Google Formulare) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jhknlonaankphkkbnmjdlpehkinifeeg [2014-01-06]
CHR Extension: (Eingabe-Test - KeyHero) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-01-06]
CHR Extension: (Autodesk Homestyler) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb [2014-01-06]
CHR Extension: (eBay-Erweiterung für Google Chrome™) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhckppjhonfmcpegdjdibmngahahhck [2014-01-06]
CHR Extension: (Little Alchemy) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2014-01-06]
CHR Extension: (SPIEGEL ONLINE Extension) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lcmhmkhlpcieakngfbhgjkdpgibbmboc [2014-01-06]
CHR Extension: (Numerics Calculator & Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\liglcienpnkhdajdfmnpbgmpjglonipe [2014-01-06]
CHR Extension: (Konjugation Vatefaireconjuguer) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnpmoecabagognommankobjfmdfdppgp [2014-01-06]
CHR Extension: (Der Planer der Räume) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-01-06]
CHR Extension: (Video Converter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcjjnhgakghmggnimjkldjmmpabhnhne [2014-01-06]
CHR Extension: (Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2014-01-06]
CHR Extension: (Calculator) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkgoipeflibinmadcecedifdonakgalk [2014-01-06]
CHR Extension: (Spanish 2 English!) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnmkabhkheikmcfieenfbfhikpigjldi [2014-01-06]
CHR Extension: (Save to Pocket) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2014-01-06]
CHR Extension: (Google Wallet) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Reversi) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\odhjkapjdlmmadkepnmlkpadnnnnoebm [2014-01-06]
CHR Extension: (Google Quick Scroll) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okanipcmceoeemlbjnmnbdibhgpbllgc [2014-01-06]
CHR Extension: (Goodgame Big Farm) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdjgjhkolgmkjjddmnjejjphhkdjdhc [2014-01-06]
CHR Extension: (Spring Mahjong) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oohmgpjbkliggjliakneoaedilbaihhl [2014-01-06]
CHR Extension: (Spreadshirt Designer für Google Drive) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\oomgjmhhemldplodpialfbafcidjaghm [2014-01-06]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2014-02-08]
CHR Extension: (Evernote Web Clipper) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-06]
CHR Extension: (Marqueed Screenshots) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkbfakcphdokdnbdhlndlpcehebmplab [2014-03-18]
CHR Extension: (Audio Cutter) - C:\Users\Catharina\AppData\Local\Google\Chrome\User Data\Default\Extensions\plimnkafgoiilijmlbnfoafihjjijbfp [2014-01-06]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx [2014-05-24]

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [219480 2013-07-22] (Garmin Ltd or its subsidiaries)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [49664 2013-10-08] (Haufe-Lexware GmbH & Co. KG)
R2 lxdo_device; C:\Windows\system32\lxdocoms.exe [1039360 2007-09-20] ( )
R2 lxdo_device; C:\Windows\SysWOW64\lxdocoms.exe [589824 2007-09-20] ( )
R2 MSSQL$ACCUCHEK360; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
R2 N360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [265040 2014-05-11] (Symantec Corporation)
S3 Roxio UPnP Renderer 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [313840 2009-08-31] (Sonic Solutions)
S2 Roxio Upnp Server 10; C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [362992 2009-08-31] (Sonic Solutions)
R2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [259192 2011-01-29] (Sony Corporation)
R2 Samsung Network Fax Server; C:\Windows\system32\spool\drivers\x64\3\NetFaxServer64.exe [239616 2012-09-18] (Samsung Electronics Co., Ltd.)
S3 SOHDBSvr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe [70952 2009-10-15] (Sony Corporation)
S3 SOHPlMgr; C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe [91432 2009-10-15] (Sony Corporation)
R2 SPBIUpd; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880 2014-05-12] (ShopperPro)
R2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
R3 VUAgent; C:\Program Files\Sony\VAIO Update\VUAgent.exe [1286784 2012-10-26] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 BHDrvx64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20140510.001\BHDrvx64.sys [1530160 2014-05-10] (Symantec Corporation)
R1 ccSet_N360; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2014-03-07] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-20] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20140606.001\IDSvia64.sys [525016 2014-03-26] (Symantec Corporation)
S4 LMIRfsClientNP; No ImagePath
R3 mod7700; C:\Windows\System32\DRIVERS\mod7700.sys [631360 2009-11-04] (DiBcom SA)
R3 MODRC; C:\Windows\System32\DRIVERS\modrc.sys [23744 2009-11-04] (DiBcom S.A.)
R3 NAVENG; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140606.003\ENG64.SYS [126040 2014-05-06] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20140606.003\EX64.SYS [2099288 2014-05-06] (Symantec Corporation)
R3 NW1950; C:\Windows\system32\drivers\NW1950.sys [25080 2009-10-23] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SPBIUpdd; C:\Program Files\Common Files\ShopperPro\spbiw.sys [41856 2014-05-12] ()
R1 SRTSP; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [875736 2014-02-13] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [1148120 2014-03-04] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [593112 2014-02-18] (Symantec Corporation)
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-06 21:50 - 2014-06-06 21:50 - 00003234 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-06-06 21:49 - 2014-06-06 21:49 - 02072576 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe
2014-06-06 21:46 - 2014-06-06 21:46 - 00000629 _____ () C:\Users\Catharina\Desktop\JRT.txt
2014-06-06 21:37 - 2014-06-06 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT(1).exe
2014-06-06 21:36 - 2014-06-06 21:36 - 00001069 _____ () C:\Users\Catharina\Desktop\mbam 0606 2136.txt
2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-06-06 20:43 - 2014-06-06 20:43 - 00001532 _____ () C:\Users\Catharina\Desktop\AdwCleaner[R2].txt
2014-06-06 20:39 - 2014-06-06 20:39 - 01333465 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.212.exe
2014-06-06 20:33 - 2014-06-06 20:33 - 00001070 _____ () C:\Users\Catharina\Desktop\mbam 0606 2033.txt
2014-06-06 14:30 - 2014-06-06 14:30 - 00024335 _____ () C:\Users\Catharina\Desktop\mbam 0606.txt
2014-06-05 23:54 - 2014-06-05 23:54 - 00005723 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S1].txt
2014-06-05 23:32 - 2014-06-05 23:32 - 00068771 _____ () C:\Users\Catharina\Desktop\FRST 2332.txt
2014-06-05 21:38 - 2014-06-05 21:38 - 00000000 ____D () C:\Windows\ERUNT
2014-06-05 21:37 - 2014-06-05 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT.exe
2014-06-05 21:35 - 2014-06-05 21:35 - 00001060 _____ () C:\Users\Catharina\Desktop\mbam.txt
2014-06-05 20:23 - 2014-06-05 20:23 - 00015306 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S0].txt
2014-06-05 20:22 - 2014-06-06 20:56 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-05 20:22 - 2014-06-05 20:22 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-05 20:22 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-05 20:22 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-05 19:58 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-05 19:54 - 2014-06-06 20:45 - 00000000 ____D () C:\AdwCleaner
2014-06-05 19:51 - 2014-06-05 19:52 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Catharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-05 19:49 - 2014-06-05 19:50 - 01327971 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.211 (1).exe
2014-06-05 18:19 - 2014-06-05 18:19 - 00067972 _____ () C:\Users\Catharina\Desktop\Addition.txt
2014-06-05 18:14 - 2014-06-05 18:14 - 00063540 _____ () C:\Users\Catharina\Desktop\FRST.txt
2014-06-05 17:57 - 2014-06-05 18:09 - 00067972 _____ () C:\Users\Catharina\Downloads\Addition.txt
2014-06-05 17:53 - 2014-06-06 21:52 - 00034153 _____ () C:\Users\Catharina\Downloads\FRST.txt
2014-06-05 17:49 - 2014-06-06 21:52 - 00000000 ____D () C:\FRST
2014-06-05 17:38 - 2014-06-05 17:39 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip
2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport
2014-06-04 17:17 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc
2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45
2014-06-04 17:14 - 2014-06-04 17:15 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83}
2014-06-04 16:14 - 2014-06-04 16:50 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog
2014-06-04 16:12 - 2014-06-04 16:24 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv
2014-06-04 15:58 - 2014-06-04 16:10 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv
2014-06-04 15:54 - 2014-06-04 17:22 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-06-04 15:53 - 2014-06-04 17:26 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe
2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files\iTunes
2014-05-30 21:46 - 2014-05-30 21:49 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods
2014-05-21 15:46 - 2014-05-21 18:07 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls
2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt
2014-05-15 03:18 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 03:18 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 03:18 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 03:18 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 03:18 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 03:18 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 16:28 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 16:28 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 16:27 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 16:27 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 16:27 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 16:27 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 16:27 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 16:27 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 16:27 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 16:27 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 16:27 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 16:27 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 16:27 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 16:27 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 16:26 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 16:26 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 16:26 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 16:26 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 16:26 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 16:26 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 16:26 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 16:26 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 16:26 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 16:26 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 16:26 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 16:26 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-07 03:05 - 2014-05-15 03:41 - 00000000 ___SD () C:\Windows\system32\CompatTel

