Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: "Avira wird durch eine Gruppenrichtlinie blockiert"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 26.06.2014, 00:57   #16
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Mach bitte trotzdem mit den anderen Schritten weiter...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 26.06.2014, 01:39   #17
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Code:
ATTFilter
# AdwCleaner v3.213 - Bericht erstellt am 26/06/2014 um 00:58:09
# Aktualisiert 23/06/2014 von Xplode
# Betriebssystem : Windows 7 Ultimate Service Pack 1 (32 bits)
# Benutzername : admin - ADMIN-PC
# Gestartet von : C:\Users\admin\Downloads\adwcleaner_3.213.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (de)

[ Datei : C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [46064 octets] - [26/06/2014 00:30:27]
AdwCleaner[R1].txt - [1167 octets] - [26/06/2014 00:56:43]
AdwCleaner[S0].txt - [45808 octets] - [26/06/2014 00:31:15]
AdwCleaner[S1].txt - [1089 octets] - [26/06/2014 00:58:09]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1149 octets] ##########
         
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlauf Datum: 26.06.2014
Suchlauf-Zeit: 01:02:58
Logdatei: 
Administrator: Ja

Version: 2.00.2.1012
Malware Datenbank: v2014.06.25.18
Rootkit Datenbank: v2014.06.23.02
Lizenz: Kostenlos
Malware Schutz: Deaktiviert
Bösartiger Webseiten Schutz: Deaktiviert
Self-protection: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x86
Dateisystem: NTFS
Benutzer: admin

Suchlauf-Art: Bedrohungs-Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 267150
Verstrichene Zeit: 15 Min, 44 Sek

Speicher: Aktiviert
Autostart: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristics: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registrierungsschlüssel: 1
PUP.Optional.SupTab.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}, In Quarantäne, [12d8fe7d700b171f9568dc6d887abc44], 

Registrierungswerte: 1
Trojan.Ransom.Gen, HKU\S-1-5-21-2742928999-3257237434-1072491205-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|EwpiSvono, regsvr32.exe "C:\ProgramData\EwpiSvono\EwpiSvono.dat", Löschen bei Neustart, [5d8d9edde5960a2c8a36f3110bf98c74]

Registrierungsdaten: 0
(No malicious items detected)

Ordner: 0
(No malicious items detected)

Dateien: 5
PUP.Optional.Somoto.A, C:\Users\admin\Downloads\7ZipSetup.exe, In Quarantäne, [d8121665146755e1998581b7817feb15], 
PUP.Optional.Koyote.A, C:\Users\admin\Downloads\FreeVideoConverterSetup-r135-n-bf.exe, In Quarantäne, [e70326552b506cca4eb47dc8bc45837d], 
PUP.Optional.DomaIQ, C:\Users\admin\Downloads\Player_Setup.exe, In Quarantäne, [5d8dc4b78af11026572bc57d4eb2e51b], 
PUP.Optional.NewTab.A, C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bakijjialdiiboeaknfpmflphhmljfkd_0.localstorage, In Quarantäne, [d812eb90a1da41f5b122eb17eb191fe1], 
Trojan.Ransom.Gen, C:\ProgramData\EwpiSvono\EwpiSvono.dat, In Quarantäne, [5d8d9edde5960a2c8a36f3110bf98c74], 

Physische Sektoren: 0
(No malicious items detected)


(end)
         
Code:
ATTFilter
Code:
ATTFilter
HitmanPro 3.7.9.219
www.hitmanpro.com

   Computer name . . . . : ADMIN-PC
   Windows . . . . . . . : 6.1.1.7601.X86/4
   User name . . . . . . : admin-PC\admin
   UAC . . . . . . . . . : Disabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2014-06-26 01:28:48
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 4m 28s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 403

   Objects scanned . . . : 1.461.227
   Files scanned . . . . : 28.474
   Remnants scanned  . . : 494.078 files / 938.675 keys

Suspicious files ____________________________________________________________

   C:\Users\admin\Downloads\FRST.exe
      Size . . . . . . . : 1.073.152 bytes
      Age  . . . . . . . : 0.1 days (2014-06-25 23:18:07)
      Entropy  . . . . . : 8.0
      SHA-256  . . . . . : 4719D377C2C6FA3E8D8944E877997E664508FFF75BE40A84A57E221B7D5F832D
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\admin\Downloads\FRST.exe
         23.8s C:\FRST\Logs\
         23.8s C:\FRST\
         23.8s C:\FRST\Hives\
         23.8s C:\FRST\Quarantine\
         24.2s C:\FRST\Hives\ERDNT.INF
         24.2s C:\FRST\Hives\ERDNT.CON
         24.2s C:\FRST\Hives\BCD
         24.2s C:\FRST\Hives\system
         24.5s C:\FRST\Hives\software
         25.4s C:\FRST\Hives\default
         25.4s C:\FRST\Hives\security
         25.4s C:\FRST\Hives\sam
         25.5s C:\FRST\Hives\Users\
         25.5s C:\FRST\Hives\Users\00000001\
         25.5s C:\FRST\Hives\Users\00000001\ntuser.dat
         25.6s C:\FRST\Hives\Users\00000002\
         25.6s C:\FRST\Hives\Users\00000002\UsrClass.dat
         25.6s C:\FRST\Hives\Users\00000002\UsrClass.dat
         25.7s C:\FRST\Hives\ERDNT.EXE
         25.7s C:\FRST\Hives\ERDNT.EXE
         25.7s C:\FRST\Hives\ERDNTWIN.LOC
         25.7s C:\FRST\Hives\ERDNTDOS.LOC
         25.7s C:\FRST\Hives\ERDNTDOS.LOC
         25.7s C:\FRST\Hives\ERDNTDOS.LOC
         26.9s C:\Users\admin\Downloads\FRST.txt

   C:\Windows\system32\GameMon.des
      Size . . . . . . . : 3.975.544 bytes
      Age  . . . . . . . : 300.5 days (2013-08-29 12:39:04)
      Entropy  . . . . . : 7.9
      SHA-256  . . . . . : 750001935A5C5541C47A5F5C7A57228CB663DFA35A4E50BD7D368F36A732660C
      Product  . . . . . : nProtect Game Monitor
      Publisher  . . . . : INCA Internet Co., Ltd.
      Description  . . . : nProtect Game Monitor Rev 1865
      Version  . . . . . : 2012.5.3.1
      Service  . . . . . : npggsvc
      LanguageID . . . . : 1042
      Fuzzy  . . . . . . : 36.0
         The file name extension of this program is not common.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Starts automatically as a service during system bootup.
         The file is located in a folder that contains core operating system files from Windows. This is not typical for most programs and is only common to system tools, drivers and hacking utilities.
      Startup
         HKLM\SYSTEM\CurrentControlSet\Services\npggsvc\


Potential Unwanted Programs _________________________________________________

   C:\Program Files\AskPartnerNetwork\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe (AskBar)
      Size . . . . . . . : 166.352 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:47)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : C3081358313A982F53CAD54C214AFECAD9660A59FB4A3DDFE068724E83041AF8
      Product  . . . . . : APN Updater
      Publisher  . . . . : APN LLC.
      Description  . . . : APN Updater
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      Service  . . . . . : APNMCP
      LanguageID . . . . : 1033
      Fuzzy  . . . . . . : -9.0
      Startup
         HKLM\SYSTEM\CurrentControlSet\Services\APNMCP\