==================== One Month Modified Files and Folders =======

2014-06-06 21:52 - 2014-06-05 17:53 - 00034153 _____ () C:\Users\Catharina\Downloads\FRST.txt
2014-06-06 21:52 - 2014-06-05 17:49 - 00000000 ____D () C:\FRST
2014-06-06 21:52 - 2010-05-14 12:00 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Temp
2014-06-06 21:50 - 2014-06-06 21:50 - 00003234 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-06-06 21:50 - 2011-12-19 23:34 - 00000944 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job
2014-06-06 21:49 - 2014-06-06 21:49 - 02072576 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64(1).exe
2014-06-06 21:46 - 2014-06-06 21:46 - 00000629 _____ () C:\Users\Catharina\Desktop\JRT.txt
2014-06-06 21:37 - 2014-06-06 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT(1).exe
2014-06-06 21:36 - 2014-06-06 21:36 - 00001069 _____ () C:\Users\Catharina\Desktop\mbam 0606 2136.txt
2014-06-06 21:31 - 2009-12-20 04:43 - 00001124 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-06 21:23 - 2012-04-12 09:27 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-06 21:01 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-06 21:01 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-06 20:57 - 2010-05-14 11:59 - 01050473 _____ () C:\Windows\WindowsUpdate.log
2014-06-06 20:56 - 2014-06-05 20:22 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-06 20:56 - 2013-12-22 21:37 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-06 20:56 - 2012-08-19 19:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-06 20:53 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Dropbox
2014-06-06 20:52 - 2014-05-03 08:14 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\DropboxMaster
2014-06-06 20:52 - 2010-07-05 14:05 - 00000000 ___RD () C:\Users\Catharina\Documents\My Dropbox
2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro
2014-06-06 20:47 - 2009-12-20 04:43 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-06 20:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-06 20:47 - 2009-07-14 06:51 - 00084764 _____ () C:\Windows\setupact.log
2014-06-06 20:46 - 2009-12-08 20:38 - 02074186 _____ () C:\Windows\PFRO.log
2014-06-06 20:45 - 2014-06-05 19:54 - 00000000 ____D () C:\AdwCleaner
2014-06-06 20:43 - 2014-06-06 20:43 - 00001532 _____ () C:\Users\Catharina\Desktop\AdwCleaner[R2].txt
2014-06-06 20:39 - 2014-06-06 20:39 - 01333465 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.212.exe
2014-06-06 20:33 - 2014-06-06 20:33 - 00001070 _____ () C:\Users\Catharina\Desktop\mbam 0606 2033.txt
2014-06-06 20:30 - 2009-07-14 09:44 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-06-06 18:34 - 2010-05-14 12:03 - 00003974 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{872AFF91-85D3-4336-B789-768301523E02}
2014-06-06 15:50 - 2011-12-19 23:34 - 00000922 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job
2014-06-06 14:32 - 2009-07-14 07:37 - 00000000 ____D () C:\Windows\DigitalLocker
2014-06-06 14:30 - 2014-06-06 14:30 - 00024335 _____ () C:\Users\Catharina\Desktop\mbam 0606.txt
2014-06-06 13:19 - 2010-06-02 21:59 - 00000000 ____D () C:\Users\Catharina\Documents\Outlook-Dateien
2014-06-06 12:40 - 2012-03-29 08:58 - 00000000 ____D () C:\Users\Catharina\AppData\Local\ADD8F28E-876C-4338-9012-223367612529.aplzod
2014-06-05 23:54 - 2014-06-05 23:54 - 00005723 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S1].txt
2014-06-05 23:48 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-06-05 23:32 - 2014-06-05 23:32 - 00068771 _____ () C:\Users\Catharina\Desktop\FRST 2332.txt
2014-06-05 21:38 - 2014-06-05 21:38 - 00000000 ____D () C:\Windows\ERUNT
2014-06-05 21:37 - 2014-06-05 21:37 - 01016261 _____ (Thisisu) C:\Users\Catharina\Downloads\JRT.exe
2014-06-05 21:35 - 2014-06-05 21:35 - 00001060 _____ () C:\Users\Catharina\Desktop\mbam.txt
2014-06-05 20:23 - 2014-06-05 20:23 - 00015306 _____ () C:\Users\Catharina\Desktop\AdwCleaner[S0].txt
2014-06-05 20:22 - 2014-06-05 20:22 - 00001102 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2014-06-05 20:22 - 2014-06-05 20:22 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2014-06-05 20:22 - 2010-07-06 10:14 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-05 19:52 - 2014-06-05 19:51 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Catharina\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-05 19:50 - 2014-06-05 19:49 - 01327971 _____ () C:\Users\Catharina\Downloads\adwcleaner_3.211 (1).exe
2014-06-05 18:19 - 2014-06-05 18:19 - 00067972 _____ () C:\Users\Catharina\Desktop\Addition.txt
2014-06-05 18:14 - 2014-06-05 18:14 - 00063540 _____ () C:\Users\Catharina\Desktop\FRST.txt
2014-06-05 18:09 - 2014-06-05 17:57 - 00067972 _____ () C:\Users\Catharina\Downloads\Addition.txt
2014-06-05 17:39 - 2014-06-05 17:38 - 02068992 _____ (Farbar) C:\Users\Catharina\Downloads\FRST64.exe
2014-06-05 17:09 - 2013-12-02 00:36 - 00000000 ____D () C:\Users\Catharina\Documents\Scan
2014-06-05 10:03 - 2013-12-02 00:25 - 00000099 _____ () C:\Users\Public\LMDebug.log
2014-06-05 09:50 - 2014-06-05 09:50 - 00000000 ____D () C:\Users\Catharina\AppData\Local\Adobe
2014-06-04 20:32 - 2010-11-07 16:31 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Skype
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool.zip
2014-06-04 18:08 - 2014-06-04 18:08 - 00220590 _____ () C:\Users\Catharina\Downloads\DiagnosticTool (1).zip
2014-06-04 17:58 - 2012-04-12 09:27 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-04 17:58 - 2012-04-12 09:27 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-06-04 17:58 - 2011-06-20 14:11 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-04 17:26 - 2014-06-04 15:53 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2014-06-04 17:22 - 2014-06-04 15:54 - 00000000 ____D () C:\ProgramData\TEMP
2014-06-04 17:18 - 2014-06-04 17:18 - 00000000 ____D () C:\Users\Catharina\Documents\StreamTransport
2014-06-04 17:18 - 2014-06-04 17:17 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\vlc
2014-06-04 17:17 - 2014-06-04 17:17 - 00001066 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-06-04 17:17 - 2014-06-04 17:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-06-04 17:16 - 2014-06-04 17:16 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-04 17:15 - 2014-06-04 17:15 - 00004264 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45
2014-06-04 17:15 - 2014-06-04 17:14 - 24677393 _____ () C:\Users\Catharina\Downloads\vlc-2.1.3-win32.exe
2014-06-04 17:01 - 2010-11-27 12:13 - 00000000 ____D () C:\Users\Catharina\AppData\Local\CrashDumps
2014-06-04 17:00 - 2010-05-14 13:15 - 00000000 ____D () C:\ProgramData\Lexware
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:50 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-06-04 16:50 - 2014-06-04 16:14 - 00000898 _____ () C:\Windows\SysWOW64\InstallUtil.InstallLog
2014-06-04 16:49 - 2014-06-04 16:49 - 00003138 _____ () C:\Windows\System32\Tasks\{51DA246E-C6C1-44D9-8011-1B3B7D752C83}
2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-04 16:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-06-04 16:24 - 2014-06-04 16:12 - 400721295 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc_0.flv
2014-06-04 16:10 - 2014-06-04 15:58 - 398569483 _____ () C:\Users\Catharina\Documents\teil1&client=videoplayer&type=content&user=2754120632&mrwid=0&session=812393333&angebot=voxnow&starttime=00000000&timetype=2&fkc.flv
2014-06-04 15:54 - 2014-06-04 15:54 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-06-04 15:51 - 2014-06-04 15:51 - 00001091 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StreamTransport
2014-06-04 15:51 - 2014-06-04 15:51 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-06-04 15:48 - 2014-06-04 15:48 - 02068220 _____ (hxxp://www.streamtransport.com/ ) C:\Users\Catharina\Downloads\streamtransport_setup.exe
2014-06-02 16:57 - 2014-01-31 16:49 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\apsec
2014-06-02 16:57 - 2010-07-28 19:09 - 00000000 ____D () C:\Users\Catharina\Documents\dakota_s
2014-06-02 16:20 - 2014-06-02 16:20 - 00000000 ____D () C:\Windows\System32\Tasks\Norton 360
2014-06-02 15:49 - 2014-06-02 15:49 - 00003206 _____ () C:\Windows\System32\Tasks\Norton WSC Integration
2014-06-02 15:49 - 2010-11-07 18:18 - 00000000 ____D () C:\Windows\system32\Drivers\N360x64
2014-06-02 15:45 - 2013-11-27 07:44 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360 Premier Edition
2014-06-02 15:45 - 2013-06-29 11:03 - 00002319 _____ () C:\Users\Public\Desktop\Norton 360.lnk
2014-06-02 15:27 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-06-02 15:26 - 2010-07-05 14:05 - 00001036 _____ () C:\Users\Catharina\Desktop\Dropbox.lnk
2014-06-02 15:26 - 2010-07-05 14:03 - 00000000 ____D () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-05-30 21:49 - 2014-05-30 21:49 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-05-30 21:49 - 2014-05-30 21:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files\iTunes
2014-05-30 21:49 - 2014-05-30 21:46 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-05-30 21:47 - 2014-05-30 21:47 - 00000000 ____D () C:\Program Files\iPod
2014-05-26 20:15 - 2014-05-26 20:15 - 00007786 _____ () C:\Users\Catharina\Documents\fertige Kalkulation Tabelle (2).ods
2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-05-26 17:54 - 2010-11-07 16:31 - 00000000 ____D () C:\ProgramData\Skype
2014-05-21 18:07 - 2014-05-21 15:46 - 00062464 _____ () C:\Users\Catharina\Downloads\Muster-Kalkulation (4).xls
2014-05-20 12:42 - 2011-06-20 19:01 - 00000000 ____D () C:\Users\Catharina\Documents\Sarah Brand
2014-05-19 13:07 - 2014-05-19 13:07 - 00001374 _____ () C:\Users\Catharina\Downloads\Behind the veil.txt
2014-05-15 22:20 - 2011-06-21 08:11 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-05-15 08:30 - 2010-12-23 14:52 - 00000000 ____D () C:\Users\Catharina\Documents\Mein Steuer-Sparbuch Heute
2014-05-15 08:26 - 2010-05-14 12:02 - 00000000 ___RD () C:\Users\Catharina\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 04:35 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-15 03:41 - 2014-05-07 03:05 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 03:20 - 2009-12-20 04:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 03:15 - 2013-08-15 03:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 03:06 - 2010-05-18 09:01 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-12 07:26 - 2014-06-05 20:22 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-12 07:26 - 2014-06-05 20:22 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-12 07:25 - 2010-07-06 10:14 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-09 20:55 - 2009-12-20 13:35 - 00750280 _____ () C:\Windows\system32\perfh007.dat
2014-05-09 20:55 - 2009-12-20 13:35 - 00168914 _____ () C:\Windows\system32\perfc007.dat
2014-05-09 20:55 - 2009-07-14 07:13 - 01763416 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-09 08:14 - 2014-05-14 16:27 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 16:27 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-07 11:52 - 2013-01-02 11:10 - 00001141 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VAIO Update.lnk

Files to move or delete:
====================
C:\ProgramData\hash.dat
C:\Users\Catharina\fbchathistory.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat
C:\Users\Catharina\jagex_runescape_preferences.dat
C:\Users\Catharina\jagex_runescape_preferences2.dat


Some content of TEMP:
====================
C:\Users\Catharina\AppData\Local\Temp\cabex.dll
C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll
C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe
C:\Users\Catharina\AppData\Local\Temp\Quarantine.exe
C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe
C:\Users\Catharina\AppData\Local\Temp\unelevate.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-06-03 03:08

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 06.06.2014, 21:59   #7
wescat
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-06-2014
Ran by Catharina at 2014-06-06 21:53:13
Running from C:\Users\Catharina\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton 360 Premier Edition (Enabled - Up to date) {D87FA2C0-F526-77B1-D6EC-0EDF3936CEDB}
AS: Norton 360 Premier Edition (Enabled - Up to date) {631E4324-D31C-783F-EC5C-35AD42B18466}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Norton 360 Premier Edition (Enabled) {E04423E5-BF49-76E9-FDB3-A7EAC7E589A0}