   C:\Program Files\AskPartnerNetwork\Toolbar\APNSetup.exe (AskBar)
      Size . . . . . . . : 489.392 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : C17717A1D8DF84341DE4C98611F5B9B059B4819BCECA15E1A1B7B882A34F3354
      Product  . . . . . : Stub Installer
      Publisher  . . . . : Ask Partner Network
      Description  . . . : Stub Installer
      Version  . . . . . : 7.2.1.1
      Copyright  . . . . : Copyright © 2013 Ask Partner Network.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (AskBar)
      Size . . . . . . . : 12.240 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:25)
      Entropy  . . . . . : 6.2
      SHA-256  . . . . . : 26DD353E636B8ABE2739CEB97A04220F1964E8951C93386D5CFAACE823874898
      Product  . . . . . : Passport
      Publisher  . . . . : APN LLC.
      Description  . . . : Passport
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0
      Startup
         HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41564952-412D-5637-00A7-7A786E7484D7}
         HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7}\
      References
         HKLM\SOFTWARE\Classes\CLSID\{41564952-412D-5637-00A7-7A786E7484D7}\
         HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-00A7-7A786E7484D7}\

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1031.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1033.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1034.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1036.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1040.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1041.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1043.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1045.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\1049.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\2070.mst (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\appdata\Mozilla\Firefox\Profiles\{DefaultProfilesFolder}\extensions\toolbar_AVIRA-V7@apn.ask.com.xpi (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.10.0_AVIRA-V7.msi (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.10.3_AVIRA-V7.msi (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.2.2_AVIRA-V7.msi (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\AskToolbarInstaller-12.6.0_AVIRA-V7.msi (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\ToolbarCR.crx (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\Update.xml (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\common appdata\AskPartnerNetwork\Toolbar\{PartnerID}\CRX\{Crx_Version}\Toolbar.crx (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\apnmcp.exe (AskBar)
      Size . . . . . . . : 166.352 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : C3081358313A982F53CAD54C214AFECAD9660A59FB4A3DDFE068724E83041AF8
      Product  . . . . . : APN Updater
      Publisher  . . . . : APN LLC.
      Description  . . . : APN Updater
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\searchhook.dll (AskBar)
      Size . . . . . . . : 74.704 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : E1853B5640881511544A9B6C9F2227BD639B279B281A8612746BE07040E3B013
      Product  . . . . . : Search Hook
      Publisher  . . . . : APN LLC.
      Description  . . . : Search Hook
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (AskBar)
      Size . . . . . . . : 115.664 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : 4B919C48DD074B802488864BB266E2B1D980A1E73C3FFAE36FEE79874E884FDC
      Product  . . . . . : Service Locator
      Publisher  . . . . : APN LLC.
      Description  . . . : Service Locator
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\SO.dll (AskBar)
      Size . . . . . . . : 428.496 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.5
      SHA-256  . . . . . : 9D34E70B5CA1DE2D4FDD8DD0AB5987A60EC620D2DFEDE7F89443FFFFDBF6A60A
      Product  . . . . . : Object Model
      Publisher  . . . . : APN LLC.
      Description  . . . : Object Model
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar.dll (AskBar)
      Size . . . . . . . : 204.752 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : C7BC280CA198B10252BBE8EB1DB0A78AB8CB5DC7C6BAD1497690D141221CFBE0
      Product  . . . . . : Toolbar
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Toolbar.exe (AskBar)
      Size . . . . . . . : 366.032 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 5.7
      SHA-256  . . . . . : BE6CA90E00B1F2D7C8A9D86D8FC9AB92F124D1D59D0A94F3BEA8552D15DDDD9A
      Product  . . . . . : Toolbar Core
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar Core
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\toolbar_x64.dll (AskBar)
      Size . . . . . . . : 249.808 bytes
      Age  . . . . . . . : 244.5 days (2013-10-24 12:32:22)
      Entropy  . . . . . : 6.1
      SHA-256  . . . . . : B971FFE3A9662BEACF7B4DC2B397A8C674C75F22115AE85DD850FBB73A35BCB1
      Product  . . . . . : Toolbar
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\ToolbarPS.dll (AskBar)
      Size . . . . . . . : 45.520 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.1
      SHA-256  . . . . . : 137538E3C6CD7044B24B9A2428DD5E0B3949CAD6808E1CDC4E6A24AECE8265B2
      Product  . . . . . : Toolbar PS
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar PS
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\UpdateManager.exe (AskBar)
      Size . . . . . . . : 114.128 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : DCB7FE544B967787BB1515F9CD344688B9234D188BC50DAE5C966BBD9D5E8836
      Product  . . . . . : Update Manager
      Publisher  . . . . : APN LLC.
      Description  . . . : Update Manager
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (AskBar)
      Size . . . . . . . : 1.758.160 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : 5C557182618218B2A66408BA89438E154B3236D0F0EED2D64C3CD65C68129700
      Product  . . . . . : Ask TBNotifier
      Publisher  . . . . : APN
      Description  . . . : Ask Toolbar Notifier
      Version  . . . . . : 31.6.3.286
      Copyright  . . . . : (c) Ask.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\Updater\{PartnerID}\config.xml (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport.dll (AskBar)
      Size . . . . . . . : 12.240 bytes
      Age  . . . . . . . : 305.5 days (2013-08-24 12:17:33)
      Entropy  . . . . . : 6.2
      SHA-256  . . . . . : 26DD353E636B8ABE2739CEB97A04220F1964E8951C93386D5CFAACE823874898
      Product  . . . . . : Passport
      Publisher  . . . . : APN LLC.
      Description  . . . : Passport
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\AskPartnerNetwork\Toolbar\{PartnerID}\Passport_x64.dll (AskBar)
      Size . . . . . . . : 13.776 bytes
      Age  . . . . . . . : 244.5 days (2013-10-24 12:32:22)
      Entropy  . . . . . : 6.0
      SHA-256  . . . . . : 5C86C854487467F74A8A86C9F268EF8898AAA1B48D43026CECD49740CD3D4CCD
      Product  . . . . . : Passport
      Publisher  . . . . : APN LLC.
      Description  . . . : Passport
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\content.zip (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\vntldr.exe (AskBar)
      Size . . . . . . . : 195.536 bytes
      Age  . . . . . . . : 187.1 days (2013-12-20 23:09:45)
      Entropy  . . . . . : 6.2
      SHA-256  . . . . . : FA80FC08B390340C6056748D58ACDDD0A949F3D9218A9282B67F7CA9EADC36D5
      Product  . . . . . : Virtual New Tab
      Publisher  . . . . : APN LLC.
      Description  . . . : Virtual New Tab Loader
      Version  . . . . . : 1.2.0.3294
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -15.0

   C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Source\program files\VNT\vntsrv.dll (AskBar)
      Size . . . . . . . : 92.672 bytes
      Age  . . . . . . . : 187.1 days (2013-12-20 23:09:45)
      Entropy  . . . . . : 6.2
      SHA-256  . . . . . : 1A545675F7C8937A31CB3F7512E253660E3ADA637160E549F21595F7A0893B97
      Product  . . . . . : Virtual New Tab
      Publisher  . . . . : APN LLC.
      Description  . . . : Virtual New Tab Server
      Version  . . . . . : 1.2.0.3294
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      LanguageID . . . . : 1033
      Fuzzy  . . . . . . : -8.0