==================== Installed Programs ======================

 Update for Microsoft Office 2007 (KB2508958) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438}) (Version:  - Microsoft)
ACCU-CHEK 360 (x32 Version: 0.9.26 - Roche) Hidden
ACCU-CHEK 360 Continua Manager (HKLM-x32\...\InstallShield_{4EEF9985-417C-4892-B63F-747F8F09F20F}) (Version: 0.9.26 - Roche)
ACCU-CHEK 360° (HKLM-x32\...\InstallShield_{81395935-58B5-4E55-AF3E-6C97390FA01A}) (Version: 2.0.0 - Roche Diagnostics Corporation)
ACCU-CHEK 360° (x32 Version: 2.0.0 - Roche Diagnostics Corporation) Hidden
ADAC Auto 2011 (HKLM-x32\...\{147D7D66-DB73-40A7-BF98-220C5454C1B1}) (Version:  - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.7.1.19610 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 2.7.1.19610 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Reader X (10.1.10) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AA1000000001}) (Version: 10.1.10 - Adobe Systems Incorporated)
Adobe Shockwave Player (HKLM-x32\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)
Adobe Shockwave Player 12.0 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.0.0.112 - Adobe Systems, Inc.)
Amazon MP3-Downloader 1.0.18 (HKCU\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
Apple Application Support (HKLM-x32\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{7BB90344-0647-468E-925A-7F69F7983421}) (Version: 2.0.1.98 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}) (Version: 3.0.21.278 - ArcSoft)
ArcSoft WebCam Message Board (HKLM-x32\...\{6ACF0A95-340A-46D6-B1AC-F22CDB51F475}) (Version: 1.0.1.56 - ArcSoft)
AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version:  - )
AVM FRITZ!Box Dokumentation (HKLM-x32\...\AVMFBox) (Version:  - AVM Berlin)
AVM FRITZ!Box Druckeranschluss (HKLM-x32\...\AVMFBoxPrinter) (Version:  - AVM Berlin)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borland Data Engine (HKLM-x32\...\{3AF6EF15-5841-4FF8-A3FC-5B2400AB9145}) (Version: 5.2.0 - Roche Diagnostics)
Citavi 2.5 (HKLM-x32\...\Citavi) (Version: 2.5.2.0 - Academic Software Zurich)
Click to Disc MergeModules x64 (Version: 1.0.14230 - Sony Corporation) Hidden
Common Desktop Agent (Version: 1.62.0 - OEM) Hidden
Content Manager 2 (HKLM-x32\...\Content Manager 2) (Version: 2.2.1.9986 - Harman Becker Automotive Systems)
dakota.ag (HKLM-x32\...\dakota.ag) (Version: 6.0 - ITSG GmbH)
dakota.ag (x32 Version: 6.0 - ITSG GmbH) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{349F73CA-653A-43A6-AE77-970B07D6EDA0}) (Version:  - Microsoft)
Dropbox (HKCU\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
Einstellungen für VAIO-Inhaltsüberwachung (HKLM-x32\...\{23825B69-36DF-4DAD-9CFD-118D11D80F16}) (Version: 2.4.1.09180 - Sony Corporation)
Elevated Installer (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Evernote (HKLM-x32\...\{F761359C-9CED-45AE-9A51-9D6605CD55C4}) (Version: 3.5.3.1964 - Evernote Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FormatFactory 2.70 (HKLM-x32\...\FormatFactory) (Version: 2.70 - Free Time)
Franzis Führerschein Trainer (HKLM-x32\...\ffs2010_is1) (Version: 1.0 - Franzis Verlag GmbH, Poing)
FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )
Garmin Communicator Plugin (HKLM-x32\...\{647BB978-2876-487B-9B0E-FDB73F0EA4A2}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Communicator Plugin x64 (HKLM\...\{237D687E-9E50-4A30-B810-262764CC491B}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{bd9bc494-8cd2-4ae2-92fe-6a3dda9c3ee9}) (Version: 2.2.17 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Garmin Update Service (x32 Version: 2.2.17 - Garmin Ltd or its subsidiaries) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.114 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.0 - Google Inc.) Hidden
Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google)
GPL Ghostscript 8.71 (HKLM-x32\...\GPL Ghostscript 8.71) (Version:  - )
iCloud (HKLM\...\{81E20D41-C277-4526-934D-F2380AF91B78}) (Version: 3.1.0.40 - Apple Inc.)
Intel(R) Management Engine Interface (HKLM\...\HECI) (Version:  - Intel Corporation)
Internet-TV für Windows Media Center (HKLM-x32\...\{9D318C86-AF4C-409F-A6AC-7183FF4CF424}) (Version: 4.2.2.0 - Microsoft Corporation)
iTunes (HKLM\...\{5A68A656-979F-4168-8795-E2E368AA4DC2}) (Version: 11.2.2.3 - Apple Inc.)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 16 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86416016FF}) (Version: 6.0.160 - Sun Microsystems, Inc.)
Junk Mail filter update (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Lexmark 9500 Series (HKLM\...\Lexmark 9500 Series) (Version:  - Lexmark International, Inc.)
Lexmark 9500 Series (HKLM-x32\...\Lexmark 9500 Series) (Version:  - Lexmark International, Inc.)
Lexware Elster (HKLM-x32\...\{9CCD2A54-3AC9-4675-82A9-71BFC32004C4}) (Version: 14.04.00.0014 - Haufe-Lexware GmbH & Co.KG)
Lexware financial office 2014 (x32 Version: 18.05.00.0028 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware financial office plus 2014 (HKLM-x32\...\{cceb5f5e-fa2f-4632-aa50-1dffce083c79}) (Version: 18.0.0.98 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 4.01.00.0077 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 3.01.00.0011 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (HKLM-x32\...\{7F603892-89C9-4EC4-9236-7AD4A798EA41}) (Version: 21.00.00.0039 - Haufe-Lexware GmbH & Co.KG)
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Media Gallery (HKLM-x32\...\{DD88F979-FA58-41AC-980C-A6E1A82B61D9}) (Version: 1.1.0.10210 - Sony Corporation)
Media Gallery (x32 Version: 1.1.0.10210 - Sony Corporation) Hidden
Mein CEWE FOTOBUCH (HKLM-x32\...\Mein CEWE FOTOBUCH) (Version: 5.1.3 - CEWE Stiftung u Co. KGaA)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Choice Guard (x32 Version: 2.0.48.0 - Microsoft Corporation) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Live Add-in 1.5 (HKLM-x32\...\{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}) (Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Suite Activation Assistant (HKLM-x32\...\{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}) (Version: 2.9 - Microsoft Corporation)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CE144BF4-4950-4CDB-A5F7-CCE1888F49CB}) (Version:  - Microsoft)
Microsoft Office Visio 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden
Microsoft Office Visio MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio Professional 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
Microsoft Office Visio Professional 2007 Trial (HKLM-x32\...\VISPROR) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2005 Express Edition (ACCUCHEK360) (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server 2005 Tools Express Edition (x32 Version: 9.4.5000.00 - Microsoft Corporation) Hidden