   C:\Program Files\AskPartnerNetwork\Toolbar\searchhook.dll (AskBar)
      Size . . . . . . . : 74.704 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:25)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : E1853B5640881511544A9B6C9F2227BD639B279B281A8612746BE07040E3B013
      Product  . . . . . : Search Hook
      Publisher  . . . . : APN LLC.
      Description  . . . : Search Hook
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\ServiceLocator.exe (AskBar)
      Size . . . . . . . : 115.664 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:25)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : 4B919C48DD074B802488864BB266E2B1D980A1E73C3FFAE36FEE79874E884FDC
      Product  . . . . . : Service Locator
      Publisher  . . . . : APN LLC.
      Description  . . . : Service Locator
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\SO.dll (AskBar)
      Size . . . . . . . : 428.496 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:47)
      Entropy  . . . . . : 6.5
      SHA-256  . . . . . : 9D34E70B5CA1DE2D4FDD8DD0AB5987A60EC620D2DFEDE7F89443FFFFDBF6A60A
      Product  . . . . . : Object Model
      Publisher  . . . . : APN LLC.
      Description  . . . : Object Model
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\toolbar.dll (AskBar)
      Size . . . . . . . : 204.752 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:47)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : C7BC280CA198B10252BBE8EB1DB0A78AB8CB5DC7C6BAD1497690D141221CFBE0
      Product  . . . . . : Toolbar
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\Toolbar.exe (AskBar)
      Size . . . . . . . : 366.032 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:25)
      Entropy  . . . . . : 5.7
      SHA-256  . . . . . : BE6CA90E00B1F2D7C8A9D86D8FC9AB92F124D1D59D0A94F3BEA8552D15DDDD9A
      Product  . . . . . : Toolbar Core
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar Core
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\ToolbarPS.dll (AskBar)
      Size . . . . . . . : 45.520 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:25)
      Entropy  . . . . . : 6.1
      SHA-256  . . . . . : 137538E3C6CD7044B24B9A2428DD5E0B3949CAD6808E1CDC4E6A24AECE8265B2
      Product  . . . . . : Toolbar PS
      Publisher  . . . . : APN LLC.
      Description  . . . : Toolbar PS
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      RSA Key Size . . . : 2048
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -19.0

   C:\Program Files\AskPartnerNetwork\Toolbar\UpdateManager.exe (AskBar)
      Size . . . . . . . : 114.128 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:47)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : DCB7FE544B967787BB1515F9CD344688B9234D188BC50DAE5C966BBD9D5E8836
      Product  . . . . . : Update Manager
      Publisher  . . . . : APN LLC.
      Description  . . . : Update Manager
      Version  . . . . . : 21.5.0.2560
      Copyright  . . . . : (c) APN LLC.  All rights reserved.
      LanguageID . . . . : 1033
      Fuzzy  . . . . . . : -12.0

   C:\Program Files\AskPartnerNetwork\Toolbar\Updater\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\Updater\ask-search.xml (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\Updater\AVIRA-V7\ (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\Updater\AVIRA-V7\config.xml (AskBar)
   C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (AskBar)
      Size . . . . . . . : 1.758.160 bytes
      Age  . . . . . . . : 132.8 days (2014-02-13 07:22:26)
      Entropy  . . . . . : 6.4
      SHA-256  . . . . . : 5C557182618218B2A66408BA89438E154B3236D0F0EED2D64C3CD65C68129700
      Product  . . . . . : Ask TBNotifier
      Publisher  . . . . : APN
      Description  . . . : Ask Toolbar Notifier
      Version  . . . . . : 31.6.3.286
      Copyright  . . . . : (c) Ask.  All rights reserved.
      LanguageID . . . . : 1033
      Fuzzy  . . . . . . : -12.0

   C:\ProgramData\APN\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\32.10\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\32.10\Toolbar.crx (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.1.0.0-3.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.4.1.0-3.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.4.1.0-4.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.6.0.0-4.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Config\Config.31.6.3.0-4.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\ (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\Response.31.6.3.0-62.xml (AskBar)
   C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\Updater\Response\Response.31.6.3.0-63.xml (AskBar)
   HKLM\SOFTWARE\AskPartnerNetwork\ (AskBar)
   HKLM\SOFTWARE\Classes\CLSID\{44CBC005-6243-4502-8A02-3A096A282664}\ (AskBar)
   HKLM\SOFTWARE\Classes\CLSID\{80703783-E415-4EE3-AB60-D36981C5A6F1}\ (AskBar)
   HKLM\SOFTWARE\Classes\CLSID\{D8278076-BC68-4484-9233-6E7F1628B56C}\ (AskBar)
   HKLM\SOFTWARE\Classes\CLSID\{F297534D-7B06-459D-BC19-2DD8EF69297B}\ (AskBar)
   HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\7AB5857A57A0687786597A857BFFFFFF\ (AskBar)
   HKLM\SOFTWARE\Classes\Interface\{80703783-E415-4EE3-AB60-D36981C5A6F1}\ (AskBar)
   HKLM\SOFTWARE\Classes\Interface\{BD125908-5F10-409F-9C01-F2207CA18887}\ (AskBar)
   HKLM\SOFTWARE\Classes\TypeLib\{9945959C-AAD8-4312-8B57-2DE11927E770}\ (AskBar)
   HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6978F29A-3493-40B2-8CDC-9C13A02F85A4}\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D7949A66-D936-4028-9552-14F7DC50F38D}\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06B42F08F6F40FA4F83EA94EF9F03F63\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\06FCEE940712E4B4C8A7362CD8D249A1\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\085CE460BADC1D14EA94D8A62E517577\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0B2690283E07C9B4085B3B794202E7F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12D3738E79C70C74E9D808E162BD6691\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\158D6D9E3FE81fa428925F22ACB3A965\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\15E6C514FEFC09f45BAFAAE1D7546ED4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\189F6D048E923EA48B11D15B30CDAC81\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DB42320A8525634AA089F0BEC86473B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F0968491626AD249A2A6CBAC4DE352D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22468B0D6050b2e46B9C4B67A8F59577\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2251BF05A2F606d43BB064BD63CBD87E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22A78C977EC431247B2ECECC374DFE13\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2CAC1D959B4188B4F8E8C251A25DA9DB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3255D95681398614190EDF0A4F3F77DB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\33990057697C62f47BB9FFD59CB4AEEB\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CDF313E9B28c944FBC7579CF4949414\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\41BF64DDE5C2457478691CB0675759BA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\42F5B13BF4BAD8D409578286A354E360\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4374E71C5355C4B4AACC93BBBF40E99F\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4410C9B6FF0094C418865CD2B243B258\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45B0A4620F799834C82DE0BD4E90E40B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4859A93046C917F408248F3C16F75E77\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A3D29BA507550f4F87F6F33D42B24D6\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4E28C30B25E21BF4C9418857AEB2AF7C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50390A9E27AD04A4698BF297EF564973\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D5D3B13CCBA08C479F107E50BD81C8A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\65655A3C1C3738748BE6470495D534FC\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\661134B612233374391C95E8AC373BA3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71E54748EDD3dc1468548785DC856EDA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\734F787B99D52824EAB6CA1A89F801F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\73A172B6C18A3594A9FA363311A187A3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\754590DD06DE8d249B526503432F99D4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A0CF0C6A9F9B8642A392A1896DCCCF2\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7CE43E6BAE0DC0B43883C669D8DCE8B1\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7D7860B78D7B6F64887AFCB83061837A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7EC46CC5C43127A45A99762BF7A9C9E5\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FFDE7BEC9977ac46B41B0A2BF7D88CD\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8011A895DAAC4CC45AF1397E3CE9CA16\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8036C72171EF4ba46856BF57969F6A36\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81EE804DA9066C64A859E01A38075C59\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\879DDA62492E58A40898AD146BBB572E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\88761D7BAC02ccc428CD5EF352BB933C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\89BB7852687BDC34B9A81E01C7FF9173\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CB53AD495D2C5443B95C9EE29E47902\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CBC85D72B148084ABE8C2F072F781F4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CC5A38A64D6098468BC8395BA0EFF03\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8DF9A1AC557F56c49B56F6B83E293C15\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F85A4D374D5bf245B8722C062C2D00E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9516FC331A505934FA76C22DCFFEC47E\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98B242210207F2D48AF879D69C381D08\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A08449608E3Ca1f4ABF236256A256754\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A431C8F3F57D7844B89242F5F7A5F62C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A66E2D84F93A9E94FBA6AB3524D85958\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A97C590397DCC454AA8923563BAB10E4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AA27FE018F87f5e4F97F31C09E7C5370\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC049320EE27170499EC0B6124142ED7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B448F401EF39C8346BF7BE9B8D1C7060\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5211271DD585A740AA28576B137D09D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B58469E2C54833741B90BAD9CE5A1159\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6DA77032731EEE40B463A325128D613\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCC2BCA248E19F74F9AEDE4D1EFEFBC9\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6A54B56C58C82a4688AFB93F42EA17B\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C70C6F53DEE245249956FC291D801A71\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7C0052DD04CBC84C81C0AC586485E50\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C879DCC3D00BE8E4282F02F1735E78DF\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C9FBD8E8A2691564FA012512BCC3748C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB3AEBFFA9E907145906294AB669B1F2\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE142BFA81B72674892EB318BD603CB0\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CE90A73A5D5A01a43A2EDCCF04BA9487\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CFA51B44D54927c4E9B7BC1D3FD1E49F\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D03E28F842DF79F4DA05A3B6B86B095C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D05B2B3F5629f9d41A7E57FB534168CA\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D14A7F65792054F418578C78367D13F7\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D158B0E5D051EA046B8E08BF6B004842\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D45A81F48EF19334EABB33FF8871C4F5\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D538E650623CB2C43AD5FBF587227D55\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D8D06C15BF8AFCD449EFF90B935AEF7C\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DB1AE396B3BBfe940922C55C6EEF740A\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDF3C3F412F4F954F9F2723C62C65C25\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDF89DEE0C7E9A5448382117C4436818\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DFE9F0BD163D827438CB6AD6B100EC48\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E55AA93871A0fde4490A708053AC6501\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E954A03F45EC92B419A55A0D4815C0A3\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E97C12D46BF588241856422D760336B4\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA1332016439DD54C840C7D45CFB2705\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EFBB6B0872B0DBB4D912A0F52986399D\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F739A19A8327dc64C9A8B641A9E89646\ (AskBar)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (Iminent)
   HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (Iminent)
   HKLM\SYSTEM\ControlSet001\services\APNMCP\ (AskBar)
   HKLM\SYSTEM\ControlSet001\services\eventlog\Application\Wpm\ (FTDownloader)
   HKLM\SYSTEM\ControlSet002\services\APNMCP\ (AskBar)
   HKLM\SYSTEM\ControlSet002\services\eventlog\Application\Wpm\ (FTDownloader)
   HKLM\SYSTEM\CurrentControlSet\services\APNMCP\ (AskBar)
   HKLM\SYSTEM\CurrentControlSet\services\eventlog\Application\Wpm\ (FTDownloader)
   HKU\.DEFAULT\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
   HKU\.DEFAULT\Software\AskPartnerNetwork\ (AskBar)
   HKU\S-1-5-18\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\ (FLV Player)
   HKU\S-1-5-18\Software\AskPartnerNetwork\ (AskBar)
   HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\Software\AskPartnerNetwork\ (AskBar)
   HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E7DFEC4F-1E56-43FC-879E-21F642BE1D8A}\ (Conduit)