Microsoft SQL Server Compact 3.5 SP1 English (HKLM-x32\...\{E59113EB-0285-4BFD-A37A-B79EAC6B8F4B}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft SQL Server Management Objects Collection  (HKLM\...\{5677B005-B609-4B5B-9F3C-132BB085D3CF}) (Version: 9.00.1399.06 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server Setup Support Files (English) (HKLM-x32\...\{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{B636C9B9-A3F2-4DCE-ADCC-72E095018385}) (Version: 9.00.5000.00 - Microsoft Corporation)
Microsoft Touch Pack for Windows 7 (HKLM-x32\...\{8FF90DB8-6DED-44A3-B182-244FEC09012F}) (Version: 1.0.40517.00 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (HKLM-x32\...\{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{62F7DA7E-CCCB-439C-A760-00C3926E761F}) (Version: 9.7.0621 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.0 (HKLM-x32\...\{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}) (Version: 3.0.11010.0 - Microsoft Corporation)
Minicontrol 3.0.9 (HKLM-x32\...\2795-3221-8656-0055) (Version:  - LucaNet AG)
Minicontrol 3.1.6 (HKLM-x32\...\9356-3409-2235-7426) (Version: 3.1.6 - LucaNet AG)
Miniplan 3.0.9 (HKLM-x32\...\2476-8030-0924-5048) (Version:  - LucaNet AG)
MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSVCRT (x32 Version: 14.0.1468.721 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MusicStation (HKLM-x32\...\{AB259D46-F851-41B0-9AFA-AED8998AD68A}) (Version: 2.0.0.1067 - Omnifone)
myphotobook.de (HKLM-x32\...\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1) (Version: 1.2.7 - myphotobook GmbH)
myphotobook.de (x32 Version: 1.2.7 - myphotobook GmbH) Hidden
Naviextras Toolbox Prerequesities (HKLM-x32\...\{537575D6-3B96-474C-BD8F-DFF667363DBD}) (Version: 1.0.0 - Nav N Go Ltd.)
Norton 360 (HKLM-x32\...\N360) (Version: 21.3.0.12 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 1.2.20.0 - Symantec)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
Opera 10.60 (HKLM-x32\...\{1D2C96C3-A3F3-49E7-B839-95279DED837F}) (Version: 10.60 - Opera Software ASA)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PMB (HKLM-x32\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.2.00.03250 - Sony Corporation)
PMB VAIO Edition Guide (HKLM-x32\...\InstallShield_{88C252C8-A7EE-4B60-BF74-8E5919A8048F}) (Version: 1.0.00.09250 - Sony Corporation)
PMB VAIO Edition Guide (x32 Version: 1.0.00.09250 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (Click to Disc) (HKLM-x32\...\InstallShield_{4DCEA9C1-4D6E-41BF-A854-28CFA8B56DBF}) (Version: 3.2.00.16060 - Sony Corporation)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.2.00.16060 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Image Optimizer) (HKLM-x32\...\InstallShield_{1873FFC1-FDCB-47E1-B7C7-F418211E3530}) (Version: 1.0.00.10150 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.0.00.10150 - Sony Corporation) Hidden
PMB VAIO Edition plug-in (VAIO Movie Story) (HKLM-x32\...\InstallShield_{B25563A0-41F4-4A81-A6C1-6DBC0911B1F3}) (Version: 2.2.00.15250 - Sony Corporation)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.2.00.15250 - Sony Corporation) Hidden
PVSonyDll (Version: 1.00.0001 - NVIDIA Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5973 - Realtek Semiconductor Corp.)
RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version:  - )
RENESIS® Player Browser Plugins (HKLM-x32\...\{62B7C52C-CAB6-48B1-8245-52356C141C92}) (Version: 1.1.1 - examotion® GmbH)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roxio Central Audio (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Copy (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Core (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Data (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Central Tools (x32 Version: 3.8.0 - Roxio) Hidden
Roxio Easy Media Creator 10 LJ (HKLM-x32\...\{537BF16E-7412-448C-95D8-846E85A1D817}) (Version: 10.3 - Roxio)
Roxio Easy Media Creator Home (x32 Version: 10.3.183 - Roxio) Hidden
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.75.0 - Samsung Electronics Co., Ltd.)
Samsung CLX-6260 Series (HKLM-x32\...\Samsung CLX-6260 Series) (Version: 1.07 (07.01.2013) - Samsung Electronics Co., Ltd.)
Samsung Easy Document Creator (HKLM-x32\...\Samsung Easy Document Creator) (Version: 1.04.21 (10.12.2012) - Samsung Electronics Co., Ltd.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 1.03.71.00(12.09.2013) - Samsung Electronics Co., Ltd.)
Samsung Network PC Fax (HKLM-x32\...\Samsung Network PC Fax) (Version: 1.06.34 (04.09.2012) - Samsung Electronics Co., Ltd.)
Samsung OCR Software (HKLM-x32\...\Samsung OCR Software) (Version: 1.00.05 (10.07.2012) - Samsung Electronics Co., Ltd.)
Samsung Printer Live Update (HKLM-x32\...\Samsung Printer Live Update) (Version: 1.01.00:04(2013-04-22) - Samsung Electronics Co., Ltd.)
Samsung Scan Process Machine (x32 Version: 1.00.20.03 - Samsung Electronics Co., Ltd.) Hidden
Sense (HKLM-x32\...\Sense) (Version: 1.34.5.12 - Object Browser) <==== ATTENTION
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version:  - Microsoft) Hidden
Setting Utility Series (HKLM-x32\...\{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}) (Version: 5.1.0.11200 - Sony Corporation)
Shopper-Pro (HKLM-x32\...\ShopperPro) (Version:  - )
SimCity 4 (HKLM-x32\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version:  - )
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
SNS Upload for Easy Document Creator (HKLM-x32\...\{B6B5F07C-88D5-49D3-A1A7-A6D4BC37DCCC}) (Version: 1.0.0 - Samsung Electronics Co.,Ltd)
Sony Home Network Library (HKLM-x32\...\{D03D02D8-AB64-4785-A48E-5AA8B0FB8C14}) (Version: 2.0.1.10160 - Sony Corporation)
Sony Home Network Library (x32 Version: 2.0.1.10160 - Sony Corporation) Hidden
StreamTransport version: 1.1.3.0 (HKLM-x32\...\{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1) (Version:  - )
sv.net (HKLM-x32\...\sv.net) (Version: 13.1 - ITSG GmbH)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
TerraTec Home Cinema (HKLM-x32\...\{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}) (Version: 6.15.11 - )
TerraTec T5 V3.12.00.00a (HKLM-x32\...\TerraTec T5) (Version: 3.12.00.00a - )
Unity Web Player (HKCU\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version:  - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version:  - Microsoft)
Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{91120000-0051-0000-0000-0000000FF1CE}_VISPROR_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{3FCFD88F-4D13-4F38-8625-ABABEA7F61EA}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{C70D2038-A2C4-4A99-87DE-5272BB44F0CE}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{82F87E28-B18E-46D6-A399-E2F19CF5949B}) (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2878225) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{EFF5EBA3-40AD-4859-85E7-3C1CF4F297EB}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version:  - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version:  - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version:  - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version:  - Microsoft)