Cookies _____________________________________________________________________

   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.360yield.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.ad-srv.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.biz
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.adnet.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.auditude.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.dyntracker.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.movad.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.propellerads.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ad.zanox.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.ad4game.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adk2.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adnet.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.adplxmd.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.brandwire.tv
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.creative-serving.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.escinteractive.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.p161.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.pubmatic.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.stickyadstv.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.undertone.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.visionads.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ads.yahoo.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtech.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:adtechus.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:advertising.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:apmebf.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:at.atwola.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:atdmt.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:burstnet.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:c.atdmt.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:casalemedia.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:doubleclick.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:eas.apm.emediate.eu
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ero-advertising.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:exoclick.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:fastclick.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:h.atdmt.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:invitemedia.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:media6degrees.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:mediaplex.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:revsci.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:ru4.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:serving-sys.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:smartadserver.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:statcounter.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adcocktail.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:track.adform.net
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:tradedoubler.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:tribalfusion.com
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:www.etracker.de
   C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Cookies:xiti.com
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\044XISL6.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\0KIVSHPM.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\0TM9BAQY.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\142S3JIV.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\2OEV5NBZ.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\3E77CD1P.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\3SHSZ7D8.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\41ILTE8G.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\4OQCJMMW.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\4OSZP0H9.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\6MS75D7O.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\6YGVBD3K.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\95SGKL2Y.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\97312X5H.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\A32ISDRB.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\A6FE57HA.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@revsci[1].txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\AU7B3YML.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\BS3PEAIW.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\E879FF72.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\FLUZBXDH.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\FZPTDADZ.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\HZ6C55YP.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\I9091CQV.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\KFXBPB90.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\KVPYRDZ5.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\NP6HKQ46.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\NXZL2PSA.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PC01NG8B.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PFUPDZ4T.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PFZAUIVG.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\PGLT0K74.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\QH7OPS1K.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RNZT1AXG.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RPWXXAGI.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\RS6HIV5V.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\SDS190NE.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\SX7GFR00.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\TCM03PCQ.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\URLUQYLB.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\W1SLUIR3.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\WISO3VFL.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\WV5RN6JD.txt
   C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\Y53353UD.txt
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:247realmedia.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad-emea.doubleclick.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.360yield.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.ad-srv.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adc-serv.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adnet.biz
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adnet.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.adserver01.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.afy11.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.auditude.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.doubleclick.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.dyntracker.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.dyntracker.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.movad.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.reklamport.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.wingads.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.yieldmanager.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.yieldpartners.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ad.zanox.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.ad4game.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adjet.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adk2.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adnet.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adplxmd.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.adsrig.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.creative-serving.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.dmolmn.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.escinteractive.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.glispa.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.gltrkk.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.lzjl.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.mediade.sk
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.p161.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.pointroll.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.pubmatic.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.smartstream.tv
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.stickyadstv.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.tunein.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ads.yahoo.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.adtech.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.hatcolorsoft.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserver.wz-media.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adserving.unibet.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adservnow.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adtech.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:adtechus.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:advertising.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:aok.122.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:at.atwola.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:atdmt.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:audible.112.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:bs.serving-sys.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:burstnet.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:casalemedia.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:chitika.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:collective-media.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:content.yieldmanager.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:de.sitestat.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:doubleclick.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:eas.apm.emediate.eu
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:emjcd.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:engine.pgmediaserve.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ero-advertising.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:exoclick.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:fastclick.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:googleadservices.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ikea.122.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:img-cdn.mediaplex.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:img.mediaplex.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:in.getclicky.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:interclick.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:livejasmin.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:media6degrees.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:mediaplex.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:mm.chitika.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:msnportal.112.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:myroitracking.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:partypoker.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:pornme.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:premiumtv.122.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:questionmarket.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:revsci.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ru4.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:secure.img-cdn.mediaplex.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:server.cpmstar.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:serving-sys.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:sexad.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:smartadserver.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:specificclick.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:stat.dealtime.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:statcounter.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:statse.webtrendslive.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:stepstone.112.2o7.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.adform.net
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.effiliation.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.mdsmatch.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.tnm.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:track.webtrekk.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:tradedoubler.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:tribalfusion.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:uk.at.atwola.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:weborama.fr
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:ww251.smartadserver.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:www.etracker.de
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:www.googleadservices.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:xiti.com
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:yadro.ru
   C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\cookies.sqlite:zedo.com
         
sooo...hoffe hab alles richtig gemacht
__________________


Alt 26.06.2014, 01:39   #18
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Hi, wurde der PC nach dem Suchlauf von MBAM schon neu gestartet? Wenn nicht, bitte neu starten. Anschließend

Schritt 1



Bitte starte FRST erneut, und drücke auf Scan.
Bitte poste mir den Inhalt des Logs.
__________________
__________________

Alt 26.06.2014, 01:46   #19
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"




FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:25-06-2014
Ran by admin (administrator) on ADMIN-PC on 26-06-2014 01:44:33
Running from C:\Users\admin\Downloads
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(VIA) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(Logitech Inc.) C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
(Sony) C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
() C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
() C:\Program Files\Common Files\logishrd\LQCVFX\COCIManager.exe
() C:\Program Files\Sony\Sony PC Companion\PCCompanionInfo.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HDAudDeck] => C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe [1706096 2010-10-27] (VIA)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-02-14] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LWS] => C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe [205336 2011-11-11] (Logitech Inc.)
HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [737872 2014-06-04] (Avira Operations GmbH & Co. KG)
HKLM Group Policy restriction on software: C:\Program Files\Avira <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Avira <====== ATTENTION
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-05-18] (Microsoft Corporation)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Sony PC Companion] => C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe [466656 2014-05-23] (Sony)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [GoogleChromeAutoLaunch_A822CA3D40D4B8944864CFEA751D8D57] => C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe [860488 2014-06-05] (Google Inc.)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21446272 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2742928999-3257237434-1072491205-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AML Device Install.lnk
ShortcutTarget: AML Device Install.lnk -> C:\Program Files\AMD AVT\bin\kdbsync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x69F67AF84008CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {33DB43ED-5D63-4CBC-BF33-B59ECC2BA1C7} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=DVS2&o=1586&src=kw&q={searchTerms}&locale=&apn_ptnrs=^AAA&apn_dtid=^YYYYYY^YY^DE&apn_uid=BDCF6DAE-E76B-45DD-A68C-D329956164D9&apn_sauid=72DB5C68-BBFE-414A-89E2-DA441947410A
SearchScopes: HKCU - {E7DFEC4F-1E56-43FC-879E-21F642BE1D8A} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050&SSPV=IEOB05
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  No File
DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default
FF Homepage: hxxp://msn.de/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\admin\AppData\Local\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\2r8qsyd3.default\Extensions\toolbar_AVIRA-V7@apn.ask.com.xpi [2013-07-26]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-06-11]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2013-02-09]

Chrome: 
=======
CHR HomePage: 
CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\admin\AppData\Local\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U5) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.5) - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\admin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Avira SearchFree Toolbar plus Web Protection) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaacalgebmfelllfiaoknifldpngjh [2013-09-20]
CHR Extension: (Skype Click to Call) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-03-24]
CHR Extension: (Google Wallet) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-20]
CHR HKLM\...\Chrome\Extension: [aaaaacalgebmfelllfiaoknifldpngjh] - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7\CRX\ToolbarCR.crx [2014-02-21]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

========================== Services (Whitelisted) =================

R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [430160 2014-06-04] (Avira Operations GmbH & Co. KG)
R2 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1039440 2014-06-04] (Avira Operations GmbH & Co. KG)
S4 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-13] () [File not signed]
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
S3 npggsvc; C:\Windows\system32\GameMon.des [3975544 2012-05-09] (INCA Internet Co., Ltd.) [File not signed]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1740600 2013-08-30] (TuneUp Software)
S2 HPSLPSVC; C:\Users\admin\AppData\Local\Temp\7zS6B90\hpslpsvc32.dll [X]

==================== Drivers (Whitelisted) ====================

R1 AsrAppCharger; C:\Windows\System32\DRIVERS\AsrAppCharger.sys [13832 2010-06-11] (Windows (R) Win 7 DDK provider)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [93528 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [136216 2014-06-04] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-25] (Avira Operations GmbH & Co. KG)
R3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [20992 2006-11-02] (Microsoft Corporation)
R3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28944 2008-02-29] (Logitech, Inc.)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-08-23] (Avira GmbH)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [12320 2013-08-21] (TuneUp Software)
R3 VIAHdAudAddService; C:\Windows\System32\drivers\viahduaa.sys [1149552 2010-10-25] (VIA Technologies, Inc.)
S3 catchme; \??\C:\Users\admin\AppData\Local\Temp\catchme.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log
2014-06-26 01:28 - 2014-06-26 01:34 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe
2014-06-26 01:01 - 2014-06-26 01:24 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-26 01:01 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-06-26 01:01 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-06-26 01:01 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-26 00:49 - 2014-06-26 01:21 - 00000000 ____D () C:\ProgramData\EwpiSvono
2014-06-26 00:30 - 2014-06-26 00:58 - 00000000 ____D () C:\AdwCleaner
2014-06-26 00:30 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe
2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt
2014-06-25 23:58 - 2014-06-26 00:22 - 00000000 ____D () C:\Qoobox
2014-06-25 23:58 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-06-25 23:58 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-06-25 23:58 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe
2014-06-25 23:58 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe
2014-06-25 23:57 - 2014-06-26 00:20 - 00000000 ____D () C:\Windows\erdnt
2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe
2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66}
2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt
2014-06-25 23:18 - 2014-06-26 01:44 - 00016799 _____ () C:\Users\admin\Downloads\FRST.txt
2014-06-25 23:18 - 2014-06-26 01:44 - 00000000 ____D () C:\FRST
2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-06-25 22:43 - 2014-06-25 22:44 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log
2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe
2014-06-25 22:14 - 2014-06-25 22:20 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe
2014-06-25 11:40 - 2014-06-25 11:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA}
2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A}
2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340}
2014-06-24 00:07 - 2014-06-25 17:09 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt
2014-06-23 20:48 - 2014-06-24 00:08 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun)
2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790}
2014-06-22 11:44 - 2014-06-22 23:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D}
2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E}
2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8}
2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110}
2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E}
2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8}
2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC}
2014-06-16 11:49 - 2014-06-16 11:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA}
2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9}
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B}
2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip
2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals
2014-06-13 19:20 - 2014-06-23 20:49 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db
2014-06-13 19:07 - 2014-06-17 20:50 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer
2014-06-13 19:07 - 2014-06-13 19:08 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer
2014-06-13 15:43 - 2014-06-13 15:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003}
2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01}
2014-06-12 12:18 - 2014-06-12 12:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC}
2014-06-11 18:58 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 18:58 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 18:58 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-11 18:58 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-11 18:58 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 18:58 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-11 18:58 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 18:58 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 18:58 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 18:58 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 18:58 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-11 18:58 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-11 18:58 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-11 18:58 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-11 18:58 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 18:58 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 18:58 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 18:58 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 18:58 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 18:58 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 18:58 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 18:58 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 18:58 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-11 18:58 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 18:58 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 18:58 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 18:58 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 18:58 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-11 18:57 - 2014-05-08 11:06 - 00919040 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 18:57 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 18:57 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 18:57 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 18:57 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 18:57 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 18:57 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D}
2014-06-10 11:22 - 2014-06-10 23:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5}
2014-06-09 20:24 - 2014-06-09 20:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE}
2014-06-09 00:24 - 2014-06-09 00:25 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D}
2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8}
2014-06-07 20:32 - 2014-06-07 20:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14}
2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64}
2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88}
2014-06-05 12:17 - 2014-06-05 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1}
2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D}
2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356}
2014-06-03 12:14 - 2014-06-04 00:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768}
2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465}
2014-06-02 12:12 - 2014-06-02 12:13 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694}
2014-06-01 11:52 - 2014-06-01 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3}
2014-05-31 23:54 - 2014-05-31 23:55 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip
2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software
2014-05-31 23:53 - 2014-06-01 00:04 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software
2014-05-31 23:52 - 2014-06-01 00:04 - 00000000 ____D () C:\Program Files\Opera
2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip
2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607}
2014-05-30 12:50 - 2014-05-31 00:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0}
2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-29 12:48 - 2014-05-30 00:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4}
2014-05-28 20:40 - 2014-06-04 20:38 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client
2014-05-28 20:20 - 2014-05-28 20:21 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C}
2014-05-28 00:19 - 2014-05-28 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3}
2014-05-27 12:18 - 2014-05-27 12:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{248FC10F-4936-4B0B-9DBE-FF1E957DD692}