VAIO Care (HKLM-x32\...\{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}) (Version: 6.4.2.11150 - Sony Corporation)
VAIO Care (x32 Version: 6.4.2.11150 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Analyzing Manager (HKLM-x32\...\{4882EBF5-CA37-4EF4-BCB8-9B0E78B907D0}) (Version: 3.6.0.09250 - Sony Corporation)
VAIO Content Metadata Intelligent Analyzing Manager (x32 Version: 3.6.0.09250 - Sony Corporation) Hidden
VAIO Content Metadata Intelligent Network Service Manager (HKLM-x32\...\{4427F384-B5BE-4769-B7D0-C784FC321EB1}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata Intelligent Network Service Manager (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Metadata Manager Settings (HKLM-x32\...\{12D0BE8D-538C-4AB1-86DE-C540308F50DA}) (Version: 3.6.0.09240 - Sony Corporation)
VAIO Content Metadata Manager Settings (x32 Version: 3.6.0.09240 - Sony Corporation) Hidden
VAIO Content Metadata XML Interface Library (HKLM-x32\...\{291FB4BF-EEC7-4CF9-8469-F39ED1DBC4D8}) (Version: 3.6.0.09080 - Sony Corporation)
VAIO Content Metadata XML Interface Library (x32 Version: 3.6.0.09080 - Sony Corporation) Hidden
VAIO Content Monitoring Settings (x32 Version: 2.4.1.09180 - Sony Corporation) Hidden
VAIO Control Center (HKLM-x32\...\{72042FA6-5609-489F-A8EA-3C2DD650F667}) (Version: 4.1.0.10160 - Sony Corporation)
VAIO Data Restore Tool (HKLM-x32\...\{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}) (Version: 1.2.0.09150 - Sony Corporation)
VAIO Data Restore Tool (x32 Version: 1.2.0.09150 - Sony Corporation) Hidden
VAIO DVD Menu Data (HKLM-x32\...\{596BED91-A1D8-4DF1-8CD1-1C777F7588AC}) (Version: 2.1.00.15050 - Sony Corporation)
VAIO Energie Verwaltung (HKLM-x32\...\{803E4FA5-A940-4420-B89D-A8BC2E160247}) (Version: 5.0.0.11300 - Sony Corporation)
VAIO Event Service (HKLM-x32\...\{C7477742-DDB4-43E5-AC8D-0259E1E661B1}) (Version: 5.1.0.11300 - Sony Corporation)
VAIO Gate (HKLM-x32\...\{A7C30414-2382-4086-B0D6-01A88ABA21C3}) (Version: 1.2.0.09240 - Sony Corporation)
VAIO Gate Default (HKLM-x32\...\{B7546697-2A80-4256-A24B-1C33163F535B}) (Version: 1.0.0.10290 - Sony Corporation)
VAIO Hardware Diagnostics (x32 Version: 3.9.1 - Sony Corporation) Hidden
VAIO Media plus (HKLM-x32\...\{8DE50158-80AA-4FF2-9E9F-0A7C46F71FCD}) (Version: 2.0.1.10160 - Sony Corporation)
VAIO Media plus Opening Movie (HKLM-x32\...\{9238E8A4-BEBA-43A3-B926-769BDBF194C5}) (Version: 1.2.0.09100 - Sony Corporation)
VAIO Movie Story MergeModules x64 (Version: 1.0.14240 - Sony Corporation) Hidden
VAIO Original Function Settings (x32 Version: 2.0.0.07010 - Sony Corporation) Hidden
VAIO Original Funktion Einstellungen (HKLM-x32\...\{A63E7492-A0BC-4BB9-89A7-352965222380}) (Version: 2.0.0.07010 - Sony Corporation)
VAIO Personalization Manager (HKLM-x32\...\{A95187EF-BCF4-4468-B501-C0BAB976ADD1}) (Version: 2.0.0.06220 - Sony Corporation)
VAIO Personalization Manager (x32 Version: 2.0.0.06220 - Sony Corporation) Hidden
VAIO Premium Partners (HKLM-x32\...\VAIO Premium Partners) (Version: 1.0 - Sony Europe)
VAIO Smart Network (HKLM-x32\...\{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}) (Version: 3.1.0.11250 - Sony Corporation)
VAIO Update (HKLM-x32\...\{9FF95DA2-7DA1-4228-93B7-DED7EC02B6B2}) (Version: 6.1.1.10250 - Sony Corporation)
VAIO Wallpaper Contents (HKLM-x32\...\{D60F97EC-EF06-4E1E-B0D1-C2CBABA62FA3}) (Version: 2.0.0.06010 - Sony Corporation)
VAIO Window Organizer (HKLM-x32\...\{6D320CE8-79EB-4D45-8C6D-DEF74D84B49A}) (Version: 2.0.0.08280 - Sony Corporation)
VAIO-Support für Übertragungen (HKLM-x32\...\{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}) (Version: 1.1.2.06030 - Sony Corporation)
Vegas Movie Studio HD Platinum 10.0 (HKLM-x32\...\{40AE01BE-A290-4FFB-8DAB-C624C17DC87E}) (Version: 10.0.179 - Sony)
Videora iPod Converter 5.04 (HKLM-x32\...\Videora iPod Converter) (Version: 5.04 - Red Kawa)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VU5x64 (Version: 1.1.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.0.0 - Sony Corporation ) Hidden
VU5x86 (x32 Version: 1.1.0 - Sony Corporation ) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{9E9D49A4-1DF4-4138-B7DB-5D87A893088E}) (Version: 6.2.1.500 - Broadcom Corporation)
Windows Driver Package - Broadcom Bluetooth  (09/09/2009 6.2.0.9405) (HKLM\...\930E4792BDAEAFB62A9514EE7578775658A5D07C) (Version: 09/09/2009 6.2.0.9405 - Broadcom)
Windows Driver Package - Broadcom HIDClass  (07/28/2009 6.2.0.9800) (HKLM\...\3BA80AB4C7E9F8497C115C844953A3D4BEB84D21) (Version: 07/28/2009 6.2.0.9800 - Broadcom)
Windows Driver Package - Roche (WinUSB) PHDC  (07/08/2010 1.0.0.1) (HKLM\...\3EFB02FCACC5E5822B28C77FB14D8D696391F5D7) (Version: 07/08/2010 1.0.0.1 - Roche)
Windows Live Call (x32 Version: 14.0.8064.0206 - Microsoft Corporation) Hidden
Windows Live Communications Platform (x32 Version: 14.0.8064.206 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8089.0726 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 14.0.8089.726 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 14.0.8093.805 - Microsoft Corporation) Hidden
Windows Live Fotogalerie (x32 Version: 14.0.8081.709 - Microsoft Corporation) Hidden
Windows Live ID-Anmelde-Assistent (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
Windows Live Mail (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live Sync (HKLM-x32\...\{76618402-179D-4699-A66B-D351C59436BC}) (Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live Writer (x32 Version: 14.0.8089.0726 - Microsoft Corporation) Hidden
Windows Live-Uploadtool (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Windows Media Center Add-in for Silverlight (HKLM-x32\...\{0EDBEB2B-7C8D-42E6-8312-0F84394A3223}) (Version: 4.7.2.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WISO Mein Geld 2010 Professional (HKLM-x32\...\WISO Mein Geld 2010 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2010 Professional (x32 Version: 11.01.00.0045 - Buhl Data Service GmbH) Hidden
WISO Mein Geld 2014 Professional (HKLM-x32\...\WISO Mein Geld 2014 Professional) (Version:  - Buhl Data Service GmbH)
WISO Mein Geld 2014 Professional (x32 Version: 16.0.1.0 - Buhl Data Service GmbH) Hidden
WISO Steuer-Sparbuch 2011 (HKLM-x32\...\{02F0B8AE-7501-4333-AFBE-6BAABFEC7637}) (Version: 18.00.6928 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2013 (HKLM-x32\...\{D6CC2FAF-F827-4091-96A1-D32CC9B69C79}) (Version: 20.08.8317 - Buhl Data Service GmbH)