==================== One Month Modified Files and Folders =======

2014-06-26 01:45 - 2014-06-25 23:18 - 00016799 _____ () C:\Users\admin\Downloads\FRST.txt
2014-06-26 01:44 - 2014-06-25 23:18 - 00000000 ____D () C:\FRST
2014-06-26 01:43 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-26 01:43 - 2009-07-14 06:39 - 00092941 _____ () C:\Windows\setupact.log
2014-06-26 01:42 - 2012-03-10 17:35 - 00627532 _____ () C:\Windows\PFRO.log
2014-06-26 01:42 - 2012-03-09 20:29 - 01943143 _____ () C:\Windows\WindowsUpdate.log
2014-06-26 01:34 - 2014-06-26 01:34 - 00121222 _____ () C:\Users\admin\Downloads\HitmanPro_20140626_0134.log
2014-06-26 01:34 - 2014-06-26 01:28 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-06-26 01:28 - 2014-06-26 01:28 - 10274632 _____ (SurfRight B.V.) C:\Users\admin\Downloads\HitmanPro.exe
2014-06-26 01:28 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-26 01:28 - 2009-07-14 06:34 - 00016944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-26 01:27 - 2012-03-09 20:53 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-26 01:24 - 2014-06-26 01:01 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-06-26 01:21 - 2014-06-26 00:49 - 00000000 ____D () C:\ProgramData\EwpiSvono
2014-06-26 01:21 - 2009-07-14 06:52 - 00000000 ____D () C:\Windows\twain_32
2014-06-26 01:07 - 2012-04-10 22:04 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-26 01:01 - 2014-06-26 01:01 - 00000000 ____D () C:\Program Files\ Malwarebytes Anti-Malware 
2014-06-26 01:00 - 2014-06-26 01:00 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\admin\Downloads\mbam-setup-2.0.2.1012.exe
2014-06-26 00:58 - 2014-06-26 00:30 - 00000000 ____D () C:\AdwCleaner
2014-06-26 00:31 - 2012-03-13 22:38 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-06-26 00:29 - 2014-06-26 00:29 - 01342659 _____ () C:\Users\admin\Downloads\adwcleaner_3.213.exe
2014-06-26 00:22 - 2014-06-26 00:22 - 00015850 _____ () C:\ComboFix.txt
2014-06-26 00:22 - 2014-06-25 23:58 - 00000000 ____D () C:\Qoobox
2014-06-26 00:22 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-06-26 00:20 - 2014-06-25 23:57 - 00000000 ____D () C:\Windows\erdnt
2014-06-26 00:16 - 2009-07-14 04:04 - 00000215 _____ () C:\Windows\system.ini
2014-06-25 23:59 - 2012-09-08 00:14 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job
2014-06-25 23:57 - 2014-06-25 23:57 - 05211571 ____R (Swearware) C:\Users\admin\Downloads\ComboFix.exe
2014-06-25 23:41 - 2014-06-25 23:41 - 00000000 ____D () C:\Users\admin\AppData\Local\{186F2A27-6EF0-4FF8-9017-830AF6D5FE66}
2014-06-25 23:20 - 2014-06-25 23:20 - 00031594 _____ () C:\Users\admin\Downloads\Addition.txt
2014-06-25 23:18 - 2014-06-25 23:18 - 01073152 _____ (Farbar) C:\Users\admin\Downloads\FRST.exe
2014-06-25 23:12 - 2012-05-12 13:55 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000UA.job
2014-06-25 22:50 - 2012-03-25 22:03 - 00000000 ____D () C:\Users\admin\AppData\Local\CrashDumps
2014-06-25 22:44 - 2014-06-25 22:43 - 00458833 _____ () C:\Users\admin\Downloads\kavremvr 2014-06-25 22-43-10 (pid 1952).log
2014-06-25 22:42 - 2014-06-25 22:42 - 07168704 _____ (Kaspersky Lab ZAO) C:\Users\admin\Downloads\kavremover.exe
2014-06-25 22:32 - 2009-07-14 04:37 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-06-25 22:20 - 2014-06-25 22:14 - 173838160 _____ () C:\Users\admin\Downloads\New_PC_Studio_1.5.1.10064_2.exe
2014-06-25 22:18 - 2012-03-09 20:39 - 00000000 ____D () C:\Users\admin
2014-06-25 22:17 - 2012-03-13 22:36 - 00000000 ____D () C:\Users\admin\Desktop\HUONG
2014-06-25 17:09 - 2014-06-24 00:07 - 00020927 _____ () C:\Users\admin\Desktop\Bewerbung.odt
2014-06-25 14:12 - 2012-05-12 13:55 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job
2014-06-25 11:41 - 2014-06-25 11:40 - 00000000 ____D () C:\Users\admin\AppData\Local\{3EED6AA6-D524-4F07-A23E-4860E5EAE0FA}
2014-06-24 22:09 - 2012-08-08 13:39 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Skype
2014-06-24 21:52 - 2014-06-24 21:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{EE0CC8EC-9A35-44BC-B3D4-099B1864FB9A}
2014-06-24 17:59 - 2012-09-08 00:14 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2742928999-3257237434-1072491205-1000Core.job
2014-06-24 16:22 - 2012-07-05 23:19 - 00498794 _____ () C:\Windows\DPINST.LOG
2014-06-24 16:22 - 2012-07-05 23:19 - 00001972 _____ () C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk
2014-06-24 16:22 - 2012-07-05 23:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2014-06-24 16:22 - 2012-03-10 17:22 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-06-24 09:50 - 2014-06-24 09:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{53206F07-D646-4DA0-9417-B9741DC90340}
2014-06-24 00:08 - 2014-06-23 20:48 - 00000000 ____D () C:\Users\admin\Desktop\2014-06 (Jun)
2014-06-23 20:49 - 2014-06-13 19:20 - 00006144 ____H () C:\Users\admin\Downloads\photothumb.db
2014-06-23 20:49 - 2012-09-08 12:57 - 00071680 ____H () C:\Users\admin\Desktop\photothumb.db
2014-06-23 19:46 - 2014-06-23 19:46 - 00000000 ____D () C:\Users\admin\AppData\Local\{16242B02-12BA-43F0-BE0D-423B07CD5790}
2014-06-22 23:46 - 2014-06-22 11:44 - 00000000 ____D () C:\Users\admin\AppData\Local\{88AE844F-1371-4F20-9393-856F2B3D8B9D}
2014-06-21 15:29 - 2014-06-21 15:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{BFBB4C36-F3DB-47C7-AC18-3D5D4F33022E}
2014-06-20 23:06 - 2014-06-20 23:06 - 00000000 ____D () C:\Users\admin\AppData\Local\{5D338E0B-BF39-42C7-9C9E-DC5EF7E11EB8}
2014-06-18 18:08 - 2012-03-13 19:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live
2014-06-18 18:07 - 2014-06-18 18:07 - 00000000 ____D () C:\Users\admin\AppData\Local\{949F82E3-9F21-4106-9CB9-63F221468110}
2014-06-18 16:55 - 2014-06-18 16:55 - 00000000 ____D () C:\Users\admin\AppData\Local\{638A86CE-1FF7-4B83-B9CA-B36829E18C4E}
2014-06-17 20:50 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Windows Live Writer
2014-06-17 11:59 - 2014-06-17 11:59 - 00000000 ____D () C:\Users\admin\AppData\Local\{FEA4FC39-13F6-45A9-BE92-9440A4CCEBA8}
2014-06-16 23:50 - 2014-06-16 23:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{E3405660-900F-48FE-A6BF-EE7E5EAD42BC}
2014-06-16 11:50 - 2014-06-16 11:49 - 00000000 ____D () C:\Users\admin\AppData\Local\{4873065B-A4D8-4FC7-9F47-4B235BFF68BA}
2014-06-15 12:03 - 2014-06-15 12:03 - 00000000 ____D () C:\Users\admin\AppData\Local\{8D34C924-5103-43C3-845E-85DA0FCF1DE9}
2014-06-14 21:37 - 2014-06-14 21:37 - 00000000 ____D () C:\Users\admin\AppData\Local\{10937928-55C7-4757-866C-9C474354BC6B}
2014-06-13 21:50 - 2014-06-13 21:50 - 00052894 _____ () C:\Users\admin\Downloads\Dein Lebenslauf als PDF.zip
2014-06-13 21:02 - 2012-09-08 00:15 - 00002322 _____ () C:\Users\admin\Desktop\Google Chrome.lnk
2014-06-13 19:22 - 2014-06-13 19:22 - 00000000 ____D () C:\Users\admin\Downloads\Originals
2014-06-13 19:08 - 2014-06-13 19:07 - 00000000 ____D () C:\Users\admin\AppData\Local\Windows Live Writer