==================== Restore Points  =========================

31-05-2014 13:10:48 Geplanter Prüfpunkt
02-06-2014 14:50:12 Removed Lexware Elster.
02-06-2014 14:54:09 Installed Lexware Elster.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {02E42E2F-750B-41AD-BD24-378CE004BA31} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe [2014-05-11] (Symantec Corporation)
Task: {0342F8A1-1F8E-470A-8FF3-D556C07041D5} - System32\Tasks\Norton 360\Norton Error Analyzer => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {03A7CA6C-905E-44C1-BE2B-32863A074FCA} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [2012-10-26] (Sony Corporation)
Task: {09227B91-18C7-498F-9B08-89F8C0E5C38C} - System32\Tasks\{F663F6CC-8633-4EB1-9EBB-D35793A6D4DC} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.)
Task: {0E6005BE-874F-4764-90A2-CB9838F3DD29} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {1C535675-D82D-4172-9E6F-DE5BC6538BA9} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {259AF3B4-63E2-4701-8ED3-67CB0B0EC95A} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-3 No Task File <==== ATTENTION
Task: {37B4B864-FEA5-4298-9526-986DDA7AA254} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {3A5ED20D-FA3E-413F-BE2E-8602B23740B2} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: {3FBD3373-8DF2-4E2A-8EA5-7B1BF22C5B28} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {44EA5550-A815-4BE9-B03E-3B2AC395E186} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [2012-10-26] (Sony Corporation)
Task: {547A6082-5E08-4FE3-A7EA-0A7C89226909} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCOneClick.exe [2011-02-16] (Sony Corporation)
Task: {57DB0C18-E080-4D5D-B0B9-69496D969D75} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.)
Task: {6445432C-EB58-463A-B5D2-5C554CFD1C6C} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-4 No Task File <==== ATTENTION
Task: {6BB2F7B3-B0E1-4D1F-91A4-AAA0B8FD63D6} - System32\Tasks\{DBB42591-4FC3-4383-A35B-B65C66E0AE67} => C:\Program Files (x86)\TerraTec\TerraTec Home Cinema\CinergyDvr.exe [2010-06-09] (TerraTec Electronic GmbH)
Task: {6BFA0EEF-66DD-4942-9991-894C67E57604} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2009-12-20] (Google Inc.)
Task: {70473A5C-9235-4DA4-A51B-F2AACB4759E9} - System32\Tasks\Norton 360\Norton Error Processor => C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe [2014-01-30] (Symantec Corporation)
Task: {748B2E4D-61F9-41AE-AAA0-D79AA667095D} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.)
Task: {789F957C-4299-4E3A-B1F2-13EA94263726} - System32\Tasks\Microsoft\Windows\TabletPC\InputPersonalization => C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe [2009-07-14] (Microsoft Corporation)
Task: {82C5E62C-8F05-40C4-9837-31DB3CFE32AA} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-1 No Task File <==== ATTENTION
Task: {85169C0D-79D7-45E7-A88C-CBA5578C6256} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2013-11-20] (Apple Inc.)
Task: {8AD31540-EA7D-4C81-AF82-2F3D8E103064} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {9BF3B828-103A-4AF9-B35C-9838C703B772} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-09-12] (Facebook Inc.)
Task: {9DEEF3DB-6FDB-44D1-887F-2258B057CE14} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2009-11-30] (Sony Corporation)
Task: {9F6E4B62-A3CB-4045-B913-9AD242681A24} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-5 No Task File <==== ATTENTION
Task: {A6478610-2EF4-4C3C-9D3B-1D638E281D0D} - \ShopperProJSUpd No Task File <==== ATTENTION
Task: {AFCAD846-BA49-4690-8D23-AB623017C36C} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-7 No Task File <==== ATTENTION
Task: {B1BC1A11-48D8-49DB-B91B-1FEE13925C2B} - System32\Tasks\SPBIW_UpdateTask_Time_313334363036303935342d3250575723326c6c552a2a45 => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0
Task: {B2C54784-0AC2-45D5-98FE-C4D567DC01B2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-06-04] (Adobe Systems Incorporated)
Task: {C6DCD793-70D4-4905-8AD8-A30A6201AB15} - \ShopperPro No Task File <==== ATTENTION
Task: {CF3A5ABF-555A-4220-A669-C9133467AF91} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2009-09-25] (Sony Corporation)
Task: {CFD9DC64-7BCD-40AA-8892-9D008589A84D} - System32\Tasks\Sun Microsystems-Online-Aktualisierungsprogramm => C:\Program Files\Java\jre6\bin\jusched.exe [2009-12-20] (Sun Microsystems, Inc.)
Task: {D0F3D942-63F4-4999-8F95-D1CAD0CE3C7A} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-2 No Task File <==== ATTENTION
Task: {E2420E96-8924-495B-B686-87DE1E37140B} - \fbe97edd-eb2f-44c5-b8f7-f44c01ece1de-6 No Task File <==== ATTENTION
Task: {EC0371B4-51CC-4E40-8709-E5C3D8C59D0A} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2011-02-16] (Sony Corporation)
Task: {FFD7821B-741F-4880-B7CE-3F3341AE8D0A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001Core.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2674396101-735356166-3434830305-1001UA.job => C:\Users\Catharina\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-06-27 13:06 - 2009-04-13 08:21 - 00045568 _____ () C:\Windows\System32\LXDOPMON.DLL
2010-06-27 13:06 - 2007-05-22 10:07 - 00069632 _____ () C:\Windows\System32\LXDOOEM.DLL
2010-06-27 13:06 - 2009-04-13 09:19 - 00081408 _____ () C:\Program Files (x86)\Lexmark 9500 Series\ipcmt64.dll
2010-05-21 16:17 - 2005-03-12 02:07 - 00087040 _____ () C:\Windows\System32\redmonnt.dll
2013-12-01 23:58 - 2012-01-10 06:15 - 00034304 _____ () C:\Windows\System32\ssy3clm.dll
2010-06-27 12:56 - 2007-07-18 05:45 - 00138240 _____ () C:\Windows\system32\spool\PRTPROCS\x64\lxdodrpp.dll
2013-12-01 23:58 - 2012-03-16 10:29 - 00325120 _____ () C:\Windows\system32\SaMinDrv.dll
2013-06-28 13:08 - 2013-06-28 13:08 - 00091136 _____ () C:\Windows\system32\ssdevm64.dll
2012-03-09 10:58 - 2012-03-09 10:58 - 00462712 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
2012-03-09 10:58 - 2012-03-09 10:58 - 00057208 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2010-06-20 10:16 - 2010-02-10 05:22 - 00025256 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\lxdoamon.exe
2013-06-29 13:47 - 2013-09-06 14:11 - 01397840 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\mshaktuell.exe
2011-11-27 07:08 - 2011-02-25 18:14 - 00297472 _____ () C:\Program Files\Sony\VAIO Care\CRM\ManagedVAIORecoveryMedia.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00192000 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIORecovery.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00070656 _____ () C:\Program Files\Sony\VAIO Care\CRM\Logging.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00063488 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOCommon.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00215040 _____ () C:\Program Files\Sony\VAIO Care\CRM\OsServices.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00043008 _____ () C:\Program Files\Sony\VAIO Care\CRM\PluginFactory.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00260608 _____ () C:\Program Files\Sony\VAIO Care\CRM\RecoveryPartitionManager.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00043520 _____ () C:\Program Files\Sony\VAIO Care\CRM\XMLTools.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00059904 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOInstallAppsDrivers.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00157696 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallDB.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00138752 _____ () C:\Program Files\Sony\VAIO Care\CRM\InstallationTools.dll
2011-11-27 07:08 - 2011-02-25 18:14 - 00025600 _____ () C:\Program Files\Sony\VAIO Care\CRM\VAIOUtility.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-02-12 21:58 - 2014-02-12 21:58 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2009-12-20 05:23 - 2009-11-30 20:20 - 00010752 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESBasePS.dll
2009-12-20 05:23 - 2009-11-30 20:20 - 00009728 _____ () C:\Program Files (x86)\Sony\VAIO Event Service\VESMgrSubPS.dll
2013-09-14 01:51 - 2013-09-14 01:51 - 00087952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 01:50 - 2013-09-14 01:50 - 01242952 _____ () C:\Program Files (x86)\Common Files\Apple\Internet Services\libxml2.dll
2010-06-20 10:16 - 2010-02-09 07:41 - 00028672 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Common.dll
2010-06-20 10:16 - 2010-02-09 07:41 - 00036864 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.Monitor.Core.dll
2010-06-20 10:16 - 2010-02-09 07:40 - 00057344 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\app4r.devmons.mcmdevmon.dll
2010-06-20 10:16 - 2008-06-06 06:45 - 00011776 _____ () C:\Program Files (x86) (x86)\Lexmark 9500 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
2013-09-26 13:20 - 2013-09-26 13:20 - 00176168 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Logging.Targets.Etw.dll
2013-09-26 13:20 - 2013-09-26 13:20 - 00043048 _____ () C:\Program Files (x86)\Lexware\Update Manager\Haufe.Core.Diagnostics.Etw.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 08929360 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wgui13.dll
2013-06-29 13:43 - 2013-09-06 14:11 - 00028672 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsdcom48.dll
2013-06-29 13:43 - 2013-09-06 14:10 - 00308816 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rscorewinapi48.dll
2013-06-29 13:43 - 2013-09-06 14:10 - 00321104 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsguiwinapi48.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 03464784 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wcore13.dll
2013-06-29 13:43 - 2013-09-06 14:11 - 00136272 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\rsodbc48.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 02196048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfvie13.dll
2013-06-29 13:42 - 2013-09-06 14:10 - 01610320 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wsteu13.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 01732176 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wreli13.dll
2013-06-29 13:42 - 2013-09-04 23:48 - 04157520 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wauff13.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 01041408 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-core.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 00094208 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-shared.dll
2013-06-29 13:42 - 2013-06-18 08:54 - 00251392 ____N () C:\Program Files (x86)\WISO\Steuersoftware 2013\clucene-contribs-lib.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01499728 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wmain13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 04967504 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae113.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01368656 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae213.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01748048 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae313.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01577552 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wbae413.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01146960 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau113.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01229904 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\whau213.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01307216 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wwerb13.dll
2013-06-29 13:42 - 2013-09-06 14:12 - 06773328 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wkont13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01249792 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wimp13.dll
2013-06-29 13:42 - 2013-09-06 14:11 - 01314384 _____ () C:\Program Files (x86)\WISO\Steuersoftware 2013\wfabu13.dll
2014-06-06 20:50 - 2014-06-06 20:51 - 00043008 _____ () C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll
2013-08-23 21:01 - 2013-08-23 21:01 - 25100288 _____ () C:\Users\Catharina\AppData\Roaming\Dropbox\bin\libcef.dll
2013-12-22 21:37 - 2014-06-06 20:56 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-14 13:23 - 2014-06-04 17:58 - 16361136 _____ () C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcmscsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"