2014-06-13 15:44 - 2014-06-13 15:43 - 00000000 ____D () C:\Users\admin\AppData\Local\{EFAE5DE0-F23D-488B-85F3-47370B533003}
2014-06-13 00:20 - 2014-06-13 00:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{301053BA-6CD3-4FA6-A086-052FB9A23B01}
2014-06-12 19:43 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-06-12 12:19 - 2014-06-12 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{1BF72EF0-3F48-4E5B-A4B4-6F9157DFC8BC}
2014-06-12 12:15 - 2012-04-26 19:00 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-06-12 01:16 - 2013-08-14 23:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 01:15 - 2012-07-07 20:26 - 92708840 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-11 18:33 - 2014-06-11 18:33 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-06-11 17:29 - 2014-06-11 17:29 - 00000000 ____D () C:\Users\admin\AppData\Local\{570C1815-1684-4688-9D60-2AB1FCA1E52D}
2014-06-10 23:23 - 2014-06-10 11:22 - 00000000 ____D () C:\Users\admin\AppData\Local\{A1EFE083-120B-478A-9D69-737FCD1764F5}
2014-06-09 20:25 - 2014-06-09 20:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{22EADCD1-4D9E-4FDA-9DAC-DC2A6DC935CE}
2014-06-09 00:25 - 2014-06-09 00:24 - 00000000 ____D () C:\Users\admin\AppData\Local\{4CD33A4B-9A86-4AA9-A6A7-CC8611CB999D}
2014-06-08 12:23 - 2014-06-08 12:23 - 00000000 ____D () C:\Users\admin\AppData\Local\{5ED21193-B9EA-477D-A7AC-8CBB3892C1B8}
2014-06-07 20:33 - 2014-06-07 20:32 - 00000000 ____D () C:\Users\admin\AppData\Local\{1D38EC89-E9C7-4702-A4CD-DB2BB0D7AD14}
2014-06-06 12:33 - 2014-06-06 12:33 - 00000000 ____D () C:\Users\admin\AppData\Local\{3F2984A0-D386-4C60-8003-19BBAFA0CB64}
2014-06-06 00:18 - 2014-06-06 00:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{7E55463D-B596-43E5-BEA7-B47DE940FB88}
2014-06-05 12:18 - 2014-06-05 12:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{CB1B5164-E548-42E0-8DD0-40545A9E28B1}
2014-06-05 00:17 - 2014-06-05 00:17 - 00000000 ____D () C:\Users\admin\AppData\Local\{0BD0F7D6-C3FB-4ACE-9775-4B5296AC115D}
2014-06-04 20:38 - 2014-05-28 20:40 - 00000000 ____D () C:\Users\admin\Desktop\PokeMMO-Client
2014-06-04 13:40 - 2013-08-24 12:16 - 00136216 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2014-06-04 13:40 - 2013-08-24 12:16 - 00093528 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2014-06-04 12:16 - 2014-06-04 12:16 - 00000000 ____D () C:\Users\admin\AppData\Local\{1B122807-7725-4D6B-955D-28B48ED5E356}
2014-06-04 00:16 - 2014-06-03 12:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{55B730A7-3FB8-4374-9002-12B26B186768}
2014-06-03 00:14 - 2014-06-03 00:14 - 00000000 ____D () C:\Users\admin\AppData\Local\{8077B01F-A0B5-4708-9B04-8796367F3465}
2014-06-02 12:13 - 2014-06-02 12:12 - 00000000 ____D () C:\Users\admin\AppData\Local\{BBA74DDF-37FF-420D-8798-6D388996A694}
2014-06-01 23:53 - 2014-06-01 11:52 - 00000000 ____D () C:\Users\admin\AppData\Local\{3475AF7E-6E24-471E-8F9E-585BBF1B86B3}
2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Roaming\Opera Software
2014-06-01 00:04 - 2014-05-31 23:53 - 00000000 ____D () C:\Users\admin\AppData\Local\Opera Software
2014-06-01 00:04 - 2014-05-31 23:52 - 00000000 ____D () C:\Program Files\Opera
2014-05-31 23:55 - 2014-05-31 23:54 - 59782173 _____ () C:\Users\admin\Downloads\Pokemon HeartGold.zip
2014-05-31 23:51 - 2014-05-31 23:51 - 05250247 _____ () C:\Users\admin\Downloads\Pokemon FireRed.zip
2014-05-31 23:34 - 2014-05-31 23:34 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-31 23:33 - 2012-04-03 18:46 - 00000000 ____D () C:\Users\admin\AppData\Local\Microsoft Games
2014-05-31 22:50 - 2014-05-31 22:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{AF090ECC-4319-438E-AD73-03F802547607}
2014-05-31 00:52 - 2014-05-30 12:50 - 00000000 ____D () C:\Users\admin\AppData\Local\{A021ECFB-2079-4A1C-860B-85328AFF7AB0}
2014-05-30 11:56 - 2014-05-30 11:56 - 00002505 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Users\admin\AppData\Local\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-05-30 11:56 - 2014-05-30 11:56 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ___RD () C:\Program Files\Skype
2014-05-30 11:56 - 2012-08-08 13:39 - 00000000 ____D () C:\ProgramData\Skype
2014-05-30 11:18 - 2014-06-11 18:58 - 17271296 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 11:02 - 2014-06-11 18:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 11:02 - 2014-06-11 18:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 10:44 - 2014-06-11 18:58 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 10:43 - 2014-06-11 18:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 10:42 - 2014-06-11 18:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-11 18:58 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 10:34 - 2014-06-11 18:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 10:33 - 2014-06-11 18:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 10:30 - 2014-06-11 18:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 10:28 - 2014-06-11 18:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 10:28 - 2014-06-11 18:58 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 10:27 - 2014-06-11 18:58 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 10:21 - 2014-06-11 18:58 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 10:16 - 2014-06-11 18:58 - 00368128 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 10:10 - 2014-06-11 18:58 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-11 18:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:04 - 2014-06-11 18:58 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:02 - 2014-06-11 18:58 - 00242688 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 09:57 - 2014-06-11 18:58 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 09:56 - 2014-06-11 18:58 - 04244992 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 09:54 - 2014-06-11 18:58 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 09:50 - 2014-06-11 18:58 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-11 18:58 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 09:40 - 2014-06-11 18:58 - 11725312 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:21 - 2014-06-11 18:58 - 01790976 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:15 - 2014-06-11 18:58 - 01143296 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:13 - 2014-06-11 18:58 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 00:49 - 2014-05-29 12:48 - 00000000 ____D () C:\Users\admin\AppData\Local\{122B6BC9-CC46-4187-AE50-527B28905EE4}
2014-05-28 20:21 - 2014-05-28 20:20 - 00000000 ____D () C:\Users\admin\AppData\Local\{1A827180-D793-473F-9AD2-A1D63B7DA69C}
2014-05-28 00:20 - 2014-05-28 00:19 - 00000000 ____D () C:\Users\admin\AppData\Local\{255B0D89-94EA-4A5F-B006-88B3F77AF1F3}
2014-05-27 12:19 - 2014-05-27 12:18 - 00000000 ____D () C:\Users\admin\AppData\Local\{248FC10F-4936-4B0B-9DBE-FF1E957DD692}
2014-05-27 00:14 - 2014-05-26 12:13 - 00000000 ____D () C:\Users\admin\AppData\Local\{93E7D62A-2DDD-4946-AC45-78B125FFAD72}

Some content of TEMP:
====================
C:\Users\admin\AppData\Local\temp\avgnt.exe
C:\Users\admin\AppData\Local\temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-18 22:19

==================== End Of Log ============================
         
--- --- ---

Alt 26.06.2014, 01:51   #20
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Gut...
Um die Gruppenrichtlinien kümmern wir uns später...

Jetzt noch das hier. Ein Scan, der sehr lange dauert.

Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 26.06.2014, 01:53   #21
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



sehr lange ? haha
können wir morgen Abend damit weiter machen ? Ist für meine Verhältnisse schon spät und muss morgen früh aufstehen..
bis hierhin vielen vielen lieben dank ich fange morgen abend mit dem scan an
Gute Nacht und bis morgen !!

Alt 26.06.2014, 01:57   #22
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Na klar reicht das morgen auch noch...

Gute Nacht...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 26.06.2014, 23:05   #23
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



halloooo bin wieder da
Fange jz mit dem scan an

Alt 26.06.2014, 23:06   #24
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Der wird aber heute nicht mehr fertig...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 26.06.2014, 23:24   #25
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



der scan?? warum :O dauert der etwa so lange?

Alt 26.06.2014, 23:26   #26
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Jup...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 27.06.2014, 00:25   #27
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



oh man...

heute wirds wohl wirklich nichts.. morgen bin ich nicht zuhause und samstag auch nicht lang...
also dann wohl sonntag :/
bis dahin !

Alt 27.06.2014, 00:32   #28
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Lass halt über Nacht laufen und poste in der Früh...
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Alt 27.06.2014, 00:33   #29
Trainie4
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



meinst du es wird bis morgen früh fertig sein?

Alt 27.06.2014, 00:35   #30
deeprybka
/// TB-Ausbilder
/// Anleitungs-Guru
 
"Avira wird durch eine Gruppenrichtlinie blockiert" - Standard

"Avira wird durch eine Gruppenrichtlinie blockiert"



Naja...so mache ich es halt immer mit den PC's die Freunde anschleppen...
Und bis morgen früh sollte es fertig sein. Muss ja nicht unbedingt so gemacht werden. Wir richten uns nach den Usern.
__________________
Gruß
deeprybka

Lob, Kritik, Wünsche?

Spende fürs trojaner-board?
_______________________________________________
„Neminem laede, immo omnes, quantum potes, iuva.“ Arthur Schopenhauer

Antwort

Themen zu "Avira wird durch eine Gruppenrichtlinie blockiert"
control center, gruppenrichtlinie, gruppenrichtlinie blockiert, pup.optional.domaiq, pup.optional.koyote.a, pup.optional.newtab.a, pup.optional.somoto.a, pup.optional.suptab.a, sweet-page, sweet-page entfernen, trojan.ransom.gen, win32/bundled.toolbar.ask, win32/bundled.toolbar.ask.d, win32/bundled.toolbar.ask.e, win32/bundled.toolbar.ask.f, win32/bundled.toolbar.google.d, win32/conduit.searchprotect.n, win32/conduit.searchprotect.p, win32/domaiq.bb, win32/downloadsponsor.a, win32/elex.ad, win32/psw.papras.dc, win32/thinknice.b, win32/toolbar.conduit, win32/toolbar.conduit.ah, win32/toolbar.conduit.y



Ähnliche Themen: "Avira wird durch eine Gruppenrichtlinie blockiert"


  1. Avira Antivir wird durch eine Gruppenrichtlinie blockiert
    Plagegeister aller Art und deren Bekämpfung - 06.01.2015 (11)
  2. Avira wird durch eine Gruppenrichtlinie blockiert
    Plagegeister aller Art und deren Bekämpfung - 23.12.2014 (25)
  3. GData 2015 INTERNET SECURITY Fehlermeldung: "Dieses Programm wir durch eine Gruppenrichtlinie blockiert [..]"
    Log-Analyse und Auswertung - 12.12.2014 (7)
  4. Ich hab´s auch: "Das Programm wurde durch eine Gruppenrichtlinie blockiert" AntiVir
    Log-Analyse und Auswertung - 18.11.2014 (7)
  5. Avira Pro - "Dieses Programm wurde durch eine Gruppenrichtlinie blockiert. Weitere Informationen erhalten Sie vom Systemadministrator."
    Plagegeister aller Art und deren Bekämpfung - 15.11.2014 (22)
  6. G DATA INTERNET SECURITY "Dieses Programm wurde durch eine Gruppenrichtlinie blockiert."
    Log-Analyse und Auswertung - 11.11.2014 (7)
  7. Win 7: Avast Antivir Fehler "dieses Programm wurde durch eine Gruppenrichtlinie blockiert [...]"
    Log-Analyse und Auswertung - 08.10.2014 (8)
  8. "Dieses Programm wurde durch eine Gruppenrichtlinie blockiert." (AVAST)
    Plagegeister aller Art und deren Bekämpfung - 21.07.2014 (12)
  9. AVG wird durch eine Gruppenrichtlinie blockiert
    Plagegeister aller Art und deren Bekämpfung - 10.07.2014 (5)
  10. "Avira wird durch eine Gruppenrichtlinie blockiert" Trojaner?
    Plagegeister aller Art und deren Bekämpfung - 02.07.2014 (12)
  11. "Avira wird durch eine Gruppenrichtlinie blockiert" - Trojaner?
    Plagegeister aller Art und deren Bekämpfung - 22.06.2014 (16)
  12. Windows 7 x64 Kaspersky Nach Trojaner: "Dieses Programm wurde durch eine Gruppenrichtlinie blockiert.[...]"
    Log-Analyse und Auswertung - 30.05.2014 (9)
  13. Win7: Avira wird durch Gruppenrichtlinie blockiert.
    Log-Analyse und Auswertung - 22.05.2014 (9)
  14. WIN7: Avira wird durch Gruppenrichtlinie blockiert
    Log-Analyse und Auswertung - 14.05.2014 (9)
  15. Avira Start wird durch eine Gruppenrichtlinie blockiert
    Log-Analyse und Auswertung - 21.04.2014 (9)
  16. Avira wird durch eine Gruppenrichtlinie blockiert
    Log-Analyse und Auswertung - 03.04.2014 (15)
  17. Virus / Trojaner blockiert Avira "...wurde durch eine Gruppenrichtlinie blockiert"
    Log-Analyse und Auswertung - 20.03.2014 (7)

Zum Thema "Avira wird durch eine Gruppenrichtlinie blockiert" - Mach bitte trotzdem mit den anderen Schritten weiter... - "Avira wird durch eine Gruppenrichtlinie blockiert"...
Archiv
Du betrachtest: "Avira wird durch eine Gruppenrichtlinie blockiert" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.