==================== EXE Association (whitelisted) =============


==================== Disabled items from MSCONFIG ==============

MSCONFIG\startupreg: MarketingTools => C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe

==================== Faulty Device Manager Devices =============

Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================
Error: (06/04/2010 11:27:40 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.

Error: (05/17/2010 09:21:20 AM) (Source: Microsoft Office 12 Sessions) (EventID: 7001) (User: )
Description: ID: 0, Application Name: Microsoft Office Word, Application Version: 12.0.6514.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 4 seconds with 0 seconds of active time.  This session ended with a crash.


==================== Memory info =========================== 

Percentage of memory in use: 56%
Total physical RAM: 4031.18 MB
Available physical RAM: 1768.51 MB
Total Pagefile: 8060.54 MB
Available Pagefile: 5584.95 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:921.47 GB) (Free:117.63 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: C95B288F)
Partition 1: (Not Active) - (Size=10 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=921 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         

Alt 07.06.2014, 11:39   #8
Machiavelli
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Schritt 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
BHO: No Name - {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - No Name - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} -  No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
2014-06-06 20:48 - 2014-06-06 20:48 - 00000000 ____D () C:\ProgramData\ShopperPro
C:\ProgramData\hash.dat
C:\Users\Catharina\fbchathistory.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE1.dat
C:\Users\Catharina\jagex_cl_runescape_LIVE2.dat
C:\Users\Catharina\jagex_runescape_preferences.dat
C:\Users\Catharina\jagex_runescape_preferences2.dat
C:\Users\Catharina\AppData\Local\Temp\cabex.dll
C:\Users\Catharina\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpefvrwf.dll
C:\Users\Catharina\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Catharina\AppData\Local\Temp\PartnerInstallerYTAi.exe
C:\Users\Catharina\AppData\Local\Temp\Quarantine.exe
C:\Users\Catharina\AppData\Local\Temp\tu17p84.exe
C:\Users\Catharina\AppData\Local\Temp\unelevate.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt 2: FRST Scan



Bitte starte FRST erneut, setze den Haken auch bei Addition.txt und drücke auf Scan.

Schritt 3: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 4: Frage

Wie läuft Dein PC?
__________________
Proud member of Unite

Alt 12.06.2014, 19:41   #9
Machiavelli
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Noch da?
__________________
Proud member of Unite

Alt 15.06.2014, 19:52   #10
Machiavelli
 
Install_11968\sense.exe Windows 7 x64 - Standard

Install_11968\sense.exe Windows 7 x64



Durch Mangel von Rückmeldung streiche ich dieses Thema aus meiner Watchliste. Falls Du weiter Hilfe benötigst, schick mir einfach eine private Nachricht.
__________________
Proud member of Unite

Antwort

Themen zu Install_11968\sense.exe Windows 7 x64
beginnt, bleibt stecken, eingefangen, erfolgreich, fenster, gebannt, gefangen, gen, install, installier, installiert, kurzer, melde, meldet, nicht installiert, schei, sense.exe, stecken, virus/trojaner, windows, windows 7, windows 7 x64, öffnet




Zum Thema Install_11968\sense.exe Windows 7 x64 - hallo ich scheine mir einen Virus/Trojaner eingefangen zu haben. PC bleibt stecken und ist sehr langsam. Regelmäßig öffnet sich ein Fenster, dass sense.exe nicht installiert werden konnte. norton meldet sich - Install_11968\sense.exe Windows 7 x64...
Archiv
Du betrachtest: Install_11968\sense.exe Windows 7 x64 auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